summaryrefslogtreecommitdiff
path: root/debian
AgeCommit message (Collapse)Author
2019-10-05Deny (non-fatal) shmget/shmat/shmdt in preauth privsep childColin Watson
This copes with changes in OpenSSL 1.1.1d that broke OpenSSH on Linux kernels before 3.19. Closes: #941663
2019-08-28runit: Correct typoDaniel Kahn Gillmor
The name of the file that we check when sshd is supposed to be down is correct in the script, but not in the comments :) Signed-off-by: Daniel Kahn Gillmor <dkg@fifthhorseman.net>
2019-08-28releasing package openssh version 1:8.0p1-6Colin Watson
2019-08-28Only run dh_runit on openssh-serverColin Watson
Closes: #935936
2019-08-27releasing package openssh version 1:8.0p1-5Colin Watson
2019-08-13Add a runscript for runitColin Watson
Changelog entry for Lorenzo Puliti's recently-merged commit. Closes: #933999
2019-08-13Consistent whitespaceColin Watson
2019-08-12Add a runscript for runitLorenzo Puliti
Add a 'run' and a 'finish' script for runit init system; rely on dh-runit for maintscript code.
2019-08-03releasing package openssh version 1:8.0p1-4Colin Watson
2019-08-03Run regression tests against the Python 3 version of Twisted ConchColin Watson
2019-08-03debian/*.apport: Fix flake8 errorsColin Watson
2019-08-03debian/*.apport: Avoid star importsColin Watson
2019-08-03Remove #! lines from apport hooksColin Watson
These aren't executed as top-level programs.
2019-08-03Use debhelper-compat instead of debian/compatColin Watson
2019-07-08releasing package openssh version 1:8.0p1-3Colin Watson
2019-07-08Upload to unstableColin Watson
2019-06-21Update contact information for Natalie AmeryColin Watson
2019-06-14releasing package openssh version 1:8.0p1-2Colin Watson
2019-06-14Fix interop tests for recent regress changesColin Watson
2019-06-09releasing package openssh version 1:8.0p1-1Colin Watson
2019-06-09Fix utimensat tests when not using compat codeColin Watson
2019-06-09New upstream release (8.0p1)Colin Watson
2019-04-08releasing package openssh version 1:7.9p1-10Colin Watson
2019-04-08Temporarily revert IPQoS defaults to pre-7.8 valuesColin Watson
This is just until issues with "iptables -m tos" and VMware have been fixed. Closes: #923879, #926229 LP: #1822370
2019-03-01releasing package openssh version 1:7.9p1-9Colin Watson
2019-03-01Handle shell-style brace expansions in scp checksColin Watson
2019-02-28releasing package openssh version 1:7.9p1-8Colin Watson
2019-02-28Move moduli(5) manual page to openssh-serverColin Watson
This goes with /etc/ssh/moduli; forgotten in 1:7.9p1-5.
2019-02-28Correctly handle conffile move to openssh-serverDominik George
Closes: #919344
2019-02-28Request RSA-SHA2 signatures for corresponding cert algorithmsColin Watson
Closes: #923419
2019-02-28Fix key type checks with RSA-SHA2 signature typesColin Watson
2019-02-26releasing package openssh version 1:7.9p1-7Colin Watson
2019-02-25Tighten up start-stop-daemon invocationsColin Watson
Pass "--exec /usr/sbin/sshd" to start-stop-daemon on stop as well as start and pass "--chuid 0:0" on start, to avoid problems with non-root groups leaking into the ownership of /run/sshd.pid. Closes: #922365
2019-02-25Update logind recommendationColin Watson
Recommend "default-logind | logind | libpam-systemd" rather than just libpam-systemd. (I've retained libpam-systemd as an alternative for a while to avoid backporting accidents, although it can be removed later.) Thanks, Adam Borowski. Closes: #923199
2019-02-08releasing package openssh version 1:7.9p1-6Colin Watson
2019-02-08scp: Check remote->local directory copy filenamesColin Watson
CVE-2019-6111
2019-02-08Sanitize scp filenames via snmprintfColin Watson
CVE-2019-6109 Closes: #793412
2019-01-13releasing package openssh version 1:7.9p1-5Colin Watson
2019-01-12scp: disallow empty incoming filename or "."Colin Watson
Closes: #919101
2018-12-26Drop obsolete alternate build-dependency on libssl1.0-devColin Watson
Closes: #917342
2018-12-06Move /etc/ssh/moduli to openssh-serverColin Watson
It's reasonably large and only used by sshd. Closes: #858050
2018-11-16releasing package openssh version 1:7.9p1-4Colin Watson
2018-11-16Use dpkg_vendor_derives_from againColin Watson
This time with syntax that works.
2018-11-15Fix Ubuntu detection in debian/rulesColin Watson
The documentation comment for dpkg_vendor_derives_from is wrong (thanks, Jeremy Bicha; see #913816).
2018-11-15releasing package openssh version 1:7.9p1-3Colin Watson
2018-11-15Restore some direct test dependenciesColin Watson
Restore direct test dependencies on openssl, putty-tools, and python-twisted-conch; these are really only indirect dependencies via openssh-tests, but including them means that this package will be retested when they change.
2018-11-15Re-export debian/upstream/signing-key.asc without extra signaturesColin Watson
2018-11-15debian/control: Remove trailing whitespaceColin Watson
2018-11-15Avoid incorrect Makefile symlink in openssh-testsColin Watson
Be more specific about what files to install in openssh-tests, to avoid installing a symlink into the build tree.
2018-11-14releasing package openssh version 1:7.9p1-2Colin Watson