summaryrefslogtreecommitdiff
path: root/debian
AgeCommit message (Collapse)Author
2005-11-27* When the client receives a signal, don't fatal() with "Killed by signalColin Watson
%d." (which produces unhelpful noise on stderr and causes confusion for users of some applications that wrap ssh); instead, generate a debug message and exit with the traditional status (closes: #313371).
2005-10-10debconf-updatepoColin Watson
2005-10-10* debconf template translations:Colin Watson
- Add Swedish (thanks, Daniel Nylander; closes: #333133).
2005-10-10* Sync default values of $PATH from shadow 1:4.0.12-6, adding /usr/bin/X11Colin Watson
to the normal and superuser paths and /usr/games to the normal path.
2005-10-07releasing version 1:4.2p1-5Colin Watson
2005-10-07* Build-depend on libssl-dev (>= 0.9.8-1) to cope with surprise OpenSSLColin Watson
transition, since otherwise who knows what the buildds will do. If you're building openssh yourself, you can safely ignore this and use an older libssl-dev.
2005-10-07* Only send GSSAPI proposal if GSSAPIAuthentication is enabled.Colin Watson
2005-10-06* Build-depend on libselinux1-dev on armeb.Colin Watson
2005-10-03* Add a CVE name to the 1:4.0p1-1 changelog entry.Colin Watson
2005-09-16releasing version 1:4.2p1-4Colin Watson
2005-09-16* Initialise token to GSS_C_EMPTY_BUFFER in ssh_gssapi_check_mechanismColin Watson
(closes: #328606).
2005-09-15releasing version 1:4.2p1-3Colin Watson
2005-09-15* Explicitly tell po2debconf to use the 'popular' output encoding, so thatColin Watson
the woody-compatibility hack works even with po-debconf 0.9.0.
2005-09-15* Interoperate with ssh-krb5 << 3.8.1p1-1 servers, which used a slightlyColin Watson
different version of the gssapi authentication method (thanks, Aaron M. Ucko; closes: #328388).
2005-09-15* Add prototype for ssh_gssapi_server_mechanisms (closes: #328372).Colin Watson
2005-09-14releasing version 1:4.2p1-2Colin Watson
2005-09-14Kerberos support closes: #152657 tooColin Watson
2005-09-14fix versionColin Watson
2005-09-14 - Fix HAVE_GSSAPI_KRB5_H/HAVE_GSSAPI_GSSAPI_KRB5_H typos inColin Watson
gss-serv-krb5.c.
2005-09-14 - Update commented-out Kerberos/GSSAPI options in default sshd_config.Colin Watson
2005-09-14 - openssh-client and openssh-server replace ssh-krb5.Colin Watson
2005-09-14 - Build-depend on libkrb5-dev and configure --with-kerberos5=/usr.Colin Watson
2005-09-14Update copyright file for GSSAPI key exchange patch.Colin Watson
2005-09-14* Add remaining pieces of Kerberos support (closes: #275472):Colin Watson
- Add GSSAPI key exchange support from http://www.sxw.org.uk/computing/patches/openssh.html (thanks, Stephen Frost).
2005-09-14* Annotate 1:4.1p1-1 changelog with CVE references.Colin Watson
- SECURITY (CAN-2005-2797): Fix a bug introduced in OpenSSH 4.0 that caused GatewayPorts to be incorrectly activated for dynamic ("-D") port forwardings when no listen address was explicitly specified (closes: #326065). - SECURITY (CAN-2005-2798): Fix improper delegation of GSSAPI credentials. This code is only built in openssh-krb5, not openssh, but I mention the CVE reference here anyway for completeness.
2005-09-14releasing version 1:4.2p1-1Colin Watson
2005-09-14* Set X11Forwarding to yes in the default sshd_config (new installs only).Colin Watson
At least when X11UseLocalhost is turned on, which is the default, the security risks of using X11 forwarding are risks to the client, not to the server (closes: #320104).
2005-09-14* openssh-client and openssh-server conflict with pre-split ssh to avoidColin Watson
problems when ssh is left un-upgraded (closes: #324695).
2005-09-14Flesh out changelog for upstream changes in 4.2p1.Colin Watson
2005-09-14* debian/rules: Resynchronise CFLAGS with that generated by configure.Colin Watson
2005-09-14Merge 4.2p1 to the trunk.Colin Watson
2005-09-02releasing version 1:4.1p1-7Colin Watson
2005-09-02* Policy version 3.6.2: no changes required.Colin Watson
2005-09-02* Fix XSIish uses of 'test' in openssh-server.preinst.Colin Watson
2005-09-02* Add GNU/kFreeBSD support (thanks, Aurelien Jarno; closes: #318113).Colin Watson
2005-09-02* Work around the ssh-askpass alternative somehow ending up in manual modeColin Watson
pointing to the obsolete /usr/lib/ssh/gnome-ssh-askpass.
2005-07-09Do the IDEA host key check on a temporary file to avoid alteringColin Watson
/etc/ssh/ssh_host_key itself (closes: #312312).
2005-07-09fix awful formatting in check_idea_keyColin Watson
2005-07-07Finish 1:4.1p1-6.Colin Watson
2005-07-07Fix one-character typo that meant the binaries in openssh-client andColin Watson
openssh-server got recompiled with the wrong options during 'debian/rules install' (closes: #317088, #317238, #317241).
2005-07-03Finish 1:4.1p1-5.Colin Watson
2005-07-03Allow ~/.ssh/config to be group-writable, provided that the group inColin Watson
question contains only the file's owner (closes: #314347).
2005-07-03Disable btmp logging, since Debian's /var/log/btmp has inappropriateColin Watson
permissions (closes: #314956).
2005-07-03documentation directory reorganisation closes: #314745Colin Watson
2005-07-03Ship README.dns (closes: #284874).Colin Watson
2005-07-03Make /usr/share/doc/openssh-server and /usr/share/doc/ssh symlinks toColin Watson
/usr/share/doc/openssh-client.
2005-07-03debconf-updatepoColin Watson
2005-07-02Add Vietnamese debconf template translation (thanks, Clytie Siddall;Colin Watson
closes: #316636).
2005-06-30Drop priority of ssh to extra to match the override file.Colin Watson
2005-06-24Update Brazilian Portuguese debconf template translation (thanks, AndréColin Watson
Luís Lopes; closes: #315477).