summaryrefslogtreecommitdiff
path: root/debian
AgeCommit message (Collapse)Author
2006-12-23* Make GSSAPICleanupCreds a compatibility alias forColin Watson
GSSAPICleanupCredentials. Mark GSSUseSessionCCache and GSSAPIUseSessionCredCache as known-but-unsupported options, and migrate away from them on upgrade.
2006-12-17debconf-updatepoColin Watson
2006-12-17* debconf template translations:Colin Watson
- Add Romanian (thanks, Stan Ioan-Eugen; closes: #403528).
2006-12-13* Drop versioning on ssh/ssh-krb5 Replaces, as otherwise it isn'tColin Watson
sufficient to replace conffiles (closes: #402804).
2006-12-11* Give the ssh-askpass-gnome window a default icon; remove unnecessaryColin Watson
icon extension from .desktop file (closes: https://launchpad.net/bugs/27152).
2006-12-06releasing version 1:4.3p2-7Colin Watson
2006-12-06ssh-krb5 needs a copyright fileColin Watson
2006-12-06don't symlink /usr/share/doc/ssh-krb5; we have a separate NEWS file to put thereColin Watson
2006-12-06* When installing openssh-client or openssh-server from scratch, removeColin Watson
any unchanged conffiles from the pre-split ssh package to work around a bug in sarge's dpkg (thanks, Justin Pryzby and others; closes: #335276).
2006-12-06fix sed mistakeColin Watson
2006-12-06* Fix quoting error in configure.ac and regenerate configure (thanks, BenColin Watson
Pfaff; closes: #391248).
2006-12-06ignore debian/ssh-krb5Colin Watson
2006-12-06urgency=mediumColin Watson
2006-12-06* Remove version control tags from /etc/ssh/moduli and /etc/ssh/ssh_configColin Watson
to avoid unnecessary conffile resolution steps for administrators (thanks, Jari Aalto; closes: #335259).
2006-12-06close #390986Colin Watson
2006-12-06* Add ssh -K option, the converse of -k, to enable GSSAPI credentialColin Watson
delegation (closes: #401483).
2006-12-06* Create transitional ssh-krb5 package which enables GSSAPI configurationColin Watson
in sshd_config. * Default client to attempting GSSAPI authentication. * Remove obsolete GSSAPINoMICAuthentication from sshd_config if it's found.
2006-11-20* Ignore errors from usermod when changing sshd'\''s shell, since it willColin Watson
fail if the sshd user is not local (closes: #398436).
2006-11-15releasing version 1:4.3p2-6Colin Watson
2006-11-15* Backport from 4.5p1:Colin Watson
- Fix a bug in the sshd privilege separation monitor that weakened its verification of successful authentication. This bug is not known to be exploitable in the absence of additional vulnerabilities.
2006-10-29* debconf template translations:Colin Watson
- Update German (thanks, Helge Kreutzmann; closes: #395947).
2006-10-27* openssh-server Suggests: molly-guard (closes: #395473).Colin Watson
2006-10-27ack NMU, and a whitespace tweakColin Watson
2006-10-27Incorporate Manoj's NMU:Colin Watson
* NMU to update SELinux patch, bringing it in line with current selinux releases. The patch for this NMU is simply the Bug#394795 patch, and no other changes. (closes: #394795)
2006-10-05releasing version 1:4.3p2-5Colin Watson
2006-10-04* Remove ssh/insecure_telnetd check altogether (closes: #391081).Colin Watson
2006-10-02* debconf template translations:Colin Watson
- Update Danish (thanks, Claus Hindsgaul; closes: #390612).
2006-09-29releasing version 1:4.3p2-4Colin Watson
2006-09-29 - CVE-2006-5051: Fix an unsafe signal hander reported by Mark Dowd. TheColin Watson
signal handler was vulnerable to a race condition that could be exploited to perform a pre-authentication denial of service. On portable OpenSSH, this vulnerability could theoretically lead to pre-authentication remote code execution if GSSAPI authentication is enabled, but the likelihood of successful exploitation appears remote.
2006-09-29* Backport from 4.4p1 (since I don't have an updated version of the GSSAPIColin Watson
patch yet): - CVE-2006-4924: Fix a pre-authentication denial of service found by Tavis Ormandy, that would cause sshd(8) to spin until the login grace time expired (closes: #389995).
2006-09-29* Make ssh/insecure_telnetd Type: error (closes: #388946).Colin Watson
2006-09-29* Remove no-longer-used ssh/insecure_rshd debconf template.Colin Watson
2006-09-29* Read /etc/default/locale as well as /etc/environment (thanks, RaphaëlColin Watson
Hertzog; closes: #369395).
2006-08-20msgcatColin Watson
2006-08-20 - Update Spanish (thanks, Javier Fernández-Sanguino Peña;Colin Watson
closes: #382966).
2006-08-08recode to UTF-8Colin Watson
2006-08-08* debconf template translations:Colin Watson
- Update Portuguese (thanks, Rui Branco; closes: #381942).
2006-07-27releasing version 1:4.3p2-3Colin Watson
2006-07-26silence grep outputColin Watson
2006-07-26debconf-updatepoColin Watson
2006-07-26 - Update Japanese (thanks, Kenshi Muto; closes: #379950).Colin Watson
2006-07-14* Change sshd user's shell to /usr/sbin/nologin (closes: #366541).Colin Watson
Introduces dependency on passwd for usermod.
2006-07-03* Document KeepAlive->TCPKeepAlive renaming in sshd_config(5) (closes:Colin Watson
https://launchpad.net/bugs/50702).
2006-06-25msgcatColin Watson
2006-06-25 - Update Dutch (thanks, Bart Cornelis; closes: #375100).Colin Watson
2006-05-22* debconf template translations:Colin Watson
- Update French (thanks, Denis Barbier; closes: #368503).
2006-05-19releasing version 1:4.3p2-2Colin Watson
2006-05-19 - Update Swedish (thanks, Daniel Nylander; closes: #367971).Colin Watson
2006-05-17* On '/etc/init.d/ssh restart', create /var/run/sshd before checking theColin Watson
server configuration, as otherwise 'sshd -t' will complain about the lack of /var/run/sshd (closes: https://launchpad.net/bugs/45234).
2006-05-16* Include commented-out pam_access example in /etc/pam.d/ssh.Colin Watson