summaryrefslogtreecommitdiff
path: root/openbsd-compat
AgeCommit message (Collapse)Author
2013-05-16* New upstream release (http://www.openssh.com/txt/release-6.2p2):Colin Watson
- Only warn for missing identity files that were explicitly specified (closes: #708275). - Fix bug in contributed contrib/ssh-copy-id script that could result in "rm *" being called on mktemp failure (closes: #708419).
2013-05-16Import 6.2p2 tarballColin Watson
2013-05-07* New upstream release (http://www.openssh.com/txt/release-6.2).Colin Watson
- Add support for multiple required authentication in SSH protocol 2 via an AuthenticationMethods option (closes: #195716). - Fix Sophie Germain formula in moduli(5) (closes: #698612). - Update ssh-copy-id to Phil Hands' greatly revised version (closes: #99785, #322228, #620428; LP: #518883, #835901, #1074798).
2013-05-07Import 6.2p1 tarballColin Watson
2013-04-05 - (dtucker) [openbsd-compat/bsd-cygwin_util.{c,h}] Don't include windows.hDarren Tucker
to avoid conflicting definitions of __int64, adding the required bits. Patch from Corinna Vinschen. (pulled from HEAD but kept the ChangeLog date as it was)
2013-04-01 - (dtucker) [openbsd-compat/bsd-cygwin_util.{c,h}] Don't include windows.hDarren Tucker
to avoid conflicting definitions of __int64, adding the required bits. Patch from Corinna Vinschen.
2013-03-20 - (djm) [configure.ac log.c scp.c sshconnect2.c openbsd-compat/vis.c]Damien Miller
[openbsd-compat/vis.h] FreeBSD's strnvis isn't compatible with OpenBSD's so mark it as broken. Patch from des AT des.no
2013-03-15 - (djm) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]Damien Miller
Add a usleep replacement for platforms that lack it; ok dtucker
2013-02-15 - (dtucker) [openbsd-compat/bsd-misc.c] Handle the case where setpgrp() takesDarren Tucker
an argument. Pointed out by djm.
2013-02-15 - (dtucker) [openbsd-compat/openbsd-compat.h] Add prototype for strtoul,Darren Tucker
group strto* function prototypes together.
2013-02-15 - (dtucker) [configure.ac openbsd-compat/Makefile.in openbsd-compat/strtoull.cDarren Tucker
openbsd-compat/openbsd-compat.h] Add strtoull to compat library for platforms that don't have it.
2013-02-15spacingDarren Tucker
2013-02-15 - (dtucker) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]Darren Tucker
Use getpgrp() if we don't have getpgid() (old BSDs, maybe others).
2013-02-12 - djm@cvs.openbsd.org 2013/01/26 06:11:05Damien Miller
[Makefile.in acss.c acss.h cipher-acss.c cipher.c] [openbsd-compat/openssl-compat.h] remove ACSS, now that it is gone from libcrypto too
2013-02-11 - (djm) [configure.ac openbsd-compat/openssl-compat.h] Repair build on oldDamien Miller
libcrypto that lacks EVP_CIPHER_CTX_ctrl
2013-02-08 - (dtucker) [configure.ac openbsd-compat/sys-tree.h] Test if compiler allowsDarren Tucker
__attribute__ on return values and work around if necessary. ok djm@
2013-01-20 - (djm) [openbsd-compat/sys-tree.h] Sync with OpenBSD. krl.c needs newerDamien Miller
version.
2013-01-20 - (djm) [cipher-aes.c cipher-ctr.c openbsd-compat/openssl-compat.h]Damien Miller
Move prototypes for replacement ciphers to openssl-compat.h; fix EVP prototypes for openssl-1.0.0-fips.
2013-01-09 - (djm) [cipher.c configure.ac openbsd-compat/openssl-compat.h]Damien Miller
Fix merge botch, automatically detect AES-GCM in OpenSSL, move a little cipher compat code to openssl-compat.h
2012-12-03 - (djm) [openbsd-compat/sys-queue.h] Sync with OpenBSD to getDamien Miller
TAILQ_FOREACH_SAFE needed for upcoming changes.
2012-11-05 - (dtucker) [uidswap.c openbsd-compat/Makefile.inDarren Tucker
openbsd-compat/bsd-setres_id.c openbsd-compat/bsd-setres_id.h openbsd-compat/openbsd-compat.h] Move the fallback code for setting uids and gids from uidswap.c to the compat library, which allows it to work with the new setresuid calls in auth2-pubkey. with tim@, ok djm@
2012-09-07* New upstream release (http://www.openssh.com/txt/release-6.1).Colin Watson
- Enable pre-auth sandboxing by default for new installs. - Allow "PermitOpen none" to refuse all port-forwarding requests (closes: #543683).
2012-09-06Import 6.1p1 tarballColin Watson
2012-08-28 - (dtucker) [openbsd-compat/bsd-cygwin_util.h] define WIN32_LEAN_AND_MEANDarren Tucker
for compatibility with future mingw-w64 headers. Patch from vinschen at redhat com.
2012-07-04 - (dtucker) [configure.ac openbsd-compat/bsd-misc.h] Add setlinebuf forDarren Tucker
platforms that don't have it. "looks good" tim@
2012-06-28 - (dtucker) [openbsd-compat/getrrsetbyname-ldns.c] bz #2022: prevent nullDarren Tucker
pointer deref in the client when built with LDNS and using DNSSEC with a CNAME. Patch from gregdlg+mr at hochet info.
2012-05-18* New upstream release (http://www.openssh.org/txt/release-6.0).Colin Watson
- Fix IPQoS not being set on non-mapped v4-in-v6 addressed connections (closes: #643312, #650512). - Add a new privilege separation sandbox implementation for Linux's new seccomp sandbox, automatically enabled on platforms that support it. (Note: privilege separation sandboxing is still experimental.)
2012-05-17Import 6.0p1 tarballColin Watson
2012-03-30 - (djm) [openbsd-compat/bsd-cygwin_util.h] #undef _WIN32 to avoid incorrectDamien Miller
assumptions when building on Cygwin; patch from Corinna Vinschen
2012-03-09 - (djm) [openbsd-compat/port-linux.c] bz#1960: fix crash on SELinuxDamien Miller
systems where sshd is run in te wrong context. Patch from Sven Vermeulen; ok dtucker@
2012-02-14 - (tim) [openbsd-compat/bsd-misc.h sshd.c] Fix conflicting return type forTim Rice
unsetenv due to rev 1.14 change to setenv.c. Cast unsetenv to void in sshd.c ok dtucker@
2012-02-14 - (djm) [openbsd-compat/bsd-cygwin_util.c] Add PROGRAMFILES to list ofDamien Miller
preserved Cygwin environment variables; from Corinna Vinschen
2012-01-17 - (dtucker) [configure.ac mac.c openbsd-compat/openssl-compat.h] AddDarren Tucker
null implementation of HMAC_CTX_init for the benefit of old versions of OpenSSL that don't have it.
2011-11-04 - (dtucker) [INSTALL LICENCE configure.ac openbsd-compat/Makefile.inDarren Tucker
openbsd-compat/getrrsetbyname-ldns.c openbsd-compat/getrrsetbyname.c] bz 1320: Add optional support for LDNS, a BSD licensed DNS resolver library which supports DNSSEC. Patch from Simon Vallet (svallet at genoscope cns fr) with some rework from myself and djm. ok djm.
2011-10-01 - (dtucker) [openbsd-compat/mktemp.c] Fix compiler warning. ok djmDarren Tucker
2011-09-29 - (dtucker) [configure.ac openbsd-compat/Makefile.inDarren Tucker
openbsd-compat/strnlen.c] Add strnlen to the compat library.
2011-09-23 - (djm) [openbsd-compat/setenv.c] Forklift upgrade, including inclusionDamien Miller
of static __findenv() function from upstream setenv.c
2011-09-23 - otto@cvs.openbsd.org 2008/12/09 19:38:38Damien Miller
[openbsd-compat/inet_ntop.c] fix inet_ntop(3) prototype; ok millert@ libc to be bumbed very soon
2011-09-23 - (djm) [openbsd-compat/sha2.c openbsd-compat/sha2.h] Remove OpenBSD rcsidDamien Miller
marker. The upstream API has changed (function and structure names) enough to put it out of sync with other providers of this interface.
2011-09-23 - (djm) [openbsd-compat/mktemp.c] forklift upgrade to -current version.Damien Miller
The file was totally rewritten between what we had in tree and -current.
2011-09-23 - millert@cvs.openbsd.org 2008/08/21 16:54:44Damien Miller
[mktemp.c] Remove useless code, the kernel will set errno appropriately if an element in the path does not exist. OK deraadt@ pvalchev@
2011-09-23 - deraadt@cvs.openbsd.org 2008/07/22 21:47:45Damien Miller
[mktemp.c] use arc4random_uniform(); ok djm millert
2011-09-23 - (djm) [openbsd-compat/getgrouplist.c] Remove OpenBSD rcsid marker: theDamien Miller
upstream version is YPified and we don't want this
2011-09-23 - tobias@cvs.openbsd.org 2007/10/21 11:09:30Damien Miller
[mktemp.c] Comment fix about time consumption of _gettemp. FreeBSD did this in revision 1.20. OK deraadt@, krw@
2011-09-23 - (djm) [openbsd-compat/getcwd.c] Remove OpenBSD rcsid marker since we noDamien Miller
longer want to sync this file (OpenBSD uses a __getcwd syscall now, we want this longhand version)
2011-09-23 - millert@cvs.openbsd.org 2006/05/05 15:27:38Damien Miller
[openbsd-compat/strlcpy.c] Convert do {} while loop -> while {} for clarity. No binary change on most architectures. From Oliver Smith. OK deraadt@ and henning@
2011-09-22 - djm@cvs.openbsd.org 2011/09/22 06:27:29Damien Miller
[glob.c] fix GLOB_KEEPSTAT without GLOB_NOSORT; the implicit sort was being applied only to the gl_pathv vector and not the corresponding gl_statv array. reported in OpenSSH bz#1935; feedback and okay matthew@
2011-09-22 - stsp@cvs.openbsd.org 2011/09/20 10:18:46Damien Miller
[glob.c] In glob(3), limit recursion during matching attempts. Similar to fnmatch fix. Also collapse consecutive '*' (from NetBSD). ok miod deraadt
2011-09-22 - pyr@cvs.openbsd.org 2011/05/12 07:15:10Damien Miller
[openbsd-compat/glob.c] When the max number of items for a directory has reached GLOB_LIMIT_READDIR an error is returned but closedir() is not called. spotted and fix provided by Frank Denis obsd-tech@pureftpd.org ok otto@, millert@
2011-09-06* New upstream release (http://www.openssh.org/txt/release-5.9).Colin Watson
- Introduce sandboxing of the pre-auth privsep child using an optional sshd_config(5) "UsePrivilegeSeparation=sandbox" mode that enables mandatory restrictions on the syscalls the privsep child can perform. - Add new SHA256-based HMAC transport integrity modes from http://www.ietf.org/id/draft-dbider-sha2-mac-for-ssh-02.txt. - The pre-authentication sshd(8) privilege separation slave process now logs via a socket shared with the master process, avoiding the need to maintain /dev/log inside the chroot (closes: #75043, #429243, #599240). - ssh(1) now warns when a server refuses X11 forwarding (closes: #504757). - sshd_config(5)'s AuthorizedKeysFile now accepts multiple paths, separated by whitespace (closes: #76312). The authorized_keys2 fallback is deprecated but documented (closes: #560156). - ssh(1) and sshd(8): set IPv6 traffic class from IPQoS, as well as IPv4 ToS/DSCP (closes: #498297). - ssh-add(1) now accepts keys piped from standard input. E.g. "ssh-add - < /path/to/key" (closes: #229124). - Clean up lost-passphrase text in ssh-keygen(1) (closes: #444691). - Say "required" rather than "recommended" in unprotected-private-key warning (LP: #663455).
generated by cgit v1.2.3 (git 2.39.1) at 2024-11-02 05:32:01 +0000