summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* Revert "net-misc/openssh: Removed old."Lars Wendler2019-02-011-0/+9
| | | | | | | This reverts commit 500a23230ac217b5dbca87f3cc22deaf1356ec2b. because some ebuilds still depend on <openssh-7.6 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* net-misc/openssh: Removed old.Lars Wendler2019-01-311-9/+0
| | | | | Package-Manager: Portage-2.3.59, Repoman-2.3.12 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* net-misc/openssh: Revbump to 7.9_p1-r1, update X509 patch to 11.6Patrick McLean2018-12-191-0/+1
| | | | | | Copyright: Sony Interactive Entertainment Inc. Package-Manager: Portage-2.3.52, Repoman-2.3.12 Signed-off-by: Patrick McLean <chutzpah@gentoo.org>
* net-misc/openssh: Version bump to 7.9_p1Patrick McLean2018-10-191-0/+3
| | | | | Signed-off-by: Patrick McLean <chutzpah@gentoo.org> Package-Manager: Portage-2.3.51, Repoman-2.3.11
* Revert "net-misc/openssh: Security cleanup"Thomas Deutschmann2018-10-071-0/+5
| | | | | | | | | | This reverts commit 5091fd8f2b5a7cb0d3e970df404446d3aef8f3c7. <net-misc/openssh-7.6 is still needed for dev-python/twisted. Bug: https://bugs.gentoo.org/661258 Bug: https://bugs.gentoo.org/664264 Signed-off-by: Thomas Deutschmann <whissi@gentoo.org>
* net-misc/openssh: Security cleanupMikle Kolyada2018-10-061-5/+0
| | | | | | Closes: https://bugs.gentoo.org/664264 Signed-off-by: Mikle Kolyada <zlogene@gentoo.org> Package-Manager: Portage-2.3.49, Repoman-2.3.11
* net-misc/openssh: Version bump to 7.8_p1Patrick McLean2018-09-121-0/+5
| | | | Package-Manager: Portage-2.3.49, Repoman-2.3.10
* net-misc/openssh: partial security cleanupThomas Deutschmann2018-08-221-6/+0
| | | | | Bug: https://bugs.gentoo.org/664264 Package-Manager: Portage-2.3.48, Repoman-2.3.10
* net-misc/openssh: add patch to prevent username enumerationThomas Deutschmann2018-08-161-0/+1
| | | | | Link: http://seclists.org/oss-sec/2018/q3/124 Package-Manager: Portage-2.3.46, Repoman-2.3.10
* net-misc/openssh: drop experimental revision used to test LDAP migrationThomas Deutschmann2018-08-071-1/+0
| | | | | | Revision no longer needed. Migration completed. Package-Manager: Portage-2.3.44, Repoman-2.3.10
* net-misc/openssh: bump to address multiple issuesThomas Deutschmann2018-06-191-2/+2
| | | | | | | | | | | | - Fix building on x86 due to undefined socketcall when "hpn" USE flag was set. [Bug 658232] - Fix segfault when using sshd with "sctp" USE flag. [Bug 658308] Closes: https://bugs.gentoo.org/658232 Closes: https://bugs.gentoo.org/658308 Package-Manager: Portage-2.3.40, Repoman-2.3.9 RepoMan-Options: --force
* net-misc/openssh: add test ebuild for new LDAP implementationThomas Deutschmann2018-06-131-0/+1
| | | | | | | | | | | We switched from dead openssh-lpk patch to Red Hat's rewritten LDAP patch which makes use of "AuthorizedKeysCommand". Warning: Default LDAP scheme isn't compatible. Migration is needed. Bug: https://bugs.gentoo.org/658044 Package-Manager: Portage-2.3.40, Repoman-2.3.9
* net-misc/openssh: drop oldThomas Deutschmann2018-06-121-2/+0
| | | | Package-Manager: Portage-2.3.40, Repoman-2.3.9
* net-misc/openssh: add more upstream patchesThomas Deutschmann2018-06-051-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Pick: "Use includes.h instead of config.h." [Link 1] - Pick: "upstream: Since the previous commit, ssh regress test" [Link 2] - Pick: "upstream: implement EMFILE mitigation for ssh-agent" [Link 3] - Pick: "fix key-options.sh on platforms without openpty(3)" [Link 4] - Pick: "sync fmt_scaled.c" [Link 5] - Pick: "upstream: Emphasise that -w implicitly sets Tunnel=point-to-point" [Link 6] - Pick: "upstream: correct keyowrd name (permitemptypasswords)" [Link 7] - Pick: "Permit getuid()/geteuid() syscalls." [Link 8] - Pick: "upstream: If select() fails in ssh_packet_read_seqnr go directly to the error path" [Link 9] - Pick: "upstream: Fix return value confusion in several functions" [Link 10] - Pick: "upstream: Do not ban PTY allocation when a sshd session is restricted" [Link 11] - Pick: "upstream: prefer argv0 to "ssh" when re-executing ssh for ProxyJump" [Link 12] - Pick: "upstream: return correct exit code when searching for and hashing known_hosts entries in a single operatio" [Link 13] - Pick: "upstream: make ssh_remote_ipaddr() capable of being called after the ssh->state has been torn down" [Link 14] - Pick: "upstream: whitespace" [Link 15] - Pick: "upstream: Adapt to extra default verboisity from ssh-keygen when searching for and hashing known_hosts entries in a single operation" [Link 16] - Pick: "upstream: Apply umask to all incoming files and directories not just file" [Link 17] Link 1: https://github.com/openssh/openssh-portable/commit/7c15301841e2e9d37cae732400de63ae9c0961d6 Link 2: https://github.com/openssh/openssh-portable/commit/e7751aa4094d51a9bc00778aa8d07e22934c55ee Link 3: https://github.com/openssh/openssh-portable/commit/b2140a739be4c3b43cc1dc08322dca39a1e39d20 Link 4: https://github.com/openssh/openssh-portable/commit/54268d589e85ecc43d3eba8d83f327bdada9d696 Link 5: https://github.com/openssh/openssh-portable/commit/32e4e94e1511fe0020fbfbb62399d31b2d22a801 Link 6: https://github.com/openssh/openssh-portable/commit/f18bc97151340127859634d20d79fd39ec8a7f39 Link 7: https://github.com/openssh/openssh-portable/commit/f41bcd70f55b4f0fc4d8e1039cb361ac922b23fb Link 8: https://github.com/openssh/openssh-portable/commit/4ef75926ef517d539f2c7aac3188b09f315c86a7 Link 9: https://github.com/openssh/openssh-portable/commit/1da5934b860ac0378d52d3035b22b6670f6a967e Link 10: https://github.com/openssh/openssh-portable/commit/f6a59a22b0c157c4c4e5fd7232f868138223be64 Link 11: https://github.com/openssh/openssh-portable/commit/fbb4b5fd4f8e0bb89732670a01954e18b69e15ba Link 12: https://github.com/openssh/openssh-portable/commit/d8748b91d1d6c108c0c260ed41fa55f37b9ef34b Link 13: https://github.com/openssh/openssh-portable/commit/3e088aaf236ef35beeef3c9be93fd53700df5861 Link 14: https://github.com/openssh/openssh-portable/commit/854ae209f992465a276de0b5f10ef770510c2418 Link 15: https://github.com/openssh/openssh-portable/commit/01b048c8eba3b021701bd0ab26257fc82903cba8 Link 16: https://github.com/openssh/openssh-portable/commit/a1dcafc41c376332493b9385ee39f9754dc145ec Link 17: https://github.com/openssh/openssh-portable/commit/e5019da3c5a31e6e729a565f2b886a80c4be96cc Package-Manager: Portage-2.3.40, Repoman-2.3.9
* net-misc/openssh: bump HPN patch set; re-enable MT AES cipherThomas Deutschmann2018-05-081-0/+1
| | | | Package-Manager: Portage-2.3.34, Repoman-2.3.9
* net-misc/openssh: Rev bump to add patchesThomas Deutschmann2018-04-221-0/+1
| | | | | | | | | | | Ebuild changes: =============== - Added patches for various upstream issues like bug 2840, 2835, 2851, 2837, 2855, 2719. Closes: https://bugs.gentoo.org/653750 Closes: https://bugs.gentoo.org/653008 Package-Manager: Portage-2.3.31, Repoman-2.3.9
* net-misc/openssh: Bump to v7.7_p1Thomas Deutschmann2018-04-111-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ebuild changes: =============== - HPN patch set updated to v14.14. MT AES CTR cipher are still not working at the moment but we are working on this. - SCTP patch updated for openssh-7.7_p1. - LDAP patch is currently not available because patch isn't compatble with openssh-7.7_p1 and needs a major rewrite because upstream removed auth_parse_options() via commit 7c8568576071. - X.509 patch updated to v11.3.1. - Previously, SCTP patch sometimes got applied even when "sctp" USE flag wasn't set, this is now fixed. - We now always expose applied patches in version string (previously this was only the case for some patches and was also depending on whether the "hpn" USE flag was enabled or not). - Make sure "/var/empty" gets preserved by package manager. [Bug 647034] - Runscript: "use" entropy. [Bug 470020] - Runscript: Use "/run" instead of "/var/run". [Bug 555734] - Runscript: Verify daemon is really up and running. [Bug 617596] - Runscript: Simplified (thanks to Michael Orlitzky) - Runscript: Add prefix support. [Bug 640666] - Runscript: It is now possible to pass any by start-stop-daemon supported arguments (like "--ionice" or "--nicelevel" for example) to start-stop-daemon. [Bug 636764] Closes: https://bugs.gentoo.org/470020 Closes: https://bugs.gentoo.org/555734 Closes: https://bugs.gentoo.org/617596 Closes: https://bugs.gentoo.org/636764 Closes: https://bugs.gentoo.org/640666 Closes: https://bugs.gentoo.org/647034 Closes: https://bugs.gentoo.org/652438 Package-Manager: Portage-2.3.28, Repoman-2.3.9
* net-misc/openssh: Removed old.Lars Wendler2018-03-121-3/+0
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* net-misc/openssh: Manifest update for X509 11.2Patrick McLean2018-02-121-1/+1
| | | | | | I forgot about the wget gzip silliness.. oops Package-Manager: Portage-2.3.24, Repoman-2.3.6
* net-misc/openssh: Revision bump, update X509 patch to 11.2Patrick McLean2018-02-121-0/+1
| | | | Package-Manager: Portage-2.3.24, Repoman-2.3.6
* net-misc/openssh: Add fix for bug 634594 from zmedicoPatrick McLean2018-01-231-0/+1
| | | | | | | Not revbumping since hpn has been package.use.mask-ed. Closes: https://bugs.gentoo.org/634594 Package-Manager: Portage-2.3.20, Repoman-2.3.6
* net-misc/openssh: Revision bump, bump X509 patch to 11.1Patrick McLean2018-01-221-0/+1
| | | | | | | | Also re-enable hpn USE flag (disabled by default) since it has now been package.use.mask-ed in the base profile. Bug: https://bugs.gentoo.org/634594 Package-Manager: Portage-2.3.20, Repoman-2.3.6
* net-misc/openssh: Security cleanup (bug #633428)Thomas Deutschmann2017-12-181-1/+0
| | | | Package-Manager: Portage-2.3.19, Repoman-2.3.6
* net-misc/*: Update Manifest hashesMichał Górny2017-12-101-11/+11
|
* net-misc/openssh: Restore 7.6_p1-r0 ebuildPatrick McLean2017-11-071-0/+1
| | | | | | | | Some users aren't affected by bug #634594, rather than forcing them to downgrade or fork, we should keep the ebuild with hpn around. Bug: https://bugs.gentoo.org/634594 Package-Manager: Portage-2.3.13, Repoman-2.3.4
* net-misc/openssh: Revbump to remove hpn support (breaks scp transfers)Lars Wendler2017-11-071-1/+0
| | | | | Bug: https://bugs.gentoo.org/634594 Package-Manager: Portage-2.3.13, Repoman-2.3.4
* net-misc/openssh: Add updated X509 patchset to 7.6_p1Patrick McLean2017-10-111-0/+1
| | | | | | | | Had to drop the multithreaded aes-ctr cipher as it seems to cause test failures with OpenSSH 7.6p1. We can re-add in the future if a fix is found. Package-Manager: Portage-2.3.11, Repoman-2.3.3
* net-misc/openssh: Added revised ldap patch (bug #633942).Lars Wendler2017-10-111-0/+1
| | | | | | Thanks to Thomas (Whissi) Deutschmann for the fix. Package-Manager: Portage-2.3.11, Repoman-2.3.3
* net-misc/openssh: Removed old.Lars Wendler2017-10-101-9/+0
| | | | Package-Manager: Portage-2.3.11, Repoman-2.3.3
* net-misc/openssh: Bump to version 7.6_p1Lars Wendler2017-10-101-0/+3
| | | | | | | (without hpn patch for now as that requires bigger rewrites due to ssh1 removal) Package-Manager: Portage-2.3.11, Repoman-2.3.3
* net-misc/openssh: Revision bump to 7.5_p1-r2 to bump X509 patch to version 10.2Patrick McLean2017-06-091-0/+1
| | | | | | This also fixes the version string to include the X509 (PKIX-SSH) version. Package-Manager: Portage-2.3.6, Repoman-2.3.2
* net-misc/openssh: Revision bump to 7.5_p1-r1, re-add X509 supportPatrick McLean2017-03-271-0/+1
| | | | Package-Manager: Portage-2.3.5, Repoman-2.3.2
* net-misc/openssh: version bump to 7.5p1Mike Frysinger2017-03-201-0/+3
|
* net-misc/openssh: Security cleanup (bug #597360)Thomas Deutschmann2017-01-091-4/+0
| | | | | Package-Manager: Portage-2.3.3, Repoman-2.3.1 Closes: https://github.com/gentoo/gentoo/pull/3405
* net-misc/openssh: version bump to 7.4_p1 #603100Mike Frysinger2016-12-221-0/+4
|
* net-misc/openssh: clean up patches a bitMike Frysinger2016-11-271-0/+1
| | | | | | | | | | Add documentation to the new patches to track their provenance. Clean up the hpn patchset to resync it with upstream and drop the extended server logging patch again. Change how we apply the mips ABI patch to use the right USE flags rather than keying off a subset of CHOSTs.
* net-misc/openssh: Removed old.Lars Wendler2016-09-281-8/+0
| | | | | Package-Manager: portage-2.3.1 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* net-misc/openssh: Revision bump, update to version 9.2 of the X509 patchPatrick McLean2016-09-191-0/+2
| | | | | | | | | | - Clean up some warnings introduced by the X509 patch - Add patch to fix compilation on MIPS64/N32 (bug #591392) - Pull in patch from upstream cvs to fix ssh1 support (bug #592122) Also bump the HPN patch to remove an unused function Package-Manager: portage-2.3.1
* net-misc/openssh: Refactor new HPN patch to be it's own patchPatrick McLean2016-09-081-1/+1
| | | | | | Make my own patch rather than going with the patches on patches approach Package-Manager: portage-2.3.0
* net-misc/openssh: Revision bump, re-enable the hpn USE flagPatrick McLean2016-09-021-0/+1
| | | | | | | | | | | | | | This is hard masked for now for further testing, see bug #577768, All the tests pass on all of my machines with USE="hpn" and USE="hpn X509". Since there does not appear to be a tarball for the upstream hpn for openssh-7.2+, this ebuild downloads the kitchensink diff, then patches it to apply against openssh-7.3p1 and remove the server logging stuff that get dropped from other hpn patchsets. We can unmask this once more people test it and sign off that is looks good. Package-Manager: portage-2.3.0
* net-misc/openssh: Revision bump to update X509 patch to version 9.1Patrick McLean2016-08-271-0/+1
| | | | Package-Manager: portage-2.3.0
* net-misc/openssh: Revision bump, enable the X509 patchPatrick McLean2016-08-031-0/+1
| | | | Package-Manager: portage-2.3.0
* net-misc/openssh: version bump to 7.3_p1Mike Frysinger2016-08-021-0/+3
|
* net-misc/openssh: Security cleanup (bug #571892).Lars Wendler2016-06-111-8/+0
| | | | | | | | Kept latest ebuild with hpn USE flag as it's ~arch anyway and gets superseded by the latest "secure" version anyway. Package-Manager: portage-2.2.28 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* net-misc/openssh: version bump to 7.2_p2 #576954Mike Frysinger2016-03-111-0/+3
|
* net-misc/openssh: version bump to 7.2_p1Mike Frysinger2016-03-021-0/+4
|
* net-misc/openssh: rev bump to pick up new x509 patchMike Frysinger2016-01-171-0/+1
|
* net-misc/openssh: version bump to 7.1_p2 #571892Mike Frysinger2016-01-141-0/+4
|
* net-misc/openssh: Removed old.Lars Wendler2016-01-141-16/+0
| | | | | Package-Manager: portage-2.2.26 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org>
* net-misc/openssh: fix tun window size in hpn mode #564236Mike Frysinger2015-10-291-0/+1
|