blob: 0fc1191bf144e1a8dd56210d1009b1ff137072ff [file] [log] [blame]
Damien Miller07759762003-02-24 11:48:22 +1100120030224
2 - (djm) Tweak gnome-ssh-askpass2:
3 - Retry kb and mouse grab a couple of times, so passphrase dialog doesn't
4 immediately fail if you are doing something else when it appears (e.g.
5 dragging a window)
6 - Perform server grab after we have the keyboard and/or pointer to avoid
7 races.
Damien Miller180fc5b2003-02-24 11:50:18 +11008 - (djm) OpenBSD CVS Sync
9 - markus@cvs.openbsd.org 2003/01/27 17:06:31
10 [sshd.c]
11 more specific error message when /var/empty has wrong permissions;
12 bug #46, map@appgate.com; ok henning@, provos@, stevesk@
Damien Miller8ee66a22003-02-24 11:50:50 +110013 - markus@cvs.openbsd.org 2003/01/28 16:11:52
14 [scp.1]
15 document -l; pekkas@netcore.fi
Damien Miller2eb26e82003-02-24 11:51:32 +110016 - stevesk@cvs.openbsd.org 2003/01/28 17:24:51
17 [scp.1]
18 remove example not pertinent with -1 addition; ok markus@
Damien Millerffadc582003-02-24 11:52:26 +110019 - jmc@cvs.openbsd.org 2003/01/31 21:54:40
20 [sshd.8]
21 typos; sshd(8): help and ok markus@
22 help and ok millert@
Damien Millereeeeb352003-02-24 11:52:58 +110023 - markus@cvs.openbsd.org 2003/02/02 10:51:13
24 [scp.c]
25 call okname() only when using system(3) for remote-remote copy;
26 fixes bugs #483, #472; ok deraadt@, mouring@
Damien Millerbabb47a2003-02-24 11:53:32 +110027 - markus@cvs.openbsd.org 2003/02/02 10:56:08
28 [kex.c]
29 add support for key exchange guesses; based on work by
30 avraham.fraenkel@commatch.com; fixes bug #148; ok deraadt@
Damien Millere8cea9e2003-02-24 11:54:10 +110031 - markus@cvs.openbsd.org 2003/02/03 08:56:16
32 [sshpty.c]
33 don't call error() for readonly /dev; from soekris list; ok mcbride,
34 henning, deraadt.
Damien Miller386f1f32003-02-24 11:54:57 +110035 - markus@cvs.openbsd.org 2003/02/04 09:32:08
36 [key.c]
37 better debug3 message
Damien Millerb7df3af2003-02-24 11:55:46 +110038 - markus@cvs.openbsd.org 2003/02/04 09:33:22
39 [monitor.c monitor_wrap.c]
40 skey/bsdauth: use 0 to indicate failure instead of -1, because
41 the buffer API only supports unsigned ints.
Damien Miller61f08ac2003-02-24 11:56:27 +110042 - markus@cvs.openbsd.org 2003/02/05 09:02:28
43 [readconf.c]
44 simplify ProxyCommand parsing, remove strcat/xrealloc; ok henning@, djm@
Damien Miller97f39ae2003-02-24 11:57:01 +110045 - markus@cvs.openbsd.org 2003/02/06 09:26:23
46 [session.c]
47 missing call to setproctitle() after authentication; ok provos@
Damien Miller9f1e33a2003-02-24 11:57:32 +110048 - markus@cvs.openbsd.org 2003/02/06 09:27:29
49 [ssh.c ssh_config.5]
50 support 'ProxyCommand none'; bugzilla #433; binder@arago.de; ok djm@
Damien Miller9e51a732003-02-24 11:58:44 +110051 - markus@cvs.openbsd.org 2003/02/06 09:29:18
52 [sftp-server.c]
53 fix races in rename/symlink; from Tony Finch; ok djm@
Damien Miller556f9312003-02-24 11:59:26 +110054 - markus@cvs.openbsd.org 2003/02/06 21:22:43
55 [auth1.c auth2.c]
56 undo broken fix for #387, fixes #486
Damien Miller7b406272003-02-24 12:00:16 +110057 - markus@cvs.openbsd.org 2003/02/10 11:51:47
58 [ssh-add.1]
59 xref sshd_config.5 (not sshd.8); mark@summersault.com; bug #490
Damien Millere8a240f2003-02-24 12:01:40 +110060 - markus@cvs.openbsd.org 2003/02/12 09:33:04
61 [key.c key.h ssh-dss.c ssh-rsa.c]
62 merge ssh-dss.h ssh-rsa.h into key.h; ok deraadt@
Damien Miller1587fb82003-02-24 12:02:12 +110063 - markus@cvs.openbsd.org 2003/02/12 21:39:50
64 [crc32.c crc32.h]
65 replace crc32.c with a BSD licensed version; noted by David Turner
Damien Miller8e7fb332003-02-24 12:03:03 +110066 - markus@cvs.openbsd.org 2003/02/16 17:09:57
67 [kex.c kexdh.c kexgex.c kex.h sshconnect2.c sshd.c ssh-keyscan.c]
68 split kex into client and server code, no need to link
69 server code into the client; ok provos@
Damien Miller06ebedf2003-02-24 12:03:38 +110070 - markus@cvs.openbsd.org 2003/02/16 17:30:33
71 [monitor.c monitor_wrap.c]
72 fix permitrootlogin forced-commands-only for privsep; bux #387;
73 ok provos@
Damien Miller9f82c8f2003-02-24 12:04:33 +110074 - markus@cvs.openbsd.org 2003/02/21 09:05:53
75 [servconf.c]
76 print sshd_config filename in debug2 mode.
Damien Miller54340212003-02-24 12:05:18 +110077 - mpech@cvs.openbsd.org 2003/02/21 10:34:48
78 [auth-krb4.c]
79 ...sizeof(&adat.session) is not good here.
80 henning@, deraadt@, millert@
Damien Millerd1940482003-02-24 12:18:46 +110081 - (djm) Add new object files to Makefile and reorder
Damien Miller30947c72003-02-24 12:35:08 +110082 - (djm) Bug #501: gai_strerror should return char*;
83 fix from dtucker@zip.com.au
Damien Miller1a3ccb02003-02-24 13:04:01 +110084 - (djm) Most of Bug #499: Cygwin compile fixes for new progressmeter;
85 From vinschen@redhat.com
Damien Miller8d8168a2003-02-24 12:55:55 +110086 - (djm) Rest of Bug #499: Import a basename() function from OpenBSD libc
Damien Miller1a3ccb02003-02-24 13:04:01 +110087 - (djm) Bug #494: Allow multiple accounts on Windows 9x/Me;
88 From vinschen@redhat.com
Damien Miller07759762003-02-24 11:48:22 +110089
Damien Millerc8936ac2003-02-11 10:04:03 +11009020030211
91 - (djm) Cygwin needs libcrypt too. Patch from vinschen@redhat.com
92
Damien Miller850b9422003-02-06 10:50:42 +11009320030206
94 - (djm) Teach fake-getaddrinfo to use getservbyname() when provided a
95 string service name. Suggested by markus@, review by itojun@
96
Ben Lindstrom4b0f1ad2003-02-01 04:43:34 +00009720030131
98 - (bal) AIX 4.2.1 lacks nanosleep(). Patch to use nsleep() provided by
99 dtucker@zip.com.au
100
Damien Miller4d9dc1a2003-01-30 10:20:56 +110010120030130
102 - (djm) Unbreak root password auth. Spotted by dtucker@zip.com.au
103
Damien Millercd6853c2003-01-28 11:33:42 +1100104200301028
105 - (djm) Search libposix4 and librt for nanosleep. From dtucker@zip.com.au
106 and openssh-unix-dev@thewrittenword.com
107
Ben Lindstrom6dc562a2003-01-27 21:15:10 +0000108200301027
109 - (bal) Bugzilla 477 patch by wendyp@cray.com. Define TIOCGPGRP for
110 cray. Also removed test for tcgetpgrp in configure.ac since it
111 is no longer used.
112
Damien Miller5a93add2003-01-24 11:34:52 +110011320030124
114 - (djm) OpenBSD CVS Sync
115 - jmc@cvs.openbsd.org 2003/01/23 08:58:47
116 [sshd_config.5]
117 typos; ok millert@
Damien Miller6c711792003-01-24 11:36:23 +1100118 - markus@cvs.openbsd.org 2003/01/23 13:50:27
119 [authfd.c authfd.h readpass.c ssh-add.1 ssh-add.c ssh-agent.c]
120 ssh-add -c, prompt user for confirmation (using ssh-askpass) when
121 private agent key is used; with djm@; test by dugsong@, djm@;
122 ok deraadt@
Damien Millerff74d742003-01-24 11:36:58 +1100123 - markus@cvs.openbsd.org 2003/01/23 14:01:53
124 [scp.c]
125 bandwidth limitation patch (scp -l) from niels@; ok todd@, deraadt@
Damien Miller8e121472003-01-24 11:37:38 +1100126 - markus@cvs.openbsd.org 2003/01/23 14:06:15
127 [scp.1 scp.c]
128 scp -12; Sam Smith and others; ok provos@, deraadt@
Damien Miller3bc0c062003-01-24 11:50:32 +1100129 - (djm) Add TIMEVAL_TO_TIMESPEC macros
Damien Miller5a93add2003-01-24 11:34:52 +1100130
Damien Miller21de87b2003-01-23 17:41:20 +110013120030123
132 - (djm) OpenBSD CVS Sync
133 - djm@cvs.openbsd.org 2003/01/23 00:03:00
134 [auth1.c]
135 Don't log TIS auth response; "get rid of it" - markus@
136
Damien Miller53d81482003-01-22 11:47:19 +110013720030122
138 - (djm) OpenBSD CVS Sync
139 - marc@cvs.openbsd.org 2003/01/21 18:14:36
140 [ssh-agent.1 ssh-agent.c]
141 Add a -t life option to ssh-agent that set the default lifetime.
142 The default can still be overriden by using -t in ssh-add.
143 OK markus@
Damien Miller2101bfc2003-01-22 15:42:26 +1100144 - (djm) Reorganise PAM & SIA password handling to eliminate some common code
Damien Miller8b9cde72003-01-22 17:53:16 +1100145 - (djm) Sync regress with OpenBSD -current
Damien Miller53d81482003-01-22 11:47:19 +1100146
Damien Miller140344b2003-01-20 13:15:10 +110014720030120
148 - (djm) Fix compilation for NetBSD from dtucker@zip.com.au
Tim Rice4ea542b2003-01-19 20:15:13 -0800149 - (tim) [progressmeter.c] make compilers without long long happy.
Tim Rice89fe3f32003-01-19 20:20:24 -0800150 - (tim) [configure.ac] Add -belf to build ELF binaries on OpenServer 5 when
151 using cc. (gcc already did)
Damien Miller140344b2003-01-20 13:15:10 +1100152
Damien Millere443e932003-01-18 16:24:06 +110015320030118
154 - (djm) Revert fix for Bug #442 for now.
155
Damien Miller9715bb12003-01-17 10:31:38 +110015620030117
157 - (djm) Bug #470: Detect strnvis, not strvis in configure.
158 From d_wllms@lanl.gov
159
Damien Millercb3e3c82003-01-16 15:39:13 +110016020030116
161 - (djm) OpenBSD CVS Sync
162 - djm@cvs.openbsd.org 2003/01/16 03:41:55
163 [sftp-int.c]
164 explicitly use first glob result
165
Damien Miller01413192003-01-14 22:22:11 +110016620030114
167 - (djm) OpenBSD CVS Sync
168 - fgsch@cvs.openbsd.org 2003/01/10 23:23:24
169 [sftp-int.c]
170 typo; from Nils Nordman <nino at nforced dot com>.
Damien Miller0946d872003-01-14 22:22:43 +1100171 - markus@cvs.openbsd.org 2003/01/11 18:29:43
172 [log.c]
173 set fatal_cleanups to NULL in fatal_remove_all_cleanups();
174 dtucker@zip.com.au
Damien Miller71a51412003-01-14 22:23:23 +1100175 - markus@cvs.openbsd.org 2003/01/12 16:57:02
176 [progressmeter.c]
177 allow WARNINGS=yes; ok djm@
Damien Millerdc708572003-01-14 22:24:05 +1100178 - djm@cvs.openbsd.org 2003/01/13 11:04:04
179 [sftp-int.c]
180 make cmds[] array static to avoid conflict with BSDI libc.
Damien Miller7a992382003-01-14 22:24:19 +1100181 mindrot bug #466. Fix from mdev@idg.nl; ok markus@
Damien Miller5fa01fd2003-01-14 22:24:47 +1100182 - djm@cvs.openbsd.org 2003/01/14 10:58:00
183 [sftp-client.c sftp-int.c]
184 Don't try to upload or download non-regular files. Report from
185 apoloval@pantuflo.escet.urjc.es; ok markus@
Damien Miller01413192003-01-14 22:22:11 +1100186
18720030113
Damien Millerec201962003-01-13 10:04:58 +1100188 - (djm) Rework openbsd-compat/setproctitle.c a bit: move emulation type
189 detection to configure.ac. Prompted by stevesk@
Damien Miller7d901272003-01-13 16:55:22 +1100190 - (djm) Bug #467: Add a --disable-strip option to turn off stripping of
191 installed binaries. From mdev@idg.nl
Damien Millerec201962003-01-13 10:04:58 +1100192
Damien Millera8ed44b2003-01-10 09:53:12 +110019320030110
194 - (djm) Enable new setproctitle emulation for Linux, AIX and HP/UX. More
195 systems may be added later.
Damien Miller956f3fb2003-01-10 21:40:00 +1100196 - (djm) OpenBSD CVS Sync
197 - djm@cvs.openbsd.org 2003/01/08 23:53:26
198 [sftp.1 sftp.c sftp-int.c sftp-int.h]
199 Cleanup error handling for batchmode
200 Allow blank lines and comments in input
201 Ability to suppress abort on error in batchmode ("-put blah")
202 Fixes mindrot bug #452; markus@ ok
Damien Miller62d57f62003-01-10 21:43:24 +1100203 - fgsch@cvs.openbsd.org 2003/01/10 08:19:07
Damien Miller6fd00e02003-01-10 21:46:02 +1100204 [scp.c sftp.1 sftp.c sftp-client.c sftp-int.c progressmeter.c]
205 [progressmeter.h]
Damien Miller62d57f62003-01-10 21:43:24 +1100206 sftp progress meter support.
207 original diffs by Nils Nordman <nino at nforced dot com> via
208 markus@, merged to -current by me, djm@ ok.
Damien Millera7f3aaa2003-01-10 21:43:58 +1100209 - djm@cvs.openbsd.org 2003/01/10 08:48:15
210 [sftp-client.c]
211 Simplify and avoid redundancy in packet send and receive
212 functions; ok fgs@
Damien Miller86b781c2003-01-10 21:44:48 +1100213 - djm@cvs.openbsd.org 2003/01/10 10:29:35
214 [scp.c]
215 Don't ftruncate after write error, creating sparse files of
216 incorrect length
217 mindrot bug #403, reported by rusr@cup.hp.com; ok markus@
Damien Millerb46b9f32003-01-10 21:45:12 +1100218 - djm@cvs.openbsd.org 2003/01/10 10:32:54
219 [channels.c]
220 hush socket() errors, except last. Fixes mindrot bug #408; ok markus@
Damien Millera8ed44b2003-01-10 09:53:12 +1100221
Damien Miller13dd03a2003-01-08 11:16:48 +110022220030108
223 - (djm) Sync openbsd-compat/ with OpenBSD -current
Damien Millere77c17e2003-01-08 12:37:03 +1100224 - (djm) Avoid redundant xstrdup/xfree in auth2-pam.c. From Solar via markus@
Damien Miller275295e2003-01-08 14:04:09 +1100225 - (djm) OpenBSD CVS Sync
226 - markus@cvs.openbsd.org 2003/01/01 18:08:52
227 [channels.c]
228 move big output buffer messages to debug2
Damien Miller770b3742003-01-08 14:04:53 +1100229 - djm@cvs.openbsd.org 2003/01/06 23:51:22
230 [sftp-client.c]
231 Fix "get -p" download to not add user-write perm. mindrot bug #426
232 reported by gfernandez@livevault.com; ok markus@
Damien Miller63421802003-01-08 14:05:23 +1100233 - fgsch@cvs.openbsd.org 2003/01/07 23:42:54
234 [sftp.1]
235 add version; from Nils Nordman <nino at nforced dot com> via markus@.
236 markus@ ok
Damien Miller2047b3b2003-01-08 23:28:40 +1100237 - (djm) Update README to reflect AIX's status as a well supported platform.
238 From dtucker@zip.com.au
Tim Riced0d7a8b2003-01-08 17:22:59 -0800239 - (tim) [Makefile.in configure.ac] replace fixpath with sed script. Patch
Tim Rice13b2e552003-01-08 20:09:30 -0800240 by Mo DeJong.
Tim Rice458c6bf2003-01-08 20:04:27 -0800241 - (tim) [auth.c] declare today at top of allowed_user() to keep
242 older compilers happy.
Tim Rice13b2e552003-01-08 20:09:30 -0800243 - (tim) [scp.c] make compilers without long long happy.
Damien Miller13dd03a2003-01-08 11:16:48 +1100244
Damien Miller5e4471e2003-01-07 10:51:23 +110024520030107
246 - (djm) Bug #401: Work around Linux breakage with IPv6 mapped addresses.
247 Based on fix from yoshfuji@linux-ipv6.org
Damien Miller48cb8aa2003-01-07 12:19:32 +1100248 - (djm) Bug #442: Check for and deny access to accounts with locked
249 passwords. Patch from dtucker@zip.com.au
Damien Millere8328192003-01-07 15:18:32 +1100250 - (djm) Bug #26: Use local mkstemp() rather than glibc's silly one. Fixes
251 Can't pass KRB4 TGT passing. Fix from: jan.iven@cern.ch
Damien Miller64004b52003-01-07 16:15:20 +1100252 - (djm) Fix Bug #442 for PAM case
Damien Miller7df881d2003-01-07 16:46:58 +1100253 - (djm) Bug #110: bogus error messages in lastlog_get_entry(). Fix based
254 on one by peak@argo.troja.mff.cuni.cz
Damien Millerb93addb2003-01-07 17:04:18 +1100255 - (djm) Bug #111: Run syslog and stderr logging through strnvis to eliminate
256 nasties. Report from peak@argo.troja.mff.cuni.cz
Damien Millerf25c18d2003-01-07 17:38:58 +1100257 - (djm) Bug #178: On AIX /etc/nologin wasnt't shown to users. Fix from
258 Ralf.Wenk@fh-karlsruhe.de and dtucker@zip.com.au
Damien Miller06817f92003-01-07 23:55:59 +1100259 - (djm) Fix my fix of the fix for the Bug #442 for PAM case. Spotted by
260 dtucker@zip.com.au. Reorder for clarity too.
Damien Miller5e4471e2003-01-07 10:51:23 +1100261
Damien Miller8aff5cb2003-01-03 14:34:06 +110026220030103
263 - (djm) Bug #461: ssh-copy-id fails with no arguments. Patch from
264 cjwatson@debian.org
Damien Miller02e16ad2003-01-03 14:42:27 +1100265 - (djm) Bug #460: Filling utmp[x]->ut_addr_v6 if present. Patch from
266 cjwatson@debian.org
Damien Millerdfedbf82003-01-03 14:52:53 +1100267 - (djm) Bug #446: Set LOGIN env var to pw_name on AIX. Patch from
268 mii@ornl.gov
269
Kevin Steves678ee512003-01-01 23:43:55 +000027020030101
271 - (stevesk) [session.c sshlogin.c sshlogin.h] complete portable
272 parts of pass addrlen with sockaddr * fix.
273 from Hajimu UMEMOTO <ume@FreeBSD.org>
274
Ben Lindstrom44adb8f2002-12-23 02:00:23 +000027520021222
276 - (bal) OpenBSD CVS Sync
277 - fgsch@cvs.openbsd.org 2002/11/15 10:03:09
278 [authfile.c]
279 lseek(2) may return -1 when getting the public/private key lenght.
280 Simplify the code and check for errors using fstat(2).
281
282 Problem reported by Mauricio Sanchez, markus@ ok.
Ben Lindstromf49dbff2002-12-23 02:01:55 +0000283 - markus@cvs.openbsd.org 2002/11/18 16:43:44
284 [clientloop.c]
285 don't overwrite SIG{INT,QUIT,TERM} handler if set to SIG_IGN;
286 e.g. if ssh is used for backup; report Joerg Schilling; ok millert@
Ben Lindstrom1f530832002-12-23 02:03:02 +0000287 - markus@cvs.openbsd.org 2002/11/21 22:22:50
288 [dh.c]
289 debug->debug2
Ben Lindstrom064496f2002-12-23 02:04:22 +0000290 - markus@cvs.openbsd.org 2002/11/21 22:45:31
291 [cipher.c kex.c packet.c sshconnect.c sshconnect2.c]
292 debug->debug2, unify debug messages
Ben Lindstrom93576d92002-12-23 02:06:19 +0000293 - deraadt@cvs.openbsd.org 2002/11/21 23:03:51
294 [auth-krb5.c auth1.c hostfile.h monitor_wrap.c sftp-client.c sftp-int.c ssh-add.c ssh-rsa.c
295 sshconnect.c]
296 KNF
Ben Lindstrom40b95032002-12-23 02:53:08 +0000297 - markus@cvs.openbsd.org 2002/11/21 23:04:33
Ben Lindstrom604dc722002-12-23 02:08:57 +0000298 [ssh.c]
299 debug->debug2
Ben Lindstrom40b95032002-12-23 02:53:08 +0000300 - stevesk@cvs.openbsd.org 2002/11/24 21:46:24
Ben Lindstrom2594d9a2002-12-23 02:09:59 +0000301 [ssh-keysign.8]
302 typo: "the the"
Ben Lindstrome7ee7fe2002-12-23 02:11:02 +0000303 - wcobb@cvs.openbsd.org 2002/11/26 00:45:03
304 [scp.c ssh-keygen.c]
305 Remove unnecessary fflush(stderr) calls, stderr is unbuffered by default.
306 ok markus@
Ben Lindstrom40b95032002-12-23 02:53:08 +0000307 - stevesk@cvs.openbsd.org 2002/11/26 02:35:30
Ben Lindstrom9394d2f2002-12-23 02:11:54 +0000308 [ssh-keygen.1]
309 remove outdated statement; ok markus@ deraadt@
Ben Lindstromacaac972002-12-23 02:13:37 +0000310 - stevesk@cvs.openbsd.org 2002/11/26 02:38:54
311 [canohost.c]
312 KNF, comment and error message repair; ok markus@
Ben Lindstromc276c122002-12-23 02:14:51 +0000313 - markus@cvs.openbsd.org 2002/11/27 17:53:35
314 [scp.c sftp.c ssh.c]
315 allow usernames with embedded '@', e.g. scp user@vhost@realhost:file /tmp;
316 http://bugzilla.mindrot.org/show_bug.cgi?id=447; ok mouring@, millert@
Ben Lindstrom611797e2002-12-23 02:15:57 +0000317 - stevesk@cvs.openbsd.org 2002/12/04 04:36:47
318 [session.c]
319 remove xauth entries before add; PR 2994 from janjaap@stack.nl.
320 ok markus@
Ben Lindstrom418e0782002-12-23 02:22:09 +0000321 - markus@cvs.openbsd.org 2002/12/05 11:08:35
322 [scp.c]
323 use roundup() similar to rcp/util.c and avoid problems with strange
324 filesystem block sizes, noted by tjr@freebsd.org; ok djm@
Ben Lindstrom40b95032002-12-23 02:53:08 +0000325 - djm@cvs.openbsd.org 2002/12/06 05:20:02
Ben Lindstromd5767812002-12-23 02:23:37 +0000326 [sftp.1]
327 Fix cut'n'paste error, spotted by matthias.riese@b-novative.de; ok deraadt@
Ben Lindstromb9fa6912002-12-23 02:24:54 +0000328 - millert@cvs.openbsd.org 2002/12/09 16:50:30
329 [ssh.c]
330 Avoid setting optind to 0 as GNU getopt treats that like we do optreset.
331 markus@ OK
Ben Lindstrom46767602002-12-23 02:26:08 +0000332 - markus@cvs.openbsd.org 2002/12/10 08:56:00
333 [session.c]
334 Make sure $SHELL points to the shell from the password file, even if shell
335 is overridden from login.conf; bug#453; semen at online.sinor.ru; ok millert@
Ben Lindstroma7433982002-12-23 02:41:41 +0000336 - markus@cvs.openbsd.org 2002/12/10 19:26:50
337 [packet.c]
338 move tos handling to packet_set_tos; ok provos/henning/deraadt
Ben Lindstromfaa1ea82002-12-23 02:42:52 +0000339 - markus@cvs.openbsd.org 2002/12/10 19:47:14
340 [packet.c]
341 static
Ben Lindstrom1d568f92002-12-23 02:44:36 +0000342 - markus@cvs.openbsd.org 2002/12/13 10:03:15
343 [channels.c misc.c sshconnect2.c]
344 cleanup debug messages, more useful information for the client user.
Ben Lindstrom40b95032002-12-23 02:53:08 +0000345 - markus@cvs.openbsd.org 2002/12/13 15:20:52
346 [scp.c]
347 1) include stalling time in total time
348 2) truncate filenames to 45 instead of 20 characters
349 3) print rate instead of progress bar, no more stars
350 4) scale output to tty width
351 based on a patch from Niels; ok fries@ lebel@ fgs@ millert@
Ben Lindstrom1b96cfb2002-12-23 02:58:17 +0000352 - (bal) [msg.c msg.h scp.c ssh-keysign.c sshconnect2.c] Resync CVS IDs since
353 we already did s/msg_send/ssh_msg_send/
Ben Lindstrom44adb8f2002-12-23 02:00:23 +0000354
Damien Millerab1c12a2002-12-05 20:59:33 +110035520021205
356 - (djm) PERL-free fixpaths from stuge-openssh-unix-dev@cdy.org
357
Tim Rice1c9e6882002-11-22 13:29:01 -080035820021122
359 - (tim) [configure.ac] fix STDPATH test for IRIX. First reported by
360 advax@triumf.ca. This type of solution tested by <herb@sgi.com>
361
Tim Ricebe239642002-11-13 15:55:55 -080036220021113
363 - (tim) [configure.ac] remove unused variables no_libsocket and no_libnsl
364
Tim Rice748fcf92002-11-13 15:50:04 -080036520021111
366 - (tim) [contrib/solaris/opensshd.in] add umask 022 so sshd.pid is
367 not world writable.
368
Ben Lindstrom08513812002-11-09 15:40:34 +000036920021109
370 - (bal) OpenBSD CVS Sync
371 - itojun@cvs.openbsd.org 2002/10/16 14:31:48
372 [sftp-common.c]
373 64bit pedant. %llu is "unsigned long long". markus ok
Ben Lindstrom0cc2a472002-11-09 15:41:39 +0000374 - markus@cvs.openbsd.org 2002/10/23 10:32:13
375 [packet.c]
376 use %u for u_int
Ben Lindstromee844912002-11-09 15:43:23 +0000377 - markus@cvs.openbsd.org 2002/10/23 10:40:16
378 [bufaux.c]
379 %u for u_int
Ben Lindstrom485075e2002-11-09 15:45:12 +0000380 - markus@cvs.openbsd.org 2002/11/04 10:07:53
381 [auth.c]
382 don't compare against pw_home if realpath fails for pw_home (seen
383 on AFS); ok djm@
Ben Lindstrom9bda7ae2002-11-09 15:46:24 +0000384 - markus@cvs.openbsd.org 2002/11/04 10:09:51
385 [packet.c]
386 log before send disconnect; ok djm@
Ben Lindstrom41ee2b02002-11-09 15:47:47 +0000387 - markus@cvs.openbsd.org 2002/11/05 19:45:20
388 [monitor.c]
389 handle overflows for size_t larger than u_int; siw@goneko.de, bug #425
Ben Lindstrom8e879cf2002-11-09 15:48:49 +0000390 - markus@cvs.openbsd.org 2002/11/05 20:10:37
391 [sftp-client.c]
392 typo; GaryF@livevault.com
Ben Lindstromc2faa4a2002-11-09 15:50:03 +0000393 - markus@cvs.openbsd.org 2002/11/07 16:28:47
394 [sshd.c]
395 log to stderr if -ie is given, bug #414, prj@po.cwru.edu
Ben Lindstromb6df73b2002-11-09 15:52:31 +0000396 - markus@cvs.openbsd.org 2002/11/07 22:08:07
397 [readconf.c readconf.h ssh-keysign.8 ssh-keysign.c]
398 we cannot use HostbasedAuthentication for enabling ssh-keysign(8),
399 because HostbasedAuthentication might be enabled based on the
400 target host and ssh-keysign(8) does not know the remote hostname
401 and not trust ssh(1) about the hostname, so we add a new option
402 EnableSSHKeysign; ok djm@, report from zierke@informatik.uni-hamburg.de
Ben Lindstrom007eb912002-11-09 15:54:08 +0000403 - markus@cvs.openbsd.org 2002/11/07 22:35:38
404 [scp.c]
405 check exit status from ssh, and exit(1) if ssh fails; bug#369;
406 binder@arago.de
Ben Lindstrom224313c2002-11-09 15:59:27 +0000407 - (bal) Update ssh-host-config and minor rewrite of bsd-cygwin_util.c
408 ntsec now default if cygwin version beginning w/ version 56. Patch
409 by Corinna Vinschen <vinschen@redhat.com>
Ben Lindstromf5397c02002-11-09 16:11:10 +0000410 - (bal) AIX does not log login attempts for unknown users (bug #432).
411 patch by dtucker@zip.com.au
Ben Lindstrom08513812002-11-09 15:40:34 +0000412
Damien Miller5a5da882002-10-21 10:13:35 +100041320021021
Damien Miller885929c2002-10-21 20:26:16 +1000414 - (djm) Bug #400: Kill ssh-rand-helper children on timeout, patch from
415 dtucker@zip.com.au
Damien Miller7b3f58c2002-10-21 10:50:25 +1000416 - (djm) Bug #317: FreeBSD needs libutil.h for openpty() Report from
417 dirk.meyer@dinoex.sub.org
Damien Miller5a5da882002-10-21 10:13:35 +1000418
Tim Rice94f628f2002-10-15 13:16:55 -070041920021015
Ben Lindstrom97e38d82002-10-16 00:13:52 +0000420 - (bal) Fix bug id 383 and only call loginrestrict for AIX if not root.
Ben Lindstrom3e006472002-10-16 00:24:03 +0000421 - (bal) More advanced strsep test by Darren Tucker <dtucker@zip.com.au>
Ben Lindstrom97e38d82002-10-16 00:13:52 +0000422
42320021015
Tim Rice94f628f2002-10-15 13:16:55 -0700424 - (tim) [contrib/caldera/openssh.spec] make ssh-agent setgid nobody
425
Ben Lindstromdc3c7572002-10-04 23:54:54 +000042620021004
427 - (bal) Disable post-authentication Privsep for OSF/1. It conflicts with
428 SIA.
429
Damien Milleraf9de382002-10-03 11:54:35 +100043020021003
431 - (djm) OpenBSD CVS Sync
432 - markus@cvs.openbsd.org 2002/10/01 20:34:12
433 [ssh-agent.c]
434 allow root to access the agent, since there is no protection from root.
Damien Miller7156fc72002-10-03 11:55:37 +1000435 - markus@cvs.openbsd.org 2002/10/01 13:24:50
436 [version.h]
437 OpenSSH 3.5
Damien Miller510d5132002-10-03 11:56:58 +1000438 - (djm) Bump RPM spec version numbers
Damien Miller901119b2002-10-04 11:10:04 +1000439 - (djm) Bug #406: s/msg_send/ssh_msg_send/ for Mac OS X 1.2
Damien Milleraf9de382002-10-03 11:54:35 +1000440
Damien Miller50f61232002-09-30 10:40:39 +100044120020930
Damien Millere9264972002-09-30 11:59:21 +1000442 - (djm) Tidy contrib/, add Makefile for GNOME passphrase dialogs,
443 tweak README
444 - (djm) OpenBSD CVS Sync
445 - mickey@cvs.openbsd.org 2002/09/27 10:42:09
446 [compat.c compat.h sshd.c]
447 add a generic match for a prober, such as sie big brother;
448 idea from stevesk@; markus@ ok
Damien Millerd8769622002-09-30 12:00:55 +1000449 - stevesk@cvs.openbsd.org 2002/09/27 15:46:21
450 [ssh.1]
451 clarify compression level protocol 1 only; ok markus@ deraadt@
Damien Miller50f61232002-09-30 10:40:39 +1000452
Damien Millerd681d262002-09-27 13:21:57 +100045320020927
454 - (djm) OpenBSD CVS Sync
455 - markus@cvs.openbsd.org 2002/09/25 11:17:16
456 [sshd_config]
457 sync LoginGraceTime with default
Damien Millerd27a76d2002-09-27 13:22:31 +1000458 - markus@cvs.openbsd.org 2002/09/25 15:19:02
459 [sshd.c]
460 typo; pilot@monkey.org
Damien Millerd94e5492002-09-27 13:25:58 +1000461 - markus@cvs.openbsd.org 2002/09/26 11:38:43
462 [auth1.c auth.h auth-krb4.c monitor.c monitor.h monitor_wrap.c]
463 [monitor_wrap.h]
464 krb4 + privsep; ok dugsong@, deraadt@
Damien Millerd681d262002-09-27 13:21:57 +1000465
Ben Lindstrom164725f2002-09-25 23:14:14 +000046620020925
467 - (bal) Fix issue where successfull login does not clear failure counts
468 in AIX. Patch by dtucker@zip.com.au ok by djm
Tim Rice81ed5182002-09-25 17:38:46 -0700469 - (tim) Cray fixes (bug 367) based on patch from Wendy Palm @ cray.
470 This does not include the deattack.c fixes.
Ben Lindstrom164725f2002-09-25 23:14:14 +0000471
Tim Rice2c961ce2002-09-23 16:54:10 -070047220020923
Damien Millerb2f844d2002-09-25 12:19:08 +1000473 - (djm) OpenBSD CVS Sync
474 - stevesk@cvs.openbsd.org 2002/09/23 20:46:27
475 [canohost.c]
476 change get_peer_ipaddr() and get_local_ipaddr() to not return NULL for
477 non-sockets; fixes a problem passing NULL to snprintf(). ok markus@
Damien Miller7db40c92002-09-25 12:19:39 +1000478 - markus@cvs.openbsd.org 2002/09/23 22:11:05
479 [monitor.c]
480 only call auth_krb5 if kerberos is enabled; ok deraadt@
Damien Milleref73f502002-09-25 12:20:17 +1000481 - markus@cvs.openbsd.org 2002/09/24 08:46:04
482 [monitor.c]
483 only call kerberos code for authctxt->valid
Damien Millerdcbb6c22002-09-25 12:20:52 +1000484 - todd@cvs.openbsd.org 2002/09/24 20:59:44
485 [sshd.8]
486 tweak the example $HOME/.ssh/rc script to not show on any cmdline the
487 sensitive data it handles. This fixes bug # 402 as reported by
488 kolya@mit.edu (Nickolai Zeldovich).
489 ok markus@ and stevesk@
Damien Millerb2f844d2002-09-25 12:19:08 +1000490
49120020923
Tim Rice2c961ce2002-09-23 16:54:10 -0700492 - (tim) [configure.ac] s/return/exit/ patch by dtucker@zip.com.au
493
Damien Millera0e45592002-09-22 01:25:35 +100049420020922
495 - (djm) OpenBSD CVS Sync
496 - stevesk@cvs.openbsd.org 2002/09/19 14:53:14
497 [compat.c]
Damien Miller2138d152002-09-22 01:26:00 +1000498 - markus@cvs.openbsd.org 2002/09/19 15:51:23
499 [ssh-add.c]
500 typo; cd@kalkatraz.de
Damien Miller16aed052002-09-22 01:26:27 +1000501 - stevesk@cvs.openbsd.org 2002/09/19 16:03:15
502 [serverloop.c]
503 log IP address also; ok markus@
Damien Miller6f0a1882002-09-22 01:26:51 +1000504 - stevesk@cvs.openbsd.org 2002/09/20 18:41:29
505 [auth.c]
506 log illegal user here for missing privsep case (ssh2).
507 this is executed in the monitor. ok markus@
Damien Millera0e45592002-09-22 01:25:35 +1000508
Damien Millerdb30b122002-09-19 11:46:58 +100050920020919
510 - (djm) OpenBSD CVS Sync
511 - stevesk@cvs.openbsd.org 2002/09/12 19:11:52
512 [ssh-agent.c]
513 %u for uid print; ok markus@
Damien Millerf37e2462002-09-19 11:47:55 +1000514 - stevesk@cvs.openbsd.org 2002/09/12 19:50:36
515 [session.c ssh.1]
516 add SSH_CONNECTION and deprecate SSH_CLIENT; bug #384. ok markus@
Damien Millere1383ce2002-09-19 11:49:37 +1000517 - stevesk@cvs.openbsd.org 2002/09/13 19:23:09
518 [channels.c sshconnect.c sshd.c]
519 remove use of SO_LINGER, it should not be needed. error check
520 SO_REUSEADDR. fixup comments. ok markus@
Damien Millera6eb2b72002-09-19 11:50:48 +1000521 - stevesk@cvs.openbsd.org 2002/09/16 19:55:33
522 [session.c]
523 log when _PATH_NOLOGIN exists; ok markus@
Damien Miller101c4a72002-09-19 11:51:21 +1000524 - stevesk@cvs.openbsd.org 2002/09/16 20:12:11
525 [sshd_config.5]
526 more details on X11Forwarding security issues and threats; ok markus@
Damien Miller86247e22002-09-19 11:51:53 +1000527 - stevesk@cvs.openbsd.org 2002/09/16 22:03:13
528 [sshd.8]
529 reference moduli(5) in FILES /etc/moduli.
Damien Miller9b037b82002-09-19 11:54:54 +1000530 - itojun@cvs.openbsd.org 2002/09/17 07:47:02
531 [channels.c]
532 don't quit while creating X11 listening socket.
533 http://mail-index.netbsd.org/current-users/2002/09/16/0005.html
534 got from portable. markus ok
Damien Miller8c4e18a2002-09-19 12:05:02 +1000535 - djm@cvs.openbsd.org 2002/09/19 01:58:18
536 [ssh.c sshconnect.c]
537 bugzilla.mindrot.org #223 - ProxyCommands don't exit.
538 Patch from dtucker@zip.com.au; ok markus@
Damien Millerdb30b122002-09-19 11:46:58 +1000539
Damien Miller4d53d392002-09-12 09:43:56 +100054020020912
Damien Miller10f30852002-09-12 14:49:00 +1000541 - (djm) Made GNOME askpass programs return non-zero if cancel button is
542 pressed.
Damien Miller771721f2002-09-12 10:32:59 +1000543 - (djm) Added getpeereid() replacement. Properly implemented for systems
544 with SO_PEERCRED support. Faked for systems which lack it.
Damien Miller9b481512002-09-12 10:43:29 +1000545 - (djm) Sync sys/tree.h with OpenBSD -current. Rename tree.h and
546 fake-queue.h to sys-tree.h and sys-queue.h
Damien Miller4d53d392002-09-12 09:43:56 +1000547 - (djm) OpenBSD CVS Sync
548 - markus@cvs.openbsd.org 2002/09/08 20:24:08
549 [hostfile.h]
550 no comma at end of enumerator list
Damien Miller25162f22002-09-12 09:47:29 +1000551 - itojun@cvs.openbsd.org 2002/09/09 06:48:06
552 [auth1.c auth.h auth-krb5.c monitor.c monitor.h]
553 [monitor_wrap.c monitor_wrap.h]
554 kerberos support for privsep. confirmed to work by lha@stacken.kth.se
555 patch from markus
Damien Millera10f5612002-09-12 09:49:15 +1000556 - markus@cvs.openbsd.org 2002/09/09 14:54:15
557 [channels.c kex.h key.c monitor.c monitor_wrap.c radix.c uuencode.c]
558 signed vs unsigned from -pedantic; ok henning@
Damien Miller538f1812002-09-12 09:51:10 +1000559 - markus@cvs.openbsd.org 2002/09/10 20:24:47
560 [ssh-agent.c]
561 check the euid of the connecting process with getpeereid(2);
562 ok provos deraadt stevesk
Damien Millerb5fdfaa2002-09-12 09:52:03 +1000563 - stevesk@cvs.openbsd.org 2002/09/11 17:55:03
564 [ssh.1]
565 add agent and X11 forwarding warning text from ssh_config.5; ok markus@
Damien Miller789e95d2002-09-12 09:52:46 +1000566 - stevesk@cvs.openbsd.org 2002/09/11 18:27:26
567 [authfd.c authfd.h ssh.c]
568 don't connect to agent to test for presence if we've previously
569 connected; ok markus@
Damien Millere1a49812002-09-12 09:54:25 +1000570 - djm@cvs.openbsd.org 2002/09/11 22:41:50
571 [sftp.1 sftp-client.c sftp-client.h sftp-common.c sftp-common.h]
572 [sftp-glob.c sftp-glob.h sftp-int.c sftp-server.c]
573 support for short/long listings and globbing in "ls"; ok markus@
Damien Miller622accf2002-09-12 10:34:13 +1000574 - djm@cvs.openbsd.org 2002/09/12 00:13:06
575 [sftp-int.c]
576 zap unused var introduced in last commit
Damien Miller4d53d392002-09-12 09:43:56 +1000577
Damien Miller71eb0c12002-09-11 10:29:11 +100057820020911
579 - (djm) Sync openbsd-compat with OpenBSD -current
580
Damien Millere9994cb2002-09-10 21:43:53 +100058120020910
582 - (djm) Bug #365: Read /.ssh/environment properly under CygWin.
583 Patch from Mark Bradshaw <bradshaw@staff.crosswalk.com>
Damien Millerc34e03e2002-09-10 22:26:17 +1000584 - (djm) Bug #138: Make protocol 1 blowfish work with old OpenSSL.
585 Patch from Robert Halubek <rob@adso.com.pl>
Damien Millere9994cb2002-09-10 21:43:53 +1000586
Damien Millerc1348632002-09-05 14:35:14 +100058720020905
588 - (djm) OpenBSD CVS Sync
589 - stevesk@cvs.openbsd.org 2002/09/04 18:52:42
590 [servconf.c sshd.8 sshd_config.5]
591 default LoginGraceTime to 2m; 1m may be too short for slow systems.
592 ok markus@
Damien Miller53998382002-09-05 16:32:02 +1000593 - (djm) Merge openssh-TODO.patch from Redhat (null) beta
Damien Miller44d5b602002-09-05 16:46:24 +1000594 - (djm) Add gnome-ssh-askpass2.c (gtk2) by merge with patch from
595 Nalin Dahyabhai <nalin@redhat.com>
Damien Miller005d4562002-09-05 16:53:20 +1000596 - (djm) Add support for building gtk2 password requestor from Redhat beta
Damien Millerc1348632002-09-05 14:35:14 +1000597
Damien Miller6cffb9a2002-09-04 16:20:26 +100059820020903
Damien Millerfc93d4b2002-09-04 23:26:29 +1000599 - (djm) Patch from itojun@ for Darwin OS: test getaddrinfo, reorder libcrypt
Damien Miller6b097922002-09-04 17:19:04 +1000600 - (djm) Fix Redhat RPM build dependancy test
Damien Miller6cffb9a2002-09-04 16:20:26 +1000601 - (djm) OpenBSD CVS Sync
602 - markus@cvs.openbsd.org 2002/08/12 10:46:35
603 [ssh-agent.c]
604 make ssh-agent setgid, disallow ptrace.
Damien Millerb83df8d2002-09-04 16:24:55 +1000605 - espie@cvs.openbsd.org 2002/08/21 11:20:59
606 [sshd.8]
607 `RSA' updated to refer to `public key', where it matters.
608 okay markus@
Damien Millerf771ab72002-09-04 16:25:52 +1000609 - stevesk@cvs.openbsd.org 2002/08/21 19:38:06
610 [servconf.c sshd.8 sshd_config sshd_config.5]
611 change LoginGraceTime default to 1 minute; ok mouring@ markus@
Damien Miller4efdfff2002-09-04 16:28:18 +1000612 - stevesk@cvs.openbsd.org 2002/08/21 20:10:28
613 [ssh-agent.c]
614 raise listen backlog; ok markus@
Damien Miller58f34862002-09-04 16:31:21 +1000615 - stevesk@cvs.openbsd.org 2002/08/22 19:27:53
616 [ssh-agent.c]
617 use common close function; ok markus@
Damien Miller06692862002-09-04 16:32:10 +1000618 - stevesk@cvs.openbsd.org 2002/08/22 19:38:42
619 [clientloop.c]
620 format with current EscapeChar; bugzilla #388 from wknox@mitre.org.
621 ok markus@
Damien Miller061d5b12002-09-04 16:33:31 +1000622 - stevesk@cvs.openbsd.org 2002/08/22 20:57:19
623 [ssh-agent.c]
624 shutdown(SHUT_RDWR) not needed before close here; ok markus@
Damien Millerde6f2de2002-09-04 16:37:26 +1000625 - markus@cvs.openbsd.org 2002/08/22 21:33:58
626 [auth1.c auth2.c]
627 auth_root_allowed() is handled by the monitor in the privsep case,
628 so skip this for use_privsep, ok stevesk@, fixes bugzilla #387/325
Damien Miller5a80bba2002-09-04 16:39:02 +1000629 - markus@cvs.openbsd.org 2002/08/22 21:45:41
630 [session.c]
631 send signal name (not signal number) in "exit-signal" message; noticed
632 by galb@vandyke.com
Damien Millerf7c23912002-09-04 16:39:48 +1000633 - stevesk@cvs.openbsd.org 2002/08/27 17:13:56
634 [ssh-rsa.c]
635 RSA_public_decrypt() returns -1 on error so len must be signed;
636 ok markus@
Damien Milleraf653042002-09-04 16:40:37 +1000637 - stevesk@cvs.openbsd.org 2002/08/27 17:18:40
638 [ssh_config.5]
639 some warning text for ForwardAgent and ForwardX11; ok markus@
Damien Millerebc23062002-09-04 16:45:09 +1000640 - stevesk@cvs.openbsd.org 2002/08/29 15:57:25
641 [monitor.c session.c sshlogin.c sshlogin.h]
642 pass addrlen with sockaddr *; from Hajimu UMEMOTO <ume@FreeBSD.org>
643 NOTE: there are also p-specific parts to this patch. ok markus@
Damien Miller147bba32002-09-04 16:46:06 +1000644 - stevesk@cvs.openbsd.org 2002/08/29 16:02:54
645 [ssh.1 ssh.c]
646 deprecate -P as UsePrivilegedPort defaults to no now; ok markus@
Damien Miller9b1dacd2002-09-04 16:47:35 +1000647 - stevesk@cvs.openbsd.org 2002/08/29 16:09:02
648 [ssh_config.5]
649 more on UsePrivilegedPort and setuid root; ok markus@
Damien Miller50b9a602002-09-04 16:50:06 +1000650 - stevesk@cvs.openbsd.org 2002/08/29 19:49:42
651 [ssh.c]
652 shrink initial privilege bracket for setuid case; ok markus@
Damien Miller05913ba2002-09-04 16:51:03 +1000653 - stevesk@cvs.openbsd.org 2002/08/29 22:54:10
654 [ssh_config.5 sshd_config.5]
655 state XAuthLocation is a full pathname
Damien Miller6cffb9a2002-09-04 16:20:26 +1000656
Ben Lindstrom0a4f7542002-08-20 18:36:25 +000065720020820
658 - OpenBSD CVS Sync
659 - millert@cvs.openbsd.org 2002/08/02 14:43:15
660 [monitor.c monitor_mm.c]
661 Change mm_zalloc() sanity checks to be more in line with what
662 we do in calloc() and add a check to monitor_mm.c.
663 OK provos@ and markus@
Ben Lindstromdc7adf22002-08-20 18:38:02 +0000664 - marc@cvs.openbsd.org 2002/08/02 16:00:07
665 [ssh.1 sshd.8]
666 note that .ssh/environment is only read when
667 allowed (PermitUserEnvironment in sshd_config).
668 OK markus@
Ben Lindstrom0e50d842002-08-20 18:39:14 +0000669 - markus@cvs.openbsd.org 2002/08/02 21:23:41
670 [ssh-rsa.c]
671 diff is u_int (2x); ok deraadt/provos
Ben Lindstrom0deb5d92002-08-20 18:40:03 +0000672 - markus@cvs.openbsd.org 2002/08/02 22:20:30
673 [ssh-rsa.c]
674 replace RSA_verify with our own version and avoid the OpenSSL ASN.1 parser
675 for authentication; ok deraadt/djm
Ben Lindstrome143f612002-08-20 18:41:15 +0000676 - aaron@cvs.openbsd.org 2002/08/08 13:50:23
677 [sshconnect1.c]
678 Use & to test if bits are set, not &&; markus@ ok.
Ben Lindstromd4ee3492002-08-20 18:42:13 +0000679 - stevesk@cvs.openbsd.org 2002/08/08 23:54:52
680 [auth.c]
681 typo in comment
Ben Lindstrom1f8cf4f2002-08-20 18:43:27 +0000682 - stevesk@cvs.openbsd.org 2002/08/09 17:21:42
683 [sshd_config.5]
684 use Op for mdoc conformance; from esr@golux.thyrsus.com
685 ok aaron@
Ben Lindstrom15b61202002-08-20 18:44:24 +0000686 - stevesk@cvs.openbsd.org 2002/08/09 17:41:12
687 [sshd_config.5]
688 proxy vs. fake display
Ben Lindstrombd9bf382002-08-20 18:54:20 +0000689 - stevesk@cvs.openbsd.org 2002/08/12 17:30:35
690 [ssh.1 sshd.8 sshd_config.5]
691 more PermitUserEnvironment; ok markus@
Ben Lindstrom3541f182002-08-20 19:03:20 +0000692 - stevesk@cvs.openbsd.org 2002/08/17 23:07:14
693 [ssh.1]
694 ForwardAgent has defaulted to no for over 2 years; be more clear here.
Ben Lindstrom479b4762002-08-20 19:04:51 +0000695 - stevesk@cvs.openbsd.org 2002/08/17 23:55:01
696 [ssh_config.5]
697 ordered list here
Ben Lindstrom39621192002-08-21 02:54:11 +0000698 - (bal) [defines.h] Some platforms don't have SIZE_T_MAX. So assign
699 it to ULONG_MAX.
Ben Lindstrom0a4f7542002-08-20 18:36:25 +0000700
Tim Riced730b782002-08-13 18:52:10 -070070120020813
702 - (tim) [configure.ac] Display OpenSSL header/library version.
703 Patch by dtucker@zip.com.au
704
Ben Lindstrom3ed66402002-08-01 01:21:56 +000070520020731
706 - (bal) OpenBSD CVS Sync
707 - markus@cvs.openbsd.org 2002/07/24 16:11:18
708 [hostfile.c hostfile.h sshconnect.c]
709 print out all known keys for a host if we get a unknown host key,
710 see discussion at http://marc.theaimsgroup.com/?t=101069210100016&r=1&w=4
711
712 the ssharp mitm tool attacks users in a similar way, so i'd like to
713 pointed out again:
714 A MITM attack is always possible if the ssh client prints:
715 The authenticity of host 'bla' can't be established.
716 (protocol version 2 with pubkey authentication allows you to detect
717 MITM attacks)
Ben Lindstrom8d631e82002-08-01 01:25:00 +0000718 - mouring@cvs.openbsd.org 2002/07/25 01:16:59
719 [sftp.c]
720 FallBackToRsh does not exist anywhere else. Remove it from here.
721 OK deraadt.
Ben Lindstrom4b99be82002-08-01 01:26:29 +0000722 - markus@cvs.openbsd.org 2002/07/29 18:57:30
723 [sshconnect.c]
724 print file:line
Ben Lindstrom5d860f02002-08-01 01:28:38 +0000725 - markus@cvs.openbsd.org 2002/07/30 17:03:55
726 [auth-options.c servconf.c servconf.h session.c sshd_config sshd_config.5]
727 add PermitUserEnvironment (off by default!); from dot@dotat.at;
728 ok provos, deraadt
Ben Lindstrom3ed66402002-08-01 01:21:56 +0000729
Ben Lindstrom18d2b5d2002-07-30 19:32:07 +000073020020730
731 - (bal) [uidswap.c] SCO compile correction by gert@greenie.muc.de
732
Kevin Steves6a998eb2002-07-28 20:24:07 +000073320020728
734 - (stevesk) [auth-pam.c] should use PAM_MSG_MEMBER(); from solar
Kevin Stevese7dbdf72002-07-28 20:31:18 +0000735 - (stevesk) [CREDITS] solar
Kevin Steves4bdb5472002-07-28 20:42:23 +0000736 - (stevesk) [ssh-rand-helper.c] RAND_bytes() and SHA1_Final() unsigned
737 char arg.
Kevin Steves6a998eb2002-07-28 20:24:07 +0000738
Damien Miller6d8d7882002-07-25 14:36:24 +100073920020725
740 - (djm) Remove some cruft from INSTALL
Damien Millera7609f52002-07-25 14:40:22 +1000741 - (djm) Latest config.guess and config.sub from ftp://ftp.gnu.org/gnu/config/
Damien Miller6d8d7882002-07-25 14:36:24 +1000742
Ben Lindstrom6f52b3e2002-07-23 21:00:17 +000074320020723
744 - (bal) [bsd-cray.c bsd-cray.h] Part 2 of Cray merger.
Ben Lindstrom82ec9832002-07-23 21:05:17 +0000745 - (bal) sync ID w/ ssh-agent.c
Ben Lindstrom264ee302002-07-23 21:01:56 +0000746 - (bal) OpenBSD Sync
747 - markus@cvs.openbsd.org 2002/07/19 15:43:33
748 [log.c log.h session.c sshd.c]
749 remove fatal cleanups after fork; based on discussions with and code
750 from solar.
Ben Lindstromee8d52d2002-07-23 21:03:02 +0000751 - stevesk@cvs.openbsd.org 2002/07/19 17:42:40
752 [ssh.c]
753 display a warning from ssh when XAuthLocation does not exist or xauth
754 returned no authentication data. ok markus@
Ben Lindstrom218a07d2002-07-23 21:06:45 +0000755 - stevesk@cvs.openbsd.org 2002/07/21 18:32:20
756 [auth-options.c]
757 unneeded includes
Ben Lindstrom3cc44502002-07-23 21:07:45 +0000758 - stevesk@cvs.openbsd.org 2002/07/21 18:34:43
759 [auth-options.h]
760 remove invalid comment
Ben Lindstromb9051ec2002-07-23 21:11:09 +0000761 - markus@cvs.openbsd.org 2002/07/22 11:03:06
762 [session.c]
763 fallback to _PATH_STDPATH on setusercontext+LOGIN_SETPATH errors;
Ben Lindstrom7cea16b2002-07-23 21:13:40 +0000764 - stevesk@cvs.openbsd.org 2002/07/22 17:32:56
765 [monitor.c]
766 u_int here; ok provos@
Ben Lindstrom41daec72002-07-23 21:15:13 +0000767 - stevesk@cvs.openbsd.org 2002/07/23 16:03:10
768 [sshd.c]
769 utmp_len is unsigned; display error consistent with other options.
770 ok markus@
Ben Lindstrom1fa330c2002-07-23 21:29:49 +0000771 - stevesk@cvs.openbsd.org 2002/07/15 17:15:31
772 [uidswap.c]
773 little more debugging; ok markus@
Ben Lindstrom7cea16b2002-07-23 21:13:40 +0000774
Ben Lindstrombeb5f332002-07-22 15:28:53 +000077520020722
776 - (bal) AIX tty data limiting patch fix by leigh@solinno.co.uk
Kevin Steves066e1ab2002-07-22 16:20:29 +0000777 - (stevesk) [xmmap.c] missing prototype for fatal()
Ben Lindstrom232ccf72002-07-22 23:34:25 +0000778 - (bal) [configure.ac defines.h loginrec.c sshd.c sshpty.c] Partial sync
779 with Cray (mostly #ifdef renaming). Patch by wendyp@cray.com.
Ben Lindstrom762104e2002-07-23 00:00:05 +0000780 - (bal) [configure.ac] Missing ;; from cray patch.
Ben Lindstrom446d8862002-07-23 00:03:33 +0000781 - (bal) [monitor_mm.c openbsd-compat/xmmap.h] Move xmmap() defines
782 into it's own header.
Kevin Steves38b050a2002-07-23 00:44:07 +0000783 - (stevesk) [auth-pam.[ch] session.c] pam_getenvlist() must be
784 freed by the caller; add free_pam_environment() and use it.
Kevin Steves6fa740b2002-07-23 00:51:53 +0000785 - (stevesk) [auth-pam.c] typo in comment
Ben Lindstrombeb5f332002-07-22 15:28:53 +0000786
Kevin Steves6cdecd02002-07-21 17:26:54 +000078720020721
788 - (stevesk) [auth-pam.c] merge cosmetic changes from solar's
789 openssh-3.4p1-owl-password-changing.diff
Kevin Steves63007d42002-07-21 17:57:01 +0000790 - (stevesk) [auth-pam.c] merge rest of solar's PAM patch;
791 PAM_NEW_AUTHTOK_REQD remains in #if 0 for now.
Kevin Steves3429a1b2002-07-21 22:49:47 +0000792 - (stevesk) [auth-pam.c] cast to avoid initialization type mismatch
793 warning on pam_conv struct conversation function.
Kevin Steves7ba49702002-07-21 23:16:00 +0000794 - (stevesk) [auth-pam.h] license
Kevin Steves21e04eb2002-07-21 23:20:07 +0000795 - (stevesk) [auth-pam.h] unneeded include
Kevin Steves287077e2002-07-21 23:59:39 +0000796 - (stevesk) [auth-pam.[ch] ssh.h] move SSHD_PAM_SERVICE to auth-pam.h
Kevin Steves6cdecd02002-07-21 17:26:54 +0000797
Kevin Steves3a881912002-07-20 19:05:40 +000079820020720
799 - (stevesk) [ssh-keygen.c] bug #231: always init/seed_rng().
800
Tim Ricef1a10012002-07-19 11:57:57 -070080120020719
802 - (tim) [contrib/solaris/buildpkg.sh] create privsep user/group if needed.
803 Patch by dtucker@zip.com.au
Tim Ricef028f1e2002-07-19 12:41:10 -0700804 - (tim) [configure.ac] test for libxnet on HP. Patch by dtucker@zip.com.au
Tim Ricef1a10012002-07-19 11:57:57 -0700805
Tim Rice76645842002-07-18 11:34:29 -070080620020718
807 - (tim) [defines.h] Bug 313 patch by dirk.meyer@dinoex.sub.org
808 - (tim) [monitor_mm.c] add missing declaration for xmmap(). Reported
809 by ayamura@ayamura.org
Tim Rice907881e2002-07-18 11:44:50 -0700810 - (tim) [configure.ac] Bug 267 rework int64_t test.
Tim Riceeae876e2002-07-18 11:49:32 -0700811 - (tim) [includes.h] Bug 267 add stdint.h
Tim Rice76645842002-07-18 11:34:29 -0700812
Ben Lindstrom2faabf32002-07-18 01:04:50 +000081320020717
814 - (bal) aixbff package updated by dtucker@zip.com.au
Tim Ricee22be3b2002-07-17 19:20:07 -0700815 - (tim) [configure.ac] change how we do paths in AC_PATH_PROGS tests
816 for autoconf 2.53. Based on a patch by jrj@purdue.edu
Ben Lindstrom2faabf32002-07-18 01:04:50 +0000817
Tim Riceffaf4452002-07-16 14:24:38 -070081820020716
819 - (tim) [contrib/solaris/opensshd.in] Only kill sshd if .pid file found
820
Ben Lindstrom728aa7e2002-07-15 17:48:11 +000082120020715
822 - (bal) OpenBSD CVS Sync
823 - itojun@cvs.openbsd.org 2002/07/12 13:29:09
824 [sshconnect.c]
825 print connect failure during debugging mode.
Ben Lindstromc491b0d2002-07-15 17:52:49 +0000826 - markus@cvs.openbsd.org 2002/07/12 15:50:17
827 [cipher.c]
828 EVP_CIPH_CUSTOM_IV for our own rijndael
Ben Lindstrom938b8282002-07-15 17:58:34 +0000829 - (bal) Remove unused tty defined in do_setusercontext() pointed out by
830 dtucker@zip.com.au plus a a more KNF since I am near it.
Ben Lindstrom104c3fe2002-07-15 18:49:20 +0000831 - (bal) Privsep user creation support in Solaris buildpkg.sh by
832 dtucker@zip.com.au
Ben Lindstrom728aa7e2002-07-15 17:48:11 +0000833
Tim Rice95210192002-07-14 10:02:20 -070083420020714
835 - (tim) [Makefile.in] replace "id sshd" with "sshd -t"
Tim Rice40017b02002-07-14 13:36:49 -0700836 - (bal/tim) [acconfig.h configure.ac monitor_mm.c servconf.c
837 openbsd-compat/Makefile.in] support compression on platforms that
838 have no/broken MAP_ANON. Moved code to openbsd-compat/xmmap.c
839 Based on patch from nalin@redhat.com of code extracted from Owl's package
Tim Ricea0911592002-07-14 14:43:57 -0700840 - (tim) [ssh_prng_cmds.in] Bug 323 arp -n flag doesn't exist under Solaris.
841 report by chris@by-design.net
Tim Ricecdb82942002-07-14 15:33:20 -0700842 - (tim) [loginrec.c] Bug 347: Fix typo (WTMPX_FILE) report by rodney@bond.net
Tim Rice370e0ba2002-07-14 15:50:51 -0700843 - (tim) [loginrec.c] Bug 348: add missing found = 1; to wtmpx_islogin()
844 report by rodney@bond.net
Tim Rice95210192002-07-14 10:02:20 -0700845
Tim Rice1363b3c2002-07-12 09:04:06 -070084620020712
847 - (tim) [Makefile.in] quiet down install-files: and check-user:
Tim Rice4796a292002-07-12 18:11:24 -0700848 - (tim) [configure.ac] remove unused filepriv line
Tim Rice1363b3c2002-07-12 09:04:06 -0700849
Tim Rice68273952002-07-10 07:40:11 -070085020020710
851 - (tim) [contrib/cygwin/ssh-host-config] explicitely sets the permissions
852 on /var/empty to 755 Patch by vinschen@redhat.com
Ben Lindstromefee0592002-07-11 03:54:43 +0000853 - (bal) OpenBSD CVS Sync
854 - itojun@cvs.openbsd.org 2002/07/09 11:56:50
855 [sshconnect.c]
856 silently try next address on connect(2). markus ok
Ben Lindstrome9827732002-07-11 03:56:46 +0000857 - itojun@cvs.openbsd.org 2002/07/09 11:56:27
858 [canohost.c]
859 suppress log on reverse lookup failiure, as there's no real value in
860 doing so.
861 markus ok
Ben Lindstromba8df7d2002-07-11 03:58:11 +0000862 - itojun@cvs.openbsd.org 2002/07/09 12:04:02
863 [sshconnect.c]
864 ed static function (less warnings)
Ben Lindstrom9c445542002-07-11 03:59:18 +0000865 - stevesk@cvs.openbsd.org 2002/07/09 17:46:25
866 [sshd_config.5]
867 clarify no preference ordering in protocol list; ok markus@
Ben Lindstroma6cd75c2002-07-11 04:00:19 +0000868 - itojun@cvs.openbsd.org 2002/07/10 10:28:15
869 [sshconnect.c]
870 bark if all connection attempt fails.
Ben Lindstrom6f893882002-07-11 04:01:29 +0000871 - deraadt@cvs.openbsd.org 2002/07/10 17:53:54
872 [rijndael.c]
873 use right sizeof in memcpy; markus ok
Tim Rice68273952002-07-10 07:40:11 -0700874
Ben Lindstrom99a4e142002-07-09 14:06:40 +000087520020709
876 - (bal) NO_IPPORT_RESERVED_CONCEPT used instead of CYGWIN so other platforms
877 lacking that concept can share it. Patch by vinschen@redhat.com
878
Tim Rice88177242002-07-08 19:02:10 -070087920020708
880 - (tim) [openssh/contrib/solaris/buildpkg.sh] add PKG_INSTALL_ROOT to
881 work in a jumpstart environment. patch by kbrint@rufus.net
Tim Rice2d0bf3d2002-07-08 19:10:05 -0700882 - (tim) [Makefile.in] workaround for broken pakadd on some systems.
Tim Ricecbb90662002-07-08 19:17:10 -0700883 - (tim) [configure.ac] fix libc89 utimes test. Mention default path for
884 --with-privsep-path=
Tim Rice88177242002-07-08 19:02:10 -0700885
Tim Ricecc252062002-07-07 13:30:45 -070088620020707
887 - (tim) [Makefile.in] use umask instead of chmod on $(PRIVSEP_PATH)
Tim Rice9dd30812002-07-07 13:43:36 -0700888 - (tim) [acconfig.h configure.ac sshd.c]
889 s/BROKEN_FD_PASSING/DISABLE_FD_PASSING/
Tim Ricee475a3c2002-07-07 14:07:46 -0700890 - (tim) [contrib/cygwin/ssh-host-config] sshd account creation fixes
891 patch from vinschen@redhat.com
Ben Lindstrom8abe7362002-07-07 22:07:10 +0000892 - (bal) [realpath.c] Updated with OpenBSD tree.
Ben Lindstromc51b9242002-07-07 22:10:15 +0000893 - (bal) OpenBSD CVS Sync
894 - deraadt@cvs.openbsd.org 2002/07/04 04:15:33
895 [key.c monitor_wrap.c sftp-glob.c ssh-dss.c ssh-rsa.c]
896 patch memory leaks; grendel@zeitbombe.org
Ben Lindstrom8b2eecd2002-07-07 22:11:51 +0000897 - deraadt@cvs.openbsd.org 2002/07/04 08:12:15
898 [channels.c packet.c]
899 blah blah minor nothing as i read and re-read and re-read...
Ben Lindstrom2bf759c2002-07-07 22:13:31 +0000900 - markus@cvs.openbsd.org 2002/07/04 10:41:47
901 [key.c monitor_wrap.c ssh-dss.c ssh-rsa.c]
902 don't allocate, copy, and discard if there is not interested in the data;
903 ok deraadt@
Ben Lindstrom8e8ef2a2002-07-07 22:14:55 +0000904 - deraadt@cvs.openbsd.org 2002/07/06 01:00:49
905 [log.c]
906 KNF
Ben Lindstrom965710f2002-07-07 22:17:22 +0000907 - deraadt@cvs.openbsd.org 2002/07/06 01:01:26
908 [ssh-keyscan.c]
909 KNF, realloc fix, and clean usage
Ben Lindstrom6a9fbc92002-07-07 22:19:13 +0000910 - stevesk@cvs.openbsd.org 2002/07/06 17:47:58
911 [ssh-keyscan.c]
912 unused variable
Ben Lindstrom5c98db52002-07-07 22:25:29 +0000913 - (bal) Minor KNF on ssh-keyscan.c
Tim Ricecc252062002-07-07 13:30:45 -0700914
Tim Ricee958ed32002-07-05 07:12:33 -070091520020705
916 - (tim) [configure.ac] AIX 4.2.1 has authenticate() in libs.
917 Reported by Darren Tucker <dtucker@zip.com.au>
Tim Riceb66e2922002-07-05 16:22:32 -0700918 - (tim) [contrib/cygwin/ssh-host-config] double slash corrction
919 from vinschen@redhat.com
Tim Ricee958ed32002-07-05 07:12:33 -0700920
Ben Lindstrom92ea0ea2002-07-04 18:11:09 +000092120020704
922 - (bal) Limit data to TTY for AIX only (Newer versions can't handle the
923 faster data rate) Bug #124
Ben Lindstrom604de562002-07-04 18:20:51 +0000924 - (bal) glob.c defines TILDE and AIX also defines it. #undef it first.
925 bug #265
Ben Lindstromd00a1a12002-07-04 19:33:49 +0000926 - (bal) One too many nulls in ports-aix.c
Ben Lindstrom92ea0ea2002-07-04 18:11:09 +0000927
Ben Lindstrom6dbf3002002-07-03 23:33:19 +000092820020703
929 - (bal) Updated contrib/cygwin/ patch by vinschen@redhat.com
Ben Lindstrom723e29a2002-07-03 23:50:00 +0000930 - (bal) minor correction to utimes() replacement. Patch by
931 onoe@sm.sony.co.jp
Ben Lindstrom04f9af72002-07-04 00:03:56 +0000932 - OpenBSD CVS Sync
933 - markus@cvs.openbsd.org 2002/06/27 08:49:44
934 [dh.c ssh-keyscan.c sshconnect.c]
935 more checks for NULL pointers; from grendel@zeitbombe.org; ok deraadt@
Ben Lindstrom35a2cb92002-07-04 00:05:06 +0000936 - deraadt@cvs.openbsd.org 2002/06/27 09:08:00
937 [monitor.c]
938 improve mm_zalloc check; markus ok
Ben Lindstromeec16fc2002-07-04 00:06:15 +0000939 - deraadt@cvs.openbsd.org 2002/06/27 10:35:47
940 [auth2-none.c monitor.c sftp-client.c]
941 use xfree()
Ben Lindstromedd098b2002-07-04 00:07:13 +0000942 - stevesk@cvs.openbsd.org 2002/06/27 19:49:08
943 [ssh-keyscan.c]
944 use convtime(); ok markus@
Ben Lindstroma7961622002-07-04 00:08:23 +0000945 - millert@cvs.openbsd.org 2002/06/28 01:49:31
946 [monitor_mm.c]
947 tree(3) wants an int return value for its compare functions and
948 the difference between two pointers is not an int. Just do the
949 safest thing and store the result in a long and then return 0,
950 -1, or 1 based on that result.
Ben Lindstromb1bdc5a2002-07-04 00:09:26 +0000951 - deraadt@cvs.openbsd.org 2002/06/28 01:50:37
952 [monitor_wrap.c]
953 use ssize_t
Ben Lindstromfbbfa842002-07-04 00:10:34 +0000954 - deraadt@cvs.openbsd.org 2002/06/28 10:08:25
955 [sshd.c]
956 range check -u option at invocation
Ben Lindstrom810af962002-07-04 00:11:40 +0000957 - deraadt@cvs.openbsd.org 2002/06/28 23:05:06
958 [sshd.c]
959 gidset[2] -> gidset[1]; markus ok
Ben Lindstrom5a9d0ea2002-07-04 00:12:53 +0000960 - deraadt@cvs.openbsd.org 2002/06/30 21:54:16
961 [auth2.c session.c sshd.c]
962 lint asks that we use names that do not overlap
Ben Lindstroma962c2f2002-07-04 00:14:17 +0000963 - deraadt@cvs.openbsd.org 2002/06/30 21:59:45
964 [auth-bsdauth.c auth-skey.c auth2-chall.c clientloop.c key.c
965 monitor_wrap.c monitor_wrap.h scard.h session.h sftp-glob.c ssh.c
966 sshconnect2.c sshd.c]
967 minor KNF
Ben Lindstromfd2aace2002-07-04 00:15:22 +0000968 - deraadt@cvs.openbsd.org 2002/07/01 16:15:25
969 [msg.c]
970 %u
Ben Lindstrom343010a2002-07-04 00:16:25 +0000971 - markus@cvs.openbsd.org 2002/07/01 19:48:46
972 [sshconnect2.c]
973 for compression=yes, we fallback to no-compression if the server does
974 not support compression, vice versa for compression=no. ok mouring@
Ben Lindstrom43ce2c82002-07-04 00:17:33 +0000975 - markus@cvs.openbsd.org 2002/07/03 09:55:38
976 [ssh-keysign.c]
977 use RSA_blinding_on() for rsa hostkeys (suggested by Bill Sommerfeld)
978 in order to avoid a possible Kocher timing attack pointed out by Charles
979 Hannum; ok provos@
Ben Lindstrom5d35a2f2002-07-04 00:19:40 +0000980 - markus@cvs.openbsd.org 2002/07/03 14:21:05
981 [ssh-keysign.8 ssh-keysign.c ssh.c ssh_config]
982 re-enable ssh-keysign's sbit, but make ssh-keysign read
983 /etc/ssh/ssh_config and exit if HostbasedAuthentication is disabled
984 globally. based on discussions with deraadt, itojun and sommerfeld;
985 ok itojun@
Ben Lindstrome06eb682002-07-04 00:27:21 +0000986 - (bal) Failed password attempts don't increment counter on AIX. Bug #145
Ben Lindstromee3a8e42002-07-04 03:07:15 +0000987 - (bal) Missed Makefile.in change. keysign needs readconf.o
Ben Lindstrom51b24882002-07-04 03:08:40 +0000988 - (bal) Clean up aix_usrinfo(). Ignore TTY= period I guess.
Ben Lindstrome06eb682002-07-04 00:27:21 +0000989
Damien Miller23fe57c2002-07-02 17:08:23 +100099020020702
991 - (djm) Use PAM_MSG_MEMBER for PAM_TEXT_INFO messages, use xmalloc &
992 friends consistently. Spotted by Solar Designer <solar@openwall.com>
993
Ben Lindstromde07cbf2002-06-28 16:48:11 +000099420020629
995 - (bal) fix to auth2-pam.c to swap fatal() arguments, A bit of style
996 clean up while I'm near it.
997
Kevin Stevesbdf3e892002-06-27 16:59:50 +000099820020628
999 - (stevesk) [sshd_config] PAMAuthenticationViaKbdInt no; commented
1000 options should contain default value. from solar.
Ben Lindstrom59627352002-06-27 18:02:21 +00001001 - (bal) Cygwin uid0 fix by vinschen@redhat.com
Ben Lindstromdd21fe92002-06-27 18:23:20 +00001002 - (bal) s/config.h/includes.h/ in openbsd-compat/ for *.c. Otherwise wise
1003 have issues of our fixes not propogating right (ie bcopy instead of
1004 memmove). OK tim
Ben Lindstrom68e83112002-06-28 00:37:33 +00001005 - (bal) FreeBSD needs <sys/types.h> to detect if mmap() is supported.
1006 Bug #303
Kevin Stevesbdf3e892002-06-27 16:59:50 +00001007
Kevin Steves3a881912002-07-20 19:05:40 +0000100820020627
Ben Lindstromd5502182002-06-27 00:12:57 +00001009 - OpenBSD CVS Sync
1010 - deraadt@cvs.openbsd.org 2002/06/26 14:49:36
1011 [monitor.c]
1012 correct %u
Ben Lindstromd5bf46e2002-06-27 00:21:03 +00001013 - deraadt@cvs.openbsd.org 2002/06/26 14:50:04
1014 [monitor_fdpass.c]
1015 use ssize_t for recvmsg() and sendmsg() return
Ben Lindstrom33907492002-06-27 00:21:59 +00001016 - markus@cvs.openbsd.org 2002/06/26 14:51:33
1017 [ssh-add.c]
1018 fix exit code for -X/-x
Ben Lindstrom08512492002-06-27 00:23:02 +00001019 - deraadt@cvs.openbsd.org 2002/06/26 15:00:32
1020 [monitor_wrap.c]
1021 more %u
Ben Lindstromfe275982002-06-27 00:25:07 +00001022 - markus@cvs.openbsd.org 2002/06/26 22:27:32
1023 [ssh-keysign.c]
1024 bug #304, xfree(data) called to early; openssh@sigint.cs.purdue.edu
Ben Lindstromd5502182002-06-27 00:12:57 +00001025
Kevin Stevescfae58c2002-06-25 22:43:19 +0000102620020626
1027 - (stevesk) [monitor.c] remove duplicate proto15 dispatch entry for PAM
Ben Lindstromdaa21792002-06-25 23:15:30 +00001028 - (bal) OpenBSD CVS Sync
1029 - markus@cvs.openbsd.org 2002/06/23 21:34:07
1030 [channels.c]
1031 tcode is u_int
Ben Lindstromb48057b2002-06-25 23:16:31 +00001032 - markus@cvs.openbsd.org 2002/06/24 13:12:23
1033 [ssh-agent.1]
1034 the socket name contains ssh-agent's ppid; via mpech@ from form@
Ben Lindstrom4fed2be2002-06-25 23:17:36 +00001035 - markus@cvs.openbsd.org 2002/06/24 14:33:27
1036 [channels.c channels.h clientloop.c serverloop.c]
1037 move channel counter to u_int
Ben Lindstromc5a7f4f2002-06-25 23:19:13 +00001038 - markus@cvs.openbsd.org 2002/06/24 14:55:38
1039 [authfile.c kex.c ssh-agent.c]
1040 cat to (void) when output from buffer_get_X is ignored
Ben Lindstrom9b413972002-06-25 23:20:18 +00001041 - itojun@cvs.openbsd.org 2002/06/24 15:49:22
1042 [msg.c]
1043 printf type pedant
Ben Lindstromc2df3ec2002-06-25 23:21:41 +00001044 - deraadt@cvs.openbsd.org 2002/06/24 17:57:20
1045 [sftp-server.c sshpty.c]
1046 explicit (u_int) for uid and gid
Ben Lindstrom6398a0e2002-06-25 23:22:54 +00001047 - markus@cvs.openbsd.org 2002/06/25 16:22:42
1048 [authfd.c]
1049 unnecessary cast
Ben Lindstromfbcc3f72002-06-25 23:24:18 +00001050 - markus@cvs.openbsd.org 2002/06/25 18:51:04
1051 [sshd.c]
1052 lightweight do_setusercontext after chroot()
Ben Lindstrom52237272002-06-25 23:38:47 +00001053 - (bal) Updated AIX package build. Patch by dtucker@zip.com.au
Tim Rice2b3897c2002-06-25 16:45:42 -07001054 - (tim) [Makefile.in] fix test on installing ssh-rand-helper.8
Ben Lindstroma95fd3f2002-06-26 00:22:57 +00001055 - (bal) added back in error check for mmap(). I screwed up, Pointed
1056 out by stevesk@
Tim Ricee04ee922002-06-25 17:25:47 -07001057 - (tim) [README.privsep] UnixWare tip no longer needed.
Ben Lindstrom4e3c6312002-06-26 00:29:02 +00001058 - (bal) fixed NeXTStep missing munmap() issue. It defines HAVE_MMAP,
1059 but it all damned lies.
Kevin Steves40b011c2002-06-26 00:43:57 +00001060 - (stevesk) [README.privsep] more for sshd pseudo-account.
Tim Rice6de3dfd2002-06-25 19:28:55 -07001061 - (tim) [contrib/caldera/openssh.spec] add support for privsep
Damien Millerf18cd162002-06-26 19:12:59 +10001062 - (djm) setlogin needs pgid==pid on BSD/OS; from itojun@
Damien Milleraa151372002-06-26 19:14:08 +10001063 - (djm) OpenBSD CVS Sync
1064 - markus@cvs.openbsd.org 2002/06/26 08:53:12
1065 [bufaux.c]
1066 limit size of BNs to 8KB; ok provos/deraadt
Damien Miller468cd712002-06-26 19:14:25 +10001067 - markus@cvs.openbsd.org 2002/06/26 08:54:18
1068 [buffer.c]
1069 limit append to 1MB and buffers to 10MB
Damien Miller9403aa22002-06-26 19:14:43 +10001070 - markus@cvs.openbsd.org 2002/06/26 08:55:02
1071 [channels.c]
1072 limit # of channels to 10000
Damien Millera0796ca2002-06-26 19:15:07 +10001073 - markus@cvs.openbsd.org 2002/06/26 08:58:26
1074 [session.c]
1075 limit # of env vars to 1000; ok deraadt/djm
Damien Miller530a7542002-06-26 23:27:11 +10001076 - deraadt@cvs.openbsd.org 2002/06/26 13:20:57
1077 [monitor.c]
1078 be careful in mm_zalloc
Damien Miller990070a2002-06-26 23:51:06 +10001079 - deraadt@cvs.openbsd.org 2002/06/26 13:49:26
1080 [session.c]
1081 disclose less information from environment files; based on input
1082 from djm, and dschultz@uclink.Berkeley.EDU
Damien Millerfb7fd952002-06-26 23:58:39 +10001083 - markus@cvs.openbsd.org 2002/06/26 13:55:37
1084 [auth2-chall.c]
1085 make sure # of response matches # of queries, fixes int overflow;
1086 from ISS
Damien Miller3e36f9f2002-06-26 23:59:10 +10001087 - markus@cvs.openbsd.org 2002/06/26 13:56:27
1088 [version.h]
1089 3.4
Damien Millerf49035a2002-06-26 19:42:52 +10001090 - (djm) Require krb5 devel for RPM build w/ KrbV
Damien Miller136d4412002-06-26 23:05:16 +10001091 - (djm) Improve PAMAuthenticationViaKbdInt text from Nalin Dahyabhai
1092 <nalin@redhat.com>
Damien Millerd4b11d62002-06-26 23:57:12 +10001093 - (djm) Update spec files for release
Damien Miller78682022002-06-26 23:57:59 +10001094 - (djm) Fix int overflow in auth2-pam.c, similar to one discovered by ISS
Damien Miller3e36f9f2002-06-26 23:59:10 +10001095 - (djm) Release 3.4p1
Tim Ricea8959ae2002-06-26 11:05:32 -07001096 - (tim) [contrib/caldera/openssh.spec] remove 2 configure options I put in
1097 by mistake
Kevin Stevescfae58c2002-06-25 22:43:19 +00001098
Kevin Steves34f0d8f2002-06-24 16:26:49 +0000109920020625
1100 - (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh
Kevin Stevesd4866362002-06-24 16:49:22 +00001101 - (stevesk) [README.privsep] minor updates
Damien Millerd3f6ad22002-06-25 10:24:47 +10001102 - (djm) Create privsep directory and warn if privsep user is missing
1103 during make install
Ben Lindstromaa83b982002-06-25 02:28:22 +00001104 - (bal) Started list of PrivSep issues in TODO
Ben Lindstrom6b0c96a2002-06-25 03:22:03 +00001105 - (bal) if mmap() is substandard, don't allow compression on server side.
1106 Post 'event' we will add more options.
Tim Rice78688d72002-06-25 10:07:25 -07001107 - (tim) [contrib/caldera/openssh.spec] Sync with Caldera
Ben Lindstromb129be62002-06-25 17:12:26 +00001108 - (bal) moved aix_usrinfo() and noted not setting real TTY. Patch by
1109 dtucker@zip.com.au
Tim Rice8eff3192002-06-25 15:35:15 -07001110 - (tim) [acconfig.h configure.ac sshd.c] BROKEN_FD_PASSING fix from Markus
1111 for Cygwin, Cray, & SCO
Kevin Steves34f0d8f2002-06-24 16:26:49 +00001112
Ben Lindstrom2953d0f2002-06-23 21:20:34 +0000111320020624
1114 - OpenBSD CVS Sync
1115 - deraadt@cvs.openbsd.org 2002/06/23 03:25:50
1116 [tildexpand.c]
1117 KNF
Ben Lindstrom836f0e92002-06-23 21:21:30 +00001118 - deraadt@cvs.openbsd.org 2002/06/23 03:26:19
1119 [cipher.c key.c]
1120 KNF
Ben Lindstrom5c385522002-06-23 21:23:20 +00001121 - deraadt@cvs.openbsd.org 2002/06/23 03:30:58
1122 [scard.c ssh-dss.c ssh-rsa.c sshconnect.c sshconnect2.c sshd.c sshlogin.c
1123 sshpty.c]
1124 various KNF and %d for unsigned
Ben Lindstromb1f483f2002-06-23 21:27:18 +00001125 - deraadt@cvs.openbsd.org 2002/06/23 09:30:14
1126 [sftp-client.c sftp-client.h sftp-common.c sftp-int.c sftp-server.c
1127 sftp.c]
1128 bunch of u_int vs int stuff
Ben Lindstrom58d3b722002-06-23 21:28:13 +00001129 - deraadt@cvs.openbsd.org 2002/06/23 09:39:55
1130 [ssh-keygen.c]
1131 u_int stuff
Ben Lindstrome1353632002-06-23 21:29:23 +00001132 - deraadt@cvs.openbsd.org 2002/06/23 09:46:51
1133 [bufaux.c servconf.c]
1134 minor KNF. things the fingers do while you read
Ben Lindstrom822b6342002-06-23 21:38:49 +00001135 - deraadt@cvs.openbsd.org 2002/06/23 10:29:52
1136 [ssh-agent.c sshd.c]
1137 some minor KNF and %u
Ben Lindstrome23f4a32002-06-23 21:40:16 +00001138 - deraadt@cvs.openbsd.org 2002/06/23 20:39:45
1139 [session.c]
1140 compression_level is u_int
Ben Lindstrom8ada5d02002-06-23 21:42:50 +00001141 - deraadt@cvs.openbsd.org 2002/06/23 21:06:13
1142 [sshpty.c]
1143 KNF
Ben Lindstroma9d2c892002-06-23 21:48:28 +00001144 - deraadt@cvs.openbsd.org 2002/06/23 21:06:41
1145 [channels.c channels.h session.c session.h]
1146 display, screen, row, col, xpixel, ypixel are u_int; markus ok
Ben Lindstrom3f584742002-06-23 21:49:25 +00001147 - deraadt@cvs.openbsd.org 2002/06/23 21:10:02
1148 [packet.c]
1149 packet_get_int() returns unsigned for reason & seqnr
Ben Lindstroma9d2c892002-06-23 21:48:28 +00001150 - (bal) Also fixed IPADDR_IN_DISPLAY case where display, screen, row, col,
1151 xpixel are u_int.
1152
Ben Lindstrom2953d0f2002-06-23 21:20:34 +00001153
Kevin Steves90d5de72002-06-22 18:51:48 +0000115420020623
1155 - (stevesk) [configure.ac] bug #255 LOGIN_NEEDS_UTMPX for AIX.
Ben Lindstrom1a1b8512002-06-23 00:18:15 +00001156 - (bal) removed GNUism for getops in ssh-agent since glibc lacks optreset.
Ben Lindstrom883844d2002-06-23 00:20:50 +00001157 - (bal) add extern char *getopt. Based on report by dtucker@zip.com.au
Ben Lindstrom5590aa52002-06-23 00:30:30 +00001158 - OpenBSD CVS Sync
1159 - stevesk@cvs.openbsd.org 2002/06/22 02:00:29
1160 [ssh.h]
1161 correct comment
Ben Lindstrombf69e3b2002-06-23 00:31:24 +00001162 - stevesk@cvs.openbsd.org 2002/06/22 02:40:23
1163 [ssh.1]
1164 section 5 not 4 for ssh_config
Ben Lindstromc001cd32002-06-23 00:32:11 +00001165 - naddy@cvs.openbsd.org 2002/06/22 11:51:39
1166 [ssh.1]
1167 typo
Ben Lindstrom624e3f22002-06-23 00:32:57 +00001168 - stevesk@cvs.openbsd.org 2002/06/22 16:32:54
1169 [sshd.8]
1170 add /var/empty in FILES section
Ben Lindstrom2dfacb32002-06-23 00:33:47 +00001171 - stevesk@cvs.openbsd.org 2002/06/22 16:40:19
1172 [sshd.c]
1173 check /var/empty owner mode; ok provos@
Ben Lindstromc06bf702002-06-23 00:34:37 +00001174 - stevesk@cvs.openbsd.org 2002/06/22 16:41:57
1175 [scp.1]
1176 typo
Ben Lindstrom959de992002-06-23 00:35:25 +00001177 - stevesk@cvs.openbsd.org 2002/06/22 16:45:29
1178 [ssh-agent.1 sshd.8 sshd_config.5]
1179 use process ID vs. pid/PID/process identifier
Ben Lindstrom57f08002002-06-23 00:37:10 +00001180 - stevesk@cvs.openbsd.org 2002/06/22 20:05:27
1181 [sshd.c]
1182 don't call setsid() if debugging or run from inetd; no "Operation not
1183 permitted" errors now; ok millert@ markus@
Ben Lindstrome1c09122002-06-23 00:38:24 +00001184 - stevesk@cvs.openbsd.org 2002/06/22 23:09:51
1185 [monitor.c]
1186 save auth method before monitor_reset_key_state(); bugzilla bug #284;
1187 ok provos@
Kevin Steves90d5de72002-06-22 18:51:48 +00001188
Damien Miller1a3ccb02003-02-24 13:04:01 +11001189$Id: ChangeLog,v 1.2620 2003/02/24 02:04:01 djm Exp $