[openssh-commits] [openssh] annotated tag V_7_7_P1 created (now 1d4130cf)
git+noreply at mindrot.org
git+noreply at mindrot.org
Tue Apr 3 09:57:07 AEST 2018
This is an automated email from the git hooks/post-receive script.
djm pushed a change to annotated tag V_7_7_P1
in repository openssh.
at 1d4130cf (tag)
tagging a0349a1cc4a18967ad1dbff5389bcdf9da098814 (commit)
replaces V_7_6_P1
tagged by Damien Miller
on Mon Apr 2 15:38:58 2018 +1000
- Log -----------------------------------------------------------------
OpenSSH 7.7p1
-----BEGIN PGP SIGNATURE-----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=Fiji
-----END PGP SIGNATURE-----
Alan Yee (1):
Use https URLs for links that support it.
Damien Miller (28):
upstream commit
upstream commit
Fix missed RCSID merges
avoid -Wsign-compare warning in argv copying
check for net/route.h and sys/sysctl.h
provide hooks and fallbacks for rdomain support
rename port-tun.[ch] => port-net.[ch]
stubs for rdomain replacement functions
implement get/set_rdomain() for Linux
basic valid_rdomain() implementation for Linux
autoconf glue to enable Linux VRF
fix rdomain compilation errors
Switch upstream git repository.
fix incorrect range of OpenSSL versions supported
remove blocks.c from Makefile
unbreak fuzz harness
one SSH_BUG_BANNER instance that got away
rebuild depends
crypto_api.h needs includes.h
this is long unused; prompted by dtucker@
space before tab in previous
updatedepend
avoid inclusion of deprecated selinux/flask.h
object files end with .o - not .c
XMSS-related files get includes.h
Remove authinfo.sh test dependency on printenv
update version number
update versions in .spec files
Darren Tucker (79):
Include includes.h for HAVE_GETPAGESIZE.
Add headers for sys/sysctl.h and net/route.h
Check for linux/if.h when enabling rdomain.
Include string.h for explicit_bzero.
Remove RSA1 host key generation.
Pull in newer install-sh from autoconf-2.69.
Replace mkinstalldirs with mkdir -p.
Remove now-used check for perl.
Portable switched to git so s/CVS/git/.
Fix pasto in ldns handling.
Add autogenerated dependency info to Makefile.
Ensure config.h is always in dependencies.
Update .depend with empty config.h
Remove obsolete "Smartcard support" message
Set SO_REUSEADDR in regression test netcat.
Update openssl-devel dependency.
Add leading zero so it'll work when rhel not set.
Add support for compat-openssl10 build dep.
Remove SSH1 from description.
Fix bogus dates in changelog.
Don't strip binaries so debuginfo gets built.
Remove unused variables.
Add changelog entry for binary strip change.
Add checks for Spectre v2 mitigation (retpoline)
Fix test for -z,retpolineplt linker flag.
Include headers for linux/if.h.
Move signal compat code into bsd-signal.{c,h}
Whitespace sync with upstream.
Whitespace sync with upstream.
Remove assigned-to-but-never-used variable.
Default PidFile is sshd.pid not ssh.pid.
Retpoline linker flag only needed for linking.
Remove UNICOS support.
Regenerate dependencies after UNICOS removal.
Remove remaining now-obsolete cvs $Ids.
Replace remaining mysignal() with signal().
OpenSSH's builtin entropy gathering is long gone.
Remove extra newline.
Remove references to UNICOS.
Update prngd link to point to sourceforge.
Remove execute bit from modpipe.c.
freezero should check for NULL.
Remove now-unused check for getrusage.
Add REGRESSTMP make var override.
Add headers for sys/audit.h.
Use portable syntax for REGRESSTMP.
Check for ifaddrs.h for BindInterface.
Check for bzero and supply if needed.
Check for raise and supply if needed.
Add prototype for readv if needed.
Handle calloc(0,x) where different from malloc.
bsd-statvfs: include sys/vfs.h, check for f_flags.
Add no-op getsid implmentation.
Invert sense of getpgrp test.
Fix breakage when REGRESSTMP not set.
Import flock() compat from NetBSD.
Hook up flock() compat code.
typo: missing ;
Comment out hexdump().
Replace $(CURDIR) with $(PWD).
Wrap <stdint.h> in #ifdef HAVE_STDINT_H.
Check if HAVE_DECL_BZERO correctly.
Check for attributes on prototype args.
Check dlopen has RTLD_NOW before enabling pkcs11.
Conditionally compile XMSS code.
Add WITH_XMSS, move to prevent conflicts.
Flatten and alphabetize object file lists.
Add strndup for platforms that need it.
Update PAM password change to new opts API.
Remove extra XMSS #endif
Check for and work around buggy fflush(NULL).
Disable UTMPX on SunOS4.
Add AC_LANG_PROGRAM to AC_COMPILE_IFELSE.
Save $? before case statement.
Provide $OBJ to paths in PuTTY interop tests.
Replace /dev/stdin with "-".
Remove UNICOS code missed during removal.
Include ssh_api.h for struct ssh.
Disable native strndup and strnlen on AIX.
Marcus Folkesson (1):
only enable functions in dh.c when openssl is used
Tim Rice (2):
modified: auth-sia.c
Use libiaf on all sysv5 systems
Vicente Olivert Riera (2):
configure.ac: detect MIPS ABI
configure.ac: properly set seccomp_audit_arch for MIPS64
benno at openbsd.org (1):
upstream commit
deraadt at openbsd.org (2):
upstream commit
upstream commit
djm at openbsd.org (69):
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream: remove space before tab
upstream: stop loading DSA keys by default, remove sshd_config
upstream: Mention recent DH KEX methods:
upstream: emphasise that the hostkey rotation may send key types
upstream: Add BindInterface ssh_config directive and -B
upstream: some helpers to check verbose/quiet mode
upstream: unbreak interop test after SSHv1 purge; patch from Colin
upstream: Add ssh-keyscan -D option to make it print its results in
upstream: refactor sshkey_read() to make it a little more, err,
upstream: Allow escaped quotes \" and \' in ssh_config and
upstream: warn when the agent returns a signature type that was
upstream: Introduce a new API for handling authorized_keys options.
upstream: switch over to the new authorized_keys options API and
upstream: better testing for port-forwarding and restrict flags in
upstream: fix testing of pty option, include positive test and
upstream: unit tests for new authorized_keys options API
upstream: for the pty control tests, just check that the PTY path
upstream: revert recent strdelim() change, it causes problems with
upstream: add valid-before="[time]" authorized_keys option. A
upstream: rename recently-added "valid-before" key restriction to
upstream: exlicitly include RSA/SHA-2 keytypes in
upstream: explicitly specify RSA/SHA-2 keytype here too
upstream: check valid-before option in authorized_keys
upstream: rename recently-added "valid-before" key restriction to
djm at openbsd.org@openbsd.org (16):
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
dtucker at openbsd.org (22):
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream Don't reset signal handlers inside handlers.
upstream: Don't send IUTF8 to servers that don't like them.
upstream: Replace fatal with exit in the case that we do not have
upstream: Skip sftp-chroot test when SUDO not set instead of
upstream: Replace fatal with exit in the case that we do not have
upstream: Add missing braces.
upstream: Add newline at end of file to prevent compiler warnings.
upstream: Add $OpenBSD$ markers to xmss files to help keep synced
upstream: Remove unneeded (local) include. ok markus@
upstream: Update RSA minimum modulus size to 1024. sshkey.h rev 1.18
upstream: Tell puttygen to use /dev/urandom instead of /dev/random. On
dtucker at openbsd.org@openbsd.org (3):
upstream commit
upstream commit
upstream commit
jmc at openbsd.org (8):
upstream commit
upstream commit
upstream commit
upstream commit
upstream: some cleanup for BindInterface and ssh-keyscan;
upstream: apply a lick of paint; tweaks/ok dtucker
upstream: move the input format details to -f; remove the output
upstream: sort expiry-time;
jmc at openbsd.org@openbsd.org (3):
upstream commit
upstream commit
upstream commit
jsing at openbsd.org (5):
upstream commit
upstream commit
upstream commit
upstream: Some obvious freezero() conversions.
upstream: Ensure that D mod (P-1) and D mod (Q-1) are calculated in
markus at openbsd.org (13):
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream commit
upstream: Add experimental support for PQC XMSS keys (Extended
upstream: missing #ifdef for _PATH_HOST_XMSS_KEY_FILE; report by
upstream: ssh/xmss: fix deserialize for certs; ok djm@
upstream: ssh/xmss: fix build; ok djm@
upstream: fix bogus warning when signing cert keys using agent;
upstream: openssh-7.7
upstream: openssh-7.7
millert at openbsd.org (3):
upstream commit
upstream commit
upstream commit
millert at openbsd.org@openbsd.org (2):
upstream commit
upstream commit
naddy at openbsd.org (3):
upstream commit
upstream commit
upstream commit
nkadel (6):
Always include x11-ssh-askpass SRPM.
Enhance BuildRequires for openssh-x11-askpass.
Add openssh-devel >= 0.9.8f for redhat spec file.
Add 'dist' to 'rel' for OS specific RPM names.
Discard 'K5DIR' reporting.
Add mandir with-mandir' for RHEL 5 compatibility.
stsp at openbsd.org (2):
upstream commit
upstream commit
tb at openbsd.org (2):
upstream commit
upstream commit
-----------------------------------------------------------------------
No new revisions were added by this update.
--
To stop receiving notification emails like this one, please contact
djm at mindrot.org.
More information about the openssh-commits
mailing list