ubuntu/+source/openssh:ubuntu/raring

Last commit made on 2013-03-25
Get this branch:
git clone -b ubuntu/raring https://git.launchpad.net/ubuntu/+source/openssh
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
ubuntu/raring
Repository:
lp:ubuntu/+source/openssh

Recent commits

6f1e124... by Colin Watson on 2013-03-25

Import patches-unapplied version 1:6.1p1-4 to debian/experimental

Imported using git-ubuntu import.

Changelog parent: b0cb85fb9c4ebf1d98655f871ce454db10320051

New changelog entries:
  [ Gunnar Hjalmarsson ]
  * debian/openssh-server.sshd.pam: Explicitly state that ~/.pam_environment
    should be read, and move the pam_env calls from "auth" to "session" so
    that it's also read when $HOME is encrypted (LP: #952185).
  [ Stéphane Graber ]
  * Add ssh-agent upstart user job. This implements something similar to
    the 90x11-common_ssh-agent Xsession script. That is, start ssh-agent
    and set the appropriate environment variables (closes: #703906).

b0cb85f... by Colin Watson on 2013-02-08

Import patches-unapplied version 1:6.1p1-3 to debian/experimental

Imported using git-ubuntu import.

Changelog parent: 6319a65371ab9830151d4b9bff7baff8a480fc58

New changelog entries:
  * Give ssh and ssh-krb5 versioned dependencies on openssh-client and
    openssh-server, to try to reduce confusion when people run 'apt-get
    install ssh' or similar and expect that to upgrade everything relevant.
  * CVE-2010-5107: Improve DoS resistance by changing default of MaxStartups
    to 10:30:100 (closes: #700102).

6319a65... by Colin Watson on 2012-11-26

Import patches-unapplied version 1:6.1p1-2 to debian/experimental

Imported using git-ubuntu import.

Changelog parent: 8b5f16129ac4bba58d9579b2702d35fc8d1d1c2c

New changelog entries:
  * Use xz compression for binary packages.
  * Merge from Ubuntu:
    - Add support for registering ConsoleKit sessions on login. (This is
      currently enabled only when building for Ubuntu.)
    - Drop openssh-blacklist and openssh-blacklist-extra to Suggests. It's
      been long enough since the relevant vulnerability that we shouldn't
      need these installed by default nowadays.
    - Add an Upstart job (not currently used by default in Debian).
    - Add mention of ssh-keygen in ssh connect warning (Scott Moser).
    - Install apport hooks.
  * Only build with -j if DEB_BUILD_OPTIONS=parallel=* is used (closes:
    #694282).

8b5f161... by Colin Watson on 2012-09-06

Import patches-unapplied version 1:6.1p1-1 to debian/experimental

Imported using git-ubuntu import.

Changelog parent: 70f1cb2b6a1d11110e0ef2cd259a6445eaf0a829

New changelog entries:
  * New upstream release (http://www.openssh.com/txt/release-6.1).
    - Enable pre-auth sandboxing by default for new installs.
    - Allow "PermitOpen none" to refuse all port-forwarding requests
      (closes: #543683).

70f1cb2... by Colin Watson on 2012-08-24

Import patches-unapplied version 1:6.0p1-3 to debian/sid

Imported using git-ubuntu import.

Changelog parent: ba807f38911f96afb47f553fa167b010f79218ac

New changelog entries:
  * debconf template translations:
    - Add Indonesian (thanks, Andika Triwidada; closes: #681670).
  * Call restorecon on copied ~/.ssh/authorized_keys if possible, since some
    SELinux policies require this (closes: #658675).
  * Add ncurses-term to openssh-server's Recommends, since it's often needed
    to support unusual terminal emulators on clients (closes: #675362).

ba807f3... by Colin Watson on 2012-06-24

Import patches-unapplied version 1:6.0p1-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 9028e3685d87ac0da9b7ec0b7de9b8fe791d7c98

New changelog entries:
  * Tighten libssl1.0.0 and libcrypto1.0.0-udeb dependencies to the current
    "fix" version at build time (closes: #678661).

9028e36... by Colin Watson on 2012-05-26

Import patches-unapplied version 1:6.0p1-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: a7ab0a248f719c14aeb65ada89a2459ff11a74af

New changelog entries:
  [ Roger Leigh ]
  * Display dynamic part of MOTD from /run/motd.dynamic, if it exists
    (closes: #669699).
  [ Colin Watson ]
  * Update OpenSSH FAQ to revision 1.113, fixing missing line break (closes:
    #669667).
  * New upstream release (closes: #671010,
    http://www.openssh.org/txt/release-6.0).
    - Fix IPQoS not being set on non-mapped v4-in-v6 addressed connections
      (closes: #643312, #650512, #671075).
    - Add a new privilege separation sandbox implementation for Linux's new
      seccomp sandbox, automatically enabled on platforms that support it.
      (Note: privilege separation sandboxing is still experimental.)
  * Fix a bashism in configure's seccomp_filter check.
  * Add a sandbox fallback mechanism, so that behaviour on Linux depends on
    whether the running system's kernel has seccomp_filter support, not the
    build system's kernel (forwarded upstream as
    https://bugzilla.mindrot.org/show_bug.cgi?id=2011).

a7ab0a2... by Colin Watson on 2012-04-02

Import patches-unapplied version 1:5.9p1-5 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 8d25441f86a7594bf6ebf41e13971538f34c27f8

New changelog entries:
  * Use dpkg-buildflags, including for hardening support; drop use of
    hardening-includes.
  * Fix cross-building:
    - Allow using a cross-architecture pkg-config.
    - Pass default LDFLAGS to contrib/Makefile.
    - Allow dh_strip to strip gnome-ssh-askpass, rather than calling
      'install -s'.

8d25441... by Colin Watson on 2012-03-19

Import patches-unapplied version 1:5.9p1-4 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 2866bed0df0cdd96a302ced62494437e59a4ca5f

New changelog entries:
  * Disable OpenSSL version check again, as its SONAME is sufficient
    nowadays (closes: #664383).

2866bed... by Colin Watson on 2012-02-24

Import patches-unapplied version 1:5.9p1-3 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 9d86f109c4c2c9706389c358e1c431bfbfba3062

New changelog entries:
  * debconf template translations:
    - Update Polish (thanks, Michał Kułach; closes: #659829).
  * Ignore errors writing to console in init script (closes: #546743).
  * Move ssh-krb5 to Section: oldlibs.