33d804a345- Add patches from upstream: - To fix a copy&paste oversight in an ifdef : * 0001-fix-utmpx-ifdef.patch - To fix a regression introduced when the "Match" criteria tokenizer was modified since it stopped supporting the "Match criteria=argument" format: * 0002-upstream-fix-regression-introduced-when-I-switched-the-Match.patch - To fix the previous patch which broke on negated Matches: * 0003-upstream-fix-previous-change-to-ssh_config-Match_-which-broken-on.patch - To fix the ML-KEM768x25519 kex algorithm on big-endian systems: * 0004-upstream-fix-ML-KEM768x25519-KEX-on-big-endian-systems-spotted-by.patchAntonio Larrosa2024-10-28 11:16:49 +0000
01365117e3Accepting request 1207974 from network
Ana Guerrero
2024-10-15 12:57:58 +0000
77745960a4Accepting request 1207806 from network
Dominique Leuenberger
2024-10-14 11:06:29 +0000
77273f8679Updated the patch with a suggestion from upstream.Antonio Larrosa2024-10-14 06:33:00 +0000
fef82d94daAccepting request 1203550 from network
Ana Guerrero
2024-09-26 16:52:30 +0000
a77a72fabb- Add a const to the openssl 1.1/RSA section of sshkey_is_private to keep it similar to what it used before the 9.9 rebase: * openssh-8.1p1-audit.patch - Add a openssl11 bcond to the spec file for the SLE12 case instead of checking suse_version in different parts. - Move conditional patches to a number >= 1000.Antonio Larrosa2024-09-25 11:55:37 +0000
3f6eda5c88- Update to openssh 9.9p1: * No changes for askpass, see main package changelog for details.Marcus Meissner2024-09-25 08:42:29 +0000
f15242edbdAccepting request 1200282 from network
Ana Guerrero
2024-09-13 12:26:08 +0000
fef1b16e66- Drop most of openssh-6.6p1-keycat.patch (actually, it was just commented out). The keycat binary isn't really installed nor supported, so we can drop it, except for the code that is used by other SELinux patches, which is what I kept from that patch (boo#1229072). - Add patch submitted to upstream to fix RFC4256 implementation so that keyboard-interactive authentication method can send instructions and sshd shows them to users even before a prompt is requested. This fixes MFA push notifications (boo#1229010). * 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patchAntonio Larrosa2024-09-12 10:24:41 +0000
fbdd7af379Accepting request 1196434 from network
Dominique Leuenberger
2024-08-29 13:42:55 +0000
dd9c4b9bb1- Add patch to fix sshd not logging in the audit failed login attempts (submitted to upstream in https://github.com/openssh/openssh-portable/pull/516): * fix-audit-fail-attempt.patch - Use --enable-dsa-keys when building openssh. It's required if the user sets the crypto-policy mode to LEGACY, where DSA keys should be allowed. The option was added by upstream in 9.7 and set to disabled by default. - These two changes fix 2 of the 3 issues reported in bsc#1229650.Antonio Larrosa2024-08-23 12:36:12 +0000
8a8ed57387Accepting request 1194679 from network
Ana Guerrero
2024-08-21 21:24:44 +0000
da2c6cc517- Update to openssh 9.8p1: * No changes for askpass, see main package changelog for details.Antonio Larrosa2024-08-12 09:54:46 +0000
d5d292d413Accepting request 1185823 from network
Ana Guerrero
2024-07-08 17:06:54 +0000
869b2ae788- Add patch from upstream to fix proxy multiplexing mode: * 0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch - Add patch from upstream to restore correctly sigprocmask * 0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch - Add patch from upstream to fix a logic error in ObscureKeystrokeTiming that rendered this feature ineffective, allowing a passive observer to detect which network packets contained real keystrokes (bsc#1227318, CVE-2024-39894): * 0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patchAntonio Larrosa2024-07-05 19:01:36 +0000
45f6d17800- Add obsoletes for openssh-server-config-rootlogin since that package existed for a brief period of time during SLE 15 SP6/ Leap 15.6 development but even if it was removed from the repositories before GM, some users might have it in their systems from having tried a beta/RC release (boo#1227350).Antonio Larrosa2024-07-05 11:34:53 +0000
414e74b526Accepting request 1184302 from network
Ana Guerrero
2024-07-02 16:16:12 +0000
0aa4b1876f- Add patch to fix a race condition in a signal handler by removing the async-signal-unsafe code (CVE-2024-6387, bsc#1226642): * fix-CVE-2024-6387.patchAntonio Larrosa2024-07-01 11:50:15 +0000
909e5eb8e7Accepting request 1179624 from network
Ana Guerrero
2024-06-10 15:37:06 +0000
b4dab4a6f7Accepting request 1179619 from home:alarrosa:branches:network:opensshDirk Mueller2024-06-10 07:34:57 +0000
9b110f7defAccepting request 1174781 from network
Ana Guerrero
2024-05-17 18:03:57 +0000
e11bee9499Accepting request 1174779 from home:alarrosa:branches:network:openssh-permit-root-loginAntonio Larrosa2024-05-17 08:01:30 +0000
6b2f2760efAccepting request 1166157 from network
Ana Guerrero
2024-04-08 15:37:41 +0000
2793e0783aAccepting request 1166156 from home:alarrosa:branches:networkAntonio Larrosa2024-04-08 11:15:17 +0000
2f5a8dd315Accepting request 1165554 from home:alarrosa:branches:networkAntonio Larrosa2024-04-05 11:11:29 +0000
b0b10ece31Accepting request 1165549 from home:alarrosa:branches:network2Antonio Larrosa2024-04-05 11:08:11 +0000
2399b4e4c2Accepting request 1165438 from home:alarrosa:branches:network2Antonio Larrosa2024-04-05 07:57:21 +0000
bf408fc2b0Accepting request 1164536 from network
Ana Guerrero
2024-04-04 20:24:47 +0000
c133b2d567Accepting request 1164145 from home:alarrosa:branches:networkMarcus Meissner2024-04-04 09:11:43 +0000
5252cd62e2Accepting request 1155471 from home:pmonrealgonzalez:branches:networkMarcus Meissner2024-04-04 09:11:25 +0000
2446674e73Accepting request 1150501 from network
Ana Guerrero
2024-02-27 21:43:12 +0000
b3ff99ae3cAccepting request 1150500 from home:hpjansson:branches:network
Hans Petter Jansson
2024-02-25 18:43:17 +0000
b339dda6d3Accepting request 1133933 from network
Ana Guerrero
2023-12-19 22:15:40 +0000
9778084948Accepting request 1133932 from home:hpjansson:branches:network
Hans Petter Jansson
2023-12-19 01:54:09 +0000
f716c85e71Accepting request 1113799 from home:kukuk:branches:network
Hans Petter Jansson
2023-12-19 01:39:20 +0000
cb6e8d7fb0Accepting request 1129646 from network
Ana Guerrero
2023-11-30 20:59:01 +0000
74e20db9edAccepting request 1123220 from home:jsegitz:branches:network
Hans Petter Jansson
2023-11-28 16:35:34 +0000
e66925b0bbAccepting request 1120184 from network
Ana Guerrero
2023-10-25 16:02:04 +0000
ac7d1e8af4Accepting request 1119952 from home:dimstar:FactoryMarcus Meissner2023-10-25 07:33:22 +0000
4fe7f3bfa0Accepting request 1112087 from network
Ana Guerrero
2023-09-22 19:46:58 +0000
a4dae544f0Accepting request 1110800 from home:kukuk:no-utmp
Hans Petter Jansson
2023-09-18 22:02:17 +0000
b77a1e6444Accepting request 1099856 from network
Ana Guerrero
2023-07-24 16:11:47 +0000
67a17999e6Accepting request 1099810 from home:simotek:branches:networkMarcus Meissner2023-07-21 07:35:33 +0000
af4711fbadAccepting request 1090577 from network
Dominique Leuenberger
2023-06-06 17:54:55 +0000
6c6fb17632Accepting request 1089432 from home:AndreasStieger:branches:networkDirk Mueller2023-06-02 21:14:12 +0000
03fc1a6defAccepting request 1087770 from home:alarrosa:branches:network
Hans Petter Jansson
2023-05-22 19:32:26 +0000
827852cf8fAccepting request 1079298 from network
Dominique Leuenberger
2023-04-15 20:32:04 +0000
789436c617Accepting request 1074609 from home:kukuk:branches:network
Hans Petter Jansson
2023-04-13 21:23:05 +0000
3fa7ba428eAccepting request 1074486 from network
Dominique Leuenberger
2023-03-28 15:48:40 +0000
a004ad47caAccepting request 1065922 from home:kukuk:branches:networkDirk Mueller2023-03-26 16:59:52 +0000
d44fd05f6eAccepting request 1044051 from network
Dominique Leuenberger
2022-12-23 09:20:44 +0000
988310371cAccepting request 1043949 from home:ohollmann:branches:networkMarcus Meissner2022-12-21 10:48:51 +0000
00be3aea91Accepting request 1043180 from network
Dominique Leuenberger
2022-12-16 16:51:30 +0000
e92e6f5af4- limit to openssl < 3.0 as this version is not compatible (bsc#1205042) next version update will fix itDirk Mueller2022-12-15 16:35:54 +0000
c101ef4ce6Accepting request 1035879 from network
Dominique Leuenberger
2022-11-16 14:42:34 +0000
4038ff6c0fAccepting request 1034974 from home:hpjansson:openssh-twMarcus Meissner2022-11-15 15:28:59 +0000
1f860174e8Accepting request 999883 from network
Dominique Leuenberger
2022-08-30 12:48:22 +0000
cb5c9c99b3Accepting request 993701 from home:kukuk:branches:networkMarcus Meissner2022-08-29 08:24:07 +0000
63ac7ad8d3Accepting request 997452 from network
Dominique Leuenberger
2022-08-18 14:48:44 +0000
88b8e8e7aaAccepting request 997549 from home:adamm:branches:network
Hans Petter Jansson
2022-08-17 12:48:06 +0000
6c8ae3051cAccepting request 987179 from home:adamm:branches:network
Hans Petter Jansson
2022-08-17 00:38:45 +0000
7bf6c9fe4dAccepting request 973782 from network
Dominique Leuenberger
2022-05-01 16:53:26 +0000
859cab66f6Accepting request 965435 from home:lnussel:branches:network
Hans Petter Jansson
2022-04-29 00:45:48 +0000
7cf91bcce7Accepting request 960152 from network
Dominique Leuenberger
2022-03-09 17:47:00 +0000
0957114f91Accepting request 960041 from home:hpjansson:openssh-twDirk Mueller2022-03-08 07:49:22 +0000
b2b28a4fe4Accepting request 923951 from network
Dominique Leuenberger
2021-10-11 14:48:36 +0000