Age | Commit message (Expand) | Author |
2014-02-27 | bz#2184 clarify behaviour of a keyword that appears in multiple | Damien Miller |
2014-02-27 | off by one in range check | Damien Miller |
2014-02-27 | fix unsigned overflow that could lead to reading a short ssh protocol | Damien Miller |
2014-02-26 | ssh_gssapi_prepare_supported_oids needs GSSAPI | Markus Friedl |
2014-02-26 | don't assume that the socks4 username is \0 terminated; | Damien Miller |
2014-02-26 | bz#2107 - cache OIDs of supported GSSAPI mechanisms before privsep | Damien Miller |
2014-02-26 | bz#2205: avoid early hostname lookups unless canonicalisation is enabled; | Damien Miller |
2014-02-23 | reparse ssh_config and ~/.ssh/config if hostname canonicalisation changes | Damien Miller |
2014-02-23 | check for unsigned overflow; not reachable in OpenSSH but others might | Damien Miller |
2014-02-22 | when processing Match blocks, skip 'exec' clauses if previous predicates | Damien Miller |
2014-02-15 | avoid spurious "getsockname failed: Bad file descriptor" errors in ssh -W; | Damien Miller |
2014-02-07 | -Wold-style-declaration is not supported by gcc 3. | Miod Vallat |
2014-02-07 | remove some logging that makes ssh debugging output very verbose; | Damien Miller |
2014-02-06 | in ssh_create_socket(), only do the getaddrinfo for BindAddress when | Damien Miller |
2014-02-05 | tweak synopsis: calling ssh-keygen without any arguments is fine; ok jmc@ | Christian Weisgerber |
2014-02-04 | delay lowercasing of hostname until right before hostname | Damien Miller |
2014-02-03 | fix memory leak; ECDSA_SIG_new() allocates 'r' and 's' for us, unlike | Damien Miller |
2014-02-02 | convert memset of potentially-private data to explicit_bzero() | Damien Miller |
2014-01-31 | replace most bzero with explicit_bzero, except a few that cna be memset | Ted Unangst |
2014-01-30 | allow shutdown(2) syscall in sandbox - it may be called by packet_close() | Damien Miller |
2014-01-29 | document kbdinteractiveauthentication; | Jason McIntyre |
2014-01-29 | remove experimental, never-enabled JPAKE code; ok markus@ | Damien Miller |
2014-01-29 | In the experimental, never-enabled JPAKE code: clear returned digest and | Damien Miller |
2014-01-29 | use kill(0, ...) instead of killpg(0, ...); on most operating systems | Damien Miller |
2014-01-28 | rename digest.c to digest-openssl.c and add libc variant; ok djm@ | Markus Friedl |
2014-01-28 | kill some bad Pa; | Jason McIntyre |
2014-01-27 | replace openssl MD5 with our ssh_digest_*; ok djm@ | Markus Friedl |
2014-01-27 | replace openssl HMAC with an implementation based on our ssh_digest_* | Markus Friedl |
2014-01-25 | dh_need needs to be set to max(seclen, blocksize, ivlen, mac_len) | Markus Friedl |
2014-01-25 | Add a special case for the DH group size for 3des-cbc, which has an | Darren Tucker |
2014-01-20 | memleak; found by Loganaden Velvindron @ AfriNIC; ok markus@ | Damien Miller |
2014-01-19 | Cast the sizeof to socklen_t so it'll work even if the supplied len is | Darren Tucker |
2014-01-19 | fix inverted meaning of 'no' and 'yes' for CanonicalizeFallbackLocal | Damien Miller |
2014-01-19 | Cast socklen_t when comparing to size_t and use socklen_t to iterate over | Darren Tucker |
2014-01-18 | explicitly define USE_PIPES to 1 to prevent redefinition warnings in portable | Darren Tucker |
2014-01-18 | Remove -Wbounded: it is now the compiler default. | Martynas Venckus |
2014-01-17 | fix log message statvfs. ok djm | Darren Tucker |
2014-01-17 | remove unused includes. ok djm@ | Darren Tucker |
2014-01-17 | signed/unsigned comparison warning fix; from portable | Damien Miller |
2014-01-16 | openssh-6.5 | Damien Miller |
2014-01-16 | needless and incorrect cast to size_t can break resumption of | Damien Miller |
2014-01-12 | avoid use of OpenSSL BIGNUM type and functions for KEX with | Damien Miller |
2014-01-10 | the /etc/ssh/ssh_host_ed25519_key is loaded by default too | Damien Miller |
2014-01-09 | ban clients/servers that suffer from SSH_BUG_DERIVEKEY, they are ancient, | Damien Miller |
2014-01-09 | Introduce digest API and use it to perform all hashing operations | Damien Miller |
2014-01-09 | When formating the time for "ls -l"-style output, show dates in the future | Philip Guenther |
2014-01-04 | use standard types and formats for size_t like variables. ok dtucker | Ted Unangst |
2013-12-30 | refuse RSA keys from old proprietary clients/servers that use the | Damien Miller |
2013-12-29 | when showing other hostkeys, don't forget Ed25519 keys | Damien Miller |
2013-12-29 | don't forget to load Ed25519 certs too | Damien Miller |