+20050502
+ - (dtucker) OpenBSD CVS Sync
+ - djm@cvs.openbsd.org 2004/04/22 11:56:57
+ [moduli.c]
+ Bugzilla #850: Sophie Germain is the correct name of the French
+ mathematician, "Sophie Germaine" isn't; from Luc.Maisonobe@c-s.fr
+
+20040423
+ - (dtucker) [configure.ac openbsd-compat/getrrsetbyname.c] Declare h_errno
+ as extern int if not already declared. Fixes compile errors on old SCO
+ platforms. ok tim@
+ - (dtucker) [README.platform] List prereqs for building on Cygwin.
+
+20040421
+ - (djm) Update config.guess and config.sub to autoconf-2.59 versions; ok tim@
+
+20040420
+ - (djm) OpenBSD CVS Sync
+ - henning@cvs.openbsd.org 2004/04/08 16:08:21
+ [sshconnect2.c]
+ swap the last two parameters to TAILQ_FOREACH_REVERSE. matches what
+ FreeBSD and NetBSD do.
+ ok millert@ mcbride@ markus@ ho@, checked to not affect ports by naddy@
+ - djm@cvs.openbsd.org 2004/04/18 23:10:26
+ [readconf.c readconf.h ssh-keysign.c ssh.c]
+ perform strict ownership and modes checks for ~/.ssh/config files,
+ as these can be used to execute arbitrary programs; ok markus@
+ NB. ssh will now exit when it detects a config with poor permissions
+ - djm@cvs.openbsd.org 2004/04/19 13:02:40
+ [ssh.1 ssh_config.5]
+ document strict permission checks on ~/.ssh/config; prompted by,
+ with & ok jmc@
+ - jmc@cvs.openbsd.org 2004/04/19 16:12:14
+ [ssh_config.5]
+ kill whitespace at eol;
+ - djm@cvs.openbsd.org 2004/04/19 21:51:49
+ [ssh.c]
+ fix idiot typo that i introduced in my last commit;
+ spotted by cschneid AT cschneid.com
+ - (djm) [openbsd-compat/sys-queue.h] Sync with OpenBSD, needed for
+ above change
+ - (djm) [configure.ac] Check whether libroken is required when building
+ with Heimdal
+
+20040419
+ - (dtucker) OpenBSD CVS Sync
+ - dtucker@cvs.openbsd.org 2004/02/29 22:04:45
+ [regress/login-timeout.sh]
+ Use sudo when restarting daemon during test. ok markus@
+ - dtucker@cvs.openbsd.org 2004/03/08 10:17:12
+ [regress/login-timeout.sh]
+ Missing OBJ, from tim@. ok markus@ (Already fixed, ID sync only)
+ - djm@cvs.openbsd.org 2004/03/30 12:41:56
+ [sftp-client.c]
+ sync comment with reality
+ - djm@cvs.openbsd.org 2004/03/31 21:58:47
+ [canohost.c]
+ don't skip ip options check when UseDNS=no; ok markus@ (ID sync only)
+ - markus@cvs.openbsd.org 2004/04/01 12:19:57
+ [scp.c]
+ limit trust between local and remote rcp/scp process,
+ noticed by lcamtuf; ok deraadt@, djm@
+
+20040418
+ - (dtucker) [auth-pam.c] Log username and source host for failed PAM
+ authentication attempts. With & ok djm@
+ - (djm) [openbsd-compat/bsd-cygwin_util.c] Recent versions of Cygwin allow
+ change of user context without a password, so relax auth method
+ restrictions; from vinschen AT redhat.com; ok dtucker@
+
+20040416
+ - (dtucker) [regress/sftp-cmds.sh] Skip quoting test on Cygwin, since
+ FAT/NTFS does not permit quotes in filenames. From vinschen at redhat.com
+ - (djm) [auth-krb5.c auth.h session.c] Explicitly refer to Kerberos ccache
+ file using FILE: method, fixes problems on Mac OSX.
+ Patch from simon@sxw.org.uk; ok dtucker@
+ - (tim) [configure.ac] Set SETEUID_BREAKS_SETUID, BROKEN_SETREUID and
+ BROKEN_SETREGID for SCO OpenServer 3
+
+20040412
+ - (dtucker) [sshd_config.5] Add PermitRootLogin without-password warning
+ from bug #701 (text from jfh at cise.ufl.edu).
+ - (dtucker) [acconfig.h configure.ac defines.h] Bug #673: check for 4-arg
+ skeychallenge(), eg on NetBSD. ok mouring@
+ - (dtucker) [auth-skey.c defines.h monitor.c] Make skeychallenge explicitly
+ 4-arg, with compatibility for 3-arg versions. From djm@, ok me.
+ - (djm) [configure.ac] Fix detection of libwrap on OpenBSD; ok dtucker@
+
+20040408
+ - (dtucker) [loginrec.c] Use UT_LINESIZE if available, prevents truncating
+ pty name on Linux 2.6.x systems. Patch from jpe at eisenmenger.org.
+ - (bal) [monitor.c monitor_wrap.c] Second try. Put the zlib.h headers
+ back and #undef TARGET_OS_MAC instead. (Bug report pending with Apple)
+ - (dtucker) [defines.h loginrec.c] Define UT_LINESIZE if not defined and
+ simplify loginrec.c. ok tim@
+ - (bal) [monitor.c monitor_wrap.c] Ok.. Last time. Promise. Tim suggested
+ limiting scope and dtucker@ agreed.
+
20040407
- (dtucker) [session.c] Flush stdout after displaying loginmsg. From
f_mohr at yahoo.de.
+ - (bal) [acconfig.h auth-krb5.c configure.ac gss-serv-krb5.c] Check to see
+ if Krb5 library exports krb5_init_etc() since some OSes (like MacOS/X)
+ are starting to restrict it as internal since it is not needed by
+ developers any more. (Patch based on Apple tree)
+ - (bal) [monitor.c monitor_wrap.c] monitor_wrap.c] moved zlib.h higher since
+ krb5 on MacOS/X conflicts. There may be a better solution, but this will
+ work for now.
20040406
- (dtucker) [acconfig.h configure.ac defines.h] Bug #820: don't use