summaryrefslogtreecommitdiff
path: root/usr.bin/ssh
AgeCommit message (Expand)Author
2016-08-30restrict monitor auth calls to be allowed only when theirDamien Miller
2016-08-28fix uninitialised optlen in getsockopt() call; harmless on Unix/BSDDamien Miller
2016-08-27Pull in <sys/time.h> for struct timevalPhilip Guenther
2016-08-27Pull in <stdlib.h> for NULLPhilip Guenther
2016-08-25add a sIgnore opcode that silently ignores options and use it toDamien Miller
2016-08-25remove superfluous NOTREACHED commentDamien Miller
2016-08-23fix previous, a condition was modified incorrectly; ok markus@ deraadt@Otto Moerbeek
2016-08-23downgrade an error() to a debug2() to match similar casesDamien Miller
2016-08-23fix negated address matching where the address list consists of aDamien Miller
2016-08-23fix matching for pattern lists that contain a single negated match,Damien Miller
2016-08-19remove UseLogin option and support for having /bin/login manageDamien Miller
2016-08-15Catch up with the SSH1 code removal and delete all mention ofChristian Weisgerber
2016-08-15Remove more SSH1 server code:Christian Weisgerber
2016-08-13remove ssh1 server code; ok djm@Markus Friedl
2016-08-12Use 2001:db8::/32, the official IPv6 subnet for configuration examples.Jeremie Courreges-Anglas
2016-08-11Update moduli file.Darren Tucker
2016-08-08Improve error message for overlong ControlPath. ok markus@ djm@Darren Tucker
2016-08-03small refactor of cipher.c: make ciphercontext opaque to callersDamien Miller
2016-08-03Fix bug introduced in rev 1.467 which causes "buffer_get_bignum_ret:Darren Tucker
2016-07-27better bounds check on iovcnt (we only ever use fixed, positive values)Damien Miller
2016-07-24openssh-7.3Damien Miller
2016-07-23fix pledge violation with ssh -f; reported by Valentin KozamernikDamien Miller
2016-07-22improve wording; suggested by jmc@Damien Miller
2016-07-22Lower loglevel for "Authenticated with partial success" message similar toDarren Tucker
2016-07-22constify a few functions' arguments; patch from Jakub Jelen bz#2581Damien Miller
2016-07-22move debug("%p", key) to before key is free'd; probable undefinedDamien Miller
2016-07-22reverse the order in which -J/JumpHost proxies are visited to beDamien Miller
2016-07-21Skip passwords longer than 1k in length so clients can't easily DoS sshdDarren Tucker
2016-07-20Do not clobber the global jump_host variables when parsing an inactiveChristian Weisgerber
2016-07-19tweak previous;Jason McIntyre
2016-07-19Allow wildcard for PermitOpen hosts as well as ports. bz#2582, patch fromDarren Tucker
2016-07-18Reduce timing attack against obsolete CBC modes by always computingMarkus Friedl
2016-07-18Add some unsigned overflow checks for extra_pad. None of theseDamien Miller
2016-07-17support UTF-8 characters in ssh(1) banners using schwarze@'sDamien Miller
2016-07-16- add proxyjump to the options listJason McIntyre
2016-07-15Reduce the syslog level of some relatively common protocol eventsDarren Tucker
2016-07-15Add a ProxyJump ssh_config(5) option and corresponding -J ssh(1)Damien Miller
2016-07-11Add missing "recvfd" pledge promise: Raf Czlonka reported ssh coredumpsTheo Buehler
2016-07-11obsolete note about fascistloggin is obsolete. ok djm dtuckerTed Unangst
2016-07-08Improve crypto ordering for Encrypt-then-MAC (EtM) mode MAC algorithms.Damien Miller
2016-07-04DEBUGLIBS has been broken since the gcc4 switch, so delete it. CFLAGSPhilip Guenther
2016-06-30Explicitly check for 100% completion to avoid potential floating pointDarren Tucker
2016-06-29sort the -o list;Jason McIntyre
2016-06-23fix AuthenticationMethods during configuration re-parse;Damien Miller
2016-06-19revert 1.34; causes problems loading public keysDamien Miller
2016-06-17grammar fix;Jason McIntyre
2016-06-17translate OpenSSL error codes to something more meaninful;Damien Miller
2016-06-17ban AuthenticationMethods="" and accept AuthenticationMethods=anyDamien Miller
2016-06-16Include stdarg.h for va_copy as per man page.Darren Tucker
2016-06-16keys stored in openssh format can have comments too;Jason McIntyre