| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2013-03-25 | debian/openssh-server.sshd.pam: Explicitly state that ~/.pam_environment | Gunnar Hjalmarsson | |
| should be read, and move the pam_env calls from "auth" to "session" so that it's also read when $HOME is encrypted (LP: #952185). | |||
| 2013-02-08 | releasing version 1:6.1p1-3 | Colin Watson | |
| 2013-02-08 | CVE-2010-5107: Improve DoS resistance by changing default of MaxStartups | Colin Watson | |
| to 10:30:100 (closes: #700102). | |||
| 2012-12-19 | Give ssh and ssh-krb5 versioned dependencies on openssh-client and | Colin Watson | |
| openssh-server, to try to reduce confusion when people run 'apt-get install ssh' or similar and expect that to upgrade everything relevant. | |||
| 2012-11-26 | releasing version 1:6.1p1-2 | Colin Watson | |
| 2012-11-26 | Simplify --with-consolekit handling. | Colin Watson | |
| 2012-11-26 | Install apport hooks. | Colin Watson | |
| 2012-11-26 | Add mention of ssh-keygen in ssh connect warning (Scott Moser). | Colin Watson | |
| 2012-11-26 | Tweak sshd(8) to refer to ssh's Upstart job as well as its init script. | Colin Watson | |
| 2012-11-26 | Merge Upstart job scripting support from Ubuntu, to handle the Upstart job ↵ | Colin Watson | |
| being primary there. | |||
| 2012-11-25 | Only build with -j if DEB_BUILD_OPTIONS=parallel=* is used (closes: | Colin Watson | |
| #694282). | |||
| 2012-11-01 | Add an Upstart job (not currently used by default in Debian). | Colin Watson | |
| 2012-10-31 | Drop openssh-blacklist and openssh-blacklist-extra to Suggests. It's | Colin Watson | |
| been long enough since the relevant vulnerability that we shouldn't need these installed by default nowadays. | |||
| 2012-10-31 | * Merge from Ubuntu: | Colin Watson | |
| - Add support for registering ConsoleKit sessions on login. (This is currently enabled only when building for Ubuntu.) | |||
| 2012-09-28 | Use xz compression for binary packages. | Colin Watson | |
| 2012-09-07 | releasing version 1:6.1p1-1 | Colin Watson | |
| 2012-09-07 | Consolidate the two "Miscellaneous bug fixes" sections of debian/patches/series. | Colin Watson | |
| 2012-09-07 | * New upstream release (http://www.openssh.com/txt/release-6.1). | Colin Watson | |
| - Enable pre-auth sandboxing by default for new installs. - Allow "PermitOpen none" to refuse all port-forwarding requests (closes: #543683). | |||
| 2012-08-24 | releasing version 1:6.0p1-3 | Colin Watson | |
| 2012-08-24 | Add ncurses-term to openssh-server's Recommends, since it's often needed | Colin Watson | |
| to support unusual terminal emulators on clients (closes: #675362). | |||
| 2012-08-24 | Call restorecon on copied ~/.ssh/authorized_keys if possible, since some | Colin Watson | |
| SELinux policies require this (closes: #658675). | |||
| 2012-07-16 | * debconf template translations: | Colin Watson | |
| - Add Indonesian (thanks, Andika Triwidada; closes: #681670). | |||
| 2012-06-24 | releasing version 1:6.0p1-2 | Colin Watson | |
| 2012-06-24 | Tighten libssl1.0.0 and libcrypto1.0.0-udeb dependencies to the current | Colin Watson | |
| "fix" version at build time (closes: #678661). | |||
| 2012-05-26 | releasing version 1:6.0p1-1 | Colin Watson | |
| 2012-05-26 | Add a sandbox fallback mechanism, so that behaviour on Linux depends on | Colin Watson | |
| whether the running system's kernel has seccomp_filter support, not the build system's kernel (forwarded upstream as https://bugzilla.mindrot.org/show_bug.cgi?id=2011). | |||
| 2012-05-22 | Pass noupdate to pam_motd call for /run/motd.dynamic. | Roger Leigh | |
| 2012-05-18 | IPQoS fix closes #671075 too | Colin Watson | |
| 2012-05-18 | close #671010 with new upstream | Colin Watson | |
| 2012-05-18 | Fix a bashism in configure's seccomp_filter check. | Colin Watson | |
| 2012-05-18 | * New upstream release (http://www.openssh.org/txt/release-6.0). | Colin Watson | |
| - Fix IPQoS not being set on non-mapped v4-in-v6 addressed connections (closes: #643312, #650512). - Add a new privilege separation sandbox implementation for Linux's new seccomp sandbox, automatically enabled on platforms that support it. (Note: privilege separation sandboxing is still experimental.) | |||
| 2012-04-22 | Update OpenSSH FAQ to revision 1.113, fixing missing line break (closes: | Colin Watson | |
| #669667). | |||
| 2012-04-21 | Display dynamic part of MOTD from /run/motd.dynamic, if it exists | Colin Watson | |
| (closes: #669699). | |||
| 2012-04-02 | releasing version 1:5.9p1-5 | Colin Watson | |
| 2012-04-02 | * Fix cross-building: | Colin Watson | |
| - Allow using a cross-architecture pkg-config. - Pass default LDFLAGS to contrib/Makefile. - Allow dh_strip to strip gnome-ssh-askpass, rather than calling 'install -s'. | |||
| 2012-04-01 | Use dpkg-buildflags, including for hardening support; drop use of | Colin Watson | |
| hardening-includes. | |||
| 2012-03-19 | releasing version 1:5.9p1-4 | Colin Watson | |
| 2012-03-19 | Disable OpenSSL version check again, as its SONAME is sufficient | Colin Watson | |
| nowadays (closes: #664383). | |||
| 2012-02-24 | releasing version 1:5.9p1-3 | Colin Watson | |
| 2012-02-24 | Move ssh-krb5 to Section: oldlibs. | Colin Watson | |
| 2012-02-24 | slight simplification | Colin Watson | |
| 2012-02-24 | Ignore errors writing to console in init script (closes: #546743). | Colin Watson | |
| 2012-02-14 | * debconf template translations: | Colin Watson | |
| - Update Polish (thanks, Michał Kułach; closes: #659829). | |||
| 2011-11-09 | releasing version 1:5.9p1-2 | Colin Watson | |
| 2011-11-09 | Mark openssh-client and openssh-server as Multi-Arch: foreign. | Colin Watson | |
| 2011-09-08 | releasing version 1:5.9p1-1 | Colin Watson | |
| 2011-09-07 | Update OpenSSH FAQ to revision 1.112. | Colin Watson | |
| 2011-09-07 | merge respun 5.9p1 | Colin Watson | |
| 2011-09-06 | * New upstream release (http://www.openssh.org/txt/release-5.9). | Colin Watson | |
| - Introduce sandboxing of the pre-auth privsep child using an optional sshd_config(5) "UsePrivilegeSeparation=sandbox" mode that enables mandatory restrictions on the syscalls the privsep child can perform. - Add new SHA256-based HMAC transport integrity modes from http://www.ietf.org/id/draft-dbider-sha2-mac-for-ssh-02.txt. - The pre-authentication sshd(8) privilege separation slave process now logs via a socket shared with the master process, avoiding the need to maintain /dev/log inside the chroot (closes: #75043, #429243, #599240). - ssh(1) now warns when a server refuses X11 forwarding (closes: #504757). - sshd_config(5)'s AuthorizedKeysFile now accepts multiple paths, separated by whitespace (closes: #76312). The authorized_keys2 fallback is deprecated but documented (closes: #560156). - ssh(1) and sshd(8): set IPv6 traffic class from IPQoS, as well as IPv4 ToS/DSCP (closes: #498297). - ssh-add(1) now accepts keys piped from standard input. E.g. "ssh-add - < /path/to/key" (closes: #229124). - Clean up lost-passphrase text in ssh-keygen(1) (closes: #444691). - Say "required" rather than "recommended" in unprotected-private-key warning (LP: #663455). | |||
| 2011-09-06 | actually, let's upstream-tag the revision with a tarball parent instead | Colin Watson | |
 |
index : openssh.git | |
| summaryrefslogtreecommitdiff |