2 - Renamed --with-xauth-path to --with-xauth
3 - Added --with-pid-dir option
6 - Compilation fix from Kiyokazu SUTO <suto@ks-and-ks.ne.jp>
9 - Add --with-xauth-path configure directive and explicit test for
10 /usr/openwin/bin/xauth for Solaris systems. Report from Anders
11 Nordby <anders@fix.no>
12 - Fix incorrect detection of /dev/ptmx on Linux systems that lack
13 openpty. Report from John Seifarth <john@waw.be>
14 - Look for intXX_t and u_intXX_t in sys/bitypes.h if they are not in
15 sys/types.h. Fixes problems on SCO, report from Gary E. Miller
17 - Use __snprintf and __vnsprintf if they are found where snprintf and
18 vnsprintf are lacking. Suggested by Ben Taylor <bent@shell.clark.net>
22 - Merged OpenBSD IPv6 patch:
23 - [sshd.c sshd.8 sshconnect.c ssh.h ssh.c servconf.h servconf.c scp.1]
24 [scp.c packet.h packet.c login.c log.c canohost.c channels.c]
25 [hostfile.c sshd_config]
26 ipv6 support: mostly gethostbyname->getaddrinfo/getnameinfo, new
27 features: sshd allows multiple ListenAddress and Port options. note
28 that libwrap is not IPv6-ready. (based on patches from
29 fujiwara@rcac.tdi.co.jp)
31 more hints (hints.ai_socktype=SOCK_STREAM) for getaddrinfo,
34 listen on _all_ interfaces for X11-Fwd (hints.ai_flags = AI_PASSIVE)
36 allow auth-kerberos for IPv4 only
37 - [scp.1 sshd.8 servconf.h scp.c]
38 document -4, -6, and 'ssh -L 2022/::1/22'
40 'ssh @host' is illegal (null user name), from
41 karsten@gedankenpolizei.de
45 allow auth-kerberos for IPv4 only
47 - Cleanup overrun in sockaddr copying on RHL 6.1
48 - Replacements for getaddrinfo, getnameinfo, etc based on versions
49 from patch from KIKUCHI Takahiro <kick@kyoto.wide.ad.jp>
50 - Replacement for missing structures on systems that lack IPv6
51 - record_login needed to know about AF_INET6 addresses
52 - Borrowed more code from OpenBSD: rresvport_af and requisites
55 - Fixes to auth-skey to enable it to use the standard OpenSSL libraries
58 - New config.sub and config.guess to fix problems on SCO. Supplied
59 by Gary E. Miller <gem@rellim.com>
60 - SCO build fix from Gary E. Miller <gem@rellim.com>
64 - Documentation update & cleanup
65 - Better KrbIV / AFS detection, based on patch from:
66 Holger Trapp <Holger.Trapp@Informatik.TU-Chemnitz.DE>
69 - Fixed annoying DES corruption problem. libcrypt has been
70 overriding symbols in libcrypto. Removed libcrypt and crypt.h
71 altogether (libcrypto includes its own crypt(1) replacement)
72 - Added platform-specific rules for Irix 6.x. Included warning that
76 - Add explicit make rules for files proccessed by fixpaths.
77 - Fix "make install" in RPM spec files. Report from Tenkou N. Hattori
79 - Removed "nullok" directive from default PAM configuration files.
80 Added information on enabling EmptyPasswords on openssh+PAM in
84 cleanup_exit() for SIGTERM/SIGHUP, too. from fgsch@ and
87 compare correct version for 1.3 compat mode
90 - Prevent multiple inclusion of config.h and defines.h. Suggested
91 by Andre Lucas <andre.lucas@dial.pipex.com>
92 - Properly clean up on exit of ssh-agent. Patch from Dean Gaudet
96 - Fix password support on systems with a mixture of shadowed and
97 non-shadowed passwords (e.g. NIS). Report and fix from
98 HARUYAMA Seigo <haruyama@nt.phys.s.u-tokyo.ac.jp>
99 - Fix broken autoconf typedef detection. Report from Marc G.
100 Fournier <marc.fournier@acadiau.ca>
101 - Fix occasional crash on LinuxPPC. Patch from Franz Sirl
102 <Franz.Sirl-kernel@lauterbach.com>
103 - Prevent typedefs from being compiled more than once. Report from
104 Marc G. Fournier <marc.fournier@acadiau.ca>
105 - Fill in ut_utaddr utmp field. Report from Benjamin Charron
107 - Really fix broken default path. Fix from Jim Knoble
109 - Remove test for quad_t. No longer needed.
110 - Released 1.2.1pre24
112 - Added support for directory-based lastlogs
113 - Really fix typedefs, patch from Ben Taylor <bent@clark.net>
116 - OpenBSD CVS updates:
119 - Removed most of the pam code into its own file auth-pam.[ch]. This
120 cleaned up sshd.c up significantly.
121 - PAM authentication was incorrectly interpreting
122 "PermitRootLogin without-password". Report from Matthias Andree
123 <ma@dt.e-technik.uni-dortmund.de
124 - Several other cleanups
125 - Merged Dante SOCKS support patch from David Rankin
126 <drankin@bohemians.lexington.ky.us>
127 - Updated documentation with ./configure options
128 - Released 1.2.1pre23
131 - Applied another NetBSD portability patch from David Rankin
132 <drankin@bohemians.lexington.ky.us>
133 - Fix --with-default-path option.
134 - Autodetect perl, patch from David Rankin
135 <drankin@bohemians.lexington.ky.us>
136 - Print whether OpenSSH was compiled with RSARef, patch from
137 Nalin Dahyabhai <nalin@thermo.stat.ncsu.edu>
138 - Calls to pam_setcred, patch from Nalin Dahyabhai
139 <nalin@thermo.stat.ncsu.edu>
140 - Detect missing size_t and typedef it.
141 - Rename helper.[ch] to (more appropriate) bsd-misc.[ch]
142 - Minor Makefile cleaning
145 - Replacement for getpagesize() for systems which lack it
146 - NetBSD login.c compile fix from David Rankin
147 <drankin@bohemians.lexington.ky.us>
148 - Fully set ut_tv if present in utmp or utmpx
149 - Portability fixes for Irix 5.3 (now compiles OK!)
150 - autoconf and other misc cleanups
151 - Merged AIX patch from Darren Hall <dhall@virage.org>
152 - Cleaned up defines.h
153 - Released 1.2.1pre22
156 - Automatically correct paths in manpages and configuration files. Patch
157 and script from Andre Lucas <andre.lucas@dial.pipex.com>
158 - Removed credits from README to CREDITS file, updated.
159 - Added --with-default-path to specify custom path for server
160 - Removed #ifdef trickery from acconfig.h into defines.h
161 - PAM bugfix. PermitEmptyPassword was being ignored.
162 - Fixed PAM config files to allow empty passwords if server does.
163 - Explained spurious PAM auth warning workaround in UPGRADING
164 - Use last few chars of tty line as ut_id
165 - New SuSE RPM spec file from Chris Saia <csaia@wtower.com>
166 - OpenBSD CVS updates:
167 - [packet.h auth-rhosts.c]
168 check format string for packet_disconnect and packet_send_debug, too
170 use packet_get_maxsize for channels. consistence.
173 - Enabled utmpx support by default for Solaris
174 - Cleanup sshd.c PAM a little more
175 - Revised RPM package to include Jim Knoble's <jmknoble@pobox.com>
176 X11 ssh-askpass program.
177 - Disable logging of PAM success and failures, PAM is verbose enough.
178 Unfortunatly there is currently no way to disable auth failure
179 messages. Mention this in UPGRADING file and sent message to PAM
181 - OpenBSD CVS update:
182 - [ssh-keygen.1 ssh.1]
183 remove ref to .ssh/random_seed, mention .ssh/environment in
185 - Released 1.2.1pre21
186 - Fixed implicit '.' in default path, report from Jim Knoble
188 - Redhat RPM spec fixes from Jim Knoble <jmknoble@pobox.com>
191 - More fixes from Andre Lucas <andre.lucas@dial.pipex.com>
192 - Cleanup of auth-passwd.c for shadow and MD5 passwords
193 - Cleanup and bugfix of PAM authentication code
194 - Released 1.2.1pre20
196 - Merged fixes from Ben Taylor <bent@clark.net>
197 - Fixed configure support for PAM. Reported by Naz <96na@eng.cam.ac.uk>
198 - Disabled logging of PAM password authentication failures when password
199 is empty. (e.g start of authentication loop). Reported by Naz
200 <96na@eng.cam.ac.uk>)
203 - Merged later HPUX patch from Andre Lucas
204 <andre.lucas@dial.pipex.com>
205 - Above patch included better utmpx support from Ben Taylor
209 - Fix undefined fd_set type in ssh.h from Povl H. Pedersen
211 - Fix login.c breakage on systems which lack ut_host in struct
212 utmp. Reported by Willard Dawson <willard.dawson@sbs.siemens.com>
215 - Integration of large HPUX patch from Andre Lucas
216 <andre.lucas@dial.pipex.com>. Integrating it had a few other
218 - Ability to disable shadow passwords at configure time
219 - Ability to disable lastlog support at configure time
220 - Support for IP address in $DISPLAY
221 - OpenBSD CVS update:
223 say "REMOTE HOST IDENTIFICATION HAS CHANGED"
224 - Fix DISABLE_SHADOW support
225 - Allow MD5 passwords even if shadow passwords are disabled
229 - Redhat init script patch from Chun-Chung Chen
230 <cjj@u.washington.edu>
231 - Avoid breakage on systems without IPv6 headers
234 - Makefile changes for Solaris from Peter Kocks
235 <peter.kocks@baygate.com>
236 - Minor updates to docs
237 - Merged OpenBSD CVS changes:
238 - [authfd.c ssh-agent.c]
239 keysize warnings talk about identity files
241 "Connection closed by x.x.x.x": fatal() -> log()
242 - Correctly handle empty passwords in shadow file. Patch from:
243 "Chris, the Young One" <cky@pobox.com>
244 - Released 1.2.1pre18
247 - Integrated patchs from Juergen Keil <jk@tools.de>
248 - Avoid void* pointer arithmatic
249 - Use LDFLAGS correctly
250 - Fix SIGIO error in scp
251 - Simplify status line printing in scp
252 - Added better test for inline functions compiler support from
253 Darren_Hall@progressive.com
256 - OpenBSD CVS Changes
258 fix get_remote_port() and friends for sshd -i;
259 Holger.Trapp@Informatik.TU-Chemnitz.DE
261 make code simpler. no need for memcpy. niels@ ok
263 namebuflen not sizeof namebuflen; bnd@ep-ag.com via djm@mindrot.org
266 typo; mark.baushke@solipsa.com
267 - [channels.c ssh.c ssh.h sshd.c]
268 type conflict for 'extern Type *options' in channels.c; dot@dotat.at
270 move checking of hostkey into own function.
273 - Clean up broken includes in pty.c
274 - Some older systems don't have poll.h, they use sys/poll.h instead
278 - Fix compilation on systems with AFS. Reported by
280 - Fix installation on Solaris. Reported by
281 Gordon Rowell <gordonr@gormand.com.au>
282 - Fix gccisms (__attribute__ and inline). Report by edgy@us.ibm.com,
283 patch from Markus Friedl <markus.friedl@informatik.uni-erlangen.de>
284 - Auto-locate xauth. Patch from David Agraz <dagraz@jahoopa.com>
285 - Compile fix from David Agraz <dagraz@jahoopa.com>
286 - Avoid compiler warning in bsd-snprintf.c
287 - Added pam_limits.so to default PAM config. Suggested by
288 Jim Knoble <jmknoble@pobox.com>
291 - Import of patch from Ben Taylor <bent@clark.net>:
292 - Improved PAM support
293 - "uninstall" rule for Makefile
295 - Should fix PAM problems on Solaris
296 - OpenBSD CVS updates:
298 avoid stdio; based on work by markus, millert, and I
300 make sure the client selects a supported cipher
302 fix sighup handling. accept would just restart and daemon handled
303 sighup only after the next connection was accepted. use poll on
307 - Applied patch from David Rankin <drankin@bohemians.lexington.ky.us>
308 to fix libwrap support on NetBSD
312 - Compile fix for Solaris with /dev/ptmx from
313 David Agraz <dagraz@jahoopa.com>
316 - sshd Redhat init script patch from Jim Knoble <jmknoble@pobox.com>
317 fixes compatability with 4.x and 5.x
318 - Fixed default SSH_ASKPASS
319 - Fix PAM account and session being called multiple times. Problem
320 reported by Adrian Baugh <adrian@merlin.keble.ox.ac.uk>
321 - Merged more OpenBSD changes:
322 - [atomicio.c authfd.c scp.c serverloop.c ssh.h sshconnect.c sshd.c]
323 move atomicio into it's own file. wrap all socket write()s which
324 were doing write(sock, buf, len) != len, with atomicio() calls.
328 properly name fd variable
330 display great hatred towards strcpy
331 - [pty.c pty.h sshd.c]
332 use openpty() if it exists (it does on BSD4_4)
334 check for ~ expansion past MAXPATHLEN
335 - Modified helper.c to use new atomicio function.
336 - Reformat Makefile a little
337 - Moved RC4 routines from rc4.[ch] into helper.c
338 - Added autoconf code to detect /dev/ptmx (Solaris) and /dev/ptc (AIX)
339 - Updated SuSE spec from Chris Saia <csaia@wtower.com>
340 - Tweaked Redhat spec
341 - Clean up bad imports of a few files (forgot -kb)
345 - Small cleanup of PAM code in sshd.c
346 - Merged OpenBSD CVS changes:
347 - [auth-krb4.c auth-passwd.c auth-skey.c ssh.h]
348 move skey-auth from auth-passwd.c to auth-skey.c, same for krb4
350 warn only about mismatch if key is _used_
351 warn about keysize-mismatch with log() not error()
352 channels.c readconf.c readconf.h ssh.c ssh.h sshconnect.c
355 indent, shorter warning
357 use error() for internal errors
359 set loglevel for SSH_MSG_DISCONNECT to log(), not fatal()
362 - [ssh-add.1 ssh-add.c ssh.h]
363 document $SSH_ASKPASS, reasonable default
365 CheckHostIP is not available for connects via proxy command
368 easier to read client code for passwd and skey auth
369 turn of checkhostip for proxy connects, since we don't know the remote ip
372 - Add definition for __P()
373 - Added [v]snprintf() replacement for systems that lack it
376 - More reformatting merged from OpenBSD CVS
377 - Merged OpenBSD CVS changes:
379 fix packet_integrity_check() for !have_hostname_in_open.
380 report from mrwizard@psu.edu via djm@ibs.com.au
382 set SO_REUSEADDR and SO_LINGER for forwarded ports.
383 chip@valinux.com via damien@ibs.com.au
385 it's not an error() if shutdown_write failes in nchan.
387 remove dead #ifdef-0-code
388 - [readconf.c servconf.c]
389 strcasecmp instead of tolower
391 progress meter overflow fix from damien@ibs.com.au
392 - [ssh-add.1 ssh-add.c]
395 postpone fork_after_authentication until command execution,
396 request/patch from jahakala@cc.jyu.fi via damien@ibs.com.au
397 plus: use daemon() for backgrounding
398 - Added BSD compatible install program and autoconf test, thanks to
399 Niels Kristian Bech Jensen <nkbj@image.dk>
400 - Solaris fixing, thanks to Ben Taylor <bent@clark.net>
401 - Merged beginnings of AIX support from Tor-Ake Fransson <torake@hotmail.com>
405 - Merged very large OpenBSD source code reformat
406 - OpenBSD CVS updates
407 - [channels.c cipher.c compat.c log-client.c scp.c serverloop.c]
408 [ssh.h sshd.8 sshd.c]
410 * Unified Logmessage for all auth-types, for success and for failed
411 * Standard connections get only ONE line in the LOG when level==LOG:
412 Auth-attempts are logged only, if authentication is:
415 c) we had more than AUTH_FAIL_LOG failues
416 * many log() became verbose()
417 * old behaviour with level=VERBOSE
418 - [readconf.c readconf.h ssh.1 ssh.h sshconnect.c sshd.c]
419 tranfer s/key challenge/response data in SSH_SMSG_AUTH_TIS_CHALLENGE
420 messages. allows use of s/key in windows (ttssh, securecrt) and
421 ssh-1.2.27 clients without 'ssh -v', ok: niels@
423 -V, for fallback to openssh in SSH2 compatibility mode
425 fix sigchld race; cjc5@po.cwru.edu
428 - Added SuSE package files from Chris Saia <csaia@wtower.com>
429 - Restructured package-related files under packages/*
430 - Added generic PAM config
431 - Numerous little Solaris fixes
432 - Add recommendation to use GNU make to INSTALL document
435 - Make <enter> close gnome-ssh-askpass (Debian bug #50299)
436 - OpenBSD CVS Changes
438 don't create ~/.ssh only if the user wants to store the private
439 key there. show fingerprint instead of public-key after
440 keygeneration. ok niels@
441 - Added OpenBSD bsd-strlcat.c, created bsd-strlcat.h
442 - Added timersub() macro
443 - Tidy RCSIDs of bsd-*.c
444 - Added autoconf test and macro to deal with old PAM libraries
445 pam_strerror definition (one arg vs two).
446 - Fix EGD problems (Thanks to Ben Taylor <bent@clark.net>)
447 - Retry /dev/urandom reads interrupted by signal (report from
448 Robert Hardy <rhardy@webcon.net>)
449 - Added a setenv replacement for systems which lack it
450 - Only display public key comment when presenting ssh-askpass dialog
453 - Configure, Make and changelog corrections from Tudor Bosman
454 <tudorb@jm.nu> and Niels Kristian Bech Jensen <nkbj@image.dk>
457 - OpenBSD CVS Changes:
459 make this compile, bad markus
460 - [log.c readconf.c servconf.c ssh.h]
461 bugfix: loglevels are per host in clientconfig,
462 factor out common log-level parsing code.
464 remove unused index (-Wall)
466 only one 'extern char *__progname'
468 document SIGHUP, -Q to synopsis
469 - [sshconnect.c serverloop.c sshd.c packet.c packet.h]
470 [channels.c clientloop.c]
471 SSH_CMSG_MAX_PACKET_SIZE, some clients use this, some need this, niels@
472 [hope this time my ISP stays alive during commit]
473 - [OVERVIEW README] typos; green@freebsd
475 replace xstrdup+strcat with strlcat+fixed buffer, fixes OF (bad me)
476 exit if writing the key fails (no infinit loop)
477 print usage() everytime we get bad options
478 - [ssh-keygen.c] overflow, djm@mindrot.org
479 - [sshd.c] fix sigchld race; cjc5@po.cwru.edu
482 - Merged more Solaris support from Marc G. Fournier
483 <marc.fournier@acadiau.ca>
484 - Wrote autoconf tests for integer bit-types
485 - Fixed enabling kerberos support
486 - Fix segfault in ssh-keygen caused by buffer overrun in filename
490 - Merged PAM buffer overrun patch from Chip Salzenberg <chip@valinux.com>
491 - Merged OpenBSD CVS changes
492 - [auth-rhosts.c auth-rsa.c ssh-agent.c sshconnect.c sshd.c]
493 more %d vs. %s in fmt-strings
495 Integers should not be printed with %s
496 - EGD uses a socket, not a named pipe. Duh.
497 - Fix includes in fingerprint.c
498 - Fix scp progress bar bug again.
499 - Move ssh-askpass from ${libdir}/ssh to ${libexecdir}/ssh at request of
500 David Rankin <drankin@bohemians.lexington.ky.us>
501 - Added autoconf option to enable Kerberos 4 support (untested)
502 - Added autoconf option to enable AFS support (untested)
503 - Added autoconf option to enable S/Key support (untested)
504 - Added autoconf option to enable TCP wrappers support (compiles OK)
505 - Renamed BSD helper function files to bsd-*
506 - Added tests for login and daemon and enable OpenBSD replacements for
507 when they are absent.
508 - Added non-PAM MD5 password support patch from Tudor Bosman <tudorb@jm.nu>
511 - Merged OpenBSD CVS changes
512 - [scp.c] foregroundproc() in scp
513 - [sshconnect.h] include fingerprint.h
514 - [sshd.c] bugfix: the log() for passwd-auth escaped during logging
516 - [ssh.1] Spell my name right.
517 - Added openssh.com info to README
520 - Merged OpenBSD CVS changes
521 - [ChangeLog.Ylonen] noone needs this anymore
522 - [authfd.c] close-on-exec for auth-socket, ok deraadt
524 in known_hosts key lookup the entry for the bits does not need
525 to match, all the information is contained in n and e. This
526 solves the problem with buggy servers announcing the wrong
527 modulus length. markus and me.
529 bugfix: check for space if child has terminated, from:
531 - [ssh-add.1 ssh-add.c ssh-keygen.1 ssh-keygen.c sshconnect.c]
532 [fingerprint.c fingerprint.h]
533 rsa key fingerprints, idea from Bjoern Groenvall <bg@sics.se>
535 - [ssh.1] add OpenSSH information to AUTHOR section. okay markus@
537 force logging to stderr while loading private key file
538 (lost while converting to new log-levels)
541 - Fix some Linux libc5 problems reported by Miles Wilson <mw@mctitle.com>
542 - Merged OpenBSD CVS changes:
543 - [auth-rh-rsa.c auth-rsa.c authfd.c authfd.h hostfile.c mpaux.c]
544 [mpaux.h ssh-add.c ssh-agent.c ssh.h ssh.c sshd.c]
545 the keysize of rsa-parameter 'n' is passed implizit,
546 a few more checks and warnings about 'pretended' keysizes.
547 - [cipher.c cipher.h packet.c packet.h sshd.c]
548 remove support for cipher RC4
550 a note for legay systems about secuity issues with permanently_set_uid(),
551 the private hostkey and ptrace()
553 more detailed messages about adding and checking hostkeys
556 - Merged OpenBSD CVS changes:
557 - [ssh-add.c] change passphrase loop logic and remove ref to
559 - Changed to ssh-add.c broke askpass support. Revised it to be a little more
561 - Revised autoconf support for enabling/disabling askpass support.
562 - Merged more OpenBSD CVS changes:
564 - disconnect if getpeername() fails
565 - missing xfree(*client)
567 - disconnect if getpeername() fails
568 - fix comment: we _do_ disconnect if ip-options are set
570 - disconnect if getpeername() fails
571 - move checking of remote port to central place
572 [auth-rhosts.c] move checking of remote port to central place
573 [log-server.c] avoid extra fd per sshd, from millert@
574 [readconf.c] print _all_ bad config-options in ssh(1), too
575 [readconf.h] print _all_ bad config-options in ssh(1), too
576 [ssh.c] print _all_ bad config-options in ssh(1), too
577 [sshconnect.c] disconnect if getpeername() fails
578 - OpenBSD's changes to sshd.c broke the PAM stuff, re-merged it.
579 - Various small cleanups to bring diff (against OpenBSD) size down.
580 - Merged more Solaris compability from Marc G. Fournier
581 <marc.fournier@acadiau.ca>
582 - Wrote autoconf tests for __progname symbol
583 - RPM spec file fixes from Jim Knoble <jmknoble@pobox.com>
586 - Another OpenBSD CVS update:
587 - [ssh-keygen.1] fix .Xr
590 - Solaris compilation fixes (still imcomplete)
593 - Build patch from Niels Kristian Bech Jensen <nkbj@image.dk>
594 - Don't install config files if they already exist
595 - Fix inclusion of additional preprocessor directives from acconfig.h
596 - Removed redundant inclusions of config.h
597 - Added 'Obsoletes' lines to RPM spec file
598 - Merged OpenBSD CVS changes:
599 - [bufaux.c] save a view malloc/memcpy/memset/free's, ok niels
600 - [scp.c] fix overflow reported by damien@ibs.com.au: off_t
601 totalsize, ok niels,aaron
602 - Delay fork (-f option) in ssh until after port forwarded connections
603 have been initialised. Patch from Jani Hakala <jahakala@cc.jyu.fi>
604 - Added shadow password patch from Thomas Neumann <tom@smart.ruhr.de>
605 - Added ifdefs to auth-passwd.c to exclude it when PAM is enabled
606 - Tidied default config file some more
607 - Revised Redhat initscript to fix bug: sshd (re)start would fail
608 if executed from inside a ssh login.
611 - Merged changes from OpenBSD CVS
612 - [sshd.c] session_key_int may be zero
613 - [auth-rh-rsa.c servconf.c servconf.h ssh.h sshd.8 sshd.c sshd_config]
614 IgnoreUserKnownHosts(default=no), used for RhostRSAAuth, ok
616 - Brought default sshd_config more in line with OpenBSD's
617 - Grab server in gnome-ssh-askpass (Debian bug #49872)
620 - Added INSTALL documentation
621 - Merged yet more changes from OpenBSD CVS
622 - [auth-rh-rsa.c auth-rhosts.c auth-rsa.c channels.c clientloop.c]
623 [ssh.c ssh.h sshconnect.c sshd.c]
624 make all access to options via 'extern Options options'
625 and 'extern ServerOptions options' respectively;
626 options are no longer passed as arguments:
627 * make options handling more consistent
628 * remove #include "readconf.h" from ssh.h
629 * readconf.h is only included if necessary
630 - [mpaux.c] clear temp buffer
631 - [servconf.c] print _all_ bad options found in configfile
632 - Make ssh-askpass support optional through autoconf
633 - Fix nasty division-by-zero error in scp.c
637 - Added (untested) Entropy Gathering Daemon (EGD) support
638 - Fixed /dev/urandom fd leak (Debian bug #49722)
639 - Merged OpenBSD CVS changes:
640 - [auth-rh-rsa.c] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
641 - [ssh.1] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
642 - [sshd.8] user/958: check ~/.ssh/known_hosts for rhosts-rsa, too
643 - Fix integer overflow which was messing up scp's progress bar for large
644 file transfers. Fix submitted to OpenBSD developers. Report and fix
645 from Kees Cook <cook@cpoint.net>
646 - Merged more OpenBSD CVS changes:
647 - [auth-krb4.c auth-passwd.c] remove x11- and krb-cleanup from fatal()
648 + krb-cleanup cleanup
649 - [clientloop.c log-client.c log-server.c ]
650 [readconf.c readconf.h servconf.c servconf.h ]
651 [ssh.1 ssh.c ssh.h sshd.8]
652 add LogLevel {QUIET, FATAL, ERROR, INFO, CHAT, DEBUG} to ssh/sshd,
653 obsoletes QuietMode and FascistLogging in sshd.
654 - [sshd.c] fix fatal/assert() bug reported by damien@ibs.com.au:
655 allow session_key_int != sizeof(session_key)
656 [this should fix the pre-assert-removal-core-files]
657 - Updated default config file to use new LogLevel option and to improve
661 - Merged several minor fixes:
662 - ssh-agent commandline parsing
663 - RPM spec file now installs ssh setuid root
664 - Makefile creates libdir
665 - Merged beginnings of Solaris compability from Marc G. Fournier
666 <marc.fournier@acadiau.ca>
669 - Autodetection of SSL/Crypto library location via autoconf
670 - Fixed location of ssh-askpass to follow autoconf
671 - Integrated Makefile patch from Niels Kristian Bech Jensen <nkbj@image.dk>
672 - Autodetection of RSAref library for US users
674 - Merged OpenBSD CVS changes:
675 - [rsa.c] bugfix: use correct size for memset()
676 - [sshconnect.c] warn if announced size of modulus 'n' != real size
677 - Added GNOME passphrase requestor (use --with-gnome-askpass)
678 - RPM build now creates subpackages
682 - Removed debian/ directory. This is now being maintained separately.
683 - Added symlinks for slogin in RPM spec file
684 - Fixed permissions on manpages in RPM spec file
685 - Added references to required libraries in README file
686 - Removed config.h.in from CVS
687 - Removed pwdb support (better pluggable auth is provided by glibc)
688 - Made PAM and requisite libdl optional
689 - Removed lots of unnecessary checks from autoconf
690 - Added support and autoconf test for openpty() function (Unix98 pty support)
691 - Fix for scp not finding ssh if not installed as /usr/bin/ssh
693 - Merged parts of Debian patch From Phil Hands <phil@hands.com>:
694 - Added ssh-askpass program
695 - Added ssh-askpass support to ssh-add.c
696 - Create symlinks for slogin on install
697 - Fix "distclean" target in makefile
698 - Added example for ssh-agent to manpage
699 - Added support for PAM_TEXT_INFO messages
700 - Disable internal /etc/nologin support if PAM enabled
701 - Merged latest OpenBSD CVS changes:
702 - [all] replace assert() with error, fatal or packet_disconnect
703 - [sshd.c] don't send fail-msg but disconnect if too many authentication
705 - [sshd.c] remove unused argument. ok dugsong
707 - [rsa.c] clear buffers used for encryption. ok: niels
708 - [rsa.c] replace assert() with error, fatal or packet_disconnect
709 - [auth-krb4.c] remove unused argument. ok dugsong
710 - Fixed coredump after merge of OpenBSD rsa.c patch
714 - Merged change from OpenBSD CVS
715 - One-line cleanup in sshd.c
718 - Integrated debian package support from Dan Brosemer <odin@linuxfreak.com>
719 - Merged latest updates for OpenBSD CVS:
720 - channels.[ch] - remove broken x11 fix and document istate/ostate
721 - ssh-agent.c - call setsid() regardless of argv[]
722 - ssh.c - save a few lines when disabling rhosts-{rsa-}auth
723 - Documentation cleanups
724 - Renamed README -> README.Ylonen
725 - Renamed README.openssh ->README
728 - Renamed openssh* back to ssh* at request of Theo de Raadt
729 - Incorporated latest changes from OpenBSD's CVS
730 - Integrated Makefile patch from Niels Kristian Bech Jensen <nkbj@image.dk>
731 - Integrated PAM env patch from Nalin Dahyabhai <nalin.dahyabhai@pobox.com>
732 - Make distclean now removed configure script
733 - Improved PAM logging
734 - Added some debug() calls for PAM
735 - Removed redundant subdirectories
736 - Integrated part of a patch from Dan Brosemer <odin@linuxfreak.com> for
738 - Fixed off-by-one error in PAM env patch
742 - Further PAM enhancements.
744 - Now uses account and session modules for all logins.
745 - Integrated patch from Dan Brosemer <odin@linuxfreak.com>
748 - Change binary names to open*
749 - Fixed autoconf script to detect PAM on RH6.1
750 - Added tests for libpwdb, and OpenBSD functions to autoconf
753 - Imported latest OpenBSD CVS code
754 - Updated README.openssh
761 - Excised my buggy replacements for strlcpy and mkdtemp
762 - Imported correct OpenBSD strlcpy and mkdtemp routines.
763 - Reduced arc4random_stir entropy read to 32 bytes (256 bits)
764 - Picked up correct version number from OpenBSD
765 - Added sshd.pam PAM configuration file
766 - Added sshd.init Redhat init script
767 - Added openssh.spec RPM spec file
771 - Fixed include paths of OpenSSL functions
772 - Use OpenSSL MD5 routines
773 - Imported RC4 code from nanocrypt
774 - Wrote replacements for OpenBSD arc4random* functions
775 - Wrote replacements for strlcpy and mkdtemp