[openssh-commits] [openssh] annotated tag V_7_7_P1 created (now 1d4130cf)

git+noreply at mindrot.org git+noreply at mindrot.org
Tue Apr 3 09:57:07 AEST 2018


This is an automated email from the git hooks/post-receive script.

djm pushed a change to annotated tag V_7_7_P1
in repository openssh.

        at  1d4130cf  (tag)
   tagging  a0349a1cc4a18967ad1dbff5389bcdf9da098814 (commit)
  replaces  V_7_6_P1
 tagged by  Damien Miller
        on  Mon Apr 2 15:38:58 2018 +1000

- Log -----------------------------------------------------------------
OpenSSH 7.7p1
-----BEGIN PGP SIGNATURE-----
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=Fiji
-----END PGP SIGNATURE-----

Alan Yee (1):
      Use https URLs for links that support it.

Damien Miller (28):
      upstream commit
      upstream commit
      Fix missed RCSID merges
      avoid -Wsign-compare warning in argv copying
      check for net/route.h and sys/sysctl.h
      provide hooks and fallbacks for rdomain support
      rename port-tun.[ch] => port-net.[ch]
      stubs for rdomain replacement functions
      implement get/set_rdomain() for Linux
      basic valid_rdomain() implementation for Linux
      autoconf glue to enable Linux VRF
      fix rdomain compilation errors
      Switch upstream git repository.
      fix incorrect range of OpenSSL versions supported
      remove blocks.c from Makefile
      unbreak fuzz harness
      one SSH_BUG_BANNER instance that got away
      rebuild depends
      crypto_api.h needs includes.h
      this is long unused; prompted by dtucker@
      space before tab in previous
      updatedepend
      avoid inclusion of deprecated selinux/flask.h
      object files end with .o - not .c
      XMSS-related files get includes.h
      Remove authinfo.sh test dependency on printenv
      update version number
      update versions in .spec files

Darren Tucker (79):
      Include includes.h for HAVE_GETPAGESIZE.
      Add headers for sys/sysctl.h and net/route.h
      Check for linux/if.h when enabling rdomain.
      Include string.h for explicit_bzero.
      Remove RSA1 host key generation.
      Pull in newer install-sh from autoconf-2.69.
      Replace mkinstalldirs with mkdir -p.
      Remove now-used check for perl.
      Portable switched to git so s/CVS/git/.
      Fix pasto in ldns handling.
      Add autogenerated dependency info to Makefile.
      Ensure config.h is always in dependencies.
      Update .depend with empty config.h
      Remove obsolete "Smartcard support" message
      Set SO_REUSEADDR in regression test netcat.
      Update openssl-devel dependency.
      Add leading zero so it'll work when rhel not set.
      Add support for compat-openssl10 build dep.
      Remove SSH1 from description.
      Fix bogus dates in changelog.
      Don't strip binaries so debuginfo gets built.
      Remove unused variables.
      Add changelog entry for binary strip change.
      Add checks for Spectre v2 mitigation (retpoline)
      Fix test for -z,retpolineplt linker flag.
      Include headers for linux/if.h.
      Move signal compat code into bsd-signal.{c,h}
      Whitespace sync with upstream.
      Whitespace sync with upstream.
      Remove assigned-to-but-never-used variable.
      Default PidFile is sshd.pid not ssh.pid.
      Retpoline linker flag only needed for linking.
      Remove UNICOS support.
      Regenerate dependencies after UNICOS removal.
      Remove remaining now-obsolete cvs $Ids.
      Replace remaining mysignal() with signal().
      OpenSSH's builtin entropy gathering is long gone.
      Remove extra newline.
      Remove references to UNICOS.
      Update prngd link to point to sourceforge.
      Remove execute bit from modpipe.c.
      freezero should check for NULL.
      Remove now-unused check for getrusage.
      Add REGRESSTMP make var override.
      Add headers for sys/audit.h.
      Use portable syntax for REGRESSTMP.
      Check for ifaddrs.h for BindInterface.
      Check for bzero and supply if needed.
      Check for raise and supply if needed.
      Add prototype for readv if needed.
      Handle calloc(0,x) where different from malloc.
      bsd-statvfs: include sys/vfs.h, check for f_flags.
      Add no-op getsid implmentation.
      Invert sense of getpgrp test.
      Fix breakage when REGRESSTMP not set.
      Import flock() compat from NetBSD.
      Hook up flock() compat code.
      typo: missing ;
      Comment out hexdump().
      Replace $(CURDIR) with $(PWD).
      Wrap <stdint.h> in #ifdef HAVE_STDINT_H.
      Check if HAVE_DECL_BZERO correctly.
      Check for attributes on prototype args.
      Check dlopen has RTLD_NOW before enabling pkcs11.
      Conditionally compile XMSS code.
      Add WITH_XMSS, move to prevent conflicts.
      Flatten and alphabetize object file lists.
      Add strndup for platforms that need it.
      Update PAM password change to new opts API.
      Remove extra XMSS #endif
      Check for and work around buggy fflush(NULL).
      Disable UTMPX on SunOS4.
      Add AC_LANG_PROGRAM to AC_COMPILE_IFELSE.
      Save $? before case statement.
      Provide $OBJ to paths in PuTTY interop tests.
      Replace /dev/stdin with "-".
      Remove UNICOS code missed during removal.
      Include ssh_api.h for struct ssh.
      Disable native strndup and strnlen on AIX.

Marcus Folkesson (1):
      only enable functions in dh.c when openssl is used

Tim Rice (2):
      modified:   auth-sia.c
      Use libiaf on all sysv5 systems

Vicente Olivert Riera (2):
      configure.ac: detect MIPS ABI
      configure.ac: properly set seccomp_audit_arch for MIPS64

benno at openbsd.org (1):
      upstream commit

deraadt at openbsd.org (2):
      upstream commit
      upstream commit

djm at openbsd.org (69):
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream: remove space before tab
      upstream: stop loading DSA keys by default, remove sshd_config
      upstream: Mention recent DH KEX methods:
      upstream: emphasise that the hostkey rotation may send key types
      upstream: Add BindInterface ssh_config directive and -B
      upstream: some helpers to check verbose/quiet mode
      upstream: unbreak interop test after SSHv1 purge; patch from Colin
      upstream: Add ssh-keyscan -D option to make it print its results in
      upstream: refactor sshkey_read() to make it a little more, err,
      upstream: Allow escaped quotes \" and \' in ssh_config and
      upstream: warn when the agent returns a signature type that was
      upstream: Introduce a new API for handling authorized_keys options.
      upstream: switch over to the new authorized_keys options API and
      upstream: better testing for port-forwarding and restrict flags in
      upstream: fix testing of pty option, include positive test and
      upstream: unit tests for new authorized_keys options API
      upstream: for the pty control tests, just check that the PTY path
      upstream: revert recent strdelim() change, it causes problems with
      upstream: add valid-before="[time]" authorized_keys option. A
      upstream: rename recently-added "valid-before" key restriction to
      upstream: exlicitly include RSA/SHA-2 keytypes in
      upstream: explicitly specify RSA/SHA-2 keytype here too
      upstream: check valid-before option in authorized_keys
      upstream: rename recently-added "valid-before" key restriction to

djm at openbsd.org@openbsd.org (16):
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit

dtucker at openbsd.org (22):
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream Don't reset signal handlers inside handlers.
      upstream: Don't send IUTF8 to servers that don't like them.
      upstream: Replace fatal with exit in the case that we do not have
      upstream: Skip sftp-chroot test when SUDO not set instead of
      upstream: Replace fatal with exit in the case that we do not have
      upstream: Add missing braces.
      upstream: Add newline at end of file to prevent compiler warnings.
      upstream: Add $OpenBSD$ markers to xmss files to help keep synced
      upstream: Remove unneeded (local) include. ok markus@
      upstream: Update RSA minimum modulus size to 1024. sshkey.h rev 1.18
      upstream: Tell puttygen to use /dev/urandom instead of /dev/random. On

dtucker at openbsd.org@openbsd.org (3):
      upstream commit
      upstream commit
      upstream commit

jmc at openbsd.org (8):
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream: some cleanup for BindInterface and ssh-keyscan;
      upstream: apply a lick of paint; tweaks/ok dtucker
      upstream: move the input format details to -f; remove the output
      upstream: sort expiry-time;

jmc at openbsd.org@openbsd.org (3):
      upstream commit
      upstream commit
      upstream commit

jsing at openbsd.org (5):
      upstream commit
      upstream commit
      upstream commit
      upstream: Some obvious freezero() conversions.
      upstream: Ensure that D mod (P-1) and D mod (Q-1) are calculated in

markus at openbsd.org (13):
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream commit
      upstream: Add experimental support for PQC XMSS keys (Extended
      upstream: missing #ifdef for _PATH_HOST_XMSS_KEY_FILE; report by
      upstream: ssh/xmss: fix deserialize for certs; ok djm@
      upstream: ssh/xmss: fix build; ok djm@
      upstream: fix bogus warning when signing cert keys using agent;
      upstream: openssh-7.7
      upstream: openssh-7.7

millert at openbsd.org (3):
      upstream commit
      upstream commit
      upstream commit

millert at openbsd.org@openbsd.org (2):
      upstream commit
      upstream commit

naddy at openbsd.org (3):
      upstream commit
      upstream commit
      upstream commit

nkadel (6):
      Always include x11-ssh-askpass SRPM.
      Enhance BuildRequires for openssh-x11-askpass.
      Add openssh-devel >= 0.9.8f for redhat spec file.
      Add 'dist' to 'rel' for OS specific RPM names.
      Discard 'K5DIR' reporting.
      Add mandir with-mandir' for RHEL 5 compatibility.

stsp at openbsd.org (2):
      upstream commit
      upstream commit

tb at openbsd.org (2):
      upstream commit
      upstream commit

-----------------------------------------------------------------------

No new revisions were added by this update.

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.


More information about the openssh-commits mailing list