6dac324cb7
- enable support for SSHv1 protocol and discourage its usage (bsc#983307) - enable DSA by default for backward compatibility and discourage its usage (bsc#983784) [openssh-7.2p2-allow_DSS_by_default.patch] - upgrade to 7.2p2 upstream package without any SUSE patches Distilled upstream log: - OpenSSH 6.7 Potentially-incompatible changes: * sshd(8): The default set of ciphers and MACs has been altered to remove unsafe algorithms. In particular, CBC ciphers and arcfour* are disabled by default. The full set of algorithms remains available if configured explicitly via the Ciphers and MACs sshd_config options. * sshd(8): Support for tcpwrappers/libwrap has been removed. * OpenSSH 6.5 and 6.6 have a bug that causes ~0.2% of connections using the curve25519-sha256@libssh.org KEX exchange method to fail when connecting with something that implements the specification correctly. OpenSSH 6.7 disables this KEX method when speaking to one of the affected versions. New Features: * ssh(1), sshd(8): Add support for Unix domain socket forwarding. A remote TCP port may be forwarded to a local Unix domain socket and vice versa or both ends may be a Unix domain socket. * ssh(1), ssh-keygen(1): Add support for SSHFP DNS records for ED25519 key types. OBS-URL: https://build.opensuse.org/request/show/407066 OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=107
27 lines
798 B
Diff
27 lines
798 B
Diff
# HG changeset patch
|
|
# Parent 2ee086fa64dd40d0d50b13fa3a784717bfdd7e4b
|
|
# set uid for functions that use it to seek in lastlog and wtmp files
|
|
# bnc#18024 (was suse #3024)
|
|
|
|
diff --git a/openssh-7.2p2/sshlogin.c b/openssh-7.2p2/sshlogin.c
|
|
--- a/openssh-7.2p2/sshlogin.c
|
|
+++ b/openssh-7.2p2/sshlogin.c
|
|
@@ -129,16 +129,17 @@ record_login(pid_t pid, const char *tty,
|
|
{
|
|
struct logininfo *li;
|
|
|
|
/* save previous login details before writing new */
|
|
store_lastlog_message(user, uid);
|
|
|
|
li = login_alloc_entry(pid, user, host, tty);
|
|
login_set_addr(li, addr, addrlen);
|
|
+ li->uid = uid;
|
|
login_login(li);
|
|
login_free_entry(li);
|
|
}
|
|
|
|
#ifdef LOGIN_NEEDS_UTMPX
|
|
void
|
|
record_utmp_only(pid_t pid, const char *ttyname, const char *user,
|
|
const char *host, struct sockaddr *addr, socklen_t addrlen)
|