Path to this page:
Subject: CVS commit: [pkgsrc-2015Q2] pkgsrc/security/openssh
From: Matthias Scheler
Date: 2015-08-24 21:06:40
Message id: 20150824190640.BC05198@cvs.netbsd.org
Log Message:
Pullup ticket #4796 - requested by wiz
security/openssh: security update
Revisions pulled up:
- security/openssh/Makefile patch
- security/openssh/PLIST patch
- security/openssh/distinfo patch
- security/openssh/files/org.openssh.sshd.sb.in patch
- security/openssh/patches/patch-auth2-chall.c patch
- security/openssh/patches/patch-auth2.c patch
- security/openssh/patches/patch-loginrec.c patch
- security/openssh/patches/patch-openbsd-compat_bsd-openpty.c patch
- security/openssh/patches/patch-sandbox-darwin.c patch
- security/openssh/patches/patch-sftp-common.c patch
- security/openssh/patches/patch-sshd.c patch
- security/openssh/patches/patch-uidswap.c patch
---
Module Name: pkgsrc
Committed By: wiz
Date: Fri Aug 21 08:12:09 UTC 2015
Modified Files:
pkgsrc/security/openssh: Makefile distinfo
Removed Files:
pkgsrc/security/openssh/patches: patch-auth2-chall.c
Log Message:
Update to 7.1p1:
Changes since OpenSSH 7.0
=========================
This is a bugfix release.
Security
--------
* sshd(8): OpenSSH 7.0 contained a logic error in PermitRootLogin=
prohibit-password/without-password that could, depending on
compile-time configuration, permit password authentication to
root while preventing other forms of authentication. This problem
was reported by Mantas Mikulenas.
Bugfixes
--------
* ssh(1), sshd(8): add compatability workarounds for FuTTY
* ssh(1), sshd(8): refine compatability workarounds for WinSCP
* Fix a number of memory faults (double-free, free of uninitialised
memory, etc) in ssh(1) and ssh-keygen(1). Reported by Mateusz
Kocielski.
Files: