1299 lines
50 KiB
Plaintext
1299 lines
50 KiB
Plaintext
20030401
|
|
- (djm) OpenBSD CVS Sync
|
|
- jmc@cvs.openbsd.org 2003/03/28 10:11:43
|
|
[scp.1 sftp.1 ssh.1 ssh-add.1 ssh-agent.1 ssh_config.5 sshd_config.5]
|
|
[ssh-keygen.1 ssh-keyscan.1 ssh-keysign.8]
|
|
- killed whitespace
|
|
- new sentence new line
|
|
- .Bk for arguments
|
|
ok markus@
|
|
- markus@cvs.openbsd.org 2003/04/01 10:10:23
|
|
[clientloop.c monitor.c monitor_wrap.c packet.c packet.h readconf.c]
|
|
[readconf.h serverloop.c sshconnect2.c]
|
|
rekeying bugfixes and automatic rekeying:
|
|
* both client and server rekey _automatically_
|
|
(a) after 2^31 packets, because after 2^32 packets
|
|
the sequence number for packets wraps
|
|
(b) after 2^(blocksize_in_bits/4) blocks
|
|
(see: draft-ietf-secsh-newmodes-00.txt)
|
|
(a) and (b) are _enabled_ by default, and only disabled for known
|
|
openssh versions, that don't support rekeying properly.
|
|
* client option 'RekeyLimit'
|
|
* do not reply to requests during rekeying
|
|
- markus@cvs.openbsd.org 2003/04/01 10:22:21
|
|
[clientloop.c monitor.c monitor_wrap.c packet.c packet.h readconf.c]
|
|
[readconf.h serverloop.c sshconnect2.c]
|
|
backout rekeying changes (for 3.6.1)
|
|
- markus@cvs.openbsd.org 2003/04/01 10:31:26
|
|
[compat.c compat.h kex.c]
|
|
bugfix causes stalled connections for ssh.com < 3.0; noticed by ho@;
|
|
tested by ho@ and myself
|
|
- markus@cvs.openbsd.org 2003/04/01 10:56:46
|
|
[version.h]
|
|
3.6.1
|
|
- (djm) Crank spec file versions
|
|
- (djm) Release 3.6.1p1
|
|
|
|
20030326
|
|
- (djm) OpenBSD CVS Sync
|
|
- deraadt@cvs.openbsd.org 2003/03/26 04:02:51
|
|
[sftp-server.c]
|
|
one last fix to the tree: race fix broke stuff; pr 3169;
|
|
srp@srparish.net, help from djm
|
|
|
|
20030325
|
|
- (djm) Fix getpeerid support for 64 bit BE systems. From
|
|
Arnd Bergmann <arndb@de.ibm.com>
|
|
|
|
20030324
|
|
- (djm) OpenBSD CVS Sync
|
|
- markus@cvs.openbsd.org 2003/03/23 19:02:00
|
|
[monitor.c]
|
|
unbreak rekeying for privsep; ok millert@
|
|
- Release 3.6p1
|
|
- Fix sshd BindAddress and -b options for systems using fake-getaddrinfo.
|
|
Report from murple@murple.net, diagnosis from dtucker@zip.com.au
|
|
|
|
20030320
|
|
- (djm) OpenBSD CVS Sync
|
|
- markus@cvs.openbsd.org 2003/03/17 10:38:38
|
|
[progressmeter.c]
|
|
don't print \n if backgrounded; from ho@
|
|
- markus@cvs.openbsd.org 2003/03/17 11:43:47
|
|
[version.h]
|
|
enter 3.6
|
|
- (bal) The days of lack of int64_t support are over. Sorry kids.
|
|
- (bal) scp.c 'limit' conflicts with Cray. Rename to 'limitbw'
|
|
- (bal) Collection of Cray patches (bsd-cray.h fix for CRAYT3E and improved
|
|
guessing rules)
|
|
- (bal) Disable Privsep for Tru64 after pre-authentication due to issues
|
|
with SIA. Also, clean up of tru64 support patch by Chris Adams
|
|
<cmadams@hiwaay.net>
|
|
- (tim) [contrib/caldera/openssh.spec] workaround RPM quirk. Fix %files
|
|
|
|
20030318
|
|
- (tim) [configure.ac openbsd-compat/bsd-misc.c openbsd-compat/bsd-misc.h]
|
|
add nanosleep(). testing/corrections by Darren Tucker <dtucker@zip.com.au>
|
|
|
|
20030317
|
|
- (djm) Fix return value checks for RAND_bytes. Report from
|
|
Steve G <linux_4ever@yahoo.com>
|
|
|
|
20030315
|
|
- (djm) OpenBSD CVS Sync
|
|
- markus@cvs.openbsd.org 2003/03/13 11:42:19
|
|
[authfile.c ssh-keysign.c]
|
|
move RSA_blinding_on to generic key load method
|
|
- markus@cvs.openbsd.org 2003/03/13 11:44:50
|
|
[ssh-agent.c]
|
|
ssh-agent is similar to ssh-keysign (allows other processes to use
|
|
private rsa keys). however, it gets key over socket and not from
|
|
a file, so we have to do blinding here as well.
|
|
|
|
20030310
|
|
- (djm) OpenBSD CVS Sync
|
|
- markus@cvs.openbsd.org 2003/03/05 22:33:43
|
|
[channels.c monitor.c scp.c session.c sftp-client.c sftp-int.c]
|
|
[sftp-server.c ssh-add.c sshconnect2.c]
|
|
fix memory leaks; from dlheine@suif.Stanford.EDU/CLOUSEAU; ok djm@
|
|
- (djm) One more portable-specific one from dlheine@suif.Stanford.EDU/
|
|
CLOUSEAU
|
|
- (djm) Bug #245: TTY problems on Solaris. Fix by stevesk@ and
|
|
dtucker@zip.com.au
|
|
- (djm) AIX package builder update from dtucker@zip.com.au
|
|
|
|
20030225
|
|
- (djm) Fix some compile errors spotted by dtucker and his fabulous
|
|
tinderbox
|
|
|
|
20030224
|
|
- (djm) Tweak gnome-ssh-askpass2:
|
|
- Retry kb and mouse grab a couple of times, so passphrase dialog doesn't
|
|
immediately fail if you are doing something else when it appears (e.g.
|
|
dragging a window)
|
|
- Perform server grab after we have the keyboard and/or pointer to avoid
|
|
races.
|
|
- (djm) OpenBSD CVS Sync
|
|
- markus@cvs.openbsd.org 2003/01/27 17:06:31
|
|
[sshd.c]
|
|
more specific error message when /var/empty has wrong permissions;
|
|
bug #46, map@appgate.com; ok henning@, provos@, stevesk@
|
|
- markus@cvs.openbsd.org 2003/01/28 16:11:52
|
|
[scp.1]
|
|
document -l; pekkas@netcore.fi
|
|
- stevesk@cvs.openbsd.org 2003/01/28 17:24:51
|
|
[scp.1]
|
|
remove example not pertinent with -1 addition; ok markus@
|
|
- jmc@cvs.openbsd.org 2003/01/31 21:54:40
|
|
[sshd.8]
|
|
typos; sshd(8): help and ok markus@
|
|
help and ok millert@
|
|
- markus@cvs.openbsd.org 2003/02/02 10:51:13
|
|
[scp.c]
|
|
call okname() only when using system(3) for remote-remote copy;
|
|
fixes bugs #483, #472; ok deraadt@, mouring@
|
|
- markus@cvs.openbsd.org 2003/02/02 10:56:08
|
|
[kex.c]
|
|
add support for key exchange guesses; based on work by
|
|
avraham.fraenkel@commatch.com; fixes bug #148; ok deraadt@
|
|
- markus@cvs.openbsd.org 2003/02/03 08:56:16
|
|
[sshpty.c]
|
|
don't call error() for readonly /dev; from soekris list; ok mcbride,
|
|
henning, deraadt.
|
|
- markus@cvs.openbsd.org 2003/02/04 09:32:08
|
|
[key.c]
|
|
better debug3 message
|
|
- markus@cvs.openbsd.org 2003/02/04 09:33:22
|
|
[monitor.c monitor_wrap.c]
|
|
skey/bsdauth: use 0 to indicate failure instead of -1, because
|
|
the buffer API only supports unsigned ints.
|
|
- markus@cvs.openbsd.org 2003/02/05 09:02:28
|
|
[readconf.c]
|
|
simplify ProxyCommand parsing, remove strcat/xrealloc; ok henning@, djm@
|
|
- markus@cvs.openbsd.org 2003/02/06 09:26:23
|
|
[session.c]
|
|
missing call to setproctitle() after authentication; ok provos@
|
|
- markus@cvs.openbsd.org 2003/02/06 09:27:29
|
|
[ssh.c ssh_config.5]
|
|
support 'ProxyCommand none'; bugzilla #433; binder@arago.de; ok djm@
|
|
- markus@cvs.openbsd.org 2003/02/06 09:29:18
|
|
[sftp-server.c]
|
|
fix races in rename/symlink; from Tony Finch; ok djm@
|
|
- markus@cvs.openbsd.org 2003/02/06 21:22:43
|
|
[auth1.c auth2.c]
|
|
undo broken fix for #387, fixes #486
|
|
- markus@cvs.openbsd.org 2003/02/10 11:51:47
|
|
[ssh-add.1]
|
|
xref sshd_config.5 (not sshd.8); mark@summersault.com; bug #490
|
|
- markus@cvs.openbsd.org 2003/02/12 09:33:04
|
|
[key.c key.h ssh-dss.c ssh-rsa.c]
|
|
merge ssh-dss.h ssh-rsa.h into key.h; ok deraadt@
|
|
- markus@cvs.openbsd.org 2003/02/12 21:39:50
|
|
[crc32.c crc32.h]
|
|
replace crc32.c with a BSD licensed version; noted by David Turner
|
|
- markus@cvs.openbsd.org 2003/02/16 17:09:57
|
|
[kex.c kexdh.c kexgex.c kex.h sshconnect2.c sshd.c ssh-keyscan.c]
|
|
split kex into client and server code, no need to link
|
|
server code into the client; ok provos@
|
|
- markus@cvs.openbsd.org 2003/02/16 17:30:33
|
|
[monitor.c monitor_wrap.c]
|
|
fix permitrootlogin forced-commands-only for privsep; bux #387;
|
|
ok provos@
|
|
- markus@cvs.openbsd.org 2003/02/21 09:05:53
|
|
[servconf.c]
|
|
print sshd_config filename in debug2 mode.
|
|
- mpech@cvs.openbsd.org 2003/02/21 10:34:48
|
|
[auth-krb4.c]
|
|
...sizeof(&adat.session) is not good here.
|
|
henning@, deraadt@, millert@
|
|
- (djm) Add new object files to Makefile and reorder
|
|
- (djm) Bug #501: gai_strerror should return char*;
|
|
fix from dtucker@zip.com.au
|
|
- (djm) Most of Bug #499: Cygwin compile fixes for new progressmeter;
|
|
From vinschen@redhat.com
|
|
- (djm) Rest of Bug #499: Import a basename() function from OpenBSD libc
|
|
- (djm) Bug #494: Allow multiple accounts on Windows 9x/Me;
|
|
From vinschen@redhat.com
|
|
- (djm) Bug #456: Support for NEC SX6 with Unicos; from wendyp@cray.com
|
|
|
|
20030211
|
|
- (djm) Cygwin needs libcrypt too. Patch from vinschen@redhat.com
|
|
|
|
20030206
|
|
- (djm) Teach fake-getaddrinfo to use getservbyname() when provided a
|
|
string service name. Suggested by markus@, review by itojun@
|
|
|
|
20030131
|
|
- (bal) AIX 4.2.1 lacks nanosleep(). Patch to use nsleep() provided by
|
|
dtucker@zip.com.au
|
|
|
|
20030130
|
|
- (djm) Unbreak root password auth. Spotted by dtucker@zip.com.au
|
|
|
|
200301028
|
|
- (djm) Search libposix4 and librt for nanosleep. From dtucker@zip.com.au
|
|
and openssh-unix-dev@thewrittenword.com
|
|
|
|
200301027
|
|
- (bal) Bugzilla 477 patch by wendyp@cray.com. Define TIOCGPGRP for
|
|
cray. Also removed test for tcgetpgrp in configure.ac since it
|
|
is no longer used.
|
|
|
|
20030124
|
|
- (djm) OpenBSD CVS Sync
|
|
- jmc@cvs.openbsd.org 2003/01/23 08:58:47
|
|
[sshd_config.5]
|
|
typos; ok millert@
|
|
- markus@cvs.openbsd.org 2003/01/23 13:50:27
|
|
[authfd.c authfd.h readpass.c ssh-add.1 ssh-add.c ssh-agent.c]
|
|
ssh-add -c, prompt user for confirmation (using ssh-askpass) when
|
|
private agent key is used; with djm@; test by dugsong@, djm@;
|
|
ok deraadt@
|
|
- markus@cvs.openbsd.org 2003/01/23 14:01:53
|
|
[scp.c]
|
|
bandwidth limitation patch (scp -l) from niels@; ok todd@, deraadt@
|
|
- markus@cvs.openbsd.org 2003/01/23 14:06:15
|
|
[scp.1 scp.c]
|
|
scp -12; Sam Smith and others; ok provos@, deraadt@
|
|
- (djm) Add TIMEVAL_TO_TIMESPEC macros
|
|
|
|
20030123
|
|
- (djm) OpenBSD CVS Sync
|
|
- djm@cvs.openbsd.org 2003/01/23 00:03:00
|
|
[auth1.c]
|
|
Don't log TIS auth response; "get rid of it" - markus@
|
|
|
|
20030122
|
|
- (djm) OpenBSD CVS Sync
|
|
- marc@cvs.openbsd.org 2003/01/21 18:14:36
|
|
[ssh-agent.1 ssh-agent.c]
|
|
Add a -t life option to ssh-agent that set the default lifetime.
|
|
The default can still be overriden by using -t in ssh-add.
|
|
OK markus@
|
|
- (djm) Reorganise PAM & SIA password handling to eliminate some common code
|
|
- (djm) Sync regress with OpenBSD -current
|
|
|
|
20030120
|
|
- (djm) Fix compilation for NetBSD from dtucker@zip.com.au
|
|
- (tim) [progressmeter.c] make compilers without long long happy.
|
|
- (tim) [configure.ac] Add -belf to build ELF binaries on OpenServer 5 when
|
|
using cc. (gcc already did)
|
|
|
|
20030118
|
|
- (djm) Revert fix for Bug #442 for now.
|
|
|
|
20030117
|
|
- (djm) Bug #470: Detect strnvis, not strvis in configure.
|
|
From d_wllms@lanl.gov
|
|
|
|
20030116
|
|
- (djm) OpenBSD CVS Sync
|
|
- djm@cvs.openbsd.org 2003/01/16 03:41:55
|
|
[sftp-int.c]
|
|
explicitly use first glob result
|
|
|
|
20030114
|
|
- (djm) OpenBSD CVS Sync
|
|
- fgsch@cvs.openbsd.org 2003/01/10 23:23:24
|
|
[sftp-int.c]
|
|
typo; from Nils Nordman <nino at nforced dot com>.
|
|
- markus@cvs.openbsd.org 2003/01/11 18:29:43
|
|
[log.c]
|
|
set fatal_cleanups to NULL in fatal_remove_all_cleanups();
|
|
dtucker@zip.com.au
|
|
- markus@cvs.openbsd.org 2003/01/12 16:57:02
|
|
[progressmeter.c]
|
|
allow WARNINGS=yes; ok djm@
|
|
- djm@cvs.openbsd.org 2003/01/13 11:04:04
|
|
[sftp-int.c]
|
|
make cmds[] array static to avoid conflict with BSDI libc.
|
|
mindrot bug #466. Fix from mdev@idg.nl; ok markus@
|
|
- djm@cvs.openbsd.org 2003/01/14 10:58:00
|
|
[sftp-client.c sftp-int.c]
|
|
Don't try to upload or download non-regular files. Report from
|
|
apoloval@pantuflo.escet.urjc.es; ok markus@
|
|
|
|
20030113
|
|
- (djm) Rework openbsd-compat/setproctitle.c a bit: move emulation type
|
|
detection to configure.ac. Prompted by stevesk@
|
|
- (djm) Bug #467: Add a --disable-strip option to turn off stripping of
|
|
installed binaries. From mdev@idg.nl
|
|
|
|
20030110
|
|
- (djm) Enable new setproctitle emulation for Linux, AIX and HP/UX. More
|
|
systems may be added later.
|
|
- (djm) OpenBSD CVS Sync
|
|
- djm@cvs.openbsd.org 2003/01/08 23:53:26
|
|
[sftp.1 sftp.c sftp-int.c sftp-int.h]
|
|
Cleanup error handling for batchmode
|
|
Allow blank lines and comments in input
|
|
Ability to suppress abort on error in batchmode ("-put blah")
|
|
Fixes mindrot bug #452; markus@ ok
|
|
- fgsch@cvs.openbsd.org 2003/01/10 08:19:07
|
|
[scp.c sftp.1 sftp.c sftp-client.c sftp-int.c progressmeter.c]
|
|
[progressmeter.h]
|
|
sftp progress meter support.
|
|
original diffs by Nils Nordman <nino at nforced dot com> via
|
|
markus@, merged to -current by me, djm@ ok.
|
|
- djm@cvs.openbsd.org 2003/01/10 08:48:15
|
|
[sftp-client.c]
|
|
Simplify and avoid redundancy in packet send and receive
|
|
functions; ok fgs@
|
|
- djm@cvs.openbsd.org 2003/01/10 10:29:35
|
|
[scp.c]
|
|
Don't ftruncate after write error, creating sparse files of
|
|
incorrect length
|
|
mindrot bug #403, reported by rusr@cup.hp.com; ok markus@
|
|
- djm@cvs.openbsd.org 2003/01/10 10:32:54
|
|
[channels.c]
|
|
hush socket() errors, except last. Fixes mindrot bug #408; ok markus@
|
|
|
|
20030108
|
|
- (djm) Sync openbsd-compat/ with OpenBSD -current
|
|
- (djm) Avoid redundant xstrdup/xfree in auth2-pam.c. From Solar via markus@
|
|
- (djm) OpenBSD CVS Sync
|
|
- markus@cvs.openbsd.org 2003/01/01 18:08:52
|
|
[channels.c]
|
|
move big output buffer messages to debug2
|
|
- djm@cvs.openbsd.org 2003/01/06 23:51:22
|
|
[sftp-client.c]
|
|
Fix "get -p" download to not add user-write perm. mindrot bug #426
|
|
reported by gfernandez@livevault.com; ok markus@
|
|
- fgsch@cvs.openbsd.org 2003/01/07 23:42:54
|
|
[sftp.1]
|
|
add version; from Nils Nordman <nino at nforced dot com> via markus@.
|
|
markus@ ok
|
|
- (djm) Update README to reflect AIX's status as a well supported platform.
|
|
From dtucker@zip.com.au
|
|
- (tim) [Makefile.in configure.ac] replace fixpath with sed script. Patch
|
|
by Mo DeJong.
|
|
- (tim) [auth.c] declare today at top of allowed_user() to keep
|
|
older compilers happy.
|
|
- (tim) [scp.c] make compilers without long long happy.
|
|
|
|
20030107
|
|
- (djm) Bug #401: Work around Linux breakage with IPv6 mapped addresses.
|
|
Based on fix from yoshfuji@linux-ipv6.org
|
|
- (djm) Bug #442: Check for and deny access to accounts with locked
|
|
passwords. Patch from dtucker@zip.com.au
|
|
- (djm) Bug #44: Use local mkstemp() rather than glibc's silly one. Fixes
|
|
Can't pass KRB4 TGT passing. Fix from: jan.iven@cern.ch
|
|
- (djm) Fix Bug #442 for PAM case
|
|
- (djm) Bug #110: bogus error messages in lastlog_get_entry(). Fix based
|
|
on one by peak@argo.troja.mff.cuni.cz
|
|
- (djm) Bug #111: Run syslog and stderr logging through strnvis to eliminate
|
|
nasties. Report from peak@argo.troja.mff.cuni.cz
|
|
- (djm) Bug #178: On AIX /etc/nologin wasnt't shown to users. Fix from
|
|
Ralf.Wenk@fh-karlsruhe.de and dtucker@zip.com.au
|
|
- (djm) Fix my fix of the fix for the Bug #442 for PAM case. Spotted by
|
|
dtucker@zip.com.au. Reorder for clarity too.
|
|
|
|
20030103
|
|
- (djm) Bug #461: ssh-copy-id fails with no arguments. Patch from
|
|
cjwatson@debian.org
|
|
- (djm) Bug #460: Filling utmp[x]->ut_addr_v6 if present. Patch from
|
|
cjwatson@debian.org
|
|
- (djm) Bug #446: Set LOGIN env var to pw_name on AIX. Patch from
|
|
mii@ornl.gov
|
|
|
|
20030101
|
|
- (stevesk) [session.c sshlogin.c sshlogin.h] complete portable
|
|
parts of pass addrlen with sockaddr * fix.
|
|
from Hajimu UMEMOTO <ume@FreeBSD.org>
|
|
|
|
20021222
|
|
- (bal) OpenBSD CVS Sync
|
|
- fgsch@cvs.openbsd.org 2002/11/15 10:03:09
|
|
[authfile.c]
|
|
lseek(2) may return -1 when getting the public/private key lenght.
|
|
Simplify the code and check for errors using fstat(2).
|
|
|
|
Problem reported by Mauricio Sanchez, markus@ ok.
|
|
- markus@cvs.openbsd.org 2002/11/18 16:43:44
|
|
[clientloop.c]
|
|
don't overwrite SIG{INT,QUIT,TERM} handler if set to SIG_IGN;
|
|
e.g. if ssh is used for backup; report Joerg Schilling; ok millert@
|
|
- markus@cvs.openbsd.org 2002/11/21 22:22:50
|
|
[dh.c]
|
|
debug->debug2
|
|
- markus@cvs.openbsd.org 2002/11/21 22:45:31
|
|
[cipher.c kex.c packet.c sshconnect.c sshconnect2.c]
|
|
debug->debug2, unify debug messages
|
|
- deraadt@cvs.openbsd.org 2002/11/21 23:03:51
|
|
[auth-krb5.c auth1.c hostfile.h monitor_wrap.c sftp-client.c sftp-int.c ssh-add.c ssh-rsa.c
|
|
sshconnect.c]
|
|
KNF
|
|
- markus@cvs.openbsd.org 2002/11/21 23:04:33
|
|
[ssh.c]
|
|
debug->debug2
|
|
- stevesk@cvs.openbsd.org 2002/11/24 21:46:24
|
|
[ssh-keysign.8]
|
|
typo: "the the"
|
|
- wcobb@cvs.openbsd.org 2002/11/26 00:45:03
|
|
[scp.c ssh-keygen.c]
|
|
Remove unnecessary fflush(stderr) calls, stderr is unbuffered by default.
|
|
ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/11/26 02:35:30
|
|
[ssh-keygen.1]
|
|
remove outdated statement; ok markus@ deraadt@
|
|
- stevesk@cvs.openbsd.org 2002/11/26 02:38:54
|
|
[canohost.c]
|
|
KNF, comment and error message repair; ok markus@
|
|
- markus@cvs.openbsd.org 2002/11/27 17:53:35
|
|
[scp.c sftp.c ssh.c]
|
|
allow usernames with embedded '@', e.g. scp user@vhost@realhost:file /tmp;
|
|
http://bugzilla.mindrot.org/show_bug.cgi?id=447; ok mouring@, millert@
|
|
- stevesk@cvs.openbsd.org 2002/12/04 04:36:47
|
|
[session.c]
|
|
remove xauth entries before add; PR 2994 from janjaap@stack.nl.
|
|
ok markus@
|
|
- markus@cvs.openbsd.org 2002/12/05 11:08:35
|
|
[scp.c]
|
|
use roundup() similar to rcp/util.c and avoid problems with strange
|
|
filesystem block sizes, noted by tjr@freebsd.org; ok djm@
|
|
- djm@cvs.openbsd.org 2002/12/06 05:20:02
|
|
[sftp.1]
|
|
Fix cut'n'paste error, spotted by matthias.riese@b-novative.de; ok deraadt@
|
|
- millert@cvs.openbsd.org 2002/12/09 16:50:30
|
|
[ssh.c]
|
|
Avoid setting optind to 0 as GNU getopt treats that like we do optreset.
|
|
markus@ OK
|
|
- markus@cvs.openbsd.org 2002/12/10 08:56:00
|
|
[session.c]
|
|
Make sure $SHELL points to the shell from the password file, even if shell
|
|
is overridden from login.conf; bug#453; semen at online.sinor.ru; ok millert@
|
|
- markus@cvs.openbsd.org 2002/12/10 19:26:50
|
|
[packet.c]
|
|
move tos handling to packet_set_tos; ok provos/henning/deraadt
|
|
- markus@cvs.openbsd.org 2002/12/10 19:47:14
|
|
[packet.c]
|
|
static
|
|
- markus@cvs.openbsd.org 2002/12/13 10:03:15
|
|
[channels.c misc.c sshconnect2.c]
|
|
cleanup debug messages, more useful information for the client user.
|
|
- markus@cvs.openbsd.org 2002/12/13 15:20:52
|
|
[scp.c]
|
|
1) include stalling time in total time
|
|
2) truncate filenames to 45 instead of 20 characters
|
|
3) print rate instead of progress bar, no more stars
|
|
4) scale output to tty width
|
|
based on a patch from Niels; ok fries@ lebel@ fgs@ millert@
|
|
- (bal) [msg.c msg.h scp.c ssh-keysign.c sshconnect2.c] Resync CVS IDs since
|
|
we already did s/msg_send/ssh_msg_send/
|
|
|
|
20021205
|
|
- (djm) PERL-free fixpaths from stuge-openssh-unix-dev@cdy.org
|
|
|
|
20021122
|
|
- (tim) [configure.ac] fix STDPATH test for IRIX. First reported by
|
|
advax@triumf.ca. This type of solution tested by <herb@sgi.com>
|
|
|
|
20021113
|
|
- (tim) [configure.ac] remove unused variables no_libsocket and no_libnsl
|
|
|
|
20021111
|
|
- (tim) [contrib/solaris/opensshd.in] add umask 022 so sshd.pid is
|
|
not world writable.
|
|
|
|
20021109
|
|
- (bal) OpenBSD CVS Sync
|
|
- itojun@cvs.openbsd.org 2002/10/16 14:31:48
|
|
[sftp-common.c]
|
|
64bit pedant. %llu is "unsigned long long". markus ok
|
|
- markus@cvs.openbsd.org 2002/10/23 10:32:13
|
|
[packet.c]
|
|
use %u for u_int
|
|
- markus@cvs.openbsd.org 2002/10/23 10:40:16
|
|
[bufaux.c]
|
|
%u for u_int
|
|
- markus@cvs.openbsd.org 2002/11/04 10:07:53
|
|
[auth.c]
|
|
don't compare against pw_home if realpath fails for pw_home (seen
|
|
on AFS); ok djm@
|
|
- markus@cvs.openbsd.org 2002/11/04 10:09:51
|
|
[packet.c]
|
|
log before send disconnect; ok djm@
|
|
- markus@cvs.openbsd.org 2002/11/05 19:45:20
|
|
[monitor.c]
|
|
handle overflows for size_t larger than u_int; siw@goneko.de, bug #425
|
|
- markus@cvs.openbsd.org 2002/11/05 20:10:37
|
|
[sftp-client.c]
|
|
typo; GaryF@livevault.com
|
|
- markus@cvs.openbsd.org 2002/11/07 16:28:47
|
|
[sshd.c]
|
|
log to stderr if -ie is given, bug #414, prj@po.cwru.edu
|
|
- markus@cvs.openbsd.org 2002/11/07 22:08:07
|
|
[readconf.c readconf.h ssh-keysign.8 ssh-keysign.c]
|
|
we cannot use HostbasedAuthentication for enabling ssh-keysign(8),
|
|
because HostbasedAuthentication might be enabled based on the
|
|
target host and ssh-keysign(8) does not know the remote hostname
|
|
and not trust ssh(1) about the hostname, so we add a new option
|
|
EnableSSHKeysign; ok djm@, report from zierke@informatik.uni-hamburg.de
|
|
- markus@cvs.openbsd.org 2002/11/07 22:35:38
|
|
[scp.c]
|
|
check exit status from ssh, and exit(1) if ssh fails; bug#369;
|
|
binder@arago.de
|
|
- (bal) Update ssh-host-config and minor rewrite of bsd-cygwin_util.c
|
|
ntsec now default if cygwin version beginning w/ version 56. Patch
|
|
by Corinna Vinschen <vinschen@redhat.com>
|
|
- (bal) AIX does not log login attempts for unknown users (bug #432).
|
|
patch by dtucker@zip.com.au
|
|
|
|
20021021
|
|
- (djm) Bug #400: Kill ssh-rand-helper children on timeout, patch from
|
|
dtucker@zip.com.au
|
|
- (djm) Bug #317: FreeBSD needs libutil.h for openpty() Report from
|
|
dirk.meyer@dinoex.sub.org
|
|
|
|
20021015
|
|
- (bal) Fix bug id 383 and only call loginrestrict for AIX if not root.
|
|
- (bal) More advanced strsep test by Darren Tucker <dtucker@zip.com.au>
|
|
|
|
20021015
|
|
- (tim) [contrib/caldera/openssh.spec] make ssh-agent setgid nobody
|
|
|
|
20021004
|
|
- (bal) Disable post-authentication Privsep for OSF/1. It conflicts with
|
|
SIA.
|
|
|
|
20021003
|
|
- (djm) OpenBSD CVS Sync
|
|
- markus@cvs.openbsd.org 2002/10/01 20:34:12
|
|
[ssh-agent.c]
|
|
allow root to access the agent, since there is no protection from root.
|
|
- markus@cvs.openbsd.org 2002/10/01 13:24:50
|
|
[version.h]
|
|
OpenSSH 3.5
|
|
- (djm) Bump RPM spec version numbers
|
|
- (djm) Bug #406: s/msg_send/ssh_msg_send/ for Mac OS X 1.2
|
|
|
|
20020930
|
|
- (djm) Tidy contrib/, add Makefile for GNOME passphrase dialogs,
|
|
tweak README
|
|
- (djm) OpenBSD CVS Sync
|
|
- mickey@cvs.openbsd.org 2002/09/27 10:42:09
|
|
[compat.c compat.h sshd.c]
|
|
add a generic match for a prober, such as sie big brother;
|
|
idea from stevesk@; markus@ ok
|
|
- stevesk@cvs.openbsd.org 2002/09/27 15:46:21
|
|
[ssh.1]
|
|
clarify compression level protocol 1 only; ok markus@ deraadt@
|
|
|
|
20020927
|
|
- (djm) OpenBSD CVS Sync
|
|
- markus@cvs.openbsd.org 2002/09/25 11:17:16
|
|
[sshd_config]
|
|
sync LoginGraceTime with default
|
|
- markus@cvs.openbsd.org 2002/09/25 15:19:02
|
|
[sshd.c]
|
|
typo; pilot@monkey.org
|
|
- markus@cvs.openbsd.org 2002/09/26 11:38:43
|
|
[auth1.c auth.h auth-krb4.c monitor.c monitor.h monitor_wrap.c]
|
|
[monitor_wrap.h]
|
|
krb4 + privsep; ok dugsong@, deraadt@
|
|
|
|
20020925
|
|
- (bal) Fix issue where successfull login does not clear failure counts
|
|
in AIX. Patch by dtucker@zip.com.au ok by djm
|
|
- (tim) Cray fixes (bug 367) based on patch from Wendy Palm @ cray.
|
|
This does not include the deattack.c fixes.
|
|
|
|
20020923
|
|
- (djm) OpenBSD CVS Sync
|
|
- stevesk@cvs.openbsd.org 2002/09/23 20:46:27
|
|
[canohost.c]
|
|
change get_peer_ipaddr() and get_local_ipaddr() to not return NULL for
|
|
non-sockets; fixes a problem passing NULL to snprintf(). ok markus@
|
|
- markus@cvs.openbsd.org 2002/09/23 22:11:05
|
|
[monitor.c]
|
|
only call auth_krb5 if kerberos is enabled; ok deraadt@
|
|
- markus@cvs.openbsd.org 2002/09/24 08:46:04
|
|
[monitor.c]
|
|
only call kerberos code for authctxt->valid
|
|
- todd@cvs.openbsd.org 2002/09/24 20:59:44
|
|
[sshd.8]
|
|
tweak the example $HOME/.ssh/rc script to not show on any cmdline the
|
|
sensitive data it handles. This fixes bug # 402 as reported by
|
|
kolya@mit.edu (Nickolai Zeldovich).
|
|
ok markus@ and stevesk@
|
|
|
|
20020923
|
|
- (tim) [configure.ac] s/return/exit/ patch by dtucker@zip.com.au
|
|
|
|
20020922
|
|
- (djm) OpenBSD CVS Sync
|
|
- stevesk@cvs.openbsd.org 2002/09/19 14:53:14
|
|
[compat.c]
|
|
- markus@cvs.openbsd.org 2002/09/19 15:51:23
|
|
[ssh-add.c]
|
|
typo; cd@kalkatraz.de
|
|
- stevesk@cvs.openbsd.org 2002/09/19 16:03:15
|
|
[serverloop.c]
|
|
log IP address also; ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/09/20 18:41:29
|
|
[auth.c]
|
|
log illegal user here for missing privsep case (ssh2).
|
|
this is executed in the monitor. ok markus@
|
|
|
|
20020919
|
|
- (djm) OpenBSD CVS Sync
|
|
- stevesk@cvs.openbsd.org 2002/09/12 19:11:52
|
|
[ssh-agent.c]
|
|
%u for uid print; ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/09/12 19:50:36
|
|
[session.c ssh.1]
|
|
add SSH_CONNECTION and deprecate SSH_CLIENT; bug #384. ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/09/13 19:23:09
|
|
[channels.c sshconnect.c sshd.c]
|
|
remove use of SO_LINGER, it should not be needed. error check
|
|
SO_REUSEADDR. fixup comments. ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/09/16 19:55:33
|
|
[session.c]
|
|
log when _PATH_NOLOGIN exists; ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/09/16 20:12:11
|
|
[sshd_config.5]
|
|
more details on X11Forwarding security issues and threats; ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/09/16 22:03:13
|
|
[sshd.8]
|
|
reference moduli(5) in FILES /etc/moduli.
|
|
- itojun@cvs.openbsd.org 2002/09/17 07:47:02
|
|
[channels.c]
|
|
don't quit while creating X11 listening socket.
|
|
http://mail-index.netbsd.org/current-users/2002/09/16/0005.html
|
|
got from portable. markus ok
|
|
- djm@cvs.openbsd.org 2002/09/19 01:58:18
|
|
[ssh.c sshconnect.c]
|
|
bugzilla.mindrot.org #223 - ProxyCommands don't exit.
|
|
Patch from dtucker@zip.com.au; ok markus@
|
|
|
|
20020912
|
|
- (djm) Made GNOME askpass programs return non-zero if cancel button is
|
|
pressed.
|
|
- (djm) Added getpeereid() replacement. Properly implemented for systems
|
|
with SO_PEERCRED support. Faked for systems which lack it.
|
|
- (djm) Sync sys/tree.h with OpenBSD -current. Rename tree.h and
|
|
fake-queue.h to sys-tree.h and sys-queue.h
|
|
- (djm) OpenBSD CVS Sync
|
|
- markus@cvs.openbsd.org 2002/09/08 20:24:08
|
|
[hostfile.h]
|
|
no comma at end of enumerator list
|
|
- itojun@cvs.openbsd.org 2002/09/09 06:48:06
|
|
[auth1.c auth.h auth-krb5.c monitor.c monitor.h]
|
|
[monitor_wrap.c monitor_wrap.h]
|
|
kerberos support for privsep. confirmed to work by lha@stacken.kth.se
|
|
patch from markus
|
|
- markus@cvs.openbsd.org 2002/09/09 14:54:15
|
|
[channels.c kex.h key.c monitor.c monitor_wrap.c radix.c uuencode.c]
|
|
signed vs unsigned from -pedantic; ok henning@
|
|
- markus@cvs.openbsd.org 2002/09/10 20:24:47
|
|
[ssh-agent.c]
|
|
check the euid of the connecting process with getpeereid(2);
|
|
ok provos deraadt stevesk
|
|
- stevesk@cvs.openbsd.org 2002/09/11 17:55:03
|
|
[ssh.1]
|
|
add agent and X11 forwarding warning text from ssh_config.5; ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/09/11 18:27:26
|
|
[authfd.c authfd.h ssh.c]
|
|
don't connect to agent to test for presence if we've previously
|
|
connected; ok markus@
|
|
- djm@cvs.openbsd.org 2002/09/11 22:41:50
|
|
[sftp.1 sftp-client.c sftp-client.h sftp-common.c sftp-common.h]
|
|
[sftp-glob.c sftp-glob.h sftp-int.c sftp-server.c]
|
|
support for short/long listings and globbing in "ls"; ok markus@
|
|
- djm@cvs.openbsd.org 2002/09/12 00:13:06
|
|
[sftp-int.c]
|
|
zap unused var introduced in last commit
|
|
|
|
20020911
|
|
- (djm) Sync openbsd-compat with OpenBSD -current
|
|
|
|
20020910
|
|
- (djm) Bug #365: Read /.ssh/environment properly under CygWin.
|
|
Patch from Mark Bradshaw <bradshaw@staff.crosswalk.com>
|
|
- (djm) Bug #138: Make protocol 1 blowfish work with old OpenSSL.
|
|
Patch from Robert Halubek <rob@adso.com.pl>
|
|
|
|
20020905
|
|
- (djm) OpenBSD CVS Sync
|
|
- stevesk@cvs.openbsd.org 2002/09/04 18:52:42
|
|
[servconf.c sshd.8 sshd_config.5]
|
|
default LoginGraceTime to 2m; 1m may be too short for slow systems.
|
|
ok markus@
|
|
- (djm) Merge openssh-TODO.patch from Redhat (null) beta
|
|
- (djm) Add gnome-ssh-askpass2.c (gtk2) by merge with patch from
|
|
Nalin Dahyabhai <nalin@redhat.com>
|
|
- (djm) Add support for building gtk2 password requestor from Redhat beta
|
|
|
|
20020903
|
|
- (djm) Patch from itojun@ for Darwin OS: test getaddrinfo, reorder libcrypt
|
|
- (djm) Fix Redhat RPM build dependancy test
|
|
- (djm) OpenBSD CVS Sync
|
|
- markus@cvs.openbsd.org 2002/08/12 10:46:35
|
|
[ssh-agent.c]
|
|
make ssh-agent setgid, disallow ptrace.
|
|
- espie@cvs.openbsd.org 2002/08/21 11:20:59
|
|
[sshd.8]
|
|
`RSA' updated to refer to `public key', where it matters.
|
|
okay markus@
|
|
- stevesk@cvs.openbsd.org 2002/08/21 19:38:06
|
|
[servconf.c sshd.8 sshd_config sshd_config.5]
|
|
change LoginGraceTime default to 1 minute; ok mouring@ markus@
|
|
- stevesk@cvs.openbsd.org 2002/08/21 20:10:28
|
|
[ssh-agent.c]
|
|
raise listen backlog; ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/08/22 19:27:53
|
|
[ssh-agent.c]
|
|
use common close function; ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/08/22 19:38:42
|
|
[clientloop.c]
|
|
format with current EscapeChar; bugzilla #388 from wknox@mitre.org.
|
|
ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/08/22 20:57:19
|
|
[ssh-agent.c]
|
|
shutdown(SHUT_RDWR) not needed before close here; ok markus@
|
|
- markus@cvs.openbsd.org 2002/08/22 21:33:58
|
|
[auth1.c auth2.c]
|
|
auth_root_allowed() is handled by the monitor in the privsep case,
|
|
so skip this for use_privsep, ok stevesk@, fixes bugzilla #387/325
|
|
- markus@cvs.openbsd.org 2002/08/22 21:45:41
|
|
[session.c]
|
|
send signal name (not signal number) in "exit-signal" message; noticed
|
|
by galb@vandyke.com
|
|
- stevesk@cvs.openbsd.org 2002/08/27 17:13:56
|
|
[ssh-rsa.c]
|
|
RSA_public_decrypt() returns -1 on error so len must be signed;
|
|
ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/08/27 17:18:40
|
|
[ssh_config.5]
|
|
some warning text for ForwardAgent and ForwardX11; ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/08/29 15:57:25
|
|
[monitor.c session.c sshlogin.c sshlogin.h]
|
|
pass addrlen with sockaddr *; from Hajimu UMEMOTO <ume@FreeBSD.org>
|
|
NOTE: there are also p-specific parts to this patch. ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/08/29 16:02:54
|
|
[ssh.1 ssh.c]
|
|
deprecate -P as UsePrivilegedPort defaults to no now; ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/08/29 16:09:02
|
|
[ssh_config.5]
|
|
more on UsePrivilegedPort and setuid root; ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/08/29 19:49:42
|
|
[ssh.c]
|
|
shrink initial privilege bracket for setuid case; ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/08/29 22:54:10
|
|
[ssh_config.5 sshd_config.5]
|
|
state XAuthLocation is a full pathname
|
|
|
|
20020820
|
|
- OpenBSD CVS Sync
|
|
- millert@cvs.openbsd.org 2002/08/02 14:43:15
|
|
[monitor.c monitor_mm.c]
|
|
Change mm_zalloc() sanity checks to be more in line with what
|
|
we do in calloc() and add a check to monitor_mm.c.
|
|
OK provos@ and markus@
|
|
- marc@cvs.openbsd.org 2002/08/02 16:00:07
|
|
[ssh.1 sshd.8]
|
|
note that .ssh/environment is only read when
|
|
allowed (PermitUserEnvironment in sshd_config).
|
|
OK markus@
|
|
- markus@cvs.openbsd.org 2002/08/02 21:23:41
|
|
[ssh-rsa.c]
|
|
diff is u_int (2x); ok deraadt/provos
|
|
- markus@cvs.openbsd.org 2002/08/02 22:20:30
|
|
[ssh-rsa.c]
|
|
replace RSA_verify with our own version and avoid the OpenSSL ASN.1 parser
|
|
for authentication; ok deraadt/djm
|
|
- aaron@cvs.openbsd.org 2002/08/08 13:50:23
|
|
[sshconnect1.c]
|
|
Use & to test if bits are set, not &&; markus@ ok.
|
|
- stevesk@cvs.openbsd.org 2002/08/08 23:54:52
|
|
[auth.c]
|
|
typo in comment
|
|
- stevesk@cvs.openbsd.org 2002/08/09 17:21:42
|
|
[sshd_config.5]
|
|
use Op for mdoc conformance; from esr@golux.thyrsus.com
|
|
ok aaron@
|
|
- stevesk@cvs.openbsd.org 2002/08/09 17:41:12
|
|
[sshd_config.5]
|
|
proxy vs. fake display
|
|
- stevesk@cvs.openbsd.org 2002/08/12 17:30:35
|
|
[ssh.1 sshd.8 sshd_config.5]
|
|
more PermitUserEnvironment; ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/08/17 23:07:14
|
|
[ssh.1]
|
|
ForwardAgent has defaulted to no for over 2 years; be more clear here.
|
|
- stevesk@cvs.openbsd.org 2002/08/17 23:55:01
|
|
[ssh_config.5]
|
|
ordered list here
|
|
- (bal) [defines.h] Some platforms don't have SIZE_T_MAX. So assign
|
|
it to ULONG_MAX.
|
|
|
|
20020813
|
|
- (tim) [configure.ac] Display OpenSSL header/library version.
|
|
Patch by dtucker@zip.com.au
|
|
|
|
20020731
|
|
- (bal) OpenBSD CVS Sync
|
|
- markus@cvs.openbsd.org 2002/07/24 16:11:18
|
|
[hostfile.c hostfile.h sshconnect.c]
|
|
print out all known keys for a host if we get a unknown host key,
|
|
see discussion at http://marc.theaimsgroup.com/?t=101069210100016&r=1&w=4
|
|
|
|
the ssharp mitm tool attacks users in a similar way, so i'd like to
|
|
pointed out again:
|
|
A MITM attack is always possible if the ssh client prints:
|
|
The authenticity of host 'bla' can't be established.
|
|
(protocol version 2 with pubkey authentication allows you to detect
|
|
MITM attacks)
|
|
- mouring@cvs.openbsd.org 2002/07/25 01:16:59
|
|
[sftp.c]
|
|
FallBackToRsh does not exist anywhere else. Remove it from here.
|
|
OK deraadt.
|
|
- markus@cvs.openbsd.org 2002/07/29 18:57:30
|
|
[sshconnect.c]
|
|
print file:line
|
|
- markus@cvs.openbsd.org 2002/07/30 17:03:55
|
|
[auth-options.c servconf.c servconf.h session.c sshd_config sshd_config.5]
|
|
add PermitUserEnvironment (off by default!); from dot@dotat.at;
|
|
ok provos, deraadt
|
|
|
|
20020730
|
|
- (bal) [uidswap.c] SCO compile correction by gert@greenie.muc.de
|
|
|
|
20020728
|
|
- (stevesk) [auth-pam.c] should use PAM_MSG_MEMBER(); from solar
|
|
- (stevesk) [CREDITS] solar
|
|
- (stevesk) [ssh-rand-helper.c] RAND_bytes() and SHA1_Final() unsigned
|
|
char arg.
|
|
|
|
20020725
|
|
- (djm) Remove some cruft from INSTALL
|
|
- (djm) Latest config.guess and config.sub from ftp://ftp.gnu.org/gnu/config/
|
|
|
|
20020723
|
|
- (bal) [bsd-cray.c bsd-cray.h] Part 2 of Cray merger.
|
|
- (bal) sync ID w/ ssh-agent.c
|
|
- (bal) OpenBSD Sync
|
|
- markus@cvs.openbsd.org 2002/07/19 15:43:33
|
|
[log.c log.h session.c sshd.c]
|
|
remove fatal cleanups after fork; based on discussions with and code
|
|
from solar.
|
|
- stevesk@cvs.openbsd.org 2002/07/19 17:42:40
|
|
[ssh.c]
|
|
display a warning from ssh when XAuthLocation does not exist or xauth
|
|
returned no authentication data. ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/07/21 18:32:20
|
|
[auth-options.c]
|
|
unneeded includes
|
|
- stevesk@cvs.openbsd.org 2002/07/21 18:34:43
|
|
[auth-options.h]
|
|
remove invalid comment
|
|
- markus@cvs.openbsd.org 2002/07/22 11:03:06
|
|
[session.c]
|
|
fallback to _PATH_STDPATH on setusercontext+LOGIN_SETPATH errors;
|
|
- stevesk@cvs.openbsd.org 2002/07/22 17:32:56
|
|
[monitor.c]
|
|
u_int here; ok provos@
|
|
- stevesk@cvs.openbsd.org 2002/07/23 16:03:10
|
|
[sshd.c]
|
|
utmp_len is unsigned; display error consistent with other options.
|
|
ok markus@
|
|
- stevesk@cvs.openbsd.org 2002/07/15 17:15:31
|
|
[uidswap.c]
|
|
little more debugging; ok markus@
|
|
|
|
20020722
|
|
- (bal) AIX tty data limiting patch fix by leigh@solinno.co.uk
|
|
- (stevesk) [xmmap.c] missing prototype for fatal()
|
|
- (bal) [configure.ac defines.h loginrec.c sshd.c sshpty.c] Partial sync
|
|
with Cray (mostly #ifdef renaming). Patch by wendyp@cray.com.
|
|
- (bal) [configure.ac] Missing ;; from cray patch.
|
|
- (bal) [monitor_mm.c openbsd-compat/xmmap.h] Move xmmap() defines
|
|
into it's own header.
|
|
- (stevesk) [auth-pam.[ch] session.c] pam_getenvlist() must be
|
|
freed by the caller; add free_pam_environment() and use it.
|
|
- (stevesk) [auth-pam.c] typo in comment
|
|
|
|
20020721
|
|
- (stevesk) [auth-pam.c] merge cosmetic changes from solar's
|
|
openssh-3.4p1-owl-password-changing.diff
|
|
- (stevesk) [auth-pam.c] merge rest of solar's PAM patch;
|
|
PAM_NEW_AUTHTOK_REQD remains in #if 0 for now.
|
|
- (stevesk) [auth-pam.c] cast to avoid initialization type mismatch
|
|
warning on pam_conv struct conversation function.
|
|
- (stevesk) [auth-pam.h] license
|
|
- (stevesk) [auth-pam.h] unneeded include
|
|
- (stevesk) [auth-pam.[ch] ssh.h] move SSHD_PAM_SERVICE to auth-pam.h
|
|
|
|
20020720
|
|
- (stevesk) [ssh-keygen.c] bug #231: always init/seed_rng().
|
|
|
|
20020719
|
|
- (tim) [contrib/solaris/buildpkg.sh] create privsep user/group if needed.
|
|
Patch by dtucker@zip.com.au
|
|
- (tim) [configure.ac] test for libxnet on HP. Patch by dtucker@zip.com.au
|
|
|
|
20020718
|
|
- (tim) [defines.h] Bug 313 patch by dirk.meyer@dinoex.sub.org
|
|
- (tim) [monitor_mm.c] add missing declaration for xmmap(). Reported
|
|
by ayamura@ayamura.org
|
|
- (tim) [configure.ac] Bug 267 rework int64_t test.
|
|
- (tim) [includes.h] Bug 267 add stdint.h
|
|
|
|
20020717
|
|
- (bal) aixbff package updated by dtucker@zip.com.au
|
|
- (tim) [configure.ac] change how we do paths in AC_PATH_PROGS tests
|
|
for autoconf 2.53. Based on a patch by jrj@purdue.edu
|
|
|
|
20020716
|
|
- (tim) [contrib/solaris/opensshd.in] Only kill sshd if .pid file found
|
|
|
|
20020715
|
|
- (bal) OpenBSD CVS Sync
|
|
- itojun@cvs.openbsd.org 2002/07/12 13:29:09
|
|
[sshconnect.c]
|
|
print connect failure during debugging mode.
|
|
- markus@cvs.openbsd.org 2002/07/12 15:50:17
|
|
[cipher.c]
|
|
EVP_CIPH_CUSTOM_IV for our own rijndael
|
|
- (bal) Remove unused tty defined in do_setusercontext() pointed out by
|
|
dtucker@zip.com.au plus a a more KNF since I am near it.
|
|
- (bal) Privsep user creation support in Solaris buildpkg.sh by
|
|
dtucker@zip.com.au
|
|
|
|
20020714
|
|
- (tim) [Makefile.in] replace "id sshd" with "sshd -t"
|
|
- (bal/tim) [acconfig.h configure.ac monitor_mm.c servconf.c
|
|
openbsd-compat/Makefile.in] support compression on platforms that
|
|
have no/broken MAP_ANON. Moved code to openbsd-compat/xmmap.c
|
|
Based on patch from nalin@redhat.com of code extracted from Owl's package
|
|
- (tim) [ssh_prng_cmds.in] Bug 323 arp -n flag doesn't exist under Solaris.
|
|
report by chris@by-design.net
|
|
- (tim) [loginrec.c] Bug 347: Fix typo (WTMPX_FILE) report by rodney@bond.net
|
|
- (tim) [loginrec.c] Bug 348: add missing found = 1; to wtmpx_islogin()
|
|
report by rodney@bond.net
|
|
|
|
20020712
|
|
- (tim) [Makefile.in] quiet down install-files: and check-user:
|
|
- (tim) [configure.ac] remove unused filepriv line
|
|
|
|
20020710
|
|
- (tim) [contrib/cygwin/ssh-host-config] explicitely sets the permissions
|
|
on /var/empty to 755 Patch by vinschen@redhat.com
|
|
- (bal) OpenBSD CVS Sync
|
|
- itojun@cvs.openbsd.org 2002/07/09 11:56:50
|
|
[sshconnect.c]
|
|
silently try next address on connect(2). markus ok
|
|
- itojun@cvs.openbsd.org 2002/07/09 11:56:27
|
|
[canohost.c]
|
|
suppress log on reverse lookup failiure, as there's no real value in
|
|
doing so.
|
|
markus ok
|
|
- itojun@cvs.openbsd.org 2002/07/09 12:04:02
|
|
[sshconnect.c]
|
|
ed static function (less warnings)
|
|
- stevesk@cvs.openbsd.org 2002/07/09 17:46:25
|
|
[sshd_config.5]
|
|
clarify no preference ordering in protocol list; ok markus@
|
|
- itojun@cvs.openbsd.org 2002/07/10 10:28:15
|
|
[sshconnect.c]
|
|
bark if all connection attempt fails.
|
|
- deraadt@cvs.openbsd.org 2002/07/10 17:53:54
|
|
[rijndael.c]
|
|
use right sizeof in memcpy; markus ok
|
|
|
|
20020709
|
|
- (bal) NO_IPPORT_RESERVED_CONCEPT used instead of CYGWIN so other platforms
|
|
lacking that concept can share it. Patch by vinschen@redhat.com
|
|
|
|
20020708
|
|
- (tim) [openssh/contrib/solaris/buildpkg.sh] add PKG_INSTALL_ROOT to
|
|
work in a jumpstart environment. patch by kbrint@rufus.net
|
|
- (tim) [Makefile.in] workaround for broken pakadd on some systems.
|
|
- (tim) [configure.ac] fix libc89 utimes test. Mention default path for
|
|
--with-privsep-path=
|
|
|
|
20020707
|
|
- (tim) [Makefile.in] use umask instead of chmod on $(PRIVSEP_PATH)
|
|
- (tim) [acconfig.h configure.ac sshd.c]
|
|
s/BROKEN_FD_PASSING/DISABLE_FD_PASSING/
|
|
- (tim) [contrib/cygwin/ssh-host-config] sshd account creation fixes
|
|
patch from vinschen@redhat.com
|
|
- (bal) [realpath.c] Updated with OpenBSD tree.
|
|
- (bal) OpenBSD CVS Sync
|
|
- deraadt@cvs.openbsd.org 2002/07/04 04:15:33
|
|
[key.c monitor_wrap.c sftp-glob.c ssh-dss.c ssh-rsa.c]
|
|
patch memory leaks; grendel@zeitbombe.org
|
|
- deraadt@cvs.openbsd.org 2002/07/04 08:12:15
|
|
[channels.c packet.c]
|
|
blah blah minor nothing as i read and re-read and re-read...
|
|
- markus@cvs.openbsd.org 2002/07/04 10:41:47
|
|
[key.c monitor_wrap.c ssh-dss.c ssh-rsa.c]
|
|
don't allocate, copy, and discard if there is not interested in the data;
|
|
ok deraadt@
|
|
- deraadt@cvs.openbsd.org 2002/07/06 01:00:49
|
|
[log.c]
|
|
KNF
|
|
- deraadt@cvs.openbsd.org 2002/07/06 01:01:26
|
|
[ssh-keyscan.c]
|
|
KNF, realloc fix, and clean usage
|
|
- stevesk@cvs.openbsd.org 2002/07/06 17:47:58
|
|
[ssh-keyscan.c]
|
|
unused variable
|
|
- (bal) Minor KNF on ssh-keyscan.c
|
|
|
|
20020705
|
|
- (tim) [configure.ac] AIX 4.2.1 has authenticate() in libs.
|
|
Reported by Darren Tucker <dtucker@zip.com.au>
|
|
- (tim) [contrib/cygwin/ssh-host-config] double slash corrction
|
|
from vinschen@redhat.com
|
|
|
|
20020704
|
|
- (bal) Limit data to TTY for AIX only (Newer versions can't handle the
|
|
faster data rate) Bug #124
|
|
- (bal) glob.c defines TILDE and AIX also defines it. #undef it first.
|
|
bug #265
|
|
- (bal) One too many nulls in ports-aix.c
|
|
|
|
20020703
|
|
- (bal) Updated contrib/cygwin/ patch by vinschen@redhat.com
|
|
- (bal) minor correction to utimes() replacement. Patch by
|
|
onoe@sm.sony.co.jp
|
|
- OpenBSD CVS Sync
|
|
- markus@cvs.openbsd.org 2002/06/27 08:49:44
|
|
[dh.c ssh-keyscan.c sshconnect.c]
|
|
more checks for NULL pointers; from grendel@zeitbombe.org; ok deraadt@
|
|
- deraadt@cvs.openbsd.org 2002/06/27 09:08:00
|
|
[monitor.c]
|
|
improve mm_zalloc check; markus ok
|
|
- deraadt@cvs.openbsd.org 2002/06/27 10:35:47
|
|
[auth2-none.c monitor.c sftp-client.c]
|
|
use xfree()
|
|
- stevesk@cvs.openbsd.org 2002/06/27 19:49:08
|
|
[ssh-keyscan.c]
|
|
use convtime(); ok markus@
|
|
- millert@cvs.openbsd.org 2002/06/28 01:49:31
|
|
[monitor_mm.c]
|
|
tree(3) wants an int return value for its compare functions and
|
|
the difference between two pointers is not an int. Just do the
|
|
safest thing and store the result in a long and then return 0,
|
|
-1, or 1 based on that result.
|
|
- deraadt@cvs.openbsd.org 2002/06/28 01:50:37
|
|
[monitor_wrap.c]
|
|
use ssize_t
|
|
- deraadt@cvs.openbsd.org 2002/06/28 10:08:25
|
|
[sshd.c]
|
|
range check -u option at invocation
|
|
- deraadt@cvs.openbsd.org 2002/06/28 23:05:06
|
|
[sshd.c]
|
|
gidset[2] -> gidset[1]; markus ok
|
|
- deraadt@cvs.openbsd.org 2002/06/30 21:54:16
|
|
[auth2.c session.c sshd.c]
|
|
lint asks that we use names that do not overlap
|
|
- deraadt@cvs.openbsd.org 2002/06/30 21:59:45
|
|
[auth-bsdauth.c auth-skey.c auth2-chall.c clientloop.c key.c
|
|
monitor_wrap.c monitor_wrap.h scard.h session.h sftp-glob.c ssh.c
|
|
sshconnect2.c sshd.c]
|
|
minor KNF
|
|
- deraadt@cvs.openbsd.org 2002/07/01 16:15:25
|
|
[msg.c]
|
|
%u
|
|
- markus@cvs.openbsd.org 2002/07/01 19:48:46
|
|
[sshconnect2.c]
|
|
for compression=yes, we fallback to no-compression if the server does
|
|
not support compression, vice versa for compression=no. ok mouring@
|
|
- markus@cvs.openbsd.org 2002/07/03 09:55:38
|
|
[ssh-keysign.c]
|
|
use RSA_blinding_on() for rsa hostkeys (suggested by Bill Sommerfeld)
|
|
in order to avoid a possible Kocher timing attack pointed out by Charles
|
|
Hannum; ok provos@
|
|
- markus@cvs.openbsd.org 2002/07/03 14:21:05
|
|
[ssh-keysign.8 ssh-keysign.c ssh.c ssh_config]
|
|
re-enable ssh-keysign's sbit, but make ssh-keysign read
|
|
/etc/ssh/ssh_config and exit if HostbasedAuthentication is disabled
|
|
globally. based on discussions with deraadt, itojun and sommerfeld;
|
|
ok itojun@
|
|
- (bal) Failed password attempts don't increment counter on AIX. Bug #145
|
|
- (bal) Missed Makefile.in change. keysign needs readconf.o
|
|
- (bal) Clean up aix_usrinfo(). Ignore TTY= period I guess.
|
|
|
|
20020702
|
|
- (djm) Use PAM_MSG_MEMBER for PAM_TEXT_INFO messages, use xmalloc &
|
|
friends consistently. Spotted by Solar Designer <solar@openwall.com>
|
|
|
|
20020629
|
|
- (bal) fix to auth2-pam.c to swap fatal() arguments, A bit of style
|
|
clean up while I'm near it.
|
|
|
|
20020628
|
|
- (stevesk) [sshd_config] PAMAuthenticationViaKbdInt no; commented
|
|
options should contain default value. from solar.
|
|
- (bal) Cygwin uid0 fix by vinschen@redhat.com
|
|
- (bal) s/config.h/includes.h/ in openbsd-compat/ for *.c. Otherwise wise
|
|
have issues of our fixes not propogating right (ie bcopy instead of
|
|
memmove). OK tim
|
|
- (bal) FreeBSD needs <sys/types.h> to detect if mmap() is supported.
|
|
Bug #303
|
|
|
|
20020627
|
|
- OpenBSD CVS Sync
|
|
- deraadt@cvs.openbsd.org 2002/06/26 14:49:36
|
|
[monitor.c]
|
|
correct %u
|
|
- deraadt@cvs.openbsd.org 2002/06/26 14:50:04
|
|
[monitor_fdpass.c]
|
|
use ssize_t for recvmsg() and sendmsg() return
|
|
- markus@cvs.openbsd.org 2002/06/26 14:51:33
|
|
[ssh-add.c]
|
|
fix exit code for -X/-x
|
|
- deraadt@cvs.openbsd.org 2002/06/26 15:00:32
|
|
[monitor_wrap.c]
|
|
more %u
|
|
- markus@cvs.openbsd.org 2002/06/26 22:27:32
|
|
[ssh-keysign.c]
|
|
bug #304, xfree(data) called to early; openssh@sigint.cs.purdue.edu
|
|
|
|
20020626
|
|
- (stevesk) [monitor.c] remove duplicate proto15 dispatch entry for PAM
|
|
- (bal) OpenBSD CVS Sync
|
|
- markus@cvs.openbsd.org 2002/06/23 21:34:07
|
|
[channels.c]
|
|
tcode is u_int
|
|
- markus@cvs.openbsd.org 2002/06/24 13:12:23
|
|
[ssh-agent.1]
|
|
the socket name contains ssh-agent's ppid; via mpech@ from form@
|
|
- markus@cvs.openbsd.org 2002/06/24 14:33:27
|
|
[channels.c channels.h clientloop.c serverloop.c]
|
|
move channel counter to u_int
|
|
- markus@cvs.openbsd.org 2002/06/24 14:55:38
|
|
[authfile.c kex.c ssh-agent.c]
|
|
cat to (void) when output from buffer_get_X is ignored
|
|
- itojun@cvs.openbsd.org 2002/06/24 15:49:22
|
|
[msg.c]
|
|
printf type pedant
|
|
- deraadt@cvs.openbsd.org 2002/06/24 17:57:20
|
|
[sftp-server.c sshpty.c]
|
|
explicit (u_int) for uid and gid
|
|
- markus@cvs.openbsd.org 2002/06/25 16:22:42
|
|
[authfd.c]
|
|
unnecessary cast
|
|
- markus@cvs.openbsd.org 2002/06/25 18:51:04
|
|
[sshd.c]
|
|
lightweight do_setusercontext after chroot()
|
|
- (bal) Updated AIX package build. Patch by dtucker@zip.com.au
|
|
- (tim) [Makefile.in] fix test on installing ssh-rand-helper.8
|
|
- (bal) added back in error check for mmap(). I screwed up, Pointed
|
|
out by stevesk@
|
|
- (tim) [README.privsep] UnixWare tip no longer needed.
|
|
- (bal) fixed NeXTStep missing munmap() issue. It defines HAVE_MMAP,
|
|
but it all damned lies.
|
|
- (stevesk) [README.privsep] more for sshd pseudo-account.
|
|
- (tim) [contrib/caldera/openssh.spec] add support for privsep
|
|
- (djm) setlogin needs pgid==pid on BSD/OS; from itojun@
|
|
- (djm) OpenBSD CVS Sync
|
|
- markus@cvs.openbsd.org 2002/06/26 08:53:12
|
|
[bufaux.c]
|
|
limit size of BNs to 8KB; ok provos/deraadt
|
|
- markus@cvs.openbsd.org 2002/06/26 08:54:18
|
|
[buffer.c]
|
|
limit append to 1MB and buffers to 10MB
|
|
- markus@cvs.openbsd.org 2002/06/26 08:55:02
|
|
[channels.c]
|
|
limit # of channels to 10000
|
|
- markus@cvs.openbsd.org 2002/06/26 08:58:26
|
|
[session.c]
|
|
limit # of env vars to 1000; ok deraadt/djm
|
|
- deraadt@cvs.openbsd.org 2002/06/26 13:20:57
|
|
[monitor.c]
|
|
be careful in mm_zalloc
|
|
- deraadt@cvs.openbsd.org 2002/06/26 13:49:26
|
|
[session.c]
|
|
disclose less information from environment files; based on input
|
|
from djm, and dschultz@uclink.Berkeley.EDU
|
|
- markus@cvs.openbsd.org 2002/06/26 13:55:37
|
|
[auth2-chall.c]
|
|
make sure # of response matches # of queries, fixes int overflow;
|
|
from ISS
|
|
- markus@cvs.openbsd.org 2002/06/26 13:56:27
|
|
[version.h]
|
|
3.4
|
|
- (djm) Require krb5 devel for RPM build w/ KrbV
|
|
- (djm) Improve PAMAuthenticationViaKbdInt text from Nalin Dahyabhai
|
|
<nalin@redhat.com>
|
|
- (djm) Update spec files for release
|
|
- (djm) Fix int overflow in auth2-pam.c, similar to one discovered by ISS
|
|
- (djm) Release 3.4p1
|
|
- (tim) [contrib/caldera/openssh.spec] remove 2 configure options I put in
|
|
by mistake
|
|
|
|
20020625
|
|
- (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh
|
|
- (stevesk) [README.privsep] minor updates
|
|
- (djm) Create privsep directory and warn if privsep user is missing
|
|
during make install
|
|
- (bal) Started list of PrivSep issues in TODO
|
|
- (bal) if mmap() is substandard, don't allow compression on server side.
|
|
Post 'event' we will add more options.
|
|
- (tim) [contrib/caldera/openssh.spec] Sync with Caldera
|
|
- (bal) moved aix_usrinfo() and noted not setting real TTY. Patch by
|
|
dtucker@zip.com.au
|
|
- (tim) [acconfig.h configure.ac sshd.c] BROKEN_FD_PASSING fix from Markus
|
|
for Cygwin, Cray, & SCO
|
|
|
|
20020624
|
|
- OpenBSD CVS Sync
|
|
- deraadt@cvs.openbsd.org 2002/06/23 03:25:50
|
|
[tildexpand.c]
|
|
KNF
|
|
- deraadt@cvs.openbsd.org 2002/06/23 03:26:19
|
|
[cipher.c key.c]
|
|
KNF
|
|
- deraadt@cvs.openbsd.org 2002/06/23 03:30:58
|
|
[scard.c ssh-dss.c ssh-rsa.c sshconnect.c sshconnect2.c sshd.c sshlogin.c
|
|
sshpty.c]
|
|
various KNF and %d for unsigned
|
|
- deraadt@cvs.openbsd.org 2002/06/23 09:30:14
|
|
[sftp-client.c sftp-client.h sftp-common.c sftp-int.c sftp-server.c
|
|
sftp.c]
|
|
bunch of u_int vs int stuff
|
|
- deraadt@cvs.openbsd.org 2002/06/23 09:39:55
|
|
[ssh-keygen.c]
|
|
u_int stuff
|
|
- deraadt@cvs.openbsd.org 2002/06/23 09:46:51
|
|
[bufaux.c servconf.c]
|
|
minor KNF. things the fingers do while you read
|
|
- deraadt@cvs.openbsd.org 2002/06/23 10:29:52
|
|
[ssh-agent.c sshd.c]
|
|
some minor KNF and %u
|
|
- deraadt@cvs.openbsd.org 2002/06/23 20:39:45
|
|
[session.c]
|
|
compression_level is u_int
|
|
- deraadt@cvs.openbsd.org 2002/06/23 21:06:13
|
|
[sshpty.c]
|
|
KNF
|
|
- deraadt@cvs.openbsd.org 2002/06/23 21:06:41
|
|
[channels.c channels.h session.c session.h]
|
|
display, screen, row, col, xpixel, ypixel are u_int; markus ok
|
|
- deraadt@cvs.openbsd.org 2002/06/23 21:10:02
|
|
[packet.c]
|
|
packet_get_int() returns unsigned for reason & seqnr
|
|
- (bal) Also fixed IPADDR_IN_DISPLAY case where display, screen, row, col,
|
|
xpixel are u_int.
|
|
|
|
|
|
20020623
|
|
- (stevesk) [configure.ac] bug #255 LOGIN_NEEDS_UTMPX for AIX.
|
|
- (bal) removed GNUism for getops in ssh-agent since glibc lacks optreset.
|
|
- (bal) add extern char *getopt. Based on report by dtucker@zip.com.au
|
|
- OpenBSD CVS Sync
|
|
- stevesk@cvs.openbsd.org 2002/06/22 02:00:29
|
|
[ssh.h]
|
|
correct comment
|
|
- stevesk@cvs.openbsd.org 2002/06/22 02:40:23
|
|
[ssh.1]
|
|
section 5 not 4 for ssh_config
|
|
- naddy@cvs.openbsd.org 2002/06/22 11:51:39
|
|
[ssh.1]
|
|
typo
|
|
- stevesk@cvs.openbsd.org 2002/06/22 16:32:54
|
|
[sshd.8]
|
|
add /var/empty in FILES section
|
|
- stevesk@cvs.openbsd.org 2002/06/22 16:40:19
|
|
[sshd.c]
|
|
check /var/empty owner mode; ok provos@
|
|
- stevesk@cvs.openbsd.org 2002/06/22 16:41:57
|
|
[scp.1]
|
|
typo
|
|
- stevesk@cvs.openbsd.org 2002/06/22 16:45:29
|
|
[ssh-agent.1 sshd.8 sshd_config.5]
|
|
use process ID vs. pid/PID/process identifier
|
|
- stevesk@cvs.openbsd.org 2002/06/22 20:05:27
|
|
[sshd.c]
|
|
don't call setsid() if debugging or run from inetd; no "Operation not
|
|
permitted" errors now; ok millert@ markus@
|
|
- stevesk@cvs.openbsd.org 2002/06/22 23:09:51
|
|
[monitor.c]
|
|
save auth method before monitor_reset_key_state(); bugzilla bug #284;
|
|
ok provos@
|
|
|
|
$Id: ChangeLog,v 1.2648 2003/04/01 11:47:16 djm Exp $
|