ubuntu/+source/openssh:applied/ubuntu/gutsy-devel

Last commit made on 2007-04-27
Get this branch:
git clone -b applied/ubuntu/gutsy-devel https://git.launchpad.net/ubuntu/+source/openssh
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
applied/ubuntu/gutsy-devel
Repository:
lp:ubuntu/+source/openssh

Recent commits

295f50c... by Colin Watson on 2007-04-27

Import patches-applied version 1:4.3p2-10ubuntu1 to applied/ubuntu/gutsy

Imported using git-ubuntu import.

Changelog parent: 873541352c91a48a021c085987f086aac08732c9
Unapplied parent: 55e63f540da7d7e9ead6df0faf90755ba5abeff6

New changelog entries:
  * Resynchronise with Debian. Remaining changes:
    - Add /sbin, /usr/sbin, and /usr/local/sbin to the default path.
    - Use LSB init script functions.
    - Remove stop links from rc0 and rc6.
    - Build position-independent executables (only for debs, not for udebs)
      to take advantage of address space layout randomisation.
  * Multiply openssh-client-udeb's Installer-Menu-Item by 100.
  * Increase MAX_SESSIONS to 64.
  [ Russ Allbery ]
  * Fix GSSAPIKeyExchange configuration file handling logic in ssh-krb5
    (closes: #404863).
  * Fix uncommenting of GSSAPI options by ssh-krb5 (closes: #407766).
  [ Colin Watson ]
  * debconf template translations:
    - Add Norwegian Bokmål (thanks, Bjørn Steensrud; closes: #412330).

55e63f5... by Colin Watson on 2007-04-27

Import patches-unapplied version 1:4.3p2-10ubuntu1 to ubuntu/gutsy

Imported using git-ubuntu import.

Changelog parent: 6acddbaea60ba8a1ef4e1306c217b9adbfb3e7be

New changelog entries:
  * Resynchronise with Debian. Remaining changes:
    - Add /sbin, /usr/sbin, and /usr/local/sbin to the default path.
    - Use LSB init script functions.
    - Remove stop links from rc0 and rc6.
    - Build position-independent executables (only for debs, not for udebs)
      to take advantage of address space layout randomisation.
  * Multiply openssh-client-udeb's Installer-Menu-Item by 100.
  * Increase MAX_SESSIONS to 64.
  [ Russ Allbery ]
  * Fix GSSAPIKeyExchange configuration file handling logic in ssh-krb5
    (closes: #404863).
  * Fix uncommenting of GSSAPI options by ssh-krb5 (closes: #407766).
  [ Colin Watson ]
  * debconf template translations:
    - Add Norwegian Bokmål (thanks, Bjørn Steensrud; closes: #412330).

8735413... by Colin Watson on 2007-02-19

Import patches-applied version 1:4.3p2-8ubuntu1 to applied/ubuntu/feisty

Imported using git-ubuntu import.

Changelog parent: 4d152eb2d613ad04265588bf75fe51e3b8cac7e1
Unapplied parent: 6acddbaea60ba8a1ef4e1306c217b9adbfb3e7be

New changelog entries:
  * Resynchronise with Debian. Remaining changes:
    - Add /sbin, /usr/sbin, and /usr/local/sbin to the default path.
    - Use LSB init script functions.
    - Increase MAX_SESSIONS to 64.
    - Remove stop links from rc0 and rc6.
  * Build position-independent executables (only for debs, not for udebs) to
    take advantage of address space layout randomisation (thanks, Kees
    Cook).
  * Set Maintainer to me.
  [ Vincent Untz ]
  * Give the ssh-askpass-gnome window a default icon; remove unnecessary
    icon extension from .desktop file (closes:
    https://launchpad.net/bugs/27152).
  [ Colin Watson ]
  * Drop versioning on ssh/ssh-krb5 Replaces, as otherwise it isn't
    sufficient to replace conffiles (closes: #402804).
  * Make GSSAPICleanupCreds a compatibility alias for
    GSSAPICleanupCredentials. Mark GSSUseSessionCCache and
    GSSAPIUseSessionCredCache as known-but-unsupported options, and migrate
    away from them on upgrade.
  * It turns out that the people who told me that removing a conffile in the
    preinst was sufficient to have dpkg replace it without prompting when
    moving a conffile between packages were very much mistaken. As far as I
    can tell, the only way to do this reliably is to write out the desired
    new text of the conffile in the preinst. This is gross, and requires
    shipping the text of all conffiles in the preinst too, but there's
    nothing for it. Fortunately this nonsense is only required for smooth
    upgrades from sarge.
  * debconf template translations:
    - Add Romanian (thanks, Stan Ioan-Eugen; closes: #403528).

6acddba... by Colin Watson on 2007-02-19

Import patches-unapplied version 1:4.3p2-8ubuntu1 to ubuntu/feisty

Imported using git-ubuntu import.

Changelog parent: e7b80c3001a890710cda652c8446234a9a617421

New changelog entries:
  * Resynchronise with Debian. Remaining changes:
    - Add /sbin, /usr/sbin, and /usr/local/sbin to the default path.
    - Use LSB init script functions.
    - Increase MAX_SESSIONS to 64.
    - Remove stop links from rc0 and rc6.
  * Build position-independent executables (only for debs, not for udebs) to
    take advantage of address space layout randomisation (thanks, Kees
    Cook).
  * Set Maintainer to me.
  [ Vincent Untz ]
  * Give the ssh-askpass-gnome window a default icon; remove unnecessary
    icon extension from .desktop file (closes:
    https://launchpad.net/bugs/27152).
  [ Colin Watson ]
  * Drop versioning on ssh/ssh-krb5 Replaces, as otherwise it isn't
    sufficient to replace conffiles (closes: #402804).
  * Make GSSAPICleanupCreds a compatibility alias for
    GSSAPICleanupCredentials. Mark GSSUseSessionCCache and
    GSSAPIUseSessionCredCache as known-but-unsupported options, and migrate
    away from them on upgrade.
  * It turns out that the people who told me that removing a conffile in the
    preinst was sufficient to have dpkg replace it without prompting when
    moving a conffile between packages were very much mistaken. As far as I
    can tell, the only way to do this reliably is to write out the desired
    new text of the conffile in the preinst. This is gross, and requires
    shipping the text of all conffiles in the preinst too, but there's
    nothing for it. Fortunately this nonsense is only required for smooth
    upgrades from sarge.
  * debconf template translations:
    - Add Romanian (thanks, Stan Ioan-Eugen; closes: #403528).

4d152eb... by Colin Watson on 2006-12-11

Import patches-applied version 1:4.3p2-7ubuntu1 to applied/ubuntu/feisty

Imported using git-ubuntu import.

Changelog parent: 160559fa022d439ca1b8594a0addb8a183515788
Unapplied parent: e7b80c3001a890710cda652c8446234a9a617421

New changelog entries:
  * Resynchronise with Debian. Remaining changes:
    - Add /sbin, /usr/sbin, and /usr/local/sbin to the default path.
    - Use LSB init script functions.
    - Increase MAX_SESSIONS to 64.
    - Remove stop links from rc0 and rc6.
  [ Colin Watson ]
  * Ignore errors from usermod when changing sshd's shell, since it will
    fail if the sshd user is not local (closes: #398436).
  * Remove version control tags from /etc/ssh/moduli and /etc/ssh/ssh_config
    to avoid unnecessary conffile resolution steps for administrators
    (thanks, Jari Aalto; closes: #335259).
  * Fix quoting error in configure.ac and regenerate configure (thanks, Ben
    Pfaff; closes: #391248).
  * When installing openssh-client or openssh-server from scratch, remove
    any unchanged conffiles from the pre-split ssh package to work around a
    bug in sarge's dpkg (thanks, Justin Pryzby and others; closes: #335276).
  [ Russ Allbery ]
  * Create transitional ssh-krb5 package which enables GSSAPI configuration
    in sshd_config (closes: #390986).
  * Default client to attempting GSSAPI authentication.
  * Remove obsolete GSSAPINoMICAuthentication from sshd_config if it's
    found.
  * Add ssh -K option, the converse of -k, to enable GSSAPI credential
    delegation (closes: #401483).

e7b80c3... by Colin Watson on 2006-12-11

Import patches-unapplied version 1:4.3p2-7ubuntu1 to ubuntu/feisty

Imported using git-ubuntu import.

Changelog parent: 72139b168c8252a92d59034c5c63f8753b4da1be

New changelog entries:
  * Resynchronise with Debian. Remaining changes:
    - Add /sbin, /usr/sbin, and /usr/local/sbin to the default path.
    - Use LSB init script functions.
    - Increase MAX_SESSIONS to 64.
    - Remove stop links from rc0 and rc6.
  [ Colin Watson ]
  * Ignore errors from usermod when changing sshd's shell, since it will
    fail if the sshd user is not local (closes: #398436).
  * Remove version control tags from /etc/ssh/moduli and /etc/ssh/ssh_config
    to avoid unnecessary conffile resolution steps for administrators
    (thanks, Jari Aalto; closes: #335259).
  * Fix quoting error in configure.ac and regenerate configure (thanks, Ben
    Pfaff; closes: #391248).
  * When installing openssh-client or openssh-server from scratch, remove
    any unchanged conffiles from the pre-split ssh package to work around a
    bug in sarge's dpkg (thanks, Justin Pryzby and others; closes: #335276).
  [ Russ Allbery ]
  * Create transitional ssh-krb5 package which enables GSSAPI configuration
    in sshd_config (closes: #390986).
  * Default client to attempting GSSAPI authentication.
  * Remove obsolete GSSAPINoMICAuthentication from sshd_config if it's
    found.
  * Add ssh -K option, the converse of -k, to enable GSSAPI credential
    delegation (closes: #401483).

160559f... by Colin Watson on 2006-11-27

Import patches-applied version 1:4.3p2-6ubuntu1 to applied/ubuntu/feisty

Imported using git-ubuntu import.

Changelog parent: 794fa966524db415315a7b3f1f92ea53ba271194
Unapplied parent: 72139b168c8252a92d59034c5c63f8753b4da1be

New changelog entries:
  * Resynchronise with Debian. Remaining changes:
    - Add /sbin, /usr/sbin, and /usr/local/sbin to the default path.
    - Use LSB init script functions.
    - Increase MAX_SESSIONS to 64.
    - Remove stop links from rc0 and rc6.
  * Acknowledge NMU (thanks, Manoj; closes: #394795).
  * Backport from 4.5p1:
    - Fix a bug in the sshd privilege separation monitor that weakened its
      verification of successful authentication. This bug is not known to be
      exploitable in the absence of additional vulnerabilities.
  * openssh-server Suggests: molly-guard (closes: #395473).
  * debconf template translations:
    - Update German (thanks, Helge Kreutzmann; closes: #395947).
  * NMU to update SELinux patch, bringing it in line with current selinux
    releases. The patch for this NMU is simply the Bug#394795 patch,
    and no other changes. (closes: #394795)

72139b1... by Colin Watson on 2006-11-27

Import patches-unapplied version 1:4.3p2-6ubuntu1 to ubuntu/feisty

Imported using git-ubuntu import.

Changelog parent: 891bef0d2423a8437ec00b46138b99307e0f67dc

New changelog entries:
  * Resynchronise with Debian. Remaining changes:
    - Add /sbin, /usr/sbin, and /usr/local/sbin to the default path.
    - Use LSB init script functions.
    - Increase MAX_SESSIONS to 64.
    - Remove stop links from rc0 and rc6.
  * Acknowledge NMU (thanks, Manoj; closes: #394795).
  * Backport from 4.5p1:
    - Fix a bug in the sshd privilege separation monitor that weakened its
      verification of successful authentication. This bug is not known to be
      exploitable in the absence of additional vulnerabilities.
  * openssh-server Suggests: molly-guard (closes: #395473).
  * debconf template translations:
    - Update German (thanks, Helge Kreutzmann; closes: #395947).
  * NMU to update SELinux patch, bringing it in line with current selinux
    releases. The patch for this NMU is simply the Bug#394795 patch,
    and no other changes. (closes: #394795)

794fa96... by Colin Watson on 2006-10-05

Import patches-applied version 1:4.3p2-5ubuntu1 to applied/ubuntu/edgy

Imported using git-ubuntu import.

Changelog parent: ba5f65daaba0b32b2732fecfd59a759b70675b20
Unapplied parent: 891bef0d2423a8437ec00b46138b99307e0f67dc

New changelog entries:
  * Resynchronise with Debian.
  * Remove ssh/insecure_telnetd check altogether (closes: #391081).
  * debconf template translations:
    - Update Danish (thanks, Claus Hindsgaul; closes: #390612).

891bef0... by Colin Watson on 2006-10-05

Import patches-unapplied version 1:4.3p2-5ubuntu1 to ubuntu/edgy

Imported using git-ubuntu import.

Changelog parent: 1d4fb0d11110722933dbd74235de63e134c8ddd2

New changelog entries:
  * Resynchronise with Debian.
  * Remove ssh/insecure_telnetd check altogether (closes: #391081).
  * debconf template translations:
    - Update Danish (thanks, Claus Hindsgaul; closes: #390612).