summaryrefslogtreecommitdiff
path: root/debian
AgeCommit message (Collapse)Author
2014-02-10Add the pam_keyinit session module, to create a new session keyring on login ↵Colin Watson
(closes: #734816).
2014-02-10Merge 6.5p1.Colin Watson
* New upstream release (http://www.openssh.com/txt/release-6.5, LP: #1275068): - ssh(1): Add support for client-side hostname canonicalisation using a set of DNS suffixes and rules in ssh_config(5). This allows unqualified names to be canonicalised to fully-qualified domain names to eliminate ambiguity when looking up keys in known_hosts or checking host certificate names (closes: #115286).
2014-02-10record new upstream branch created by importing openssh_6.5p1.orig.tar.gzColin Watson
2014-02-10Add OpenPGP signature checking configuration to watch file (thanks, Daniel ↵Colin Watson
Kahn Gillmor; closes: #732441).
2014-02-09Drop ssh-vulnkeyColin Watson
Drop ssh-vulnkey and the associated ssh/ssh-add/sshd integration code, leaving only basic configuration file compatibility, since it has been nearly six years since the original vulnerability and this code is not likely to be of much value any more. See https://lists.debian.org/debian-devel/2013/09/msg00240.html for my full reasoning.
2014-02-09Initialize git-dpmColin Watson
2014-02-09Remove trailing blank line.Colin Watson
2014-02-09Switch to git; adjust Vcs-* fields.Colin Watson
2013-12-23releasing package openssh version 1:6.4p1-2Colin Watson
2013-12-23Restore patch to disable OpenSSL version check (closes: #732940).Colin Watson
2013-11-12Increase ServerKeyBits value in package-generated sshd_config to 1024Colin Watson
(closes: #727622, LP: #1244272).
2013-11-09releasing package openssh version 1:6.4p1-1Colin Watson
2013-11-09urgency=highColin Watson
2013-11-09Add CVE-2013-4548 identifier.Colin Watson
2013-11-09* New upstream release (http://www.openssh.com/txt/release-6.4).Colin Watson
- sshd(8): fix a memory corruption problem triggered during rekeying when an AES-GCM cipher is selected (closes: #729029). Full details of the vulnerability are available at: http://www.openssh.com/txt/gcmrekey.adv
2013-09-14* New upstream release (http://www.openssh.com/txt/release-6.3).Colin Watson
- sftp(1): add support for resuming partial downloads using the "reget" command and on the sftp commandline or on the "get" commandline using the "-a" (append) option (closes: #158590). - ssh(1): add an "IgnoreUnknown" configuration option to selectively suppress errors arising from unknown configuration directives (closes: #436052). - sftp(1): update progressmeter when data is acknowledged, not when it's sent (partially addresses #708372). - ssh(1): do not fatally exit when attempting to cleanup multiplexing- created channels that are incompletely opened (closes: #651357).
2013-08-12When running under Upstart, only consider the daemon started once it isColin Watson
ready to accept connections (by raising SIGSTOP at that point and using "expect stop").
2013-07-02releasing version 1:6.2p2-6Colin Watson
2013-07-02Update config.guess and config.sub automatically at build time.Colin Watson
dh_autoreconf does not take care of that by default because openssh does not use automake.
2013-06-27releasing version 1:6.2p2-5Colin Watson
2013-06-27debian/rules: Include real distribution in SSH_EXTRAVERSION instead ofYolanda Robla
hardcoding Debian (LP: #1195342).
2013-06-13Use 'set -e' rather than '#! /bin/sh -e' in maintainer scripts andColin Watson
ssh-argv0.
2013-06-08Document consequences of ssh-agent being setgid in ssh-agent(1); seeColin Watson
#711623.
2013-06-06releasing version 1:6.2p2-4Colin Watson
2013-06-06Close another file-rc bug.Colin Watson
2013-06-06Set SELinux context on private host keys as well as public host keysColin Watson
(closes: #687436).
2013-06-06Rebuild against debhelper 9.20130604 with fixed dependencies forColin Watson
invoke-rc.d and Upstart jobs (closes: #711364).
2013-06-05Fix non-portable shell in ssh-copy-id (closes: #711162).Colin Watson
2013-05-22releasing version 1:6.2p2-3Colin Watson
2013-05-22If the running init daemon is Upstart, then, on the first upgrade toColin Watson
this version, check whether sysvinit is still managing sshd; if so, manually stop it so that it can be restarted under upstart. We do this near the end of the postinst, so it shouldn't result in any appreciable extra window where sshd is not running during upgrade.
2013-05-22releasing version 1:6.2p2-2Colin Watson
2013-05-22Remove ancient commented-out code.Colin Watson
2013-05-22Fix dh_builddeb invocation so that we really use xz compression forColin Watson
binary packages, as intended since 1:6.1p1-2.
2013-05-22Bracket our session stack with calls to pam_selinux close/open (thanks,Colin Watson
Laurent Bigonville; closes: #679458).
2013-05-22Use the pam_loginuid session module (thanks, Laurent Bigonville; closes:Colin Watson
#677440, LP: #1067779).
2013-05-22* Remove the check for vulnerable host keys; this was first added fiveColin Watson
years ago, and everyone should have upgraded through a version that applied these checks by now. The ssh-vulnkey tool and the blacklisting support in sshd are still here, at least for the moment. * This removes the last of our uses of debconf (closes: #221531).
2013-05-22Drop now-unused Lintian override.Colin Watson
2013-05-22Switch to new unified layout for Upstart jobs as documented inColin Watson
https://wiki.ubuntu.com/UpstartCompatibleInitScripts: the init script checks for a running Upstart, and we now let dh_installinit handle most of the heavy lifting in maintainer scripts. Ubuntu users should be essentially unaffected except that sshd may no longer start automatically in chroots if the running Upstart predates 0.9.0; but the main goal is simply not to break when openssh-server is installed in a chroot.
2013-05-22Replace old manual conffile handling code with dpkg-maintscript-helper,Colin Watson
via dh_installdeb.
2013-05-22close bugColin Watson
2013-05-22Add #DEBHELPER# tokens to openssh-client.postinst andColin Watson
openssh-server.postinst.
2013-05-22Clarify changelog: upgrades -> direct upgrades.Colin Watson
2013-05-22Remove lots of maintainer script support for upgrades from pre-etchColin Watson
(three releases before current stable).
2013-05-22Another unregistration.Colin Watson
2013-05-21Remove support for upgrading from ssh-nonfree.Colin Watson
2013-05-21Remove ssh/use_old_init_script, which was a workaround for a very oldColin Watson
bug in /etc/init.d/ssh. If anyone has ignored this for >10 years then they aren't going to be convinced now.
2013-05-21Drop conffile handling for upgrades from pre-split ssh package; this wasColin Watson
originally added in 1:4.3p2-7 / 1:4.3p2-8, and contained a truly ghastly hack around a misbehaviour in sarge's dpkg. Since this is now four Debian releases ago, we can afford to drop this and simplify the packaging.
2013-05-21Change start condition of Upstart job to be just the standard "runlevelColin Watson
[2345]", rather than "filesystem or runlevel [2345]"; the latter makes it unreasonably difficult to ensure that urandom starts before ssh, and is not really necessary since one of static-network-up and failsafe-boot is guaranteed to happen and will trigger entry to the default runlevel, and we don't care about ssh starting before the network (LP: #1098299).
2013-05-16releasing version 1:6.2p2-1Colin Watson
2013-05-16* New upstream release (http://www.openssh.com/txt/release-6.2p2):Colin Watson
- Only warn for missing identity files that were explicitly specified (closes: #708275). - Fix bug in contributed contrib/ssh-copy-id script that could result in "rm *" being called on mktemp failure (closes: #708419).
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-06 14:34:29 +0000