~ubuntu-branches/ubuntu/feisty/openssh/feisty-security : changes

~ubuntu-branches/ubuntu/feisty/openssh/feisty-security » Changes from revision 24

From Revision 24 to 5

Rev	Summary	Authors	Tags	Date
24	* SECURITY UPDATE: block signal handler crash DoS. * SECURITY UPDATE: block signal handler crash DoS. * log.c: backport upstream corrections, thanks to Florian Weimer. * References CVE-2008-4109	Kees Cook	1:4.3p2-8ubuntu1.5	15 years ago
23	* Add a FILES section to ssh-vulnkey(1) (thanks, Hugh Daniel... * Add a FILES section to ssh-vulnkey(1) (thanks, Hugh Daniel). * ssh-vulnkey handles options in authorized_keys (LP: #230029), and treats # as introducing a comment even if it is preceded by whitespace (thanks Colin Watson).	Jamie Strandboge	1:4.3p2-8ubuntu1.4	15 years ago
22	* Mitigate OpenSSL security vulnerability thank to Colin Wat... * Mitigate OpenSSL security vulnerability thank to Colin Watson: - Add key blacklisting support. Keys listed in /etc/ssh/blacklist.TYPE-LENGTH will be rejected for authentication by sshd, unless "PermitBlacklistedKeys yes" is set in /etc/ssh/sshd_config. - Add a new program, ssh-vulnkey, which can be used to check keys against these blacklists. - Depend on openssh-blacklist. - Force dependencies on libssl0.9.8 / libcrypto0.9.8-udeb to at least 0.9.8c-4ubuntu0.3. - Automatically regenerate known-compromised host keys, with a critical-priority debconf note. (I regret that there was no time to gather translations.) * added README.compromised-keys thanks to Colin Watson * References CVE-2008-0166 http://www.ubuntu.com/usn/usn-612-1	Jamie Strandboge	1:4.3p2-8ubuntu1.3	15 years ago
21	* SECURITY UPDATE: X11 forward hijacking via alternate addre... * SECURITY UPDATE: X11 forward hijacking via alternate address families. * channels.c: upstream fixes, patched inline. Thanks to Nicolas Valcarcel (LP: #210175). * References CVE-2008-1483	Kees Cook	1:4.3p2-8ubuntu1.2	16 years ago
20	* SECURITY UPDATE: trusted cookie leak when untrusted cookie... * SECURITY UPDATE: trusted cookie leak when untrusted cookie cannot be generated. * clientloop.c: Applied patch according to openssh upstream (LP: #162171), thanks to Stephan Hermann. * References: CVE-2007-4752 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=444738 http://www.openbsd.org/cgi-bin/cvsweb/src/usr.bin/ssh/clientloop.c.diff?r1=1.180&r2=1.181	Kees Cook	1:4.3p2-8ubuntu1.1	16 years ago
19	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Add /sbin, /usr/sbin, and /usr/local/sbin to the default path. - Use LSB init script functions. - Increase MAX_SESSIONS to 64. - Remove stop links from rc0 and rc6. * Build position-independent executables (only for debs, not for udebs) to take advantage of address space layout randomisation (thanks, Kees Cook). * Set Maintainer to me.	Colin Watson	1:4.3p2-8ubuntu1	17 years ago
18	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Add /sbin, /usr/sbin, and /usr/local/sbin to the default path. - Use LSB init script functions. - Increase MAX_SESSIONS to 64. - Remove stop links from rc0 and rc6.	Colin Watson	1:4.3p2-7ubuntu1	17 years ago
17	* Resynchronise with Debian. Remaining changes: * Resynchronise with Debian. Remaining changes: - Add /sbin, /usr/sbin, and /usr/local/sbin to the default path. - Use LSB init script functions. - Increase MAX_SESSIONS to 64. - Remove stop links from rc0 and rc6.	Colin Watson	1:4.3p2-6ubuntu1	17 years ago
16	Resynchronise with Debian. Resynchronise with Debian.	Colin Watson	1:4.3p2-5ubuntu1	17 years ago
15	Resynchronise with Debian. Resynchronise with Debian.	Colin Watson	1:4.3p2-4ubuntu1	17 years ago
14	Move sysv-rc versioned dependency from openssh-client to ope... Move sysv-rc versioned dependency from openssh-client to openssh-server (closes: Malone #56021).	Colin Watson	1:4.3p2-2ubuntu5	17 years ago
13	Fix setup_init changes; $2 means something different inside ... Fix setup_init changes; $2 means something different inside a function.	Colin Watson	1:4.3p2-2ubuntu4	17 years ago
12	Add forgotten versioned-dependency on sysv-rc to get new upd... Add forgotten versioned-dependency on sysv-rc to get new update-rc.d behaviour. Go me.	Scott James Remnant	1:4.3p2-2ubuntu3	17 years ago
11	Remove stop links from rc0 and rc6 Remove stop links from rc0 and rc6	Scott James Remnant	1:4.3p2-2ubuntu2	17 years ago
10	* Resynchronise with Debian. * Resynchronise with Debian. * Drop direct upgrade compatibility from the Warty preview release. * Drop patch to use /usr/bin/xauth instead of /usr/bin/X11/xauth; the /usr/bin/X11 symlink should always exist, and using it makes the package easier to backport.	Colin Watson	1:4.3p2-2ubuntu1	17 years ago
9	On '/etc/init.d/ssh restart', create /var/run/sshd before ch... On '/etc/init.d/ssh restart', create /var/run/sshd before checking the server configuration, as otherwise 'sshd -t' will complain about the lack of /var/run/sshd (closes: Malone #45234).	Colin Watson	1:4.2p1-7ubuntu3	17 years ago
8	* Backport from OpenSSH 4.3 (closes: Malone #25528): * Backport from OpenSSH 4.3 (closes: Malone #25528): - Set SO_REUSEADDR on X11 listeners to avoid problems caused by lingering sockets from previous session (X11 applications can sometimes not connect to 127.0.0.1:60xx).	Colin Watson	1:4.2p1-7ubuntu2	17 years ago
7	Resynchronise with Debian. Resynchronise with Debian.	Colin Watson	1:4.2p1-7ubuntu1	18 years ago
6	* SECURITY UPDATE: Shell code injection with crafted file na... * SECURITY UPDATE: Shell code injection with crafted file names in scp. * Ported upstream patch from 4.3p2 to replace system() call with a proper exec() call; this avoids expanding shell metacharacters in local-to-local or remote-to-remote copies. * CVE-2006-0225	Martin Pitt	1:4.2p1-5ubuntu2	18 years ago
5	Resynchronise with Debian. Resynchronise with Debian.	Colin Watson	1:4.2p1-5ubuntu1	18 years ago

Older »