buildroot/package/openssh, branch 2016.05

openssh: security bump to version 7.2p2

2016-03-10T19:49:57+00:00

Fixes: CVE-2016-3115 - sanitise X11 authentication credentials to avoid xauth command injection when X11Forwarding is enabled. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

openssh: bump to version 7.2p1

2016-02-29T20:45:32+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

openssh: security bump to version 7.1p2

2016-01-14T19:13:57+00:00

Fixes: CVE-2016-0777 - Client Information leak from use of roaming connection feature. CVE-2016-0778 - A buffer overflow flaw was found in the way the OpenSSH client roaming feature was implemented. A malicious server could potentially use this flaw to execute arbitrary code on a successfully authenticated OpenSSH client if that client used certain non-default configuration options. Signed-off-by: Gustavo Zacarias Reviewed-by: James Knight Tested-by: James Knight Signed-off-by: Peter Korsgaard

package: Replace 'echo -n' by 'printf'

2015-10-03T22:56:41+00:00

'echo -n' is not a POSIX construct (no flag support), we shoud use 'printf', especially in init script. This patch was generated by the following command line: git grep -l 'echo -n' -- `git ls-files | grep -v 'patch'` | xargs sed -i 's/echo -n/printf/' Signed-off-by: Maxime Hadjinlian Reviewed-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Peter Korsgaard

openssh: fix static compilation

2015-08-29T08:43:52+00:00

PIE and static doesn't work on Linux. Fixes: http://autobuild.buildroot.net/results/dce/dce0202e039f4636d68532c4aab8738938b76650/ Signed-off-by: Waldemar Brodkorb Signed-off-by: Thomas Petazzoni

openssh: security bump to version 7.1p1

2015-08-25T20:41:08+00:00

Fixes: CVE-2015-6563 - Fixed a privilege separation weakness related to PAM support. CVE-2015-6564 - Fixed a use-after-free bug related to PAM support that was reachable by attackers who could compromise the pre-authentication process for remote code exectuion. CVE-2015-6565 - incorrectly set TTYs to be world-writable. Signed-off-by: Gustavo Zacarias Signed-off-by: Peter Korsgaard

openssh: selinux and pam support

2015-07-18T15:26:07+00:00

[Thomas: in the sed expression, use % as a delimiter instead of /, since the line contains several / that all had to be escaped.] Signed-off-by: Matthew Weber Reviewed-by: Samuel Martin Signed-off-by: Thomas Petazzoni

openssh: bump to version 6.9p1

2015-07-02T08:59:22+00:00

Signed-off-by: Gustavo Zacarias Signed-off-by: Thomas Petazzoni

package: kill pointless text justification

2015-04-23T07:47:08+00:00

Signed-off-by: Gustavo Zacarias Acked-by: Arnout Vandecappelle (Essensium/Mind) Signed-off-by: Thomas Petazzoni

openssh: move systemd service files to /usr/lib

2015-03-20T19:37:16+00:00

Signed-off-by: Mike Williams Signed-off-by: Thomas Petazzoni