ubuntu/+source/openssh:ubuntu/zesty-proposed

Last commit made on 2017-05-04
Get this branch:
git clone -b ubuntu/zesty-proposed https://git.launchpad.net/ubuntu/+source/openssh
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
ubuntu/zesty-proposed
Repository:
lp:ubuntu/+source/openssh

Recent commits

8197acd... by Dimitri John Ledkov on 2017-05-03

Import patches-unapplied version 1:7.4p1-10ubuntu0.1 to ubuntu/zesty-proposed

Imported using git-ubuntu import.

Changelog parent: 2d6a7b7a356d897d168dc051cab091e02ee05f47

New changelog entries:
  * s390x: Fix failing to connect to systems that enable ICA crypto
    coprocessor. Cherrypick upstream fixes to big endian sanboxing code,
    and allow hw acceleration in the sandbox. This fixes sandbox errors
    when system is enabled to use ICA crypto coprocessor. LP: #1686618

2d6a7b7... by Colin Watson on 2017-03-30

Import patches-unapplied version 1:7.4p1-10 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 94a006df0dee470be9fb627968eaa05377579243

New changelog entries:
  * Move privilege separation directory and PID file from /var/run/ to /run/
    (closes: #760422, #856825).
  * Unbreak Unix domain socket forwarding for root (closes: #858252).

94a006d... by Colin Watson on 2017-03-16

Import patches-unapplied version 1:7.4p1-9 to debian/sid

Imported using git-ubuntu import.

Changelog parent: caf5e54529906c23d6564b94d0ac5a79dae88f48

New changelog entries:
  * Fix null pointer dereference in ssh-keygen; this fixes an autopkgtest
    regression introduced in 1:7.4p1-8.

caf5e54... by Colin Watson on 2017-03-14

Import patches-unapplied version 1:7.4p1-8 to debian/sid

Imported using git-ubuntu import.

Changelog parent: cff7b0b8b7d65a13457fa19cd04efe1e6f336650

New changelog entries:
  * Fix ssh-keygen -H accidentally corrupting known_hosts that contained
    already-hashed entries (closes: #851734, LP: #1668093).
  * Fix ssh-keyscan to correctly hash hosts with a port number (closes:
    #857736, LP: #1670745).

cff7b0b... by Colin Watson on 2017-03-05

Import patches-unapplied version 1:7.4p1-7 to debian/sid

Imported using git-ubuntu import.

Changelog parent: e5871a1970dbd5e633e2e58cc3e3aa72364669fd

New changelog entries:
  * Don't set "PermitRootLogin yes" on fresh installations (regression
    introduced in 1:7.4p1-1; closes: #852781).
  * Restore reading authorized_keys2 by default. Upstream seems to intend
    to gradually phase this out, so don't assume that this will remain the
    default forever. However, we were late in adopting the upstream
    sshd_config changes, so it makes sense to extend the grace period
    (closes: #852320).

e5871a1... by Colin Watson on 2017-01-16

Import patches-unapplied version 1:7.4p1-6 to debian/sid

Imported using git-ubuntu import.

Changelog parent: e95a9b2d2e8d1db50334c83a31be63dceecd3a79

New changelog entries:
  * Remove temporary file on exit from postinst (closes: #850275).
  * Remove LOGIN_PROGRAM and LOGIN_NO_ENDOPT definitions, since UseLogin is
    gone.
  * Document sshd_config changes that may be needed following the removal of
    protocol 1 support from sshd (closes: #851573).
  * Remove ssh_host_dsa_key from HostKey default (closes: #850614).
  * Fix rekeying failure with GSSAPI key exchange (thanks, Harald Barth;
    closes: #819361, LP: #1608965).

e95a9b2... by Colin Watson on 2017-01-03

Import patches-unapplied version 1:7.4p1-5 to debian/sid

Imported using git-ubuntu import.

Changelog parent: dbc2736c096741cf45bee5db8fb7fb8c65b483f3

New changelog entries:
  * Create mux socket for regression tests in a temporary directory.
  * Work around clock_gettime kernel bug on Linux x32 (closes: #849923).

dbc2736... by Colin Watson on 2017-01-02

Import patches-unapplied version 1:7.4p1-4 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 7b831e21d12df6af234654207fb3f60a2252a15f

New changelog entries:
  * Run regression tests inside annotate-output to try to diagnose timeout
    issues.
  * Make integrity tests more robust against timeouts in the case where the
    first test in a series for a given MAC happens to modify the low bytes
    of a packet length.
  * Fix race conditions in forwarding tests.

7b831e2... by Colin Watson on 2016-12-31

Import patches-unapplied version 1:7.4p1-3 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 85dca76fa6b606e0137dad90489449ec6d566a88

New changelog entries:
  * Revert attempted hack around regress/forwarding.sh test failure, since
    it doesn't seem to help.
  * Run regression tests using 'sh -x' to try to get more information about
    failures.
  * Dump some useful log files if regression tests fail.
  * Tweak regression test setup to cope with the case where some of the
    source directory is unreadable by the openssh-tests user.

85dca76... by Colin Watson on 2016-12-29

Import patches-unapplied version 1:7.4p1-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 1345838eb7867cd30168e5c11a1a642dde00b84b

New changelog entries:
  * Attempt to hack around regress/forwarding.sh test failure in some
    environments.
  * Avoid calling into Kerberos libraries from ssh_gssapi_server_mechanisms
    in the privsep monitor.