Jakub Jelen
|
4776fad91e
|
Fix several vulnerabilities published with new openssh-7.0, namely:
Incorrectly set TTYs to be world-writable (#1252861)
https://anongit.mindrot.org/openssh.git/commit/?id=6f941396b6835ad18018845f515b0c4fe20be21a
Privilege separation weakness related to PAM support (#1252844)
https://anongit.mindrot.org/openssh.git/commit/?id=d4697fe9a28dab7255c60433e4dd23cf7fce8a8b
Use-after-free bug related to PAM support (#1252852)
https://anongit.mindrot.org/openssh.git/commit/?id=5e75f5198769056089fb06c4d738ab0e5abc66f7
|
2015-08-14 12:49:23 +02:00 |
|
Jakub Jelen
|
405790ef61
|
Fix pam_ssh_agent_auth after rebase (#1251777)
|
2015-08-11 17:58:03 +02:00 |
|
Jakub Jelen
|
1d50678457
|
Remove obsolete triggerruns for migration to systemd
- overlapping versions are not supported by current rpm
|
2015-07-28 13:08:55 +02:00 |
|
Jakub Jelen
|
6286d6a8e6
|
6.9p1-4 + 0.9.3-6
|
2015-07-28 11:24:35 +02:00 |
|
Jakub Jelen
|
67938e0c00
|
Handle terminal control characters in scp progressmeter (#1247204)
|
2015-07-28 11:23:51 +02:00 |
|
Jakub Jelen
|
83bfb1fce5
|
6.9p1-3 + 0.9.3-6
|
2015-07-23 11:12:19 +02:00 |
|
Jakub Jelen
|
c6d2eca7de
|
only query each keyboard-interactive device once (#1245971)
Upstream commit
https://anongit.mindrot.org/openssh.git/commit/?id=5b64f85bb811246c59ebab70aed331f26ba37b18
|
2015-07-23 11:06:12 +02:00 |
|
Jakub Jelen
|
ca62b6133e
|
6.9p1-2 + 0.9.3-6
|
2015-07-15 09:44:37 +02:00 |
|
Jakub Jelen
|
6e9574d7ec
|
Fix race condition with auditing messages answers (#1242682)
|
2015-07-15 08:35:18 +02:00 |
|
Jakub Jelen
|
a4d9cd5694
|
Patch name, formating
|
2015-07-08 12:24:34 +02:00 |
|
Jakub Jelen
|
58ba50440e
|
Allow building seccomp filters also for s390(x) architectures (#1195065)
|
2015-07-02 17:10:58 +02:00 |
|
Jakub Jelen
|
274e22c863
|
Forgotten sources
|
2015-07-01 17:54:29 +02:00 |
|
Jakub Jelen
|
187a349ee6
|
6.9p1-1 + 0.9.3-6
|
2015-07-01 15:51:20 +02:00 |
|
Jakub Jelen
|
5de6c89ff2
|
Correctly revert "PermitRootLogin no" option from upstream sources
|
2015-07-01 15:51:20 +02:00 |
|
Jakub Jelen
|
535d341e70
|
rebase to new upstream release 6.9
|
2015-07-01 15:51:01 +02:00 |
|
Jakub Jelen
|
21bee694ac
|
Increase limitation number of files which can be listed using glob in sftp
|
2015-06-25 16:10:55 +02:00 |
|
Jakub Jelen
|
f3002bfb7b
|
6.8p1-9 + 0.9.3-5
|
2015-06-24 10:49:08 +02:00 |
|
Jakub Jelen
|
252221e6a1
|
Allow socketcall(SYS_SHUTDOWN) for net_child on ix86 architecture
|
2015-06-24 10:48:38 +02:00 |
|
Dennis Gilmore
|
b59dd83265
|
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
|
2015-06-18 00:06:18 +00:00 |
|
Jakub Jelen
|
5aa47ae6f4
|
6.8p1-8 + 0.9.3-5
|
2015-06-08 09:06:12 +02:00 |
|
Jakub Jelen
|
7fa5057af5
|
Return stat syscall to seccomp filter, since it is not yet completely legacy (#1228323)
* problems occured with gssapi, which is trying to touch some libraries
|
2015-06-08 09:04:48 +02:00 |
|
Jakub Jelen
|
f049b3b1ad
|
6.8p1-7 + 0.9.3-5
|
2015-06-03 07:54:20 +02:00 |
|
Jakub Jelen
|
73d45fa321
|
Correct handle pam_ssh_agent_auth memory, buffers and variable sizes, which caused segfaults (#1225106)
|
2015-06-02 18:56:57 +02:00 |
|
Jakub Jelen
|
8a10dcb363
|
6.8p1-6 + 0.9.3-5
|
2015-05-28 14:02:26 +02:00 |
|
Jakub Jelen
|
09ca6ef2e6
|
Provide LDIF version of LPK schema
|
2015-05-28 13:51:58 +02:00 |
|
Jakub Jelen
|
474a38f916
|
Document required selinux boolean for working ssh-ldap-helper
|
2015-05-28 13:48:02 +02:00 |
|
Jakub Jelen
|
df3679f973
|
Add missing configuration values to ssh man page
|
2015-05-28 13:43:22 +02:00 |
|
Jakub Jelen
|
0a076e7e9e
|
Add missing Banner in sshd -T output
|
2015-05-28 13:39:34 +02:00 |
|
Jakub Jelen
|
8244d5a508
|
Fix upstream memory problems
|
2015-05-27 16:16:41 +02:00 |
|
Jakub Jelen
|
637556d934
|
Resolve problem with pam_ssh_agent_auth after rebase (#1225106)
* authfd internals changed in upstream commit 141efe49542f7156cdbc2e4cd0a041d8b1aab622
* Reintroduced missing structure AuthenticationConnection
* inspired by ssh-add.c
|
2015-05-27 15:08:37 +02:00 |
|
Jakub Jelen
|
3e3570ad64
|
ssh-copy-id: tcsh doesnt work with multiline strings so we will make it uggly one-line
|
2015-05-27 12:05:49 +02:00 |
|
Jakub Jelen
|
775e1b20e6
|
6.8p1-5 + 0.9.3-5
|
2015-04-20 17:28:43 +02:00 |
|
Jakub Jelen
|
054365b28e
|
Fix segfault on daemon exit caused by API change (#1213423)
|
2015-04-20 17:27:34 +02:00 |
|
Jakub Jelen
|
c5163162d3
|
6.8p1-4 + 0.9.3-5
|
2015-04-02 17:51:58 +02:00 |
|
Jakub Jelen
|
f78ec07f4b
|
Fix audit_end_command to restore ControlPersist function (#1203900)
|
2015-04-02 17:51:47 +02:00 |
|
Jakub Jelen
|
c028ac51a4
|
6.8p1-3 + 0.9.3-5
|
2015-03-31 17:24:34 +02:00 |
|
Jakub Jelen
|
968dbc27cd
|
Add pam_namespace to sshd pam stack (based on #1125110)
|
2015-03-31 17:24:34 +02:00 |
|
Jakub Jelen
|
d1bd586e93
|
Revert "Fix buffer handling in GSS after rebase" (#1207719)
This reverts commit d94cf27456 .
|
2015-03-31 17:24:28 +02:00 |
|
Jakub Jelen
|
576cdf728b
|
Fix memory leak from upstream
|
2015-03-30 11:48:11 +02:00 |
|
Jakub Jelen
|
b8a0f7a5ea
|
Fix handling SELinux context in MLS systems
|
2015-03-30 11:48:11 +02:00 |
|
Jakub Jelen
|
23bc31b25a
|
Remove krb5-config workaround for #1203900
|
2015-03-30 11:48:11 +02:00 |
|
Jakub Jelen
|
af7be11f1d
|
Regression: solve sshd segfaults if other instance already running
|
2015-03-30 11:48:11 +02:00 |
|
Jakub Jelen
|
e5b15a7419
|
6.8p1-2 + 0.9.3-5
|
2015-03-26 14:20:31 +01:00 |
|
Jakub Jelen
|
d94cf27456
|
Fix buffer handling in GSS after rebase
|
2015-03-26 14:20:31 +01:00 |
|
Jakub Jelen
|
07756a2278
|
Fix reintroduced upstrem bug #1878
|
2015-03-26 14:20:31 +01:00 |
|
Jakub Jelen
|
12cf3e4d35
|
Update audit patch after rebase with more sanity checks
|
2015-03-26 14:20:31 +01:00 |
|
Jakub Jelen
|
aa8fb3e1cc
|
rebuild 6.8p1-1.1 + 0.9.3-5
|
2015-03-24 11:04:38 +01:00 |
|
Jakub Jelen
|
1330ede7ff
|
rebuild 6.8p1-1.1 + 0.9.3-5
|
2015-03-24 11:00:15 +01:00 |
|
Jakub Jelen
|
e3688f35e1
|
release 6.8p1-1 + 0.9.3-5
|
2015-03-24 10:40:21 +01:00 |
|
Jakub Jelen
|
d276698802
|
Workaround krb5-config bug (#1204646)
|
2015-03-24 10:39:01 +01:00 |
|