2016-03-05 12:29:49 by Jonathan Perkin | Files touched by this commit (1813) |
Log message:
Bump PKGREVISION for security/openssl ABI bump.
|
2016-02-26 22:06:38 by Tim Zingelman | Files touched by this commit (3) |
Log message:
Fix for CVE-2016-1907
The ssh_packet_read_poll2 function in packet.c allows remote attackers to
cause a denial of service.
|
2016-02-26 10:41:07 by Jonathan Perkin | Files touched by this commit (32) |
Log message:
Use OPSYSVARS.
|
2016-01-18 13:53:26 by Jonathan Perkin | Files touched by this commit (29) |
Log message:
Explicitly disable roaming, as per CVE-2016-0777 and CVE-2016-0778.
Fix patch dates and offsets while here. Bump PKGREVISION.
|
2015-11-11 12:40:06 by Sevan Janiyan | Files touched by this commit (2) |
Log message:
Remove the check for the presence of ssh_host_key & the command to generate it,
if ssh_host_key doesn't exist.
RSA1 support is dead and doesn't exist in the package we generate, hence,
regeneration of the key is executed everytime sshd is started/restarted.
Bump PKGREVISION
Reviewed by wiz@
|
2015-09-03 23:05:24 by Sevan Janiyan | Files touched by this commit (1) |
Log message:
Mark package as broken for OpenBSD, the portable distribution is not intended
for use on OpenBSD, there is a separate release for that.
Reviewed by wiz@
|
2015-08-22 07:17:22 by Takahiro Kambe | Files touched by this commit (2) |
Log message:
Revive hpn-patch patch although not yet tested well.
|
2015-08-21 10:12:09 by Thomas Klausner | Files touched by this commit (3) |
Log message:
Update to 7.1p1:
Changes since OpenSSH 7.0
=========================
This is a bugfix release.
Security
--------
* sshd(8): OpenSSH 7.0 contained a logic error in PermitRootLogin=
prohibit-password/without-password that could, depending on
compile-time configuration, permit password authentication to
root while preventing other forms of authentication. This problem
was reported by Mantas Mikulenas.
Bugfixes
--------
* ssh(1), sshd(8): add compatability workarounds for FuTTY
* ssh(1), sshd(8): refine compatability workarounds for WinSCP
* Fix a number of memory faults (double-free, free of uninitialised
memory, etc) in ssh(1) and ssh-keygen(1). Reported by Mateusz
Kocielski.
|
2015-08-14 10:57:00 by Jonathan Perkin | Files touched by this commit (11) |
Log message:
Fix a bug introduced 9 years ago in patch-sshd.c which has meant that
privilege separation has been disabled all that time. The logic was changed
such that it was only enabled on Interix, instead of only being disabled on
Interix as originally intended.
While here, pull in patches from MacPorts to enable privsep on Darwin.
Bump PKGREVISION.
|
2015-07-30 05:20:36 by Takahiro Kambe | Files touched by this commit (3) |
Log message:
Add fix for CVE-2015-5600 from FreeBSD via NetBSD base.
Bump PKGREVISION.
|