From 02d776600121afc31658f3b857ab9d41c7cad5ca Mon Sep 17 00:00:00 2001 From: Colin Watson Date: Mon, 25 Jan 2010 12:24:16 +0000 Subject: * Backport from upstream: - Do not fall back to adding keys without contraints (ssh-add -c / -t ...) when the agent refuses the constrained add request. This was a useful migration measure back in 2002 when constraints were new, but just adds risk now (LP: #209447). --- debian/changelog | 5 +++++ 1 file changed, 5 insertions(+) (limited to 'debian/changelog') diff --git a/debian/changelog b/debian/changelog index 8ff7c54ac..ed90f6561 100644 --- a/debian/changelog +++ b/debian/changelog @@ -3,6 +3,11 @@ openssh (1:5.3p1-1) UNRELEASED; urgency=low * New upstream release. * Update to GSSAPI patch from http://www.sxw.org.uk/computing/patches/openssh-5.3p1-gsskex-all-20100124.patch. + * Backport from upstream: + - Do not fall back to adding keys without contraints (ssh-add -c / -t + ...) when the agent refuses the constrained add request. This was a + useful migration measure back in 2002 when constraints were new, but + just adds risk now (LP: #209447). -- Colin Watson Sun, 24 Jan 2010 22:32:25 +0000 -- cgit v1.2.3