Index	index by Group	index by Distribution	index by Vendor	index by date	index by Name	Hany
Custom Search

openssh-server-5.4p1-1.fc13 RPM for x86_64

From Fedora 13 x86_64

OpenSSH is a free version of SSH (Secure SHell), a program for logging
into and executing commands on a remote machine. This package contains
the secure shell daemon (sshd). The sshd daemon allows SSH clients to
securely connect to your SSH server.

Provides

• openssh-server
• config(openssh-server)
• openssh-server(x86-64)

Requires

• /bin/bash
• /bin/sh
• /bin/sh
• /bin/sh
• /bin/sh
• /sbin/service
• /usr/sbin/useradd
• chkconfig
• config(openssh-server)
• libaudit.so.1()(64bit)
• libc.so.6()(64bit)
• libc.so.6(GLIBC_2.2.5)(64bit)
• libc.so.6(GLIBC_2.3)(64bit) =
• libc.so.6(GLIBC_2.3.4)(64bit)
• libc.so.6(GLIBC_2.4)(64bit)
• libc.so.6(GLIBC_2.8)(64bit)
• libcom_err.so.2()(64bit)
• libcrypt.so.1()(64bit)
• libcrypt.so.1(GLIBC_2.2.5)(64bit) =
• libcrypto.so.10()(64bit)
• libdl.so.2()(64bit)
• libfipscheck.so.1()(64bit) =
• libgssapi_krb5.so.2()(64bit) >=
• libgssapi_krb5.so.2(gssapi_krb5_2_MIT)(64bit)
• libk5crypto.so.3()(64bit) >=
• libkrb5.so.3()(64bit) >=
• libkrb5.so.3(krb5_3_MIT)(64bit)
• libnsl.so.1()(64bit) <
• libpam.so.0()(64bit) <
• libpam.so.0(LIBPAM_1.0)(64bit) =
• libresolv.so.2()(64bit) >
• libselinux.so.1()(64bit) >=
• libutil.so.1()(64bit) =
• libutil.so.1(GLIBC_2.2.5)(64bit) >=
• libwrap.so.0()(64bit) <
• libz.so.1()(64bit)
• openssh
• pam
• rpmlib(CompressedFileNames) >= 3.0.4-1
• rpmlib(FileDigests) >= 4.6.0-1
• rpmlib(PayloadFilesHavePrefix) > 4.0-1
• rtld(GNU_HASH) >=
• rpmlib(PayloadIsXz) < 5.2-1

Copyright

BSD

Changelog

* Tue Mar 09 2010 Jan F. Chadima <jchadima(at)redhat.com> - 5.4p1-1
  - Update to 5.4p1
  - discontinued support for nss-keys
  - discontinued support for scard
* Mon Feb 15 2010 Jan F. Chadima <jchadima(at)redhat.com> - 5.3p1-22
  - ImplicitDSOLinking (#564824)
* Fri Jan 29 2010 Jan F. Chadima <jchadima(at)redhat.com> - 5.3p1-21
  - Allow to use hardware crypto if awailable (#559555)
* Mon Jan 25 2010 Jan F. Chadima <jchadima(at)redhat.com> - 5.3p1-20
  - optimized FD_CLOEXEC on accept socket (#541809)
* Mon Jan 25 2010 Tomas Mraz <tmraz(at)redhat.com> - 5.3p1-19
  - updated pam_ssh_agent_auth to new version from upstream (just
    a licence change)
* Thu Jan 21 2010 Jan F. Chadima <jchadima(at)redhat.com> - 5.3p1-18
  - optimized RAND_cleanup patch (#557166)
* Wed Jan 20 2010 Jan F. Chadima <jchadima(at)redhat.com> - 5.3p1-17
  - add RAND_cleanup at the exit of each program using RAND (#557166)
* Tue Jan 19 2010 Jan F. Chadima <jchadima(at)redhat.com> - 5.3p1-16
  - set FD_CLOEXEC on accepted socket (#541809)
* Fri Jan 08 2010 Jan F. Chadima <jchadima(at)redhat.com> - 5.3p1-15
  - replaced define by global in macros
* Tue Jan 05 2010 Jan F. Chadima <jchadima(at)redhat.com> - 5.3p1-14
  - Update the pka patch
* Mon Dec 21 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.3p1-13
  - Update the audit patch
* Fri Dec 04 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.3p1-12
  - Add possibility to autocreate only RSA key into initscript (#533339)
* Fri Nov 27 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.3p1-11
  - Prepare NSS key patch for future SEC_ERROR_LOCKED_PASSWORD (#537411)
* Tue Nov 24 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.3p1-10
  - Update NSS key patch (#537411, #356451)
* Fri Nov 20 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.3p1-9
  - Add gssapi key exchange patch (#455351)
* Fri Nov 20 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.3p1-8
  - Add public key agent patch (#455350)
* Mon Nov 02 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.3p1-7
  - Repair canohost patch to allow gssapi to work when host is acessed via pipe proxy (#531849)
* Thu Oct 29 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.3p1-6
  - Modify the init script to prevent it to hang during generating the keys (#515145)
* Tue Oct 27 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.3p1-5
  - Add README.nss
* Mon Oct 19 2009 Tomas Mraz <tmraz(at)redhat.com> - 5.3p1-4
  - Add pam_ssh_agent_auth module to a subpackage.
* Fri Oct 16 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.3p1-3
  - Reenable audit.
* Fri Oct 02 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.3p1-2
  - Upgrade to new wersion 5.3p1
* Tue Sep 29 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-29
  - Resolve locking in ssh-add (#491312)
* Thu Sep 24 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-28
  - Repair initscript to be acord to guidelines (#521860)
  - Add bugzilla# to application of edns and xmodifiers patch
* Wed Sep 16 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-26
  - Changed pam stack to password-auth
* Fri Sep 11 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-25
  - Dropped homechroot patch
* Mon Sep 07 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-24
  - Add check for nosuid, nodev in homechroot
* Tue Sep 01 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-23
  - add correct patch for ip-opts
* Tue Sep 01 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-22
  - replace ip-opts patch by an upstream candidate version
* Mon Aug 31 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-21
  - rearange selinux patch to be acceptable for upstream
  - replace seftp patch by an upstream version
* Fri Aug 28 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-20
  - merged xmodifiers to redhat patch
  - merged gssapi-role to selinux patch
  - merged cve-2007_3102 to audit patch
  - sesftp patch only with WITH_SELINUX flag
  - rearange sesftp patch according to upstream request
* Wed Aug 26 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-19
  - minor change in sesftp patch
* Fri Aug 21 2009 Tomas Mraz <tmraz(at)redhat.com> - 5.2p1-18
  - rebuilt with new openssl
* Thu Jul 30 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-17
  - Added dnssec support. (#205842)
* Sat Jul 25 2009 Fedora Release Engineering <rel-eng(at)lists.fedoraproject.org> - 5.2p1-16
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
* Fri Jul 24 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-15
  - only INTERNAL_SFTP can be home-chrooted
  - save _u and _r parts of context changing to sftpd_t
* Fri Jul 17 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-14
  - changed internal-sftp context to sftpd_t
* Fri Jul 03 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-13
  - changed home length path patch to upstream version
* Tue Jun 30 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-12
  - create '~/.ssh/known_hosts' within proper context
* Mon Jun 29 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-11
  - length of home path in ssh now limited by PATH_MAX
  - correct timezone with daylight processing
* Sat Jun 27 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-10
  - final version chroot %h (sftp only)
* Tue Jun 23 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-9
  - repair broken ls in chroot %h
* Fri Jun 12 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-8
  - add XMODIFIERS to exported environment (#495690)
* Fri May 15 2009 Tomas Mraz <tmraz(at)redhat.com> - 5.2p1-6
  - allow only protocol 2 in the FIPS mode
* Thu Apr 30 2009 Tomas Mraz <tmraz(at)redhat.com> - 5.2p1-5
  - do integrity verification only on binaries which are part
    of the OpenSSH FIPS modules
* Mon Apr 20 2009 Tomas Mraz <tmraz(at)redhat.com> - 5.2p1-4
  - log if FIPS mode is initialized
  - make aes-ctr cipher modes work in the FIPS mode
* Fri Apr 03 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-3
  - fix logging after chroot
  - enable non root users to use chroot %h in internal-sftp
* Fri Mar 13 2009 Tomas Mraz <tmraz(at)redhat.com> - 5.2p1-2
  - add AES-CTR ciphers to the FIPS mode proposal
* Mon Mar 09 2009 Jan F. Chadima <jchadima(at)redhat.com> - 5.2p1-1
  - upgrade to new upstream release
* Thu Feb 26 2009 Fedora Release Engineering <rel-eng(at)lists.fedoraproject.org> - 5.1p1-8
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
* Thu Feb 12 2009 Tomas Mraz <tmraz(at)redhat.com> - 5.1p1-7
  - drop obsolete triggers
  - add testing FIPS mode support
  - LSBize the initscript (#247014)
* Fri Jan 30 2009 Tomas Mraz <tmraz(at)redhat.com> - 5.1p1-6
  - enable use of ssl engines (#481100)
* Thu Jan 15 2009 Tomas Mraz <tmraz(at)redhat.com> - 5.1p1-5
  - remove obsolete --with-rsh (#478298)
  - add pam_sepermit to allow blocking confined users in permissive mode
    (#471746)
  - move system-auth after pam_selinux in the session stack
* Thu Dec 11 2008 Tomas Mraz <tmraz(at)redhat.com> - 5.1p1-4
  - set FD_CLOEXEC on channel sockets (#475866)
  - adjust summary
  - adjust nss-keys patch so it is applicable without selinux patches (#470859)
* Fri Oct 17 2008 Tomas Mraz <tmraz(at)redhat.com> - 5.1p1-3
  - fix compatibility with some servers (#466818)
* Thu Jul 31 2008 Tomas Mraz <tmraz(at)redhat.com> - 5.1p1-2
  - fixed zero length banner problem (#457326)
* Wed Jul 23 2008 Tomas Mraz <tmraz(at)redhat.com> - 5.1p1-1
  - upgrade to new upstream release
  - fixed a problem with public key authentication and explicitely
    specified SELinux role
* Wed May 21 2008 Tomas Mraz <tmraz(at)redhat.com> - 5.0p1-3
  - pass the connection socket to ssh-keysign (#447680)
* Mon May 19 2008 Tomas Mraz <tmraz(at)redhat.com> - 5.0p1-2
  - add LANGUAGE to accepted/sent environment variables (#443231)
  - use pam_selinux to obtain the user context instead of doing it itself
  - unbreak server keep alive settings (patch from upstream)
  - small addition to scp manpage
* Mon Apr 07 2008 Tomas Mraz <tmraz(at)redhat.com> - 5.0p1-1
  - upgrade to new upstream (#441066)
  - prevent initscript from killing itself on halt with upstart (#438449)
  - initscript status should show that the daemon is running
    only when the main daemon is still alive (#430882)
* Thu Mar 06 2008 Tomas Mraz <tmraz(at)redhat.com> - 4.7p1-10
  - fix race on control master and cleanup stale control socket (#436311)
    patches by David Woodhouse
* Fri Feb 29 2008 Tomas Mraz <tmraz(at)redhat.com> - 4.7p1-9
  - set FD_CLOEXEC on client socket
  - apply real fix for window size problem (#286181) from upstream
  - apply fix for the spurious failed bind from upstream
  - apply open handle leak in sftp fix from upstream
* Tue Feb 12 2008 Dennis Gilmore <dennis(at)ausil.us> - 4.7p1-8
  - we build for sparcv9 now  and it needs -fPIE
* Thu Jan 03 2008 Tomas Mraz <tmraz(at)redhat.com> - 4.7p1-7
  - fix gssapi auth with explicit selinux role requested (#427303) - patch
    by Nalin Dahyabhai
* Tue Dec 04 2007 Tomas Mraz <tmraz(at)redhat.com> - 4.7p1-6
  - explicitly source krb5-devel profile script
* Tue Dec 04 2007 Release Engineering <rel-eng at fedoraproject dot org> - 4.7p1-5
  - Rebuild for openssl bump
* Tue Nov 20 2007 Tomas Mraz <tmraz(at)redhat.com> - 4.7p1-4
  - do not copy /etc/localtime into the chroot as it is not
    necessary anymore (#193184)
  - call setkeycreatecon when selinux context is established
  - test for NULL privk when freeing key (#391871) - patch by
    Pierre Ossman
* Mon Sep 17 2007 Tomas Mraz <tmraz(at)redhat.com> - 4.7p1-2
  - revert default window size adjustments (#286181)
* Thu Sep 06 2007 Tomas Mraz <tmraz(at)redhat.com> - 4.7p1-1
  - upgrade to latest upstream
  - use libedit in sftp (#203009)
  - fixed audit log injection problem (CVE-2007-3102)
* Thu Aug 09 2007 Tomas Mraz <tmraz(at)redhat.com> - 4.5p1-8
  - fix sftp client problems on write error (#247802)
  - allow disabling autocreation of server keys (#235466)
* Wed Jun 20 2007 Tomas Mraz <tmraz(at)redhat.com> - 4.5p1-7
  - experimental NSS keys support
  - correctly setup context when empty level requested (#234951)
* Tue Mar 20 2007 Tomas Mraz <tmraz(at)redhat.com> - 4.5p1-6
  - mls level check must be done with default role same as requested
* Mon Mar 19 2007 Tomas Mraz <tmraz(at)redhat.com> - 4.5p1-5
  - make profile.d/gnome-ssh-askpass.* regular files (#226218)
* Tue Feb 27 2007 Tomas Mraz <tmraz(at)redhat.com> - 4.5p1-4
  - reject connection if requested mls range is not obtained (#229278)
* Thu Feb 22 2007 Tomas Mraz <tmraz(at)redhat.com> - 4.5p1-3
  - improve Buildroot
  - remove duplicate /etc/ssh from files
* Tue Jan 16 2007 Tomas Mraz <tmraz(at)redhat.com> - 4.5p1-2
  - support mls on labeled networks (#220487)
  - support mls level selection on unlabeled networks
  - allow / in usernames in scp (only beginning /, ./, and ../ is special)
* Thu Dec 21 2006 Tomas Mraz <tmraz(at)redhat.com> - 4.5p1-1
  - update to 4.5p1 (#212606)
* Thu Nov 30 2006 Tomas Mraz <tmraz(at)redhat.com> - 4.3p2-14
  - fix gssapi with DNS loadbalanced clusters (#216857)
* Tue Nov 28 2006 Tomas Mraz <tmraz(at)redhat.com> - 4.3p2-13
  - improved pam_session patch so it doesn't regress, the patch is necessary
    for the pam_session_close to be called correctly as uid 0
* Fri Nov 10 2006 Tomas Mraz <tmraz(at)redhat.com> - 4.3p2-12
  - CVE-2006-5794 - properly detect failed key verify in monitor (#214641)
* Thu Nov 02 2006 Tomas Mraz <tmraz(at)redhat.com> - 4.3p2-11
  - merge sshd initscript patches
  - kill all ssh sessions when stop is called in halt or reboot runlevel
  - remove -TERM option from killproc so we don't race on sshd restart
* Mon Oct 02 2006 Tomas Mraz <tmraz(at)redhat.com> - 4.3p2-10
  - improve gssapi-no-spnego patch (#208102)
  - CVE-2006-4924 - prevent DoS on deattack detector (#207957)
  - CVE-2006-5051 - don't call cleanups from signal handler (#208459)
* Wed Aug 23 2006 Tomas Mraz <tmraz(at)redhat.com> - 4.3p2-9
  - don't report duplicate syslog messages, use correct local time (#189158)
  - don't allow spnego as gssapi mechanism (from upstream)
  - fixed memleaks found by Coverity (from upstream)
  - allow ip options except source routing (#202856) (patch by HP)
* Tue Aug 08 2006 Tomas Mraz <tmraz(at)redhat.com> - 4.3p2-8
  - drop the pam-session patch from the previous build (#201341)
  - don't set IPV6_V6ONLY sock opt when listening on wildcard addr (#201594)
* Thu Jul 20 2006 Tomas Mraz <tmraz(at)redhat.com> - 4.3p2-7
  - dropped old ssh obsoletes
  - call the pam_session_open/close from the monitor when privsep is
    enabled so it is always called as root (patch by Darren Tucker)
* Mon Jul 17 2006 Tomas Mraz <tmraz(at)redhat.com> - 4.3p2-6
  - improve selinux patch (by Jan Kiszka)
  - upstream patch for buffer append space error (#191940)
  - fixed typo in configure.ac (#198986)
  - added pam_keyinit to pam configuration (#198628)
  - improved error message when askpass dialog cannot grab
    keyboard input (#198332)
  - buildrequires xauth instead of xorg-x11-xauth
  - fixed a few rpmlint warnings
* Wed Jul 12 2006 Jesse Keating <jkeating(at)redhat.com> - 4.3p2-5.1
  - rebuild
* Fri Apr 14 2006 Tomas Mraz <tmraz(at)redhat.com> - 4.3p2-5
  - don't request pseudoterminal allocation if stdin is not tty (#188983)
* Thu Mar 02 2006 Tomas Mraz <tmraz(at)redhat.com> - 4.3p2-4
  - allow access if audit is not compiled in kernel (#183243)
* Fri Feb 24 2006 Tomas Mraz <tmraz(at)redhat.com> - 4.3p2-3
  - enable the subprocess in chroot to send messages to system log
  - sshd should prevent login if audit call fails
* Tue Feb 21 2006 Tomas Mraz <tmraz(at)redhat.com> - 4.3p2-2
  - print error from scp if not remote (patch by Bjorn Augustsson #178923)
* Mon Feb 13 2006 Tomas Mraz <tmraz(at)redhat.com> - 4.3p2-1
  - new version
* Fri Feb 10 2006 Jesse Keating <jkeating(at)redhat.com> - 4.3p1-2.1
  - bump again for double-long bug on ppc(64)
* Mon Feb 06 2006 Tomas Mraz <tmraz(at)redhat.com> - 4.3p1-2
  - fixed another place where syslog was called in signal handler
  - pass locale environment variables to server, accept them there (#179851)
* Wed Feb 01 2006 Tomas Mraz <tmraz(at)redhat.com> - 4.3p1-1
  - new version, dropped obsolete patches
* Tue Dec 20 2005 Tomas Mraz <tmraz(at)redhat.com> - 4.2p1-10
  - hopefully make the askpass dialog less confusing (#174765)
* Fri Dec 09 2005 Jesse Keating <jkeating(at)redhat.com>
  - rebuilt
* Tue Nov 22 2005 Tomas Mraz <tmraz(at)redhat.com> - 4.2p1-9
  - drop x11-ssh-askpass from the package
  - drop old build_6x ifs from spec file
  - improve gnome-ssh-askpass so it doesn't reveal number of passphrase 
    characters to person looking at the display
  - less hackish fix for the __USE_GNU problem
* Fri Nov 18 2005 Nalin Dahyabhai <nalin(at)redhat.com> - 4.2p1-8
  - work around missing gccmakedep by wrapping makedepend in a local script
  - remove now-obsolete build dependency on "xauth"
* Thu Nov 17 2005 Warren Togami <wtogami(at)redhat.com> - 4.2p1-7
  - xorg-x11-devel -> libXt-devel
  - rebuild for new xauth location so X forwarding works
  - buildreq audit-libs-devel
  - buildreq automake for aclocal
  - buildreq imake for xmkmf
  -  -D_GNU_SOURCE in flags in order to get it to build
     Ugly hack to workaround openssh defining __USE_GNU which is
     not allowed and causes problems according to Ulrich Drepper
     fix this the correct way after FC5test1
* Wed Nov 09 2005 Jeremy Katz <katzj(at)redhat.com> - 4.2p1-6
  - rebuild against new openssl
* Fri Oct 28 2005 Tomas Mraz <tmraz(at)redhat.com> 4.2p1-5
  - put back the possibility to skip SELinux patch
  - add patch for user login auditing by Steve Grubb
* Tue Oct 18 2005 Dan Walsh <dwalsh(at)redhat.com> 4.2p1-4
  - Change selinux patch to use get_default_context_with_rolelevel in libselinux.
* Thu Oct 13 2005 Tomas Mraz <tmraz(at)redhat.com> 4.2p1-3
  - Update selinux patch to use getseuserbyname
* Fri Oct 07 2005 Tomas Mraz <tmraz(at)redhat.com> 4.2p1-2
  - use include instead of pam_stack in pam config
  - use fork+exec instead of system in scp - CVE-2006-0225 (#168167)
  - upstream patch for displaying authentication errors
* Tue Sep 06 2005 Tomas Mraz <tmraz(at)redhat.com> 4.2p1-1
  - upgrade to a new upstream version
* Tue Aug 16 2005 Tomas Mraz <tmraz(at)redhat.com> 4.1p1-5
  - use x11-ssh-askpass if openssh-askpass-gnome is not installed (#165207)
  - install ssh-copy-id from contrib (#88707)
* Wed Jul 27 2005 Tomas Mraz <tmraz(at)redhat.com> 4.1p1-4
  - don't deadlock on exit with multiple X forwarded channels (#152432)
  - don't use X11 port which can't be bound on all IP families (#163732)
* Wed Jun 29 2005 Tomas Mraz <tmraz(at)redhat.com> 4.1p1-3
  - fix small regression caused by the nologin patch (#161956)
  - fix race in getpeername error checking (mindrot #1054)
* Thu Jun 09 2005 Tomas Mraz <tmraz(at)redhat.com> 4.1p1-2
  - use only pam_nologin for nologin testing
* Mon Jun 06 2005 Tomas Mraz <tmraz(at)redhat.com> 4.1p1-1
  - upgrade to a new upstream version
  - call pam_loginuid as a pam session module
* Mon May 16 2005 Tomas Mraz <tmraz(at)redhat.com> 4.0p1-3
  - link libselinux only to sshd (#157678)
* Mon Apr 04 2005 Tomas Mraz <tmraz(at)redhat.com> 4.0p1-2
  - fixed Local/RemoteForward in ssh_config.5 manpage
  - fix fatal when Local/RemoteForward is used and scp run (#153258)
  - don't leak user validity when using krb5 authentication
* Thu Mar 24 2005 Tomas Mraz <tmraz(at)redhat.com> 4.0p1-1
  - upgrade to 4.0p1
  - remove obsolete groups patch
* Wed Mar 16 2005 Elliot Lee <sopwith(at)redhat.com>
  - rebuilt
* Mon Feb 28 2005 Nalin Dahyabhai <nalin(at)redhat.com> 3.9p1-12
  - rebuild so that configure can detect that krb5_init_ets is gone now
* Mon Feb 21 2005 Tomas Mraz <tmraz(at)redhat.com> 3.9p1-11
  - don't call syslog in signal handler
  - allow password authentication when copying from remote
    to remote machine (#103364)
* Wed Feb 09 2005 Tomas Mraz <tmraz(at)redhat.com>
  - add spaces to messages in initscript (#138508)
* Tue Feb 08 2005 Tomas Mraz <tmraz(at)redhat.com> 3.9p1-10
  - enable trusted forwarding by default if X11 forwarding is 
    required by user (#137685 and duplicates)
  - disable protocol 1 support by default in sshd server config (#88329)
  - keep the gnome-askpass dialog above others (#69131)
* Fri Feb 04 2005 Tomas Mraz <tmraz(at)redhat.com>
  - change permissions on pam.d/sshd to 0644 (#64697)
  - patch initscript so it doesn't kill opened sessions if
    the sshd daemon isn't running anymore (#67624)
* Mon Jan 03 2005 Bill Nottingham <notting(at)redhat.com> 3.9p1-9
  - don't use initlog
* Mon Nov 29 2004 Thomas Woerner <twoerner(at)redhat.com> 3.9p1-8.1
  - fixed PIE build for all architectures
* Mon Oct 04 2004 Nalin Dahyabhai <nalin(at)redhat.com> 3.9p1-8
  - add a --enable-vendor-patchlevel option which allows a ShowPatchLevel option
    to enable display of a vendor patch level during version exchange (#120285)
  - configure with --disable-strip to build useful debuginfo subpackages
* Mon Sep 20 2004 Bill Nottingham <notting(at)redhat.com> 3.9p1-7
  - when using gtk2 for askpass, don't buildprereq gnome-libs-devel
* Tue Sep 14 2004 Nalin Dahyabhai <nalin(at)redhat.com> 3.9p1-6
  - build
* Mon Sep 13 2004 Nalin Dahyabhai <nalin(at)redhat.com>
  - disable ACSS support
* Thu Sep 02 2004 Daniel Walsh <dwalsh(at)redhat.com> 3.9p1-5
  - Change selinux patch to use get_default_context_with_role in libselinux.
* Thu Sep 02 2004 Daniel Walsh <dwalsh(at)redhat.com> 3.9p1-4
  - Fix patch
  	* Bad debug statement.
  	* Handle root/sysadm_r:kerberos
* Thu Sep 02 2004 Daniel Walsh <dwalsh(at)redhat.com> 3.9p1-3
  - Modify Colin Walter's patch to allow specifying rule during connection
* Tue Aug 31 2004 Daniel Walsh <dwalsh(at)redhat.com> 3.9p1-2
  - Fix TTY handling for SELinux
* Tue Aug 24 2004 Daniel Walsh <dwalsh(at)redhat.com> 3.9p1-1
  - Update to upstream
* Sun Aug 01 2004 Alan Cox <alan(at)redhat.com> 3.8.1p1-5
  - Apply buildreq fixup patch (#125296)
* Tue Jun 15 2004 Daniel Walsh <dwalsh(at)redhat.com> 3.8.1p1-4
  - Clean up patch for upstream submission.
* Tue Jun 15 2004 Elliot Lee <sopwith(at)redhat.com>
  - rebuilt
* Wed Jun 09 2004 Daniel Walsh <dwalsh(at)redhat.com> 3.8.1p1-2
  - Remove use of pam_selinux and patch selinux in directly.
* Mon Jun 07 2004 Nalin Dahyabhai <nalin(at)redhat.com> 3.8.1p1-1
  - request gssapi-with-mic by default but not delegation (flag day for anyone
    who used previous gssapi patches)
  - no longer request x11 forwarding by default
* Thu Jun 03 2004 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-36
  - Change pam file to use open and close with pam_selinux
* Tue Jun 01 2004 Nalin Dahyabhai <nalin(at)redhat.com> 3.8.1p1-0
  - update to 3.8.1p1
  - add workaround from CVS to reintroduce passwordauth using pam
* Tue Jun 01 2004 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-35
  - Remove CLOSEXEC on STDERR
* Tue Mar 16 2004 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-34
  * Wed Mar 03 2004 Phil Knirsch <pknirsch(at)redhat.com> 3.6.1p2-33.30.1
  - Built RHLE3 U2 update package.
* Wed Mar 03 2004 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-33
  - Close file descriptors on exec
* Mon Mar 01 2004 Thomas Woerner <twoerner(at)redhat.com> 3.6.1p2-32
  - fixed pie build
* Thu Feb 26 2004 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-31
  - Add restorecon to startup scripts
* Thu Feb 26 2004 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-30
  - Add multiple qualified to openssh
* Mon Feb 23 2004 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-29
  - Eliminate selinux code and use pam_selinux
* Fri Feb 13 2004 Elliot Lee <sopwith(at)redhat.com>
  - rebuilt
* Mon Jan 26 2004 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-27
  - turn off pie on ppc
* Mon Jan 26 2004 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-26
  - fix is_selinux_enabled
* Wed Jan 14 2004 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-25
  - Rebuild to grab shared libselinux
* Wed Dec 03 2003 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-24
  - turn on selinux
* Tue Nov 18 2003 Nalin Dahyabhai <nalin(at)redhat.com>
  - un#ifdef out code for reporting password expiration in non-privsep
    mode (#83585)
* Mon Nov 10 2003 Nalin Dahyabhai <nalin(at)redhat.com>
  - add machinery to build with/without -fpie/-pie, default to doing so
* Thu Nov 06 2003 David Woodhouse <dwmw2(at)redhat.com> 3.6.1p2-23
  - Don't whinge about getsockopt failing (#109161)
* Fri Oct 24 2003 Nalin Dahyabhai <nalin(at)redhat.com>
  - add missing buildprereq on zlib-devel (#104558)
* Mon Oct 13 2003 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-22
  - turn selinux off
* Mon Oct 13 2003 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-21.sel
  - turn selinux on
* Fri Sep 19 2003 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-21
  - turn selinux off
* Fri Sep 19 2003 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-20.sel
  - turn selinux on
* Fri Sep 19 2003 Nalin Dahyabhai <nalin(at)redhat.com>
  - additional fix for apparently-never-happens double-free in buffer_free()
  - extend fix for #103998 to cover SSH1
* Wed Sep 17 2003 Nalin Dahyabhai <nalin(at)redhat.com> 3.6.1p2-19
  - rebuild
* Wed Sep 17 2003 Nalin Dahyabhai <nalin(at)redhat.com> 3.6.1p2-18
  - additional buffer manipulation cleanups from Solar Designer
* Wed Sep 17 2003 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-17
  - turn selinux off
* Wed Sep 17 2003 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-16.sel
  - turn selinux on
* Tue Sep 16 2003 Bill Nottingham <notting(at)redhat.com> 3.6.1p2-15
  - rebuild
* Tue Sep 16 2003 Bill Nottingham <notting(at)redhat.com> 3.6.1p2-14
  - additional buffer manipulation fixes (CAN-2003-0695)
* Tue Sep 16 2003 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-13.sel
  - turn selinux on
* Tue Sep 16 2003 Nalin Dahyabhai <nalin(at)redhat.com> 3.6.1p2-12
  - rebuild
* Tue Sep 16 2003 Nalin Dahyabhai <nalin(at)redhat.com> 3.6.1p2-11
  - apply patch to store the correct buffer size in allocated buffers
    (CAN-2003-0693)
  - skip the initial PAM authentication attempt with an empty password if
    empty passwords are not permitted in our configuration (#103998)
* Fri Sep 05 2003 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-10
  - turn selinux off
* Fri Sep 05 2003 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-9.sel
  - turn selinux on
* Tue Aug 26 2003 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-8
  - Add BuildPreReq gtk2-devel if gtk2
* Tue Aug 12 2003 Nalin Dahyabhai <nalin(at)redhat.com> 3.6.1p2-7
  - rebuild
* Tue Aug 12 2003 Nalin Dahyabhai <nalin(at)redhat.com> 3.6.1p2-6
  - modify patch which clears the supplemental group list at startup to only
    complain if setgroups() fails if sshd has euid == 0
  - handle krb5 installed in %{_prefix} or elsewhere by using krb5-config
* Mon Jul 28 2003 Daniel Walsh <dwalsh(at)redhat.com> 3.6.1p2-5
  - Add SELinux patch
* Tue Jul 22 2003 Nalin Dahyabhai <nalin(at)redhat.com> 3.6.1p2-4
  - rebuild
* Mon Jun 16 2003 Nalin Dahyabhai <nalin(at)redhat.com> 3.6.1p2-3
  - rebuild
* Mon Jun 16 2003 Nalin Dahyabhai <nalin(at)redhat.com> 3.6.1p2-2
  - rebuild
* Thu Jun 05 2003 Nalin Dahyabhai <nalin(at)redhat.com> 3.6.1p2-1
  - update to 3.6.1p2
* Wed Jun 04 2003 Elliot Lee <sopwith(at)redhat.com>
  6 rebuilt
* Mon Mar 24 2003 Florian La Roche <Florian.LaRoche(at)redhat.de>
  - add patch for getsockopt() call to work on bigendian 64bit archs
* Fri Feb 14 2003 Nalin Dahyabhai <nalin(at)redhat.com> 3.5p1-6
  - move scp to the -clients subpackage, because it directly depends on ssh
    which is also in -clients (#84329)
* Mon Feb 10 2003 Nalin Dahyabhai <nalin(at)redhat.com> 3.5p1-5
  - rebuild
* Wed Jan 22 2003 Tim Powers <timp(at)redhat.com>
  - rebuilt
* Tue Jan 07 2003 Nalin Dahyabhai <nalin(at)redhat.com> 3.5p1-3
  - rebuild
* Tue Nov 12 2002 Nalin Dahyabhai <nalin(at)redhat.com> 3.5p1-2
  - patch PAM configuration to use relative path names for the modules, allowing
    us to not worry about which arch the modules are built for on multilib systems
* Tue Oct 15 2002 Nalin Dahyabhai <nalin(at)redhat.com> 3.5p1-1
  - update to 3.5p1, merging in filelist/perm changes from the upstream spec
* Fri Oct 04 2002 Nalin Dahyabhai <nalin(at)redhat.com> 3.4p1-3
  - merge
* Thu Sep 12 2002 Than Ngo <than(at)redhat.com> 3.4p1-2.1
  - fix to build on multilib systems
* Thu Aug 29 2002 Curtis Zinzilieta <curtisz(at)redhat.com> 3.4p1-2gss
  - added gssapi patches and uncommented patch here
* Wed Aug 14 2002 Nalin Dahyabhai <nalin(at)redhat.com> 3.4p1-2
  - pull patch from CVS to fix too-early free in ssh-keysign (#70009)
* Thu Jun 27 2002 Nalin Dahyabhai <nalin(at)redhat.com> 3.4p1-1
  - 3.4p1
  - drop anon mmap patch
* Tue Jun 25 2002 Nalin Dahyabhai <nalin(at)redhat.com> 3.3p1-2
  - rework the close-on-exit docs
  - include configuration file man pages
  - make use of nologin as the privsep shell optional
* Mon Jun 24 2002 Nalin Dahyabhai <nalin(at)redhat.com> 3.3p1-1
  - update to 3.3p1
  - merge in spec file changes from upstream (remove setuid from ssh, ssh-keysign)
  - disable gtk2 askpass
  - require pam-devel by filename rather than by package for erratum
  - include patch from Solar Designer to work around anonymous mmap failures
* Fri Jun 21 2002 Tim Powers <timp(at)redhat.com>
  - automated rebuild
* Fri Jun 07 2002 Nalin Dahyabhai <nalin(at)redhat.com> 3.2.3p1-3
  - don't require autoconf any more
* Fri May 31 2002 Nalin Dahyabhai <nalin(at)redhat.com> 3.2.3p1-2
  - build gnome-ssh-askpass with gtk2
* Tue May 28 2002 Nalin Dahyabhai <nalin(at)redhat.com> 3.2.3p1-1
  - update to 3.2.3p1
  - merge in spec file changes from upstream
* Fri May 17 2002 Nalin Dahyabhai <nalin(at)redhat.com> 3.2.2p1-1
  - update to 3.2.2p1
* Fri May 17 2002 Nalin Dahyabhai <nalin(at)redhat.com> 3.1p1-4
  - drop buildreq on db1-devel
  - require pam-devel by package name
  - require autoconf instead of autoconf253 again
* Tue Apr 02 2002 Nalin Dahyabhai <nalin(at)redhat.com> 3.1p1-3
  - pull patch from CVS to avoid printing error messages when some of the
    default keys aren't available when running ssh-add
  - refresh to current revisions of Simon's patches
* Thu Mar 21 2002 Nalin Dahyabhai <nalin(at)redhat.com> 3.1p1-2gss
  - reintroduce Simon's gssapi patches
  - add buildprereq for autoconf253, which is needed to regenerate configure
    after applying the gssapi patches
  - refresh to the latest version of Markus's patch to build properly with
    older versions of OpenSSL
* Thu Mar 07 2002 Nalin Dahyabhai <nalin(at)redhat.com> 3.1p1-2
  - bump and grind (through the build system)
* Thu Mar 07 2002 Nalin Dahyabhai <nalin(at)redhat.com> 3.1p1-1
  - require sharutils for building (mindrot #137)
  - require db1-devel only when building for 6.x (#55105), which probably won't
    work anyway (3.1 requires OpenSSL 0.9.6 to build), but what the heck
  - require pam-devel by file (not by package name) again
  - add Markus's patch to compile with OpenSSL 0.9.5a (from
    http://bugzilla.mindrot.org/show_bug.cgi?id=141) and apply it if we're
    building for 6.x
* Thu Mar 07 2002 Nalin Dahyabhai <nalin(at)redhat.com> 3.1p1-0
  - update to 3.1p1
* Tue Mar 05 2002 Nalin Dahyabhai <nalin(at)redhat.com> SNAP-20020305
  - update to SNAP-20020305
  - drop debug patch, fixed upstream
* Wed Feb 20 2002 Nalin Dahyabhai <nalin(at)redhat.com> SNAP-20020220
  - update to SNAP-20020220 for testing purposes (you've been warned, if there's
    anything to be warned about, gss patches won't apply, I don't mind)
* Wed Feb 13 2002 Nalin Dahyabhai <nalin(at)redhat.com> 3.0.2p1-3
  - add patches from Simon Wilkinson and Nicolas Williams for GSSAPI key
    exchange, authentication, and named key support
* Wed Jan 23 2002 Nalin Dahyabhai <nalin(at)redhat.com> 3.0.2p1-2
  - remove dependency on db1-devel, which has just been swallowed up whole
    by gnome-libs-devel
* Sat Dec 29 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - adjust build dependencies so that build6x actually works right (fix
    from Hugo van der Kooij)
* Tue Dec 04 2001 Nalin Dahyabhai <nalin(at)redhat.com> 3.0.2p1-1
  - update to 3.0.2p1
* Fri Nov 16 2001 Nalin Dahyabhai <nalin(at)redhat.com> 3.0.1p1-1
  - update to 3.0.1p1
* Tue Nov 13 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - update to current CVS (not for use in distribution)
* Thu Nov 08 2001 Nalin Dahyabhai <nalin(at)redhat.com> 3.0p1-1
  - merge some of Damien Miller <djm(at)mindrot.org> changes from the upstream
    3.0p1 spec file and init script
* Wed Nov 07 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - update to 3.0p1
  - update to x11-ssh-askpass 1.2.4.1
  - change build dependency on a file from pam-devel to the pam-devel package
  - replace primes with moduli
* Thu Sep 27 2001 Nalin Dahyabhai <nalin(at)redhat.com> 2.9p2-9
  - incorporate fix from Markus Friedl's advisory for IP-based authorization bugs
* Thu Sep 13 2001 Bernhard Rosenkraenzer <bero(at)redhat.com> 2.9p2-8
  - Merge changes to rescue build from current sysadmin survival cd
* Thu Sep 06 2001 Nalin Dahyabhai <nalin(at)redhat.com> 2.9p2-7
  - fix scp's server's reporting of file sizes, and build with the proper
    preprocessor define to get large-file capable open(), stat(), etc.
    (sftp has been doing this correctly all along) (#51827)
  - configure without --with-ipv4-default on RHL 7.x and newer (#45987,#52247)
  - pull cvs patch to fix support for /etc/nologin for non-PAM logins (#47298)
  - mark profile.d scriptlets as config files (#42337)
  - refer to Jason Stone's mail for zsh workaround for exit-hanging quasi-bug
  - change a couple of log() statements to debug() statements (#50751)
  - pull cvs patch to add -t flag to sshd (#28611)
  - clear fd_sets correctly (one bit per FD, not one byte per FD) (#43221)
* Mon Aug 20 2001 Nalin Dahyabhai <nalin(at)redhat.com> 2.9p2-6
  - add db1-devel as a BuildPrerequisite (noted by Hans Ecke)
* Thu Aug 16 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - pull cvs patch to fix remote port forwarding with protocol 2
* Thu Aug 09 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - pull cvs patch to add session initialization to no-pty sessions
  - pull cvs patch to not cut off challengeresponse auth needlessly
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed (#49263)
* Wed Aug 08 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - don't apply patches to code we don't intend to build (spotted by Matt Galgoci)
* Mon Aug 06 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - pass OPTIONS correctly to initlog (#50151)
* Wed Jul 25 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - switch to x11-ssh-askpass 1.2.2
* Wed Jul 11 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - rebuild in new environment
* Mon Jun 25 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - disable the gssapi patch
* Mon Jun 18 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - update to 2.9p2
  - refresh to a new version of the gssapi patch
* Thu Jun 07 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - change Copyright: BSD to License: BSD
  - add Markus Friedl's unverified patch for the cookie file deletion problem
    so that we can verify it
  - drop patch to check if xauth is present (was folded into cookie patch)
  - don't apply gssapi patches for the errata candidate
  - clear supplemental groups list at startup
* Fri May 25 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - fix an error parsing the new default sshd_config
  - add a fix from Markus Friedl (via openssh-unix-dev) for ssh-keygen not
    dealing with comments right
* Thu May 24 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - add in Simon Wilkinson's GSSAPI patch to give it some testing in-house,
    to be removed before the next beta cycle because it's a big departure
    from the upstream version
* Thu May 03 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - finish marking strings in the init script for translation
  - modify init script to source /etc/sysconfig/sshd and pass $OPTIONS to sshd
    at startup (change merged from openssh.com init script, originally by
    Pekka Savola)
  - refuse to do X11 forwarding if xauth isn't there, handy if you enable
    it by default on a system that doesn't have X installed
* Wed May 02 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - update to 2.9
  - drop various patches that came from or went upstream or to or from CVS
* Wed Apr 18 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - only require initscripts 5.00 on 6.2 (reported by Peter Bieringer)
* Sun Apr 08 2001 Preston Brown <pbrown(at)redhat.com>
  - remove explicit openssl requirement, fixes builddistro issue
  - make initscript stop() function wait until sshd really dead to avoid 
    races in condrestart
* Mon Apr 02 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - mention that challengereponse supports PAM, so disabling password doesn't
    limit users to pubkey and rsa auth (#34378)
  - bypass the daemon() function in the init script and call initlog directly,
    because daemon() won't start a daemon it detects is already running (like
    open connections)
  - require the version of openssl we had when we were built
* Fri Mar 23 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - make do_pam_setcred() smart enough to know when to establish creds and
    when to reinitialize them
  - add in a couple of other fixes from Damien for inclusion in the errata
* Thu Mar 22 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - update to 2.5.2p2
  - call setcred() again after initgroups, because the "creds" could actually
    be group memberships
* Tue Mar 20 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - update to 2.5.2p1 (includes endianness fixes in the rijndael implementation)
  - don't enable challenge-response by default until we find a way to not
    have too many userauth requests (we may make up to six pubkey and up to
    three password attempts as it is)
  - remove build dependency on rsh to match openssh.com's packages more closely
* Sat Mar 03 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - remove dependency on openssl -- would need to be too precise
* Fri Mar 02 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - rebuild in new environment
* Mon Feb 26 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - Revert the patch to move pam_open_session.
  - Init script and spec file changes from Pekka Savola. (#28750)
  - Patch sftp to recognize '-o protocol' arguments. (#29540)
* Thu Feb 22 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - Chuck the closing patch.
  - Add a trigger to add host keys for protocol 2 to the config file, now that
    configuration file syntax requires us to specify it with HostKey if we
    specify any other HostKey values, which we do.
* Tue Feb 20 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - Redo patch to move pam_open_session after the server setuid()s to the user.
  - Rework the nopam patch to use be picked up by autoconf.
* Mon Feb 19 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - Update for 2.5.1p1.
  - Add init script mods from Pekka Savola.
  - Tweak the init script to match the CVS contrib script more closely.
  - Redo patch to ssh-add to try to adding both identity and id_dsa to also try
    adding id_rsa.
* Fri Feb 16 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - Update for 2.5.0p1.
  - Use $RPM_OPT_FLAGS instead of -O when building gnome-ssh-askpass
  - Resync with parts of Damien Miller's openssh.spec from CVS, including
    update of x11 askpass to 1.2.0.
  - Only require openssl (don't prereq) because we generate keys in the init
    script now.
* Tue Feb 13 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - Don't open a PAM session until we've forked and become the user (#25690).
  - Apply Andrew Bartlett's patch for letting pam_authenticate() know which
    host the user is attempting a login from.
  - Resync with parts of Damien Miller's openssh.spec from CVS.
  - Don't expose KbdInt responses in debug messages (from CVS).
  - Detect and handle errors in rsa_{public,private}_decrypt (from CVS).
* Wed Feb 07 2001 Trond Eivind Glomsrxd <teg(at)redhat.com>
  - i18n-tweak to initscript.
* Tue Jan 23 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - More gettextizing.
  - Close all files after going into daemon mode (needs more testing).
  - Extract patch from CVS to handle auth banners (in the client).
  - Extract patch from CVS to handle compat weirdness.
* Fri Jan 19 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - Finish with the gettextizing.
* Thu Jan 18 2001 Nalin Dahyabhai <nalin(at)redhat.com>
  - Fix a bug in auth2-pam.c (#23877)
  - Gettextize the init script.
* Wed Dec 20 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Incorporate a switch for using PAM configs for 6.x, just in case.
* Tue Dec 05 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Incorporate Bero's changes for a build specifically for rescue CDs.
* Wed Nov 29 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Don't treat pam_setcred() failure as fatal unless pam_authenticate() has
    succeeded, to allow public-key authentication after a failure with "none"
    authentication.  (#21268)
* Tue Nov 28 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Update to x11-askpass 1.1.1. (#21301)
  - Don't second-guess fixpaths, which causes paths to get fixed twice. (#21290)
* Mon Nov 27 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Merge multiple PAM text messages into subsequent prompts when possible when
    doing keyboard-interactive authentication.
* Sun Nov 26 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Disable the built-in MD5 password support.  We're using PAM.
  - Take a crack at doing keyboard-interactive authentication with PAM, and
    enable use of it in the default client configuration so that the client
    will try it when the server disallows password authentication.
  - Build with debugging flags.  Build root policies strip all binaries anyway.
* Tue Nov 21 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Use DESTDIR instead of %makeinstall.
  - Remove /usr/X11R6/bin from the path-fixing patch.
* Mon Nov 20 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Add the primes file from the latest snapshot to the main package (#20884).
  - Add the dev package to the prereq list (#19984).
  - Remove the default path and mimic login's behavior in the server itself.
* Fri Nov 17 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Resync with conditional options in Damien Miller's .spec file for an errata.
  - Change libexecdir from %{_libexecdir}/ssh to %{_libexecdir}/openssh.
* Tue Nov 07 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Update to OpenSSH 2.3.0p1.
  - Update to x11-askpass 1.1.0.
  - Enable keyboard-interactive authentication.
* Mon Oct 30 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Update to ssh-askpass-x11 1.0.3.
  - Change authentication related messages to be private (#19966).
* Tue Oct 10 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Patch ssh-keygen to be able to list signatures for DSA public key files
    it generates.
* Thu Oct 05 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Add BuildPreReq on /usr/include/security/pam_appl.h to be sure we always
    build PAM authentication in.
  - Try setting SSH_ASKPASS if gnome-ssh-askpass is installed.
  - Clean out no-longer-used patches.
  - Patch ssh-add to try to add both identity and id_dsa, and to error only
    when neither exists.
* Mon Oct 02 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Update x11-askpass to 1.0.2. (#17835)
  - Add BuildPreReqs for /bin/login and /usr/bin/rsh so that configure will
    always find them in the right place. (#17909)
  - Set the default path to be the same as the one supplied by /bin/login, but
    add /usr/X11R6/bin. (#17909)
  - Try to handle obsoletion of ssh-server more cleanly.  Package names
    are different, but init script name isn't. (#17865)
* Wed Sep 06 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Update to 2.2.0p1. (#17835)
  - Tweak the init script to allow proper restarting. (#18023)
* Wed Aug 23 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Update to 20000823 snapshot.
  - Change subpackage requirements from %{version} to %{version}-%{release}
  - Back out the pipe patch.
* Mon Jul 17 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Update to 2.1.1p4, which includes fixes for config file parsing problems.
  - Move the init script back.
  - Add Damien's quick fix for wackiness.
* Wed Jul 12 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Update to 2.1.1p3, which includes fixes for X11 forwarding and strtok().
* Thu Jul 06 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Move condrestart to server postun.
  - Move key generation to init script.
  - Actually use the right patch for moving the key generation to the init script.
  - Clean up the init script a bit.
* Wed Jul 05 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Fix X11 forwarding, from mail post by Chan Shih-Ping Richard.
* Sun Jul 02 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Update to 2.1.1p2.
  - Use of strtok() considered harmful.
* Sat Jul 01 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Get the build root out of the man pages.
* Thu Jun 29 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Add and use condrestart support in the init script.
  - Add newer initscripts as a prereq.
* Tue Jun 27 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Build in new environment (release 2)
  - Move -clients subpackage to Applications/Internet group
* Fri Jun 09 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Update to 2.2.1p1
* Sat Jun 03 2000 Nalin Dahyabhai <nalin(at)redhat.com>
  - Patch to build with neither RSA nor RSAref.
  - Miscellaneous FHS-compliance tweaks.
  - Fix for possibly-compressed man pages.
* Wed Mar 15 2000 Damien Miller <djm(at)ibs.com.au>
  - Updated for new location
  - Updated for new gnome-ssh-askpass build
* Sun Dec 26 1999 Damien Miller <djm(at)mindrot.org>
  - Added Jim Knoble's <jmknoble(at)pobox.com> askpass
* Mon Nov 15 1999 Damien Miller <djm(at)mindrot.org>
  - Split subpackages further based on patch from jim knoble <jmknoble(at)pobox.com>
* Sat Nov 13 1999 Damien Miller <djm(at)mindrot.org>
  - Added 'Obsoletes' directives
* Tue Nov 09 1999 Damien Miller <djm(at)ibs.com.au>
  - Use make install
  - Subpackages
* Mon Nov 08 1999 Damien Miller <djm(at)ibs.com.au>
  - Added links for slogin
  - Fixed perms on manpages
* Sat Oct 30 1999 Damien Miller <djm(at)ibs.com.au>
  - Renamed init script
* Fri Oct 29 1999 Damien Miller <djm(at)ibs.com.au>
  - Back to old binary names
* Thu Oct 28 1999 Damien Miller <djm(at)ibs.com.au>
  - Use autoconf
  - New binary names
* Wed Oct 27 1999 Damien Miller <djm(at)ibs.com.au>
  - Initial RPMification, based on Jan "Yenya" Kasprzak's <kas(at)fi.muni.cz> spec.

Files

/etc/pam.d/sshd
/etc/rc.d/init.d/sshd
/etc/ssh/sshd_config
/usr/libexec/openssh/sftp-server
/usr/sbin/.sshd.hmac
/usr/sbin/sshd
/usr/share/man/man5/moduli.5.gz
/usr/share/man/man5/sshd_config.5.gz
/usr/share/man/man8/sftp-server.8.gz
/usr/share/man/man8/sshd.8.gz
/var/empty/sshd

Generated by rpm2html 1.11.0

Peter Hanecak, Thu Sep 9 00:53:14 2010