openSUSE Build Service

Dominique Leuenberger (dimstar_suse) accepted request 603107 from

Petr Cerny (pcerny) about 6 years ago (revision 117)

- Use TIRPC on suse_version &gt;= 1500: sunrpc is deprecated and
  should be replaced by TIRPC.

This has several effects:
* We get RPC support back... from build log in oS:F/standard:

[   48s] checking rpc/types.h usability... no
[   48s] checking rpc/types.h presence... no
[   48s] checking for rpc/types.h... no

vs this branch:
[   50s] checking rpc/types.h usability... yes
[   50s] checking rpc/types.h presence... yes
[   50s] checking for rpc/types.h... yes

AND as a side-effect, FALSE for ldapbody.c is now defined (not the
  nicest of side-effects, but seems that ldap patch relies on RPC
  headers to be included.

So all in all: this fixes the build failures for openSUSE Tumblewee (forwarded request 602971 from dimstar)

Dominique Leuenberger (dimstar_suse) accepted request 593882 from

mrdocs about 6 years ago (revision 116)

Dominique Leuenberger (dimstar_suse) accepted request 583081 from

Marcus Meissner (msmeissn) about 6 years ago (revision 115)

- add OpenSSL 1.0 to 1.1 shim to remove dependency on old OpenSSL
  (update tracker: bsc#1080779)

Dominique Leuenberger (dimstar_suse) accepted request 571577 from

Petr Cerny (pcerny) over 6 years ago (revision 114)

- .spec file cleanup

- upgrade to 7.6p1
  see main package changelog for details

- Add missing crypto hardware enablement patches for IBM mainframes
  (FATE#323902)

- add missing part of systemd integration (unit type) (forwarded request 571576 from pcerny)

Dominique Leuenberger (dimstar_suse) accepted request 567941 from

mrdocs over 6 years ago (revision 113)

Dominique Leuenberger (dimstar_suse) accepted request 563834 from

Petr Cerny (pcerny) over 6 years ago (revision 112)

- Replace forgotten references to /var/adm/fillup-templates
  with new %_fillupdir macro (boo#1069468)
- tighten configuration access rights (forwarded request 563833 from pcerny)

Dominique Leuenberger (dimstar_suse) accepted request 536831 from

Dirk Mueller (dirkmueller) over 6 years ago (revision 111)

Dominique Leuenberger (dimstar_suse) accepted request 500282 from

Petr Cerny (pcerny) almost 7 years ago (revision 110)

- require OpenSSL &lt; 1.1 where that one is a default (forwarded request 500281 from pcerny)

Dominique Leuenberger (dimstar_suse) accepted request 461303 from

Dirk Mueller (dirkmueller) about 7 years ago (revision 109)

Dominique Leuenberger (dimstar_suse) accepted request 433780 from

Petr Cerny (pcerny) over 7 years ago (revision 108)

- remaining patches that were still missing
  since the update to 7.2p2 (FATE#319675):
  [openssh-7.2p2-disable_openssl_abi_check.patch]
- fix forwarding with IPv6 addresses in DISPLAY (bnc#847710)
  [openssh-7.2p2-IPv6_X_forwarding.patch]
- ignore PAM environment when using login
  (bsc#975865, CVE-2015-8325)
  [openssh-7.2p2-ignore_PAM_with_UseLogin.patch]
- limit accepted password length (prevents possible DoS)
  (bsc#992533, CVE-2016-6515)
  [openssh-7.2p2-limit_password_length.patch]
- Prevent user enumeration through the timing of password
  processing (bsc#989363, CVE-2016-6210)
  [openssh-7.2p2-prevent_timing_user_enumeration.patch]
- Add auditing for PRNG re-seeding
  [openssh-7.2p2-audit_seed_prng.patch] (forwarded request 433779 from pcerny)

Dominique Leuenberger (dimstar_suse) accepted request 428545 from

Petr Cerny (pcerny) over 7 years ago (revision 107)

- FIPS compatibility (no selfchecks, only crypto restrictions)
  [openssh-7.2p2-fips.patch]
- PRNG re-seeding
  [openssh-7.2p2-seed-prng.patch]
- preliminary version of GSSAPI KEX
  [openssh-7.2p2-gssapi_key_exchange.patch] (forwarded request 428544 from pcerny)

Dominique Leuenberger (dimstar_suse) accepted request 415094 from

Marcus Meissner (msmeissn) almost 8 years ago (revision 106)

- fixed url

- upgrade to 7.2p2

- changing license to 2-clause BSD to match source

- added gpg signature 

- enable support for SSHv1 protocol and discourage its usage
  (bsc#983307)
- enable DSA by default for backward compatibility and discourage
  its usage (bsc#983784)
  [openssh-7.2p2-allow_DSS_by_default.patch]

- enable trusted X11 forwarding by default
  [openssh-7.2p2-X11_trusted_forwarding.patch]
- set UID for lastlog properly 
  [openssh-7.2p2-lastlog.patch]
- enable use of PAM by default 
  [openssh-7.2p2-enable_PAM_by_default.patch]
- copy command line arguments properly 
  [openssh-7.2p2-saveargv-fix.patch]
- do not use pthreads in PAM code 
  [openssh-7.2p2-dont_use_pthreads_in_PAM.patch]
- fix paths in documentation 
  [openssh-7.2p2-eal3.patch]
- prevent race consitions triggered by SIGALRM 
  [openssh-7.2p2-blocksigalrm.patch]
- do send and accept locale environment variables by default
  [openssh-7.2p2-send_locale.patch]

Dominique Leuenberger (dimstar_suse) accepted request 392910 from

Petr Cerny (pcerny) about 8 years ago (revision 105)

fix broken seccomp sandbox (forwarded request 392909 from pcerny)

Dominique Leuenberger (dimstar_suse) accepted request 386262 from

Marcus Meissner (msmeissn) about 8 years ago (revision 104)

Dominique Leuenberger (dimstar_suse) accepted request 353732 from

Ismail Dönmez (namtrac) over 8 years ago (revision 103)

Dominique Leuenberger (dimstar_suse) accepted request 282346 from

Factory Maintainer (factory-maintainer) over 9 years ago (revision 102)

Automatic submission by obs-autosubmit

Dominique Leuenberger (dimstar_suse) accepted request 266606 from

Marcus Meissner (msmeissn) over 9 years ago (revision 101)

Stephan Kulow (coolo) accepted request 255040 from

Andrey Karepin (EGDFree) over 9 years ago (revision 100)

Adrian Schröter (adrianSuSE) committed over 9 years ago (revision 99)

Split 13.2 from Factory

Stephan Kulow (coolo) accepted request 241776 from

Petr Cerny (pcerny) almost 10 years ago (revision 98)

Do not depend on insserv if the package build with systemd support;
  it's useless (forwarded request 241774 from posophe)

Places

Revisions of openssh

Places