Age | Commit message (Collapse) | Author | |
---|---|---|---|
2019-06-14 | Fix interop tests for recent regress changes | Colin Watson | |
2019-06-09 | releasing package openssh version 1:8.0p1-1 | Colin Watson | |
2019-06-09 | Fix utimensat tests when not using compat code | Colin Watson | |
2019-06-09 | New upstream release (8.0p1) | Colin Watson | |
2019-04-08 | releasing package openssh version 1:7.9p1-10 | Colin Watson | |
2019-04-08 | Temporarily revert IPQoS defaults to pre-7.8 values | Colin Watson | |
This is just until issues with "iptables -m tos" and VMware have been fixed. Closes: #923879, #926229 LP: #1822370 | |||
2019-03-01 | releasing package openssh version 1:7.9p1-9 | Colin Watson | |
2019-03-01 | Handle shell-style brace expansions in scp checks | Colin Watson | |
2019-02-28 | releasing package openssh version 1:7.9p1-8 | Colin Watson | |
2019-02-28 | Move moduli(5) manual page to openssh-server | Colin Watson | |
This goes with /etc/ssh/moduli; forgotten in 1:7.9p1-5. | |||
2019-02-28 | Correctly handle conffile move to openssh-server | Dominik George | |
Closes: #919344 | |||
2019-02-28 | Request RSA-SHA2 signatures for corresponding cert algorithms | Colin Watson | |
Closes: #923419 | |||
2019-02-28 | Fix key type checks with RSA-SHA2 signature types | Colin Watson | |
2019-02-26 | releasing package openssh version 1:7.9p1-7 | Colin Watson | |
2019-02-25 | Tighten up start-stop-daemon invocations | Colin Watson | |
Pass "--exec /usr/sbin/sshd" to start-stop-daemon on stop as well as start and pass "--chuid 0:0" on start, to avoid problems with non-root groups leaking into the ownership of /run/sshd.pid. Closes: #922365 | |||
2019-02-25 | Update logind recommendation | Colin Watson | |
Recommend "default-logind | logind | libpam-systemd" rather than just libpam-systemd. (I've retained libpam-systemd as an alternative for a while to avoid backporting accidents, although it can be removed later.) Thanks, Adam Borowski. Closes: #923199 | |||
2019-02-08 | releasing package openssh version 1:7.9p1-6 | Colin Watson | |
2019-02-08 | scp: Check remote->local directory copy filenames | Colin Watson | |
CVE-2019-6111 | |||
2019-02-08 | Sanitize scp filenames via snmprintf | Colin Watson | |
CVE-2019-6109 Closes: #793412 | |||
2019-01-13 | releasing package openssh version 1:7.9p1-5 | Colin Watson | |
2019-01-12 | scp: disallow empty incoming filename or "." | Colin Watson | |
Closes: #919101 | |||
2018-12-26 | Drop obsolete alternate build-dependency on libssl1.0-dev | Colin Watson | |
Closes: #917342 | |||
2018-12-06 | Move /etc/ssh/moduli to openssh-server | Colin Watson | |
It's reasonably large and only used by sshd. Closes: #858050 | |||
2018-11-16 | releasing package openssh version 1:7.9p1-4 | Colin Watson | |
2018-11-16 | Use dpkg_vendor_derives_from again | Colin Watson | |
This time with syntax that works. | |||
2018-11-15 | Fix Ubuntu detection in debian/rules | Colin Watson | |
The documentation comment for dpkg_vendor_derives_from is wrong (thanks, Jeremy Bicha; see #913816). | |||
2018-11-15 | releasing package openssh version 1:7.9p1-3 | Colin Watson | |
2018-11-15 | Restore some direct test dependencies | Colin Watson | |
Restore direct test dependencies on openssl, putty-tools, and python-twisted-conch; these are really only indirect dependencies via openssh-tests, but including them means that this package will be retested when they change. | |||
2018-11-15 | Re-export debian/upstream/signing-key.asc without extra signatures | Colin Watson | |
2018-11-15 | debian/control: Remove trailing whitespace | Colin Watson | |
2018-11-15 | Avoid incorrect Makefile symlink in openssh-tests | Colin Watson | |
Be more specific about what files to install in openssh-tests, to avoid installing a symlink into the build tree. | |||
2018-11-14 | releasing package openssh version 1:7.9p1-2 | Colin Watson | |
2018-11-05 | Add an openssh-tests binary package | Colin Watson | |
This contains enough files to run the upstream regression tests. Doing this allows autopkgtest to run more efficiently, as it doesn't have to build part of the source tree again. | |||
2018-11-05 | Set TEST_SHELL again | Colin Watson | |
There's no default for this in regress/Makefile (only in the top-level Makefile), so leaving it unset here doesn't work. | |||
2018-11-03 | Drop "set -x" verbosity from the autopkgtest | Colin Watson | |
I think we can do without this in most cases nowadays, as things have been pretty stable for a while. | |||
2018-11-03 | Make the autopkgtest create /run/sshd if it doesn't already exist | Colin Watson | |
2018-11-03 | Add GitLab CI configuration | Colin Watson | |
2018-10-22 | Mark debian/NEWS entry as released | Colin Watson | |
2018-10-21 | releasing package openssh version 1:7.9p1-1 | Colin Watson | |
2018-10-21 | Remove /etc/network/if-up.d/openssh-server | Colin Watson | |
It causes more problems than it solves. Add an "if-up hook removed" section to README.Debian documenting the corner case that may need configuration adjustments. Thanks, Christian Ehrhardt, Andreas Hasenack, and David Britton. Closes: #789532 LP: #1037738, #1674330, #1718227 | |||
2018-10-21 | Simplify debian/rules using /usr/share/dpkg/default.mk. | Colin Watson | |
2018-10-20 | Remove dh_builddeb override to use xz compression | Colin Watson | |
This has been the default since dpkg 1.17.0. | |||
2018-10-20 | New upstream release (7.9p1) | Colin Watson | |
2018-08-30 | releasing package openssh version 1:7.8p1-1 | Colin Watson | |
2018-08-30 | Work around conch interoperability failure | Colin Watson | |
Twisted Conch fails to read private keys in the new format (https://twistedmatrix.com/trac/ticket/9515). Work around this until it can be fixed in Twisted. | |||
2018-08-30 | New upstream release (7.8p1) | Colin Watson | |
Closes: #907534 | |||
2018-08-24 | Switch debian/watch to HTTPS. | Colin Watson | |
2018-08-18 | Retroactively mention CVE-2018-15473 in changelog | Colin Watson | |
2018-08-17 | releasing package openssh version 1:7.7p1-4 | Colin Watson | |
2018-08-17 | Fix user enumeration vulnerability | Colin Watson | |
Apply upstream patch to delay bailout for invalid authenticating user until after the packet containing the request has been fully parsed. Closes: #906236 |