Commits - rpms/openssh - CentOS Git server

Fix pam_ssh_agent version string in changelog

Raymond Colebaugh • 4 months ago

a59efe

Reenable keyperm patch in facebook builds

Raymond Colebaugh • 4 months ago

c63234

Merge remote-tracking branch 'gitlab/c9s' into c9s-sig-hyperscale

Michel Lind • 4 months ago

c4d299

Possible remote code execution due to a race condition (CVE-2024-6409)

Dmitry Belyavskiy • 4 months ago

2a5b65

Possible remote code execution due to a race condition (CVE-2024-6387)

Dmitry Belyavskiy • 4 months ago

96149a

Fix CVE-2024-6387 (regreSSHion)

Michel Lind • 4 months ago

1c324b

Fix ssh multiplexing connect timeout processing

Dmitry Belyavskiy • 5 months ago

6ca18e

Add key size variables into sshd.sysconfig

Zoltan Fridrich • 6 months ago

17e559

Make default key sizes configurable in sshd-keygen

Zoltan Fridrich • 6 months ago

01178d

Correctly audit hostname and IP address

Zoltan Fridrich • 6 months ago

7fedb4

Merge "Add LOG_SESSION_ID for everyone" patch into fb87_log_session_id.patch, update fb87_pass_principals_to_child.patch to account for this change

Raymond Colebaugh • 6 months ago

2540e6

Use FIPS-compatible API for key derivation

Dmitry Belyavskiy • 7 months ago

03eff3

Fix previous changelog date that was out of order

Raymond Colebaugh • 7 months ago

859ac3

Disable openssh-6.6p1-keyperm.patch in hs+fb builds

Raymond Colebaugh • 7 months ago

468f90

Merge remote-tracking branch 'upstream/c9s' into c9s-sig-hyperscale

Raymond Colebaugh • 7 months ago

26f4f5

Fix Terrapin attack

Dmitry Belyavskiy • 10 months ago

2c2ea1

Fix Terrapin attack

Dmitry Belyavskiy • 10 months ago

4c4233

Rebuild

Dmitry Belyavskiy • 11 months ago

8a8fae

Forbid shell metasymbols in username/hostname

Dmitry Belyavskiy • 11 months ago

0521bb

Relax OpenSSH build-time checks for OpenSSL version

Dmitry Belyavskiy • 11 months ago

d18e1c

Fix Terrapin attack

Dmitry Belyavskiy • 11 months ago

54fc80

Move users/groups creation logic to sysusers.d fragments

Dmitry Belyavskiy • a year ago

5838d3

Limit artificial delays in sshd while login using AD user

Dmitry Belyavskiy • a year ago

a43be1

Relax OpenSSH checks for OpenSSL version

Dmitry Belyavskiy • a year ago

d8b51e

Merge upstream changes for 8.7p1-34.7

Raymond Colebaugh • a year ago

1b7f4c

Merge upstream changes for 8.7p1-29.6

Raymond Colebaugh • a year ago

4c983d

Avoid remote code execution in ssh-agent PKCS#11 support

Dmitry Belyavskiy • a year ago

edaf6c

Avoid remote code execution in ssh-agent PKCS#11 support

Dmitry Belyavskiy • a year ago

6fa799

Allow specifying validity interval in UTC

Dmitry Belyavskiy • a year ago

c5140c

Clarify rhbz#2068423 on the ssh_config man page

Norbert Pocs • a year ago

415f8e

Fix regression in pkcs11 introduced in the previous patch

Norbert Pocs • a year ago

6b2353

Delete unneeded debug messages from fips-compl-dh patch

Norbert Pocs • a year ago

48718a

Fix minor issues with openssh-8.7p1-evp-fips-compl-dh.patch

Norbert Pocs • 2 years ago

1490ff

Add FIPS compliance efforts for dh, ecdh and signing

Norbert Pocs • 2 years ago

587d7b

Eliminating remnants of SHA1 usage in OpenSSH

Dmitry Belyavskiy • 2 years ago

b5ba5a

Merge remote-tracking branch 'upstream/c9s' into c9s-sig-hyperscale

Raymond Colebaugh • 2 years ago

79e2cf

Some non-terminating processes were listening on ports.

Dmitry Belyavskiy • 2 years ago

cc7d7a

Resolve possible self-DoS with some clients

Dmitry Belyavskiy • 2 years ago

f7003b

Do not try to use SHA1 for host key ownership proof when we don't support it server-side

Dmitry Belyavskiy • 2 years ago

42aa6f

Do not try to use SHA1 for host key ownership proof when we don't support it server-side

Dmitry Belyavskiy • 2 years ago

ebbbfc

Add sk-dummy subpackage for test purposes

Zoltan Fridrich • 2 years ago

5cfb97

Minor cleanups from upstream

Dmitry Belyavskiy • 2 years ago

6f7478

- Build fix after OpenSSL rebase

Dmitry Belyavskiy • 2 years ago

b0f320

Merge upstream changes

Raymond Colebaugh • 2 years ago

6a2653

Set minimal value of RSA key length via configuration option

Dmitry Belyavskiy • 2 years ago

ad9644

Also bump extra_ver for pam subpackage and fix recent changelog format

Raymond Colebaugh • 2 years ago

ed3109

Set minimal value of RSA key length via configuration option

Dmitry Belyavskiy • 2 years ago

d4ff0b

Add changelog entry and bump hyperscale_ref instead of reset

Raymond Colebaugh • 2 years ago

ed488d

Merge remote-tracking branch 'upstream/c9s' into c9s-sig-hyperscale

Raymond Colebaugh • 2 years ago

1a3722

Turn off use_quilt

Kent Peacock • 2 years ago

0b9962

Fix a bug in slog, and fix patches that had offsets in application.

Kent Peacock • 2 years ago

f94360

Fix macro usage

Kent Peacock • 2 years ago

e8dcb2

Add BuildRequires: quilt

Kent Peacock • 2 years ago

6da40c

Turn off use_quilt.

Kent Peacock • 2 years ago

487284

Typo

Kent Peacock • 2 years ago

38c1af

Missed version change in changelog.

Kent Peacock • 2 years ago

78078c

Move fbpatches files into base directory, so they can be found and packaged.

Kent Peacock • 2 years ago

dffbc2

Revert "Use quilt always to install facebook patches, to fix build breakage."

Kent Peacock • 2 years ago

9c89b9

Use quilt always to install facebook patches, to fix build breakage.

Kent Peacock • 2 years ago

ef9f50

Fix missing dots on patch -b arguments.

Kent Peacock • 2 years ago

c6dbe3

Remove setting of fbxx as facebook_rel.

Kent Peacock • 2 years ago

dad6a1

Make recommended changes from review.

Kent Peacock • 2 years ago

8e1394

Remove define of %{facebook}

Kent Peacock • 2 years ago

5992aa

Initial checkin of integrated Meta patches, and specfile changes

Kent Peacock • 2 years ago

d1c05f

Set minimal value of RSA key length via configuration option

Dmitry Belyavskiy • 2 years ago

d92560

Avoid spirous message on connecting to the machine with ssh-rsa keys

Dmitry Belyavskiy • 2 years ago

a0db6b

IBMCA workaround

Dmitry Belyavskiy • 2 years ago

b53c53

Fix openssh-8.7p1-scp-clears-file.patch

Zoltan Fridrich • 2 years ago

1d30b8

Refactor and reinstate FIPS patch for el8

Davide Cavalca • 2 years ago

ac6e5f

Make it build on el8 as well for Hyperscale

Davide Cavalca • 2 years ago

c5fd58

FIX pam_ssh_agent_auth auth for RSA keys

Dmitry Belyavskiy • 2 years ago

9591af

Fix new coverity issues

Zoltan Fridrich • 2 years ago

9697ee

Disable ed25519 and ed25519-sk keys in FIPS mode

Dmitry Belyavskiy • 2 years ago

d23afa

Don't propose disallowed algorithms during hostkey negotiation

Zoltan Fridrich • 2 years ago

e8622f

Disable ed25519 and ed25519-sk keys in FIPS mode

Dmitry Belyavskiy • 2 years ago

b17ff3

Disable ed25519 and ed25519-sk keys in FIPS mode

Dmitry Belyavskiy • 2 years ago

0d823b

Add reference for policy customization in ssh/sshd_config manpages

Zoltan Fridrich • 2 years ago

821045

Disable ed25519 and ed25519-sk keys in FIPS mode

Dmitry Belyavskiy • 2 years ago

399096

Disable sntrup761x25519-sha512 in FIPS mode

Dmitry Belyavskiy • 2 years ago

32a826

Fix host-based authentication with rsa keys

Zoltan Fridrich • 2 years ago

fd0d5a

Fix gssapi authentication failures

Zoltan Fridrich • 2 years ago

9bf7b4

Fix several memory leaks

Zoltan Fridrich • 2 years ago

585620

Add missing options from ssh_config into ssh manpage

Zoltan Fridrich • 2 years ago

afede7

Fix scp clearing file when src and dest are the same

Zoltan Fridrich • 2 years ago

c958ea

Use EVP functions for RSA and EC key generation

Dmitry Belyavskiy • 2 years ago

d0bf0e

Set minimal value of RSA key length via configuration option

Dmitry Belyavskiy • 2 years ago

4b21ae

Change log level of FIPS specific log message to verbose

Zoltan Fridrich • 2 years ago

e11cd7

Change product name from Fedora to RHEL in openssh-7.8p1-UsePAM-warning.patch

Zoltan Fridrich • 2 years ago

1325e1

Update minimize-sha1-use.patch to use upstream code

Zoltan Fridrich • 2 years ago

abf032

Workaround for RHEL 8 incompatibility in scp utility in SFTP mode

Dmitry Belyavskiy • 2 years ago

cf05a2

Switch to SFTP protocol in scp utility by default - various improvements

Dmitry Belyavskiy • 2 years ago

149505

Switch to SFTP protocol in scp utility by default - upstream fixes

Dmitry Belyavskiy • 2 years ago

0b7faa

Fix SSH connection to localhost not possible in FIPS

Dmitry Belyavskiy • 2 years ago

829ee6

- Fix `ssh-keygen -Y find-principals -f /dev/null -s /dev/null` segfault

Dmitry Belyavskiy • 2 years ago

bf1985

Fix memory leaks introduced in OpenSSH 8.7

Dmitry Belyavskiy • 3 years ago

581a7d

Disable locale forwarding in default configurations

Dmitry Belyavskiy • 3 years ago

6e19d4

Upstream fix for CVE-2021-41617

Dmitry Belyavskiy • 3 years ago

aa1b33

Disabling SCP protocol as much as possible

Dmitry Belyavskiy • 3 years ago

f32839

Rebasing to OpenSSH 8.7p1

Dmitry Belyavskiy • 3 years ago

f9e5de

Sources and spec changes

Dmitry Belyavskiy • 3 years ago

62d88b

Rebuilt for IMA sigs, glibc 2.34, aarch64 flags

Mohan Boddu • 3 years ago

64353f

Rebuild to pick up OpenSSL 3.0 Beta ABI (#1984097)

Florian Weimer • 3 years ago

92c05e

Add RHEL gating configuration

Aleksandra Fedorova • 3 years ago

0ae3cb

Upstream patch for restoring nonblock state

Dmitry Belyavskiy • 3 years ago

b82d68

Rebuilt for RHEL 9 BETA for openssl 3.0

Mohan Boddu • 3 years ago

ff6bdd

Remove the recommendation of p11-kit

Dmitry Belyavskiy • 3 years ago

0695fd

Avoid warnings about deprecated functions

Dmitry Belyavskiy • 3 years ago

d1f2ed

Hostbased ssh authentication fails if session ID contains a '/'

Dmitry Belyavskiy • 3 years ago

9b598f

Hostbased ssh authentication fails if session ID contains a '/'

Dmitry Belyavskiy • 3 years ago

d0754b

Missing patch

Dmitry Belyavskiy • 3 years ago

c3e6e4

Fixing broken GSS KEX beginning with (GSI-)OpenSSH 8.0p1

Dmitry Belyavskiy • 3 years ago

d075fa

Rebase from openssh 8.5p1 to 8.6p1

Dmitry Belyavskiy • 3 years ago

9dff9c

- Rebuilt for RHEL 9 BETA on Apr 15th 2021. Related: rhbz#1947937

Mohan Boddu • 3 years ago

dd942e

Coverity fixes for 8.5p1 (#1938831)

Dmitry Belyavskiy • 3 years ago

925484

Merged update from upstream sources

DistroBaker • 3 years ago

d029bb

Merged update from upstream sources

DistroBaker • 3 years ago

fa840d

Merged update from upstream sources

DistroBaker • 3 years ago

fba82b

Merged update from upstream sources

DistroBaker • 3 years ago

f2cb8f

Merged update from upstream sources

DistroBaker • 3 years ago

314f21

Merged update from upstream sources

DistroBaker • 4 years ago

c8a439

RHEL 9.0.0 Alpha bootstrap

Petr Šabata • 4 years ago

81d24c

rpms / openssh

Commits 122

rpms / openssh

Source Code

Commits 122