0a9a4072ef
- must require ncurses-devel for libedit
2007-11-20 18:26:30 +00:00
b1ffa00b4c
- version bump
2007-11-20 15:04:37 +00:00
8b8c4dc83c
- do not copy /etc/localtime into the chroot as it is not necessary anymore
...
(#193184 )
- call setkeycreatecon when selinux context is established
- test for NULL privk when freeing key (#391871 ) - patch by Pierre Ossman
2007-11-20 14:53:45 +00:00
95be083504
- revert default window size adjustments ( #286181 )
2007-09-17 21:33:02 +00:00
c9833c96a4
- upgrade to latest upstream
...
- use libedit in sftp (#203009 )
- fixed audit log injection problem (CVE-2007-3102)
2007-09-06 19:49:16 +00:00
f370730d3b
- fix sftp client problems on write error ( #247802 )
...
- allow disabling autocreation of server keys (#235466 )
2007-08-09 18:33:41 +00:00
fc2f31df03
- oops committed testing only change
2007-06-20 19:33:53 +00:00
0092bbd526
- add buildrequires nss-devel to build with the nss-keys patch
2007-06-20 19:11:49 +00:00
c3274ccb32
- experimental NSS keys support
...
- correctly setup context when empty level requested (#234951 )
2007-06-20 17:47:18 +00:00
7210c0162a
- mls level check must be done with default role same as requested
2007-03-20 09:13:40 +00:00
b40baab181
- make profile.d/gnome-ssh-askpass.* regular files ( #226218 )
2007-03-19 11:57:36 +00:00
546fdd9f47
- reject connection if requested mls range is not obtained ( #229278 )
2007-03-01 08:28:22 +00:00
9d725bd1ab
- improve Buildroot
...
- remove duplicate /etc/ssh from files
2007-02-22 13:00:51 +00:00
c2b35d09c0
- support mls on labeled networks ( #220487 )
...
- support mls level selection on unlabeled networks
- allow / in usernames in scp (only beginning /, ./, and ../ is special)
2007-01-16 20:58:00 +00:00
45f17da853
- buildrequire tcp_wrappers-devel
2006-12-21 13:59:55 +00:00
ad07b998ed
- update to 4.5p1 ( #212606 )
2006-12-21 13:42:47 +00:00
914284ff3f
- fix gssapi with DNS loadbalanced clusters ( #216857 )
2006-11-30 10:50:12 +00:00
d63dc67db7
- improved pam_session patch so it doesn't regress, the patch is necessary
...
for the pam_session_close to be called correctly as uid 0
2006-11-28 21:14:50 +00:00
ad61b116d1
- CVE-2006-5794 - properly detect failed key verify in monitor ( #214641 )
2006-11-10 10:00:04 +00:00
19675afc7c
- merge sshd initscript patches
...
- kill all ssh sessions when stop is called in halt or reboot runlevel
- remove -TERM option from killproc so we don't race on sshd restart
2006-11-02 13:33:37 +00:00
7114c4238b
- improve gssapi-no-spnego patch ( #208102 )
...
- CVE-2006-4924 - prevent DoS on deattack detector (#207957 )
- CVE-2006-5051 - don't call cleanups from signal handler (#208459 )
2006-10-02 17:35:50 +00:00
ac4818c499
- don't report duplicate syslog messages, use correct local time ( #189158 )
...
- don't allow spnego as gssapi mechanism (from upstream)
- fixed memleaks found by Coverity (from upstream)
- allow ip options except source routing (#202856 ) (patch by HP)
2006-08-23 21:06:38 +00:00
c12d6ba86c
- drop the pam-session patch from the previous build ( #201341 )
...
- don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594 )
2006-08-08 11:58:33 +00:00
762e407bd5
- dropped old ssh obsoletes
...
- call the pam_session_open/close from the monitor when privsep is enabled
so it is always called as root (patch by Darren Tucker)
2006-07-20 11:06:42 +00:00
ef32423955
- improve selinux patch (by Jan Kiszka)
...
- upstream patch for buffer append space error (#191940 )
- fixed typo in configure.ac (#198986 )
- added pam_keyinit to pam configuration (#198628 )
- improved error message when askpass dialog cannot grab keyboard input
(#198332 )
- buildrequires xauth instead of xorg-x11-xauth
- fixed a few rpmlint warnings
2006-07-17 14:09:15 +00:00
d446e97b50
bumped for rebuild
2006-07-12 07:35:41 +00:00
7e1c558992
- don't request pseudoterminal allocation if stdin is not tty ( #188983 )
2006-04-14 08:26:10 +00:00
5f29aca399
- allow access if audit is not compiled in kernel ( #183243 )
2006-03-02 21:37:28 +00:00
e01ed66930
- enable the subprocess in chroot to send messages to system log
...
- sshd should prevent login if audit call fails
2006-02-24 14:07:41 +00:00
b5e849f024
- print error from scp if not remote (patch by Bjorn Augustsson #178923 )
2006-02-21 16:00:42 +00:00
f16d34eebb
- new version
2006-02-13 14:11:41 +00:00
3de0ff3efe
bump for bug in double-long on ppc(64)
2006-02-11 04:53:48 +00:00
f223ebd938
- fixed another place where syslog was called in signal handler
...
- pass locale environment variables to server, accept them there (#179851 )
2006-02-06 20:16:03 +00:00
fd638ab458
- new version, dropped obsolete patches
2006-02-01 16:26:13 +00:00
6b14a037c1
- get rid of the .1 in release
2005-12-20 14:50:27 +00:00
bb93ea2b3c
- hopefully make the askpass dialog less confusing ( #174765 )
2005-12-20 14:44:46 +00:00
6e3ae48bee
gcc update bump
2005-12-09 22:42:35 +00:00
09d7e68ab5
- drop x11-ssh-askpass from the package
...
- drop old build_6x ifs from spec file
- improve gnome-ssh-askpass so it doesn't reveal number of passphrase
characters to person looking at the display
- less hackish fix for the __USE_GNU problem
2005-11-22 16:48:57 +00:00
db25651586
remove now-obsolete builddep on xauth
2005-11-18 17:12:23 +00:00
3ef0dd1d9a
actually bump the release number
2005-11-18 17:05:07 +00:00
05c945b8c1
- work around gccmakedep not being there by fooling the build machinery
...
into using makedepend (which is there) instead
2005-11-18 17:03:02 +00:00
0e58628723
- buildreq audit-libs-devel
...
- buildreq automake for aclocal
- buildreq imake for xmkmf
- -D_GNU_SOURCE in flags in order to get it to build Ugly hack to
workaround openssh defining __USE_GNU which is not allowed and causes
problems according to Ulrich Drepper fix this the correct way after
FC5test1
https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=173568 Note that it
seems we are unable to rebuild openssh at this time because gccmakedep
seems to be missing from modular X packages.
2005-11-18 04:37:53 +00:00
19e22ad819
- xorg-x11-devel -> libXt-devel
...
- rebuild for new xauth location so X forwarding works
2005-11-17 20:02:37 +00:00
d40b8ce60d
rebuild to pick up new xauth location so X forwarding works
2005-11-17 19:47:35 +00:00
c799b385d1
xfree86-devel is gone
2005-11-10 00:12:18 +00:00
35e1e0c440
- rebuild against new openssl
2005-11-10 00:10:18 +00:00
fc72c21070
- put back the possibility to skip SELinux patch
...
- add patch for user login auditing by Steve Grubb
2005-10-28 16:02:53 +00:00
5312560fd5
Update selinux patch to use rolelevel call
2005-10-18 20:57:59 +00:00
0e07edf81f
- Update selinux patch to use getseuserbyname
2005-10-13 21:14:36 +00:00
092218f61b
- typo
2005-10-07 12:52:51 +00:00
Tomáš Mráz
Jesse Keating
Nalin Dahyabhai
Warren Togami
Jeremy Katz
Daniel J Walsh