buildroot/package/openssh/openssh.hash, branch 2016.11.2

openssh: security bump to version 7.4p1

2016-12-19T22:14:28+00:00

Fixes: CVE-2016-10009 - ssh-agent(1): Will now refuse to load PKCS#11 modules from paths outside a trusted whitelist CVE-2016-10010 - sshd(8): When privilege separation is disabled, forwarded Unix-domain sockets would be created by sshd(8) with the privileges of 'root' CVE-2016-10011 - sshd(8): Avoid theoretical leak of host private key material to privilege-separated child processes via realloc() CVE-2016-10012 - sshd(8): The shared memory manager used by pre-authentication compression support had a bounds checks that could be elided by some optimising compilers http://seclists.org/oss-sec/2016/q4/708 Drop upstream patch. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard (cherry picked from commit ae58da71111c9a9825fa8dab1338831ff38dc320)

openssh: bump version to 7.3p1

2016-08-01T20:11:31+00:00

Signed-off-by: Vicente Olivert Riera Signed-off-by: Thomas Petazzoni

openssh: security bump to version 7.2p2

2016-03-10T19:49:57+00:00

Fixes: CVE-2016-3115 - sanitise X11 authentication credentials to avoid xauth command injection when X11Forwarding is enabled. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

openssh: bump to version 7.2p1

2016-02-29T20:45:32+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

openssh: security bump to version 7.1p2

2016-01-14T19:13:57+00:00

Fixes: CVE-2016-0777 - Client Information leak from use of roaming connection feature. CVE-2016-0778 - A buffer overflow flaw was found in the way the OpenSSH client roaming feature was implemented. A malicious server could potentially use this flaw to execute arbitrary code on a successfully authenticated OpenSSH client if that client used certain non-default configuration options. Signed-off-by: Gustavo Zacarias Reviewed-by: James Knight Tested-by: James Knight Signed-off-by: Peter Korsgaard

openssh: security bump to version 7.1p1

2015-08-25T20:41:08+00:00

Fixes: CVE-2015-6563 - Fixed a privilege separation weakness related to PAM support. CVE-2015-6564 - Fixed a use-after-free bug related to PAM support that was reachable by attackers who could compromise the pre-authentication process for remote code exectuion. CVE-2015-6565 - incorrectly set TTYs to be world-writable. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

openssh: bump to version 6.9p1

2015-07-02T08:59:22+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

openssh: bump to version 6.8p1

2015-03-18T13:38:49+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

openssh: mention release announcement in hash file

2014-10-07T19:04:20+00:00

Also, add sha1 hash from the announcement. Cc: Gustavo Zacarias Signed-off-by: Baruch Siach Signed-off-by: Peter Korsgaard

openssh: bump to version 6.7p1

2014-10-07T12:56:42+00:00

Also add hash file. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard