blob: 28c3400321775e293dc96a4451c6e6f1b1cb6383 [file] [log] [blame]
Damien Miller5e4471e2003-01-07 10:51:23 +1100120030107
2 - (djm) Bug #401: Work around Linux breakage with IPv6 mapped addresses.
3 Based on fix from yoshfuji@linux-ipv6.org
Damien Miller48cb8aa2003-01-07 12:19:32 +11004 - (djm) Bug #442: Check for and deny access to accounts with locked
5 passwords. Patch from dtucker@zip.com.au
Damien Millere8328192003-01-07 15:18:32 +11006 - (djm) Bug #26: Use local mkstemp() rather than glibc's silly one. Fixes
7 Can't pass KRB4 TGT passing. Fix from: jan.iven@cern.ch
Damien Miller64004b52003-01-07 16:15:20 +11008 - (djm) Fix Bug #442 for PAM case
Damien Miller5e4471e2003-01-07 10:51:23 +11009
Damien Miller8aff5cb2003-01-03 14:34:06 +11001020030103
11 - (djm) Bug #461: ssh-copy-id fails with no arguments. Patch from
12 cjwatson@debian.org
Damien Miller02e16ad2003-01-03 14:42:27 +110013 - (djm) Bug #460: Filling utmp[x]->ut_addr_v6 if present. Patch from
14 cjwatson@debian.org
Damien Millerdfedbf82003-01-03 14:52:53 +110015 - (djm) Bug #446: Set LOGIN env var to pw_name on AIX. Patch from
16 mii@ornl.gov
17
Kevin Steves678ee512003-01-01 23:43:55 +00001820030101
19 - (stevesk) [session.c sshlogin.c sshlogin.h] complete portable
20 parts of pass addrlen with sockaddr * fix.
21 from Hajimu UMEMOTO <ume@FreeBSD.org>
22
Ben Lindstrom44adb8f2002-12-23 02:00:23 +00002320021222
24 - (bal) OpenBSD CVS Sync
25 - fgsch@cvs.openbsd.org 2002/11/15 10:03:09
26 [authfile.c]
27 lseek(2) may return -1 when getting the public/private key lenght.
28 Simplify the code and check for errors using fstat(2).
29
30 Problem reported by Mauricio Sanchez, markus@ ok.
Ben Lindstromf49dbff2002-12-23 02:01:55 +000031 - markus@cvs.openbsd.org 2002/11/18 16:43:44
32 [clientloop.c]
33 don't overwrite SIG{INT,QUIT,TERM} handler if set to SIG_IGN;
34 e.g. if ssh is used for backup; report Joerg Schilling; ok millert@
Ben Lindstrom1f530832002-12-23 02:03:02 +000035 - markus@cvs.openbsd.org 2002/11/21 22:22:50
36 [dh.c]
37 debug->debug2
Ben Lindstrom064496f2002-12-23 02:04:22 +000038 - markus@cvs.openbsd.org 2002/11/21 22:45:31
39 [cipher.c kex.c packet.c sshconnect.c sshconnect2.c]
40 debug->debug2, unify debug messages
Ben Lindstrom93576d92002-12-23 02:06:19 +000041 - deraadt@cvs.openbsd.org 2002/11/21 23:03:51
42 [auth-krb5.c auth1.c hostfile.h monitor_wrap.c sftp-client.c sftp-int.c ssh-add.c ssh-rsa.c
43 sshconnect.c]
44 KNF
Ben Lindstrom40b95032002-12-23 02:53:08 +000045 - markus@cvs.openbsd.org 2002/11/21 23:04:33
Ben Lindstrom604dc722002-12-23 02:08:57 +000046 [ssh.c]
47 debug->debug2
Ben Lindstrom40b95032002-12-23 02:53:08 +000048 - stevesk@cvs.openbsd.org 2002/11/24 21:46:24
Ben Lindstrom2594d9a2002-12-23 02:09:59 +000049 [ssh-keysign.8]
50 typo: "the the"
Ben Lindstrome7ee7fe2002-12-23 02:11:02 +000051 - wcobb@cvs.openbsd.org 2002/11/26 00:45:03
52 [scp.c ssh-keygen.c]
53 Remove unnecessary fflush(stderr) calls, stderr is unbuffered by default.
54 ok markus@
Ben Lindstrom40b95032002-12-23 02:53:08 +000055 - stevesk@cvs.openbsd.org 2002/11/26 02:35:30
Ben Lindstrom9394d2f2002-12-23 02:11:54 +000056 [ssh-keygen.1]
57 remove outdated statement; ok markus@ deraadt@
Ben Lindstromacaac972002-12-23 02:13:37 +000058 - stevesk@cvs.openbsd.org 2002/11/26 02:38:54
59 [canohost.c]
60 KNF, comment and error message repair; ok markus@
Ben Lindstromc276c122002-12-23 02:14:51 +000061 - markus@cvs.openbsd.org 2002/11/27 17:53:35
62 [scp.c sftp.c ssh.c]
63 allow usernames with embedded '@', e.g. scp user@vhost@realhost:file /tmp;
64 http://bugzilla.mindrot.org/show_bug.cgi?id=447; ok mouring@, millert@
Ben Lindstrom611797e2002-12-23 02:15:57 +000065 - stevesk@cvs.openbsd.org 2002/12/04 04:36:47
66 [session.c]
67 remove xauth entries before add; PR 2994 from janjaap@stack.nl.
68 ok markus@
Ben Lindstrom418e0782002-12-23 02:22:09 +000069 - markus@cvs.openbsd.org 2002/12/05 11:08:35
70 [scp.c]
71 use roundup() similar to rcp/util.c and avoid problems with strange
72 filesystem block sizes, noted by tjr@freebsd.org; ok djm@
Ben Lindstrom40b95032002-12-23 02:53:08 +000073 - djm@cvs.openbsd.org 2002/12/06 05:20:02
Ben Lindstromd5767812002-12-23 02:23:37 +000074 [sftp.1]
75 Fix cut'n'paste error, spotted by matthias.riese@b-novative.de; ok deraadt@
Ben Lindstromb9fa6912002-12-23 02:24:54 +000076 - millert@cvs.openbsd.org 2002/12/09 16:50:30
77 [ssh.c]
78 Avoid setting optind to 0 as GNU getopt treats that like we do optreset.
79 markus@ OK
Ben Lindstrom46767602002-12-23 02:26:08 +000080 - markus@cvs.openbsd.org 2002/12/10 08:56:00
81 [session.c]
82 Make sure $SHELL points to the shell from the password file, even if shell
83 is overridden from login.conf; bug#453; semen at online.sinor.ru; ok millert@
Ben Lindstroma7433982002-12-23 02:41:41 +000084 - markus@cvs.openbsd.org 2002/12/10 19:26:50
85 [packet.c]
86 move tos handling to packet_set_tos; ok provos/henning/deraadt
Ben Lindstromfaa1ea82002-12-23 02:42:52 +000087 - markus@cvs.openbsd.org 2002/12/10 19:47:14
88 [packet.c]
89 static
Ben Lindstrom1d568f92002-12-23 02:44:36 +000090 - markus@cvs.openbsd.org 2002/12/13 10:03:15
91 [channels.c misc.c sshconnect2.c]
92 cleanup debug messages, more useful information for the client user.
Ben Lindstrom40b95032002-12-23 02:53:08 +000093 - markus@cvs.openbsd.org 2002/12/13 15:20:52
94 [scp.c]
95 1) include stalling time in total time
96 2) truncate filenames to 45 instead of 20 characters
97 3) print rate instead of progress bar, no more stars
98 4) scale output to tty width
99 based on a patch from Niels; ok fries@ lebel@ fgs@ millert@
Ben Lindstrom1b96cfb2002-12-23 02:58:17 +0000100 - (bal) [msg.c msg.h scp.c ssh-keysign.c sshconnect2.c] Resync CVS IDs since
101 we already did s/msg_send/ssh_msg_send/
Ben Lindstrom44adb8f2002-12-23 02:00:23 +0000102
Damien Millerab1c12a2002-12-05 20:59:33 +110010320021205
104 - (djm) PERL-free fixpaths from stuge-openssh-unix-dev@cdy.org
105
Tim Rice1c9e6882002-11-22 13:29:01 -080010620021122
107 - (tim) [configure.ac] fix STDPATH test for IRIX. First reported by
108 advax@triumf.ca. This type of solution tested by <herb@sgi.com>
109
Tim Ricebe239642002-11-13 15:55:55 -080011020021113
111 - (tim) [configure.ac] remove unused variables no_libsocket and no_libnsl
112
Tim Rice748fcf92002-11-13 15:50:04 -080011320021111
114 - (tim) [contrib/solaris/opensshd.in] add umask 022 so sshd.pid is
115 not world writable.
116
Ben Lindstrom08513812002-11-09 15:40:34 +000011720021109
118 - (bal) OpenBSD CVS Sync
119 - itojun@cvs.openbsd.org 2002/10/16 14:31:48
120 [sftp-common.c]
121 64bit pedant. %llu is "unsigned long long". markus ok
Ben Lindstrom0cc2a472002-11-09 15:41:39 +0000122 - markus@cvs.openbsd.org 2002/10/23 10:32:13
123 [packet.c]
124 use %u for u_int
Ben Lindstromee844912002-11-09 15:43:23 +0000125 - markus@cvs.openbsd.org 2002/10/23 10:40:16
126 [bufaux.c]
127 %u for u_int
Ben Lindstrom485075e2002-11-09 15:45:12 +0000128 - markus@cvs.openbsd.org 2002/11/04 10:07:53
129 [auth.c]
130 don't compare against pw_home if realpath fails for pw_home (seen
131 on AFS); ok djm@
Ben Lindstrom9bda7ae2002-11-09 15:46:24 +0000132 - markus@cvs.openbsd.org 2002/11/04 10:09:51
133 [packet.c]
134 log before send disconnect; ok djm@
Ben Lindstrom41ee2b02002-11-09 15:47:47 +0000135 - markus@cvs.openbsd.org 2002/11/05 19:45:20
136 [monitor.c]
137 handle overflows for size_t larger than u_int; siw@goneko.de, bug #425
Ben Lindstrom8e879cf2002-11-09 15:48:49 +0000138 - markus@cvs.openbsd.org 2002/11/05 20:10:37
139 [sftp-client.c]
140 typo; GaryF@livevault.com
Ben Lindstromc2faa4a2002-11-09 15:50:03 +0000141 - markus@cvs.openbsd.org 2002/11/07 16:28:47
142 [sshd.c]
143 log to stderr if -ie is given, bug #414, prj@po.cwru.edu
Ben Lindstromb6df73b2002-11-09 15:52:31 +0000144 - markus@cvs.openbsd.org 2002/11/07 22:08:07
145 [readconf.c readconf.h ssh-keysign.8 ssh-keysign.c]
146 we cannot use HostbasedAuthentication for enabling ssh-keysign(8),
147 because HostbasedAuthentication might be enabled based on the
148 target host and ssh-keysign(8) does not know the remote hostname
149 and not trust ssh(1) about the hostname, so we add a new option
150 EnableSSHKeysign; ok djm@, report from zierke@informatik.uni-hamburg.de
Ben Lindstrom007eb912002-11-09 15:54:08 +0000151 - markus@cvs.openbsd.org 2002/11/07 22:35:38
152 [scp.c]
153 check exit status from ssh, and exit(1) if ssh fails; bug#369;
154 binder@arago.de
Ben Lindstrom224313c2002-11-09 15:59:27 +0000155 - (bal) Update ssh-host-config and minor rewrite of bsd-cygwin_util.c
156 ntsec now default if cygwin version beginning w/ version 56. Patch
157 by Corinna Vinschen <vinschen@redhat.com>
Ben Lindstromf5397c02002-11-09 16:11:10 +0000158 - (bal) AIX does not log login attempts for unknown users (bug #432).
159 patch by dtucker@zip.com.au
Ben Lindstrom08513812002-11-09 15:40:34 +0000160
Damien Miller5a5da882002-10-21 10:13:35 +100016120021021
Damien Miller885929c2002-10-21 20:26:16 +1000162 - (djm) Bug #400: Kill ssh-rand-helper children on timeout, patch from
163 dtucker@zip.com.au
Damien Miller7b3f58c2002-10-21 10:50:25 +1000164 - (djm) Bug #317: FreeBSD needs libutil.h for openpty() Report from
165 dirk.meyer@dinoex.sub.org
Damien Miller5a5da882002-10-21 10:13:35 +1000166
Tim Rice94f628f2002-10-15 13:16:55 -070016720021015
Ben Lindstrom97e38d82002-10-16 00:13:52 +0000168 - (bal) Fix bug id 383 and only call loginrestrict for AIX if not root.
Ben Lindstrom3e006472002-10-16 00:24:03 +0000169 - (bal) More advanced strsep test by Darren Tucker <dtucker@zip.com.au>
Ben Lindstrom97e38d82002-10-16 00:13:52 +0000170
17120021015
Tim Rice94f628f2002-10-15 13:16:55 -0700172 - (tim) [contrib/caldera/openssh.spec] make ssh-agent setgid nobody
173
Ben Lindstromdc3c7572002-10-04 23:54:54 +000017420021004
175 - (bal) Disable post-authentication Privsep for OSF/1. It conflicts with
176 SIA.
177
Damien Milleraf9de382002-10-03 11:54:35 +100017820021003
179 - (djm) OpenBSD CVS Sync
180 - markus@cvs.openbsd.org 2002/10/01 20:34:12
181 [ssh-agent.c]
182 allow root to access the agent, since there is no protection from root.
Damien Miller7156fc72002-10-03 11:55:37 +1000183 - markus@cvs.openbsd.org 2002/10/01 13:24:50
184 [version.h]
185 OpenSSH 3.5
Damien Miller510d5132002-10-03 11:56:58 +1000186 - (djm) Bump RPM spec version numbers
Damien Miller901119b2002-10-04 11:10:04 +1000187 - (djm) Bug #406: s/msg_send/ssh_msg_send/ for Mac OS X 1.2
Damien Milleraf9de382002-10-03 11:54:35 +1000188
Damien Miller50f61232002-09-30 10:40:39 +100018920020930
Damien Millere9264972002-09-30 11:59:21 +1000190 - (djm) Tidy contrib/, add Makefile for GNOME passphrase dialogs,
191 tweak README
192 - (djm) OpenBSD CVS Sync
193 - mickey@cvs.openbsd.org 2002/09/27 10:42:09
194 [compat.c compat.h sshd.c]
195 add a generic match for a prober, such as sie big brother;
196 idea from stevesk@; markus@ ok
Damien Millerd8769622002-09-30 12:00:55 +1000197 - stevesk@cvs.openbsd.org 2002/09/27 15:46:21
198 [ssh.1]
199 clarify compression level protocol 1 only; ok markus@ deraadt@
Damien Miller50f61232002-09-30 10:40:39 +1000200
Damien Millerd681d262002-09-27 13:21:57 +100020120020927
202 - (djm) OpenBSD CVS Sync
203 - markus@cvs.openbsd.org 2002/09/25 11:17:16
204 [sshd_config]
205 sync LoginGraceTime with default
Damien Millerd27a76d2002-09-27 13:22:31 +1000206 - markus@cvs.openbsd.org 2002/09/25 15:19:02
207 [sshd.c]
208 typo; pilot@monkey.org
Damien Millerd94e5492002-09-27 13:25:58 +1000209 - markus@cvs.openbsd.org 2002/09/26 11:38:43
210 [auth1.c auth.h auth-krb4.c monitor.c monitor.h monitor_wrap.c]
211 [monitor_wrap.h]
212 krb4 + privsep; ok dugsong@, deraadt@
Damien Millerd681d262002-09-27 13:21:57 +1000213
Ben Lindstrom164725f2002-09-25 23:14:14 +000021420020925
215 - (bal) Fix issue where successfull login does not clear failure counts
216 in AIX. Patch by dtucker@zip.com.au ok by djm
Tim Rice81ed5182002-09-25 17:38:46 -0700217 - (tim) Cray fixes (bug 367) based on patch from Wendy Palm @ cray.
218 This does not include the deattack.c fixes.
Ben Lindstrom164725f2002-09-25 23:14:14 +0000219
Tim Rice2c961ce2002-09-23 16:54:10 -070022020020923
Damien Millerb2f844d2002-09-25 12:19:08 +1000221 - (djm) OpenBSD CVS Sync
222 - stevesk@cvs.openbsd.org 2002/09/23 20:46:27
223 [canohost.c]
224 change get_peer_ipaddr() and get_local_ipaddr() to not return NULL for
225 non-sockets; fixes a problem passing NULL to snprintf(). ok markus@
Damien Miller7db40c92002-09-25 12:19:39 +1000226 - markus@cvs.openbsd.org 2002/09/23 22:11:05
227 [monitor.c]
228 only call auth_krb5 if kerberos is enabled; ok deraadt@
Damien Milleref73f502002-09-25 12:20:17 +1000229 - markus@cvs.openbsd.org 2002/09/24 08:46:04
230 [monitor.c]
231 only call kerberos code for authctxt->valid
Damien Millerdcbb6c22002-09-25 12:20:52 +1000232 - todd@cvs.openbsd.org 2002/09/24 20:59:44
233 [sshd.8]
234 tweak the example $HOME/.ssh/rc script to not show on any cmdline the
235 sensitive data it handles. This fixes bug # 402 as reported by
236 kolya@mit.edu (Nickolai Zeldovich).
237 ok markus@ and stevesk@
Damien Millerb2f844d2002-09-25 12:19:08 +1000238
23920020923
Tim Rice2c961ce2002-09-23 16:54:10 -0700240 - (tim) [configure.ac] s/return/exit/ patch by dtucker@zip.com.au
241
Damien Millera0e45592002-09-22 01:25:35 +100024220020922
243 - (djm) OpenBSD CVS Sync
244 - stevesk@cvs.openbsd.org 2002/09/19 14:53:14
245 [compat.c]
Damien Miller2138d152002-09-22 01:26:00 +1000246 - markus@cvs.openbsd.org 2002/09/19 15:51:23
247 [ssh-add.c]
248 typo; cd@kalkatraz.de
Damien Miller16aed052002-09-22 01:26:27 +1000249 - stevesk@cvs.openbsd.org 2002/09/19 16:03:15
250 [serverloop.c]
251 log IP address also; ok markus@
Damien Miller6f0a1882002-09-22 01:26:51 +1000252 - stevesk@cvs.openbsd.org 2002/09/20 18:41:29
253 [auth.c]
254 log illegal user here for missing privsep case (ssh2).
255 this is executed in the monitor. ok markus@
Damien Millera0e45592002-09-22 01:25:35 +1000256
Damien Millerdb30b122002-09-19 11:46:58 +100025720020919
258 - (djm) OpenBSD CVS Sync
259 - stevesk@cvs.openbsd.org 2002/09/12 19:11:52
260 [ssh-agent.c]
261 %u for uid print; ok markus@
Damien Millerf37e2462002-09-19 11:47:55 +1000262 - stevesk@cvs.openbsd.org 2002/09/12 19:50:36
263 [session.c ssh.1]
264 add SSH_CONNECTION and deprecate SSH_CLIENT; bug #384. ok markus@
Damien Millere1383ce2002-09-19 11:49:37 +1000265 - stevesk@cvs.openbsd.org 2002/09/13 19:23:09
266 [channels.c sshconnect.c sshd.c]
267 remove use of SO_LINGER, it should not be needed. error check
268 SO_REUSEADDR. fixup comments. ok markus@
Damien Millera6eb2b72002-09-19 11:50:48 +1000269 - stevesk@cvs.openbsd.org 2002/09/16 19:55:33
270 [session.c]
271 log when _PATH_NOLOGIN exists; ok markus@
Damien Miller101c4a72002-09-19 11:51:21 +1000272 - stevesk@cvs.openbsd.org 2002/09/16 20:12:11
273 [sshd_config.5]
274 more details on X11Forwarding security issues and threats; ok markus@
Damien Miller86247e22002-09-19 11:51:53 +1000275 - stevesk@cvs.openbsd.org 2002/09/16 22:03:13
276 [sshd.8]
277 reference moduli(5) in FILES /etc/moduli.
Damien Miller9b037b82002-09-19 11:54:54 +1000278 - itojun@cvs.openbsd.org 2002/09/17 07:47:02
279 [channels.c]
280 don't quit while creating X11 listening socket.
281 http://mail-index.netbsd.org/current-users/2002/09/16/0005.html
282 got from portable. markus ok
Damien Miller8c4e18a2002-09-19 12:05:02 +1000283 - djm@cvs.openbsd.org 2002/09/19 01:58:18
284 [ssh.c sshconnect.c]
285 bugzilla.mindrot.org #223 - ProxyCommands don't exit.
286 Patch from dtucker@zip.com.au; ok markus@
Damien Millerdb30b122002-09-19 11:46:58 +1000287
Damien Miller4d53d392002-09-12 09:43:56 +100028820020912
Damien Miller10f30852002-09-12 14:49:00 +1000289 - (djm) Made GNOME askpass programs return non-zero if cancel button is
290 pressed.
Damien Miller771721f2002-09-12 10:32:59 +1000291 - (djm) Added getpeereid() replacement. Properly implemented for systems
292 with SO_PEERCRED support. Faked for systems which lack it.
Damien Miller9b481512002-09-12 10:43:29 +1000293 - (djm) Sync sys/tree.h with OpenBSD -current. Rename tree.h and
294 fake-queue.h to sys-tree.h and sys-queue.h
Damien Miller4d53d392002-09-12 09:43:56 +1000295 - (djm) OpenBSD CVS Sync
296 - markus@cvs.openbsd.org 2002/09/08 20:24:08
297 [hostfile.h]
298 no comma at end of enumerator list
Damien Miller25162f22002-09-12 09:47:29 +1000299 - itojun@cvs.openbsd.org 2002/09/09 06:48:06
300 [auth1.c auth.h auth-krb5.c monitor.c monitor.h]
301 [monitor_wrap.c monitor_wrap.h]
302 kerberos support for privsep. confirmed to work by lha@stacken.kth.se
303 patch from markus
Damien Millera10f5612002-09-12 09:49:15 +1000304 - markus@cvs.openbsd.org 2002/09/09 14:54:15
305 [channels.c kex.h key.c monitor.c monitor_wrap.c radix.c uuencode.c]
306 signed vs unsigned from -pedantic; ok henning@
Damien Miller538f1812002-09-12 09:51:10 +1000307 - markus@cvs.openbsd.org 2002/09/10 20:24:47
308 [ssh-agent.c]
309 check the euid of the connecting process with getpeereid(2);
310 ok provos deraadt stevesk
Damien Millerb5fdfaa2002-09-12 09:52:03 +1000311 - stevesk@cvs.openbsd.org 2002/09/11 17:55:03
312 [ssh.1]
313 add agent and X11 forwarding warning text from ssh_config.5; ok markus@
Damien Miller789e95d2002-09-12 09:52:46 +1000314 - stevesk@cvs.openbsd.org 2002/09/11 18:27:26
315 [authfd.c authfd.h ssh.c]
316 don't connect to agent to test for presence if we've previously
317 connected; ok markus@
Damien Millere1a49812002-09-12 09:54:25 +1000318 - djm@cvs.openbsd.org 2002/09/11 22:41:50
319 [sftp.1 sftp-client.c sftp-client.h sftp-common.c sftp-common.h]
320 [sftp-glob.c sftp-glob.h sftp-int.c sftp-server.c]
321 support for short/long listings and globbing in "ls"; ok markus@
Damien Miller622accf2002-09-12 10:34:13 +1000322 - djm@cvs.openbsd.org 2002/09/12 00:13:06
323 [sftp-int.c]
324 zap unused var introduced in last commit
Damien Miller4d53d392002-09-12 09:43:56 +1000325
Damien Miller71eb0c12002-09-11 10:29:11 +100032620020911
327 - (djm) Sync openbsd-compat with OpenBSD -current
328
Damien Millere9994cb2002-09-10 21:43:53 +100032920020910
330 - (djm) Bug #365: Read /.ssh/environment properly under CygWin.
331 Patch from Mark Bradshaw <bradshaw@staff.crosswalk.com>
Damien Millerc34e03e2002-09-10 22:26:17 +1000332 - (djm) Bug #138: Make protocol 1 blowfish work with old OpenSSL.
333 Patch from Robert Halubek <rob@adso.com.pl>
Damien Millere9994cb2002-09-10 21:43:53 +1000334
Damien Millerc1348632002-09-05 14:35:14 +100033520020905
336 - (djm) OpenBSD CVS Sync
337 - stevesk@cvs.openbsd.org 2002/09/04 18:52:42
338 [servconf.c sshd.8 sshd_config.5]
339 default LoginGraceTime to 2m; 1m may be too short for slow systems.
340 ok markus@
Damien Miller53998382002-09-05 16:32:02 +1000341 - (djm) Merge openssh-TODO.patch from Redhat (null) beta
Damien Miller44d5b602002-09-05 16:46:24 +1000342 - (djm) Add gnome-ssh-askpass2.c (gtk2) by merge with patch from
343 Nalin Dahyabhai <nalin@redhat.com>
Damien Miller005d4562002-09-05 16:53:20 +1000344 - (djm) Add support for building gtk2 password requestor from Redhat beta
Damien Millerc1348632002-09-05 14:35:14 +1000345
Damien Miller6cffb9a2002-09-04 16:20:26 +100034620020903
Damien Millerfc93d4b2002-09-04 23:26:29 +1000347 - (djm) Patch from itojun@ for Darwin OS: test getaddrinfo, reorder libcrypt
Damien Miller6b097922002-09-04 17:19:04 +1000348 - (djm) Fix Redhat RPM build dependancy test
Damien Miller6cffb9a2002-09-04 16:20:26 +1000349 - (djm) OpenBSD CVS Sync
350 - markus@cvs.openbsd.org 2002/08/12 10:46:35
351 [ssh-agent.c]
352 make ssh-agent setgid, disallow ptrace.
Damien Millerb83df8d2002-09-04 16:24:55 +1000353 - espie@cvs.openbsd.org 2002/08/21 11:20:59
354 [sshd.8]
355 `RSA' updated to refer to `public key', where it matters.
356 okay markus@
Damien Millerf771ab72002-09-04 16:25:52 +1000357 - stevesk@cvs.openbsd.org 2002/08/21 19:38:06
358 [servconf.c sshd.8 sshd_config sshd_config.5]
359 change LoginGraceTime default to 1 minute; ok mouring@ markus@
Damien Miller4efdfff2002-09-04 16:28:18 +1000360 - stevesk@cvs.openbsd.org 2002/08/21 20:10:28
361 [ssh-agent.c]
362 raise listen backlog; ok markus@
Damien Miller58f34862002-09-04 16:31:21 +1000363 - stevesk@cvs.openbsd.org 2002/08/22 19:27:53
364 [ssh-agent.c]
365 use common close function; ok markus@
Damien Miller06692862002-09-04 16:32:10 +1000366 - stevesk@cvs.openbsd.org 2002/08/22 19:38:42
367 [clientloop.c]
368 format with current EscapeChar; bugzilla #388 from wknox@mitre.org.
369 ok markus@
Damien Miller061d5b12002-09-04 16:33:31 +1000370 - stevesk@cvs.openbsd.org 2002/08/22 20:57:19
371 [ssh-agent.c]
372 shutdown(SHUT_RDWR) not needed before close here; ok markus@
Damien Millerde6f2de2002-09-04 16:37:26 +1000373 - markus@cvs.openbsd.org 2002/08/22 21:33:58
374 [auth1.c auth2.c]
375 auth_root_allowed() is handled by the monitor in the privsep case,
376 so skip this for use_privsep, ok stevesk@, fixes bugzilla #387/325
Damien Miller5a80bba2002-09-04 16:39:02 +1000377 - markus@cvs.openbsd.org 2002/08/22 21:45:41
378 [session.c]
379 send signal name (not signal number) in "exit-signal" message; noticed
380 by galb@vandyke.com
Damien Millerf7c23912002-09-04 16:39:48 +1000381 - stevesk@cvs.openbsd.org 2002/08/27 17:13:56
382 [ssh-rsa.c]
383 RSA_public_decrypt() returns -1 on error so len must be signed;
384 ok markus@
Damien Milleraf653042002-09-04 16:40:37 +1000385 - stevesk@cvs.openbsd.org 2002/08/27 17:18:40
386 [ssh_config.5]
387 some warning text for ForwardAgent and ForwardX11; ok markus@
Damien Millerebc23062002-09-04 16:45:09 +1000388 - stevesk@cvs.openbsd.org 2002/08/29 15:57:25
389 [monitor.c session.c sshlogin.c sshlogin.h]
390 pass addrlen with sockaddr *; from Hajimu UMEMOTO <ume@FreeBSD.org>
391 NOTE: there are also p-specific parts to this patch. ok markus@
Damien Miller147bba32002-09-04 16:46:06 +1000392 - stevesk@cvs.openbsd.org 2002/08/29 16:02:54
393 [ssh.1 ssh.c]
394 deprecate -P as UsePrivilegedPort defaults to no now; ok markus@
Damien Miller9b1dacd2002-09-04 16:47:35 +1000395 - stevesk@cvs.openbsd.org 2002/08/29 16:09:02
396 [ssh_config.5]
397 more on UsePrivilegedPort and setuid root; ok markus@
Damien Miller50b9a602002-09-04 16:50:06 +1000398 - stevesk@cvs.openbsd.org 2002/08/29 19:49:42
399 [ssh.c]
400 shrink initial privilege bracket for setuid case; ok markus@
Damien Miller05913ba2002-09-04 16:51:03 +1000401 - stevesk@cvs.openbsd.org 2002/08/29 22:54:10
402 [ssh_config.5 sshd_config.5]
403 state XAuthLocation is a full pathname
Damien Miller6cffb9a2002-09-04 16:20:26 +1000404
Ben Lindstrom0a4f7542002-08-20 18:36:25 +000040520020820
406 - OpenBSD CVS Sync
407 - millert@cvs.openbsd.org 2002/08/02 14:43:15
408 [monitor.c monitor_mm.c]
409 Change mm_zalloc() sanity checks to be more in line with what
410 we do in calloc() and add a check to monitor_mm.c.
411 OK provos@ and markus@
Ben Lindstromdc7adf22002-08-20 18:38:02 +0000412 - marc@cvs.openbsd.org 2002/08/02 16:00:07
413 [ssh.1 sshd.8]
414 note that .ssh/environment is only read when
415 allowed (PermitUserEnvironment in sshd_config).
416 OK markus@
Ben Lindstrom0e50d842002-08-20 18:39:14 +0000417 - markus@cvs.openbsd.org 2002/08/02 21:23:41
418 [ssh-rsa.c]
419 diff is u_int (2x); ok deraadt/provos
Ben Lindstrom0deb5d92002-08-20 18:40:03 +0000420 - markus@cvs.openbsd.org 2002/08/02 22:20:30
421 [ssh-rsa.c]
422 replace RSA_verify with our own version and avoid the OpenSSL ASN.1 parser
423 for authentication; ok deraadt/djm
Ben Lindstrome143f612002-08-20 18:41:15 +0000424 - aaron@cvs.openbsd.org 2002/08/08 13:50:23
425 [sshconnect1.c]
426 Use & to test if bits are set, not &&; markus@ ok.
Ben Lindstromd4ee3492002-08-20 18:42:13 +0000427 - stevesk@cvs.openbsd.org 2002/08/08 23:54:52
428 [auth.c]
429 typo in comment
Ben Lindstrom1f8cf4f2002-08-20 18:43:27 +0000430 - stevesk@cvs.openbsd.org 2002/08/09 17:21:42
431 [sshd_config.5]
432 use Op for mdoc conformance; from esr@golux.thyrsus.com
433 ok aaron@
Ben Lindstrom15b61202002-08-20 18:44:24 +0000434 - stevesk@cvs.openbsd.org 2002/08/09 17:41:12
435 [sshd_config.5]
436 proxy vs. fake display
Ben Lindstrombd9bf382002-08-20 18:54:20 +0000437 - stevesk@cvs.openbsd.org 2002/08/12 17:30:35
438 [ssh.1 sshd.8 sshd_config.5]
439 more PermitUserEnvironment; ok markus@
Ben Lindstrom3541f182002-08-20 19:03:20 +0000440 - stevesk@cvs.openbsd.org 2002/08/17 23:07:14
441 [ssh.1]
442 ForwardAgent has defaulted to no for over 2 years; be more clear here.
Ben Lindstrom479b4762002-08-20 19:04:51 +0000443 - stevesk@cvs.openbsd.org 2002/08/17 23:55:01
444 [ssh_config.5]
445 ordered list here
Ben Lindstrom39621192002-08-21 02:54:11 +0000446 - (bal) [defines.h] Some platforms don't have SIZE_T_MAX. So assign
447 it to ULONG_MAX.
Ben Lindstrom0a4f7542002-08-20 18:36:25 +0000448
Tim Riced730b782002-08-13 18:52:10 -070044920020813
450 - (tim) [configure.ac] Display OpenSSL header/library version.
451 Patch by dtucker@zip.com.au
452
Ben Lindstrom3ed66402002-08-01 01:21:56 +000045320020731
454 - (bal) OpenBSD CVS Sync
455 - markus@cvs.openbsd.org 2002/07/24 16:11:18
456 [hostfile.c hostfile.h sshconnect.c]
457 print out all known keys for a host if we get a unknown host key,
458 see discussion at http://marc.theaimsgroup.com/?t=101069210100016&r=1&w=4
459
460 the ssharp mitm tool attacks users in a similar way, so i'd like to
461 pointed out again:
462 A MITM attack is always possible if the ssh client prints:
463 The authenticity of host 'bla' can't be established.
464 (protocol version 2 with pubkey authentication allows you to detect
465 MITM attacks)
Ben Lindstrom8d631e82002-08-01 01:25:00 +0000466 - mouring@cvs.openbsd.org 2002/07/25 01:16:59
467 [sftp.c]
468 FallBackToRsh does not exist anywhere else. Remove it from here.
469 OK deraadt.
Ben Lindstrom4b99be82002-08-01 01:26:29 +0000470 - markus@cvs.openbsd.org 2002/07/29 18:57:30
471 [sshconnect.c]
472 print file:line
Ben Lindstrom5d860f02002-08-01 01:28:38 +0000473 - markus@cvs.openbsd.org 2002/07/30 17:03:55
474 [auth-options.c servconf.c servconf.h session.c sshd_config sshd_config.5]
475 add PermitUserEnvironment (off by default!); from dot@dotat.at;
476 ok provos, deraadt
Ben Lindstrom3ed66402002-08-01 01:21:56 +0000477
Ben Lindstrom18d2b5d2002-07-30 19:32:07 +000047820020730
479 - (bal) [uidswap.c] SCO compile correction by gert@greenie.muc.de
480
Kevin Steves6a998eb2002-07-28 20:24:07 +000048120020728
482 - (stevesk) [auth-pam.c] should use PAM_MSG_MEMBER(); from solar
Kevin Stevese7dbdf72002-07-28 20:31:18 +0000483 - (stevesk) [CREDITS] solar
Kevin Steves4bdb5472002-07-28 20:42:23 +0000484 - (stevesk) [ssh-rand-helper.c] RAND_bytes() and SHA1_Final() unsigned
485 char arg.
Kevin Steves6a998eb2002-07-28 20:24:07 +0000486
Damien Miller6d8d7882002-07-25 14:36:24 +100048720020725
488 - (djm) Remove some cruft from INSTALL
Damien Millera7609f52002-07-25 14:40:22 +1000489 - (djm) Latest config.guess and config.sub from ftp://ftp.gnu.org/gnu/config/
Damien Miller6d8d7882002-07-25 14:36:24 +1000490
Ben Lindstrom6f52b3e2002-07-23 21:00:17 +000049120020723
492 - (bal) [bsd-cray.c bsd-cray.h] Part 2 of Cray merger.
Ben Lindstrom82ec9832002-07-23 21:05:17 +0000493 - (bal) sync ID w/ ssh-agent.c
Ben Lindstrom264ee302002-07-23 21:01:56 +0000494 - (bal) OpenBSD Sync
495 - markus@cvs.openbsd.org 2002/07/19 15:43:33
496 [log.c log.h session.c sshd.c]
497 remove fatal cleanups after fork; based on discussions with and code
498 from solar.
Ben Lindstromee8d52d2002-07-23 21:03:02 +0000499 - stevesk@cvs.openbsd.org 2002/07/19 17:42:40
500 [ssh.c]
501 display a warning from ssh when XAuthLocation does not exist or xauth
502 returned no authentication data. ok markus@
Ben Lindstrom218a07d2002-07-23 21:06:45 +0000503 - stevesk@cvs.openbsd.org 2002/07/21 18:32:20
504 [auth-options.c]
505 unneeded includes
Ben Lindstrom3cc44502002-07-23 21:07:45 +0000506 - stevesk@cvs.openbsd.org 2002/07/21 18:34:43
507 [auth-options.h]
508 remove invalid comment
Ben Lindstromb9051ec2002-07-23 21:11:09 +0000509 - markus@cvs.openbsd.org 2002/07/22 11:03:06
510 [session.c]
511 fallback to _PATH_STDPATH on setusercontext+LOGIN_SETPATH errors;
Ben Lindstrom7cea16b2002-07-23 21:13:40 +0000512 - stevesk@cvs.openbsd.org 2002/07/22 17:32:56
513 [monitor.c]
514 u_int here; ok provos@
Ben Lindstrom41daec72002-07-23 21:15:13 +0000515 - stevesk@cvs.openbsd.org 2002/07/23 16:03:10
516 [sshd.c]
517 utmp_len is unsigned; display error consistent with other options.
518 ok markus@
Ben Lindstrom1fa330c2002-07-23 21:29:49 +0000519 - stevesk@cvs.openbsd.org 2002/07/15 17:15:31
520 [uidswap.c]
521 little more debugging; ok markus@
Ben Lindstrom7cea16b2002-07-23 21:13:40 +0000522
Ben Lindstrombeb5f332002-07-22 15:28:53 +000052320020722
524 - (bal) AIX tty data limiting patch fix by leigh@solinno.co.uk
Kevin Steves066e1ab2002-07-22 16:20:29 +0000525 - (stevesk) [xmmap.c] missing prototype for fatal()
Ben Lindstrom232ccf72002-07-22 23:34:25 +0000526 - (bal) [configure.ac defines.h loginrec.c sshd.c sshpty.c] Partial sync
527 with Cray (mostly #ifdef renaming). Patch by wendyp@cray.com.
Ben Lindstrom762104e2002-07-23 00:00:05 +0000528 - (bal) [configure.ac] Missing ;; from cray patch.
Ben Lindstrom446d8862002-07-23 00:03:33 +0000529 - (bal) [monitor_mm.c openbsd-compat/xmmap.h] Move xmmap() defines
530 into it's own header.
Kevin Steves38b050a2002-07-23 00:44:07 +0000531 - (stevesk) [auth-pam.[ch] session.c] pam_getenvlist() must be
532 freed by the caller; add free_pam_environment() and use it.
Kevin Steves6fa740b2002-07-23 00:51:53 +0000533 - (stevesk) [auth-pam.c] typo in comment
Ben Lindstrombeb5f332002-07-22 15:28:53 +0000534
Kevin Steves6cdecd02002-07-21 17:26:54 +000053520020721
536 - (stevesk) [auth-pam.c] merge cosmetic changes from solar's
537 openssh-3.4p1-owl-password-changing.diff
Kevin Steves63007d42002-07-21 17:57:01 +0000538 - (stevesk) [auth-pam.c] merge rest of solar's PAM patch;
539 PAM_NEW_AUTHTOK_REQD remains in #if 0 for now.
Kevin Steves3429a1b2002-07-21 22:49:47 +0000540 - (stevesk) [auth-pam.c] cast to avoid initialization type mismatch
541 warning on pam_conv struct conversation function.
Kevin Steves7ba49702002-07-21 23:16:00 +0000542 - (stevesk) [auth-pam.h] license
Kevin Steves21e04eb2002-07-21 23:20:07 +0000543 - (stevesk) [auth-pam.h] unneeded include
Kevin Steves287077e2002-07-21 23:59:39 +0000544 - (stevesk) [auth-pam.[ch] ssh.h] move SSHD_PAM_SERVICE to auth-pam.h
Kevin Steves6cdecd02002-07-21 17:26:54 +0000545
Kevin Steves3a881912002-07-20 19:05:40 +000054620020720
547 - (stevesk) [ssh-keygen.c] bug #231: always init/seed_rng().
548
Tim Ricef1a10012002-07-19 11:57:57 -070054920020719
550 - (tim) [contrib/solaris/buildpkg.sh] create privsep user/group if needed.
551 Patch by dtucker@zip.com.au
Tim Ricef028f1e2002-07-19 12:41:10 -0700552 - (tim) [configure.ac] test for libxnet on HP. Patch by dtucker@zip.com.au
Tim Ricef1a10012002-07-19 11:57:57 -0700553
Tim Rice76645842002-07-18 11:34:29 -070055420020718
555 - (tim) [defines.h] Bug 313 patch by dirk.meyer@dinoex.sub.org
556 - (tim) [monitor_mm.c] add missing declaration for xmmap(). Reported
557 by ayamura@ayamura.org
Tim Rice907881e2002-07-18 11:44:50 -0700558 - (tim) [configure.ac] Bug 267 rework int64_t test.
Tim Riceeae876e2002-07-18 11:49:32 -0700559 - (tim) [includes.h] Bug 267 add stdint.h
Tim Rice76645842002-07-18 11:34:29 -0700560
Ben Lindstrom2faabf32002-07-18 01:04:50 +000056120020717
562 - (bal) aixbff package updated by dtucker@zip.com.au
Tim Ricee22be3b2002-07-17 19:20:07 -0700563 - (tim) [configure.ac] change how we do paths in AC_PATH_PROGS tests
564 for autoconf 2.53. Based on a patch by jrj@purdue.edu
Ben Lindstrom2faabf32002-07-18 01:04:50 +0000565
Tim Riceffaf4452002-07-16 14:24:38 -070056620020716
567 - (tim) [contrib/solaris/opensshd.in] Only kill sshd if .pid file found
568
Ben Lindstrom728aa7e2002-07-15 17:48:11 +000056920020715
570 - (bal) OpenBSD CVS Sync
571 - itojun@cvs.openbsd.org 2002/07/12 13:29:09
572 [sshconnect.c]
573 print connect failure during debugging mode.
Ben Lindstromc491b0d2002-07-15 17:52:49 +0000574 - markus@cvs.openbsd.org 2002/07/12 15:50:17
575 [cipher.c]
576 EVP_CIPH_CUSTOM_IV for our own rijndael
Ben Lindstrom938b8282002-07-15 17:58:34 +0000577 - (bal) Remove unused tty defined in do_setusercontext() pointed out by
578 dtucker@zip.com.au plus a a more KNF since I am near it.
Ben Lindstrom104c3fe2002-07-15 18:49:20 +0000579 - (bal) Privsep user creation support in Solaris buildpkg.sh by
580 dtucker@zip.com.au
Ben Lindstrom728aa7e2002-07-15 17:48:11 +0000581
Tim Rice95210192002-07-14 10:02:20 -070058220020714
583 - (tim) [Makefile.in] replace "id sshd" with "sshd -t"
Tim Rice40017b02002-07-14 13:36:49 -0700584 - (bal/tim) [acconfig.h configure.ac monitor_mm.c servconf.c
585 openbsd-compat/Makefile.in] support compression on platforms that
586 have no/broken MAP_ANON. Moved code to openbsd-compat/xmmap.c
587 Based on patch from nalin@redhat.com of code extracted from Owl's package
Tim Ricea0911592002-07-14 14:43:57 -0700588 - (tim) [ssh_prng_cmds.in] Bug 323 arp -n flag doesn't exist under Solaris.
589 report by chris@by-design.net
Tim Ricecdb82942002-07-14 15:33:20 -0700590 - (tim) [loginrec.c] Bug 347: Fix typo (WTMPX_FILE) report by rodney@bond.net
Tim Rice370e0ba2002-07-14 15:50:51 -0700591 - (tim) [loginrec.c] Bug 348: add missing found = 1; to wtmpx_islogin()
592 report by rodney@bond.net
Tim Rice95210192002-07-14 10:02:20 -0700593
Tim Rice1363b3c2002-07-12 09:04:06 -070059420020712
595 - (tim) [Makefile.in] quiet down install-files: and check-user:
Tim Rice4796a292002-07-12 18:11:24 -0700596 - (tim) [configure.ac] remove unused filepriv line
Tim Rice1363b3c2002-07-12 09:04:06 -0700597
Tim Rice68273952002-07-10 07:40:11 -070059820020710
599 - (tim) [contrib/cygwin/ssh-host-config] explicitely sets the permissions
600 on /var/empty to 755 Patch by vinschen@redhat.com
Ben Lindstromefee0592002-07-11 03:54:43 +0000601 - (bal) OpenBSD CVS Sync
602 - itojun@cvs.openbsd.org 2002/07/09 11:56:50
603 [sshconnect.c]
604 silently try next address on connect(2). markus ok
Ben Lindstrome9827732002-07-11 03:56:46 +0000605 - itojun@cvs.openbsd.org 2002/07/09 11:56:27
606 [canohost.c]
607 suppress log on reverse lookup failiure, as there's no real value in
608 doing so.
609 markus ok
Ben Lindstromba8df7d2002-07-11 03:58:11 +0000610 - itojun@cvs.openbsd.org 2002/07/09 12:04:02
611 [sshconnect.c]
612 ed static function (less warnings)
Ben Lindstrom9c445542002-07-11 03:59:18 +0000613 - stevesk@cvs.openbsd.org 2002/07/09 17:46:25
614 [sshd_config.5]
615 clarify no preference ordering in protocol list; ok markus@
Ben Lindstroma6cd75c2002-07-11 04:00:19 +0000616 - itojun@cvs.openbsd.org 2002/07/10 10:28:15
617 [sshconnect.c]
618 bark if all connection attempt fails.
Ben Lindstrom6f893882002-07-11 04:01:29 +0000619 - deraadt@cvs.openbsd.org 2002/07/10 17:53:54
620 [rijndael.c]
621 use right sizeof in memcpy; markus ok
Tim Rice68273952002-07-10 07:40:11 -0700622
Ben Lindstrom99a4e142002-07-09 14:06:40 +000062320020709
624 - (bal) NO_IPPORT_RESERVED_CONCEPT used instead of CYGWIN so other platforms
625 lacking that concept can share it. Patch by vinschen@redhat.com
626
Tim Rice88177242002-07-08 19:02:10 -070062720020708
628 - (tim) [openssh/contrib/solaris/buildpkg.sh] add PKG_INSTALL_ROOT to
629 work in a jumpstart environment. patch by kbrint@rufus.net
Tim Rice2d0bf3d2002-07-08 19:10:05 -0700630 - (tim) [Makefile.in] workaround for broken pakadd on some systems.
Tim Ricecbb90662002-07-08 19:17:10 -0700631 - (tim) [configure.ac] fix libc89 utimes test. Mention default path for
632 --with-privsep-path=
Tim Rice88177242002-07-08 19:02:10 -0700633
Tim Ricecc252062002-07-07 13:30:45 -070063420020707
635 - (tim) [Makefile.in] use umask instead of chmod on $(PRIVSEP_PATH)
Tim Rice9dd30812002-07-07 13:43:36 -0700636 - (tim) [acconfig.h configure.ac sshd.c]
637 s/BROKEN_FD_PASSING/DISABLE_FD_PASSING/
Tim Ricee475a3c2002-07-07 14:07:46 -0700638 - (tim) [contrib/cygwin/ssh-host-config] sshd account creation fixes
639 patch from vinschen@redhat.com
Ben Lindstrom8abe7362002-07-07 22:07:10 +0000640 - (bal) [realpath.c] Updated with OpenBSD tree.
Ben Lindstromc51b9242002-07-07 22:10:15 +0000641 - (bal) OpenBSD CVS Sync
642 - deraadt@cvs.openbsd.org 2002/07/04 04:15:33
643 [key.c monitor_wrap.c sftp-glob.c ssh-dss.c ssh-rsa.c]
644 patch memory leaks; grendel@zeitbombe.org
Ben Lindstrom8b2eecd2002-07-07 22:11:51 +0000645 - deraadt@cvs.openbsd.org 2002/07/04 08:12:15
646 [channels.c packet.c]
647 blah blah minor nothing as i read and re-read and re-read...
Ben Lindstrom2bf759c2002-07-07 22:13:31 +0000648 - markus@cvs.openbsd.org 2002/07/04 10:41:47
649 [key.c monitor_wrap.c ssh-dss.c ssh-rsa.c]
650 don't allocate, copy, and discard if there is not interested in the data;
651 ok deraadt@
Ben Lindstrom8e8ef2a2002-07-07 22:14:55 +0000652 - deraadt@cvs.openbsd.org 2002/07/06 01:00:49
653 [log.c]
654 KNF
Ben Lindstrom965710f2002-07-07 22:17:22 +0000655 - deraadt@cvs.openbsd.org 2002/07/06 01:01:26
656 [ssh-keyscan.c]
657 KNF, realloc fix, and clean usage
Ben Lindstrom6a9fbc92002-07-07 22:19:13 +0000658 - stevesk@cvs.openbsd.org 2002/07/06 17:47:58
659 [ssh-keyscan.c]
660 unused variable
Ben Lindstrom5c98db52002-07-07 22:25:29 +0000661 - (bal) Minor KNF on ssh-keyscan.c
Tim Ricecc252062002-07-07 13:30:45 -0700662
Tim Ricee958ed32002-07-05 07:12:33 -070066320020705
664 - (tim) [configure.ac] AIX 4.2.1 has authenticate() in libs.
665 Reported by Darren Tucker <dtucker@zip.com.au>
Tim Riceb66e2922002-07-05 16:22:32 -0700666 - (tim) [contrib/cygwin/ssh-host-config] double slash corrction
667 from vinschen@redhat.com
Tim Ricee958ed32002-07-05 07:12:33 -0700668
Ben Lindstrom92ea0ea2002-07-04 18:11:09 +000066920020704
670 - (bal) Limit data to TTY for AIX only (Newer versions can't handle the
671 faster data rate) Bug #124
Ben Lindstrom604de562002-07-04 18:20:51 +0000672 - (bal) glob.c defines TILDE and AIX also defines it. #undef it first.
673 bug #265
Ben Lindstromd00a1a12002-07-04 19:33:49 +0000674 - (bal) One too many nulls in ports-aix.c
Ben Lindstrom92ea0ea2002-07-04 18:11:09 +0000675
Ben Lindstrom6dbf3002002-07-03 23:33:19 +000067620020703
677 - (bal) Updated contrib/cygwin/ patch by vinschen@redhat.com
Ben Lindstrom723e29a2002-07-03 23:50:00 +0000678 - (bal) minor correction to utimes() replacement. Patch by
679 onoe@sm.sony.co.jp
Ben Lindstrom04f9af72002-07-04 00:03:56 +0000680 - OpenBSD CVS Sync
681 - markus@cvs.openbsd.org 2002/06/27 08:49:44
682 [dh.c ssh-keyscan.c sshconnect.c]
683 more checks for NULL pointers; from grendel@zeitbombe.org; ok deraadt@
Ben Lindstrom35a2cb92002-07-04 00:05:06 +0000684 - deraadt@cvs.openbsd.org 2002/06/27 09:08:00
685 [monitor.c]
686 improve mm_zalloc check; markus ok
Ben Lindstromeec16fc2002-07-04 00:06:15 +0000687 - deraadt@cvs.openbsd.org 2002/06/27 10:35:47
688 [auth2-none.c monitor.c sftp-client.c]
689 use xfree()
Ben Lindstromedd098b2002-07-04 00:07:13 +0000690 - stevesk@cvs.openbsd.org 2002/06/27 19:49:08
691 [ssh-keyscan.c]
692 use convtime(); ok markus@
Ben Lindstroma7961622002-07-04 00:08:23 +0000693 - millert@cvs.openbsd.org 2002/06/28 01:49:31
694 [monitor_mm.c]
695 tree(3) wants an int return value for its compare functions and
696 the difference between two pointers is not an int. Just do the
697 safest thing and store the result in a long and then return 0,
698 -1, or 1 based on that result.
Ben Lindstromb1bdc5a2002-07-04 00:09:26 +0000699 - deraadt@cvs.openbsd.org 2002/06/28 01:50:37
700 [monitor_wrap.c]
701 use ssize_t
Ben Lindstromfbbfa842002-07-04 00:10:34 +0000702 - deraadt@cvs.openbsd.org 2002/06/28 10:08:25
703 [sshd.c]
704 range check -u option at invocation
Ben Lindstrom810af962002-07-04 00:11:40 +0000705 - deraadt@cvs.openbsd.org 2002/06/28 23:05:06
706 [sshd.c]
707 gidset[2] -> gidset[1]; markus ok
Ben Lindstrom5a9d0ea2002-07-04 00:12:53 +0000708 - deraadt@cvs.openbsd.org 2002/06/30 21:54:16
709 [auth2.c session.c sshd.c]
710 lint asks that we use names that do not overlap
Ben Lindstroma962c2f2002-07-04 00:14:17 +0000711 - deraadt@cvs.openbsd.org 2002/06/30 21:59:45
712 [auth-bsdauth.c auth-skey.c auth2-chall.c clientloop.c key.c
713 monitor_wrap.c monitor_wrap.h scard.h session.h sftp-glob.c ssh.c
714 sshconnect2.c sshd.c]
715 minor KNF
Ben Lindstromfd2aace2002-07-04 00:15:22 +0000716 - deraadt@cvs.openbsd.org 2002/07/01 16:15:25
717 [msg.c]
718 %u
Ben Lindstrom343010a2002-07-04 00:16:25 +0000719 - markus@cvs.openbsd.org 2002/07/01 19:48:46
720 [sshconnect2.c]
721 for compression=yes, we fallback to no-compression if the server does
722 not support compression, vice versa for compression=no. ok mouring@
Ben Lindstrom43ce2c82002-07-04 00:17:33 +0000723 - markus@cvs.openbsd.org 2002/07/03 09:55:38
724 [ssh-keysign.c]
725 use RSA_blinding_on() for rsa hostkeys (suggested by Bill Sommerfeld)
726 in order to avoid a possible Kocher timing attack pointed out by Charles
727 Hannum; ok provos@
Ben Lindstrom5d35a2f2002-07-04 00:19:40 +0000728 - markus@cvs.openbsd.org 2002/07/03 14:21:05
729 [ssh-keysign.8 ssh-keysign.c ssh.c ssh_config]
730 re-enable ssh-keysign's sbit, but make ssh-keysign read
731 /etc/ssh/ssh_config and exit if HostbasedAuthentication is disabled
732 globally. based on discussions with deraadt, itojun and sommerfeld;
733 ok itojun@
Ben Lindstrome06eb682002-07-04 00:27:21 +0000734 - (bal) Failed password attempts don't increment counter on AIX. Bug #145
Ben Lindstromee3a8e42002-07-04 03:07:15 +0000735 - (bal) Missed Makefile.in change. keysign needs readconf.o
Ben Lindstrom51b24882002-07-04 03:08:40 +0000736 - (bal) Clean up aix_usrinfo(). Ignore TTY= period I guess.
Ben Lindstrome06eb682002-07-04 00:27:21 +0000737
Damien Miller23fe57c2002-07-02 17:08:23 +100073820020702
739 - (djm) Use PAM_MSG_MEMBER for PAM_TEXT_INFO messages, use xmalloc &
740 friends consistently. Spotted by Solar Designer <solar@openwall.com>
741
Ben Lindstromde07cbf2002-06-28 16:48:11 +000074220020629
743 - (bal) fix to auth2-pam.c to swap fatal() arguments, A bit of style
744 clean up while I'm near it.
745
Kevin Stevesbdf3e892002-06-27 16:59:50 +000074620020628
747 - (stevesk) [sshd_config] PAMAuthenticationViaKbdInt no; commented
748 options should contain default value. from solar.
Ben Lindstrom59627352002-06-27 18:02:21 +0000749 - (bal) Cygwin uid0 fix by vinschen@redhat.com
Ben Lindstromdd21fe92002-06-27 18:23:20 +0000750 - (bal) s/config.h/includes.h/ in openbsd-compat/ for *.c. Otherwise wise
751 have issues of our fixes not propogating right (ie bcopy instead of
752 memmove). OK tim
Ben Lindstrom68e83112002-06-28 00:37:33 +0000753 - (bal) FreeBSD needs <sys/types.h> to detect if mmap() is supported.
754 Bug #303
Kevin Stevesbdf3e892002-06-27 16:59:50 +0000755
Kevin Steves3a881912002-07-20 19:05:40 +000075620020627
Ben Lindstromd5502182002-06-27 00:12:57 +0000757 - OpenBSD CVS Sync
758 - deraadt@cvs.openbsd.org 2002/06/26 14:49:36
759 [monitor.c]
760 correct %u
Ben Lindstromd5bf46e2002-06-27 00:21:03 +0000761 - deraadt@cvs.openbsd.org 2002/06/26 14:50:04
762 [monitor_fdpass.c]
763 use ssize_t for recvmsg() and sendmsg() return
Ben Lindstrom33907492002-06-27 00:21:59 +0000764 - markus@cvs.openbsd.org 2002/06/26 14:51:33
765 [ssh-add.c]
766 fix exit code for -X/-x
Ben Lindstrom08512492002-06-27 00:23:02 +0000767 - deraadt@cvs.openbsd.org 2002/06/26 15:00:32
768 [monitor_wrap.c]
769 more %u
Ben Lindstromfe275982002-06-27 00:25:07 +0000770 - markus@cvs.openbsd.org 2002/06/26 22:27:32
771 [ssh-keysign.c]
772 bug #304, xfree(data) called to early; openssh@sigint.cs.purdue.edu
Ben Lindstromd5502182002-06-27 00:12:57 +0000773
Kevin Stevescfae58c2002-06-25 22:43:19 +000077420020626
775 - (stevesk) [monitor.c] remove duplicate proto15 dispatch entry for PAM
Ben Lindstromdaa21792002-06-25 23:15:30 +0000776 - (bal) OpenBSD CVS Sync
777 - markus@cvs.openbsd.org 2002/06/23 21:34:07
778 [channels.c]
779 tcode is u_int
Ben Lindstromb48057b2002-06-25 23:16:31 +0000780 - markus@cvs.openbsd.org 2002/06/24 13:12:23
781 [ssh-agent.1]
782 the socket name contains ssh-agent's ppid; via mpech@ from form@
Ben Lindstrom4fed2be2002-06-25 23:17:36 +0000783 - markus@cvs.openbsd.org 2002/06/24 14:33:27
784 [channels.c channels.h clientloop.c serverloop.c]
785 move channel counter to u_int
Ben Lindstromc5a7f4f2002-06-25 23:19:13 +0000786 - markus@cvs.openbsd.org 2002/06/24 14:55:38
787 [authfile.c kex.c ssh-agent.c]
788 cat to (void) when output from buffer_get_X is ignored
Ben Lindstrom9b413972002-06-25 23:20:18 +0000789 - itojun@cvs.openbsd.org 2002/06/24 15:49:22
790 [msg.c]
791 printf type pedant
Ben Lindstromc2df3ec2002-06-25 23:21:41 +0000792 - deraadt@cvs.openbsd.org 2002/06/24 17:57:20
793 [sftp-server.c sshpty.c]
794 explicit (u_int) for uid and gid
Ben Lindstrom6398a0e2002-06-25 23:22:54 +0000795 - markus@cvs.openbsd.org 2002/06/25 16:22:42
796 [authfd.c]
797 unnecessary cast
Ben Lindstromfbcc3f72002-06-25 23:24:18 +0000798 - markus@cvs.openbsd.org 2002/06/25 18:51:04
799 [sshd.c]
800 lightweight do_setusercontext after chroot()
Ben Lindstrom52237272002-06-25 23:38:47 +0000801 - (bal) Updated AIX package build. Patch by dtucker@zip.com.au
Tim Rice2b3897c2002-06-25 16:45:42 -0700802 - (tim) [Makefile.in] fix test on installing ssh-rand-helper.8
Ben Lindstroma95fd3f2002-06-26 00:22:57 +0000803 - (bal) added back in error check for mmap(). I screwed up, Pointed
804 out by stevesk@
Tim Ricee04ee922002-06-25 17:25:47 -0700805 - (tim) [README.privsep] UnixWare tip no longer needed.
Ben Lindstrom4e3c6312002-06-26 00:29:02 +0000806 - (bal) fixed NeXTStep missing munmap() issue. It defines HAVE_MMAP,
807 but it all damned lies.
Kevin Steves40b011c2002-06-26 00:43:57 +0000808 - (stevesk) [README.privsep] more for sshd pseudo-account.
Tim Rice6de3dfd2002-06-25 19:28:55 -0700809 - (tim) [contrib/caldera/openssh.spec] add support for privsep
Damien Millerf18cd162002-06-26 19:12:59 +1000810 - (djm) setlogin needs pgid==pid on BSD/OS; from itojun@
Damien Milleraa151372002-06-26 19:14:08 +1000811 - (djm) OpenBSD CVS Sync
812 - markus@cvs.openbsd.org 2002/06/26 08:53:12
813 [bufaux.c]
814 limit size of BNs to 8KB; ok provos/deraadt
Damien Miller468cd712002-06-26 19:14:25 +1000815 - markus@cvs.openbsd.org 2002/06/26 08:54:18
816 [buffer.c]
817 limit append to 1MB and buffers to 10MB
Damien Miller9403aa22002-06-26 19:14:43 +1000818 - markus@cvs.openbsd.org 2002/06/26 08:55:02
819 [channels.c]
820 limit # of channels to 10000
Damien Millera0796ca2002-06-26 19:15:07 +1000821 - markus@cvs.openbsd.org 2002/06/26 08:58:26
822 [session.c]
823 limit # of env vars to 1000; ok deraadt/djm
Damien Miller530a7542002-06-26 23:27:11 +1000824 - deraadt@cvs.openbsd.org 2002/06/26 13:20:57
825 [monitor.c]
826 be careful in mm_zalloc
Damien Miller990070a2002-06-26 23:51:06 +1000827 - deraadt@cvs.openbsd.org 2002/06/26 13:49:26
828 [session.c]
829 disclose less information from environment files; based on input
830 from djm, and dschultz@uclink.Berkeley.EDU
Damien Millerfb7fd952002-06-26 23:58:39 +1000831 - markus@cvs.openbsd.org 2002/06/26 13:55:37
832 [auth2-chall.c]
833 make sure # of response matches # of queries, fixes int overflow;
834 from ISS
Damien Miller3e36f9f2002-06-26 23:59:10 +1000835 - markus@cvs.openbsd.org 2002/06/26 13:56:27
836 [version.h]
837 3.4
Damien Millerf49035a2002-06-26 19:42:52 +1000838 - (djm) Require krb5 devel for RPM build w/ KrbV
Damien Miller136d4412002-06-26 23:05:16 +1000839 - (djm) Improve PAMAuthenticationViaKbdInt text from Nalin Dahyabhai
840 <nalin@redhat.com>
Damien Millerd4b11d62002-06-26 23:57:12 +1000841 - (djm) Update spec files for release
Damien Miller78682022002-06-26 23:57:59 +1000842 - (djm) Fix int overflow in auth2-pam.c, similar to one discovered by ISS
Damien Miller3e36f9f2002-06-26 23:59:10 +1000843 - (djm) Release 3.4p1
Tim Ricea8959ae2002-06-26 11:05:32 -0700844 - (tim) [contrib/caldera/openssh.spec] remove 2 configure options I put in
845 by mistake
Kevin Stevescfae58c2002-06-25 22:43:19 +0000846
Kevin Steves34f0d8f2002-06-24 16:26:49 +000084720020625
848 - (stevesk) [INSTALL acconfig.h configure.ac defines.h] remove --with-rsh
Kevin Stevesd4866362002-06-24 16:49:22 +0000849 - (stevesk) [README.privsep] minor updates
Damien Millerd3f6ad22002-06-25 10:24:47 +1000850 - (djm) Create privsep directory and warn if privsep user is missing
851 during make install
Ben Lindstromaa83b982002-06-25 02:28:22 +0000852 - (bal) Started list of PrivSep issues in TODO
Ben Lindstrom6b0c96a2002-06-25 03:22:03 +0000853 - (bal) if mmap() is substandard, don't allow compression on server side.
854 Post 'event' we will add more options.
Tim Rice78688d72002-06-25 10:07:25 -0700855 - (tim) [contrib/caldera/openssh.spec] Sync with Caldera
Ben Lindstromb129be62002-06-25 17:12:26 +0000856 - (bal) moved aix_usrinfo() and noted not setting real TTY. Patch by
857 dtucker@zip.com.au
Tim Rice8eff3192002-06-25 15:35:15 -0700858 - (tim) [acconfig.h configure.ac sshd.c] BROKEN_FD_PASSING fix from Markus
859 for Cygwin, Cray, & SCO
Kevin Steves34f0d8f2002-06-24 16:26:49 +0000860
Ben Lindstrom2953d0f2002-06-23 21:20:34 +000086120020624
862 - OpenBSD CVS Sync
863 - deraadt@cvs.openbsd.org 2002/06/23 03:25:50
864 [tildexpand.c]
865 KNF
Ben Lindstrom836f0e92002-06-23 21:21:30 +0000866 - deraadt@cvs.openbsd.org 2002/06/23 03:26:19
867 [cipher.c key.c]
868 KNF
Ben Lindstrom5c385522002-06-23 21:23:20 +0000869 - deraadt@cvs.openbsd.org 2002/06/23 03:30:58
870 [scard.c ssh-dss.c ssh-rsa.c sshconnect.c sshconnect2.c sshd.c sshlogin.c
871 sshpty.c]
872 various KNF and %d for unsigned
Ben Lindstromb1f483f2002-06-23 21:27:18 +0000873 - deraadt@cvs.openbsd.org 2002/06/23 09:30:14
874 [sftp-client.c sftp-client.h sftp-common.c sftp-int.c sftp-server.c
875 sftp.c]
876 bunch of u_int vs int stuff
Ben Lindstrom58d3b722002-06-23 21:28:13 +0000877 - deraadt@cvs.openbsd.org 2002/06/23 09:39:55
878 [ssh-keygen.c]
879 u_int stuff
Ben Lindstrome1353632002-06-23 21:29:23 +0000880 - deraadt@cvs.openbsd.org 2002/06/23 09:46:51
881 [bufaux.c servconf.c]
882 minor KNF. things the fingers do while you read
Ben Lindstrom822b6342002-06-23 21:38:49 +0000883 - deraadt@cvs.openbsd.org 2002/06/23 10:29:52
884 [ssh-agent.c sshd.c]
885 some minor KNF and %u
Ben Lindstrome23f4a32002-06-23 21:40:16 +0000886 - deraadt@cvs.openbsd.org 2002/06/23 20:39:45
887 [session.c]
888 compression_level is u_int
Ben Lindstrom8ada5d02002-06-23 21:42:50 +0000889 - deraadt@cvs.openbsd.org 2002/06/23 21:06:13
890 [sshpty.c]
891 KNF
Ben Lindstroma9d2c892002-06-23 21:48:28 +0000892 - deraadt@cvs.openbsd.org 2002/06/23 21:06:41
893 [channels.c channels.h session.c session.h]
894 display, screen, row, col, xpixel, ypixel are u_int; markus ok
Ben Lindstrom3f584742002-06-23 21:49:25 +0000895 - deraadt@cvs.openbsd.org 2002/06/23 21:10:02
896 [packet.c]
897 packet_get_int() returns unsigned for reason & seqnr
Ben Lindstroma9d2c892002-06-23 21:48:28 +0000898 - (bal) Also fixed IPADDR_IN_DISPLAY case where display, screen, row, col,
899 xpixel are u_int.
900
Ben Lindstrom2953d0f2002-06-23 21:20:34 +0000901
Kevin Steves90d5de72002-06-22 18:51:48 +000090220020623
903 - (stevesk) [configure.ac] bug #255 LOGIN_NEEDS_UTMPX for AIX.
Ben Lindstrom1a1b8512002-06-23 00:18:15 +0000904 - (bal) removed GNUism for getops in ssh-agent since glibc lacks optreset.
Ben Lindstrom883844d2002-06-23 00:20:50 +0000905 - (bal) add extern char *getopt. Based on report by dtucker@zip.com.au
Ben Lindstrom5590aa52002-06-23 00:30:30 +0000906 - OpenBSD CVS Sync
907 - stevesk@cvs.openbsd.org 2002/06/22 02:00:29
908 [ssh.h]
909 correct comment
Ben Lindstrombf69e3b2002-06-23 00:31:24 +0000910 - stevesk@cvs.openbsd.org 2002/06/22 02:40:23
911 [ssh.1]
912 section 5 not 4 for ssh_config
Ben Lindstromc001cd32002-06-23 00:32:11 +0000913 - naddy@cvs.openbsd.org 2002/06/22 11:51:39
914 [ssh.1]
915 typo
Ben Lindstrom624e3f22002-06-23 00:32:57 +0000916 - stevesk@cvs.openbsd.org 2002/06/22 16:32:54
917 [sshd.8]
918 add /var/empty in FILES section
Ben Lindstrom2dfacb32002-06-23 00:33:47 +0000919 - stevesk@cvs.openbsd.org 2002/06/22 16:40:19
920 [sshd.c]
921 check /var/empty owner mode; ok provos@
Ben Lindstromc06bf702002-06-23 00:34:37 +0000922 - stevesk@cvs.openbsd.org 2002/06/22 16:41:57
923 [scp.1]
924 typo
Ben Lindstrom959de992002-06-23 00:35:25 +0000925 - stevesk@cvs.openbsd.org 2002/06/22 16:45:29
926 [ssh-agent.1 sshd.8 sshd_config.5]
927 use process ID vs. pid/PID/process identifier
Ben Lindstrom57f08002002-06-23 00:37:10 +0000928 - stevesk@cvs.openbsd.org 2002/06/22 20:05:27
929 [sshd.c]
930 don't call setsid() if debugging or run from inetd; no "Operation not
931 permitted" errors now; ok millert@ markus@
Ben Lindstrome1c09122002-06-23 00:38:24 +0000932 - stevesk@cvs.openbsd.org 2002/06/22 23:09:51
933 [monitor.c]
934 save auth method before monitor_reset_key_state(); bugzilla bug #284;
935 ok provos@
Kevin Steves90d5de72002-06-22 18:51:48 +0000936
Damien Miller64004b52003-01-07 16:15:20 +1100937$Id: ChangeLog,v 1.2544 2003/01/07 05:15:20 djm Exp $