summaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2014-03-05We are now 5.5-currentChris Cappuccio
2014-03-05some files were not being hashes, because they were missing from MDEXTTheo de Raadt
noticed by jsg, and important enough to make release
2014-03-04add -C checksum mode, which works with sha256 files in safe easy fashion.Ted Unangst
ok deraadt
2014-03-03ignore enviornment variables with embedded '=' or '\0' characters;Damien Miller
spotted by Jann Horn; ok deraadt@
2014-03-03fix support for HOSTALIASES.Eric Faurot
reported by tedu@ ok tedu@ deraadt@
2014-03-03use official 5.5 keyTheo de Raadt
2014-03-03cdemu is no moreTheo de Raadt
2014-03-02if peer advertises DSN and we don't want to use it, make sure we don't sendGilles Chehade
trailing spaces, not every MTA can cope with that ok eric@
2014-03-02Give up on the other kind of CD. Noone uses it, I am positive.Theo de Raadt
2014-03-02create small i386 and amd64 miniroots. These can be dd'd to a usb stickTheo de Raadt
or such, and easily booted. Work by chris, integration mechanism by me
2014-03-02only signed types work when comparing less than zero.Ted Unangst
reported by matthieu. ok deraadt
2014-03-02also install the "maxiroot"Theo de Raadt
2014-03-02Build a (USB or other disk) miniroot, which can be dd'd and booted sinceTheo de Raadt
it is in LBA form. Work by chris@, integration methodology proposed by me. Needs improvements after release..
2014-03-02Add two disktab entries, for *.fs install filesystems (let's call themTheo de Raadt
'miniroot and maxiroot').. from chris
2014-03-02-l disksize code, to force LBA mode. code by chris, after I suggestedTheo de Raadt
wrapping rows of echo's via fdisk was silly. ok kettenis krw
2014-03-02the map-to-lowercase scheme for msdos is not going to work, because otherTheo de Raadt
filesystems can contain mixed case files (ie. sgi). discussed with krw and halex
2014-03-02Unfortunately... the "full-size downloadable" ISOs will ship withoutTheo de Raadt
internal-signing, because the procedures ran into some snags we can't fix in time for release...
2014-03-02move to official keysTheo de Raadt
2014-03-01start using the new officially named keys. This is being done beforeTheo de Raadt
any snapshots come out which are signed with that key... but just give it a day or two. from ajacoutot
2014-02-28Mount MSDOS partitions with '-l' and not '-s'. Force lists of file namesKenneth R Westerback
to all lower case. Check for install.$ARCH and sha256*. Fixes getting sets from an MSDOS partition, which uebayasi@ reported was broken, without impacting other sources for sets. ok rpe@ halex@ deraadt@
2014-02-28Put signatures in the right place on the mediaTheo de Raadt
2014-02-28Absolutely do not override base system build features in this file!!Theo de Raadt
Discovered by miod.
2014-02-28Bring back the code removed in rev1.317 used to print anchors withMike Belopuhov
wildcard path ("ftp-proxy/*"), but make sure to call it after we're done with the ruleset for the current anchor. On one hand this repairs printing content of such anchors and on the other it allows to use a wildcard on the command line for anchors that were not initially specified with a wildcard. Makes pfctl regress happy again. OK henning, deraadt
2014-02-28update sets sizesMiod Vallat
2014-02-28... also check that writing 0 bytes works...Marc Espie
2014-02-28The user.directory expansion is not supposed to be escaped.Eric Faurot
ok gilles@ deraadt@
2014-02-28guenther's addition of filechk didn't take into account the differentMarc Espie
structure of tmpfs_write. rewrite the opening tests to conform more to ffs's code, so that overrun is not used unitialized. Patch by kettenis@ (on the road) deraadt@ "do it right away"
2014-02-28do not miss out F_BACKUP when dumping envelope or it breaks backup MXGilles Chehade
ok eric@
2014-02-28proper (non-test) keys for 5.5 and 5.6 baseTheo de Raadt
2014-02-28Mention in INSTALL that the BeagleBone supports omgpioafresh1
Ok from bmercer and sthen, Sure from deraadt
2014-02-28Recommend cu instead of tip in the INSTALL prep notesafresh1
As well as using a USB serial device in the example. "cu in general works better on various systems" -- deraadt "cu is more predictable across platforms" -- dlg Ok from maja, tedu, bmercer, jj. "I like it" from deraadt First commit is in documentation, that must be sign of something. Thanks to everyone for making me feel welcome.
2014-02-27RCS IdDamien Miller
2014-02-27openssh-6.6Damien Miller
2014-02-27bz#2184 clarify behaviour of a keyword that appears in multipleDamien Miller
matching Match blocks; ok dtucker@
2014-02-27keep return values that are printed in error messages;Damien Miller
from portable
2014-02-27SECURITY fixes backported from openssl-1.0.1f. ok mikeb@Jeremie Courreges-Anglas
CVE-2013-4353 NULL pointer dereference with crafted Next Protocol Negotiation record in TLS handshake. Upstream: 197e0ea CVE-2013-6449 Fix crash with crafted traffic from a TLS 1.2 client. Upstream: ca98926, 0294b2b CVE-2013-6450 Fix DTLS retransmission from previous session. Upstream: 3462896
2014-02-27some unlikely tape candidatesTed Unangst
2014-02-27some other places it may help to know how to burn an isoTed Unangst
2014-02-27some basic notes on how to create a CD-ROM from an isoTed Unangst
2014-02-27remove any existing LoginGraceTime from sshd_config before addingDamien Miller
a specific one for the test back in
2014-02-27don't list mirrors, just refer to ftp.htmlTed Unangst
2014-02-27nobody uses dos. ntrw.exe is the future.Ted Unangst
2014-02-27tape references everywhereTed Unangst
2014-02-27missed some tape referencesTed Unangst
2014-02-27talk about signify a bitTed Unangst
2014-02-27fewer mentions of SunOSTed Unangst
2014-02-27scary tables of isa port numbers are scary.Ted Unangst
2014-02-27simpler dual boot instructionsTed Unangst
2014-02-27Build a small miniroot filesystem which can be dumped on a new disk or anMiod Vallat
existing swap partition for an easier initial installation.
2014-02-27Delete horrifically out of data add-on-peripheral lists; there are otherTheo de Raadt
places to check for this information, or trial and error, with error resulting in things getting fixed. Scary false warnings don't help anyone. Unmaintainable lists are always unmaintained.