Author: Colin Watson
Revision Date: 2010-04-10 01:08:59 UTC

* Borrow patch from Fedora to add DNSSEC support: if glibc 2.11 is
  installed, the host key is published in an SSHFP RR secured with DNSSEC,
  and VerifyHostKeyDNS=yes, then ssh will no longer prompt for host key
  verification (closes: #572049).
* Convert to dh(1), and use dh_installdocs --link-doc.
* Drop lpia support, since Ubuntu no longer supports this architecture.
* Use dh_install more effectively.
* Add a NEWS.Debian entry about changes in smartcard support relative to
  previous unofficial builds (closes: #231472).

Author: Colin Watson
Revision Date: 2010-02-28 01:35:53 UTC

* Convert to source format 3.0 (quilt).
* Update README.source to match, and add a 'quilt-setup' target to
  debian/rules for the benefit of those checking out the package from
  revision control.
* All patches are now maintained separately and tagged according to DEP-3.
* Add GSSAPIStoreCredentialsOnRekey to 'sshd -T' configuration dump.
* Remove documentation of building for Debian 3.0 in README.Debian.
  Support for this was removed in 1:4.7p1-2.
* Remove obsolete header from README.Debian dating from when people
  expected non-free SSH.
* Update copyright years for GSSAPI patch.

Author: Colin Watson
Revision Date: 2009-01-14 00:34:08 UTC

* Backport from upstream CVS (Markus Friedl):
  - packet_disconnect() on padding error, too. Should reduce the success
    probability for the CPNI-957037 Plaintext Recovery Attack to 2^-18.
* Check that /var/run/sshd.pid exists and that the process ID listed there
  corresponds to sshd before running '/etc/init.d/ssh reload' from if-up
  script; SIGHUP is racy if called at boot before sshd has a chance to
  install its signal handler, but fortunately the pid file is written
  after that which lets us avoid the race (closes: #502444).
* While the above is a valuable sanity-check, it turns out that it doesn't
  really fix the bug (thanks to Kevin Price for testing), so for the
  meantime we'll just use '/etc/init.d/ssh restart', even though it is
  unfortunately heavyweight.