Commit Graph

Select branches

Hide Pull Requests

a9

c10s

c8

c8-beta

c8s

c9

c9-beta

c9s

c9s_cve_2023_38408

#1

changed/a9/openssh-8.7p1-38.el9.alma.1

changed/a9/openssh-8.7p1-38.el9.alma.2

changed/a9/openssh-8.7p1-38.el9_4.1.alma.1

imports/c10s/openssh-9.8p1-2.el10.0

imports/c10s/openssh-9.8p1-4.el10

imports/c10s/openssh-9.8p1-6.el10

imports/c10s/openssh-9.9p1-1.el10

imports/c10s/openssh-9.9p1-2.el10

imports/c10s/openssh-9.9p1-3.el10

imports/c10s/openssh-9.9p1-4.el10

imports/c10s/openssh-9.9p1-4.el10.1

imports/c8-beta/openssh-8.0p1-10.el8

imports/c8-beta/openssh-8.0p1-13.el8

imports/c8-beta/openssh-8.0p1-16.el8

imports/c8-beta/openssh-8.0p1-17.el8

imports/c8-beta/openssh-8.0p1-2.el8

imports/c8-beta/openssh-8.0p1-24.el8

imports/c8-beta/openssh-8.0p1-3.el8

imports/c8-beta/openssh-8.0p1-5.el8

imports/c8/openssh-7.8p1-4.el8

imports/c8/openssh-8.0p1-10.el8

imports/c8/openssh-8.0p1-13.el8

imports/c8/openssh-8.0p1-16.el8

imports/c8/openssh-8.0p1-17.el8

imports/c8/openssh-8.0p1-17.el8_7

imports/c8/openssh-8.0p1-19.el8_8

imports/c8/openssh-8.0p1-19.el8_9.2

imports/c8/openssh-8.0p1-24.el8

imports/c8/openssh-8.0p1-25.el8_10

imports/c8/openssh-8.0p1-3.el8

imports/c8/openssh-8.0p1-4.el8_1

imports/c8/openssh-8.0p1-5.el8

imports/c8/openssh-8.0p1-6.el8_4.2

imports/c8s/openssh-8.0p1-10.el8

imports/c8s/openssh-8.0p1-12.el8

imports/c8s/openssh-8.0p1-13.el8

imports/c8s/openssh-8.0p1-16.el8

imports/c8s/openssh-8.0p1-17.el8

imports/c8s/openssh-8.0p1-5.el8

imports/c8s/openssh-8.0p1-7.el8

imports/c8s/openssh-8.0p1-8.el8

imports/c8s/openssh-8.0p1-9.el8

imports/c9-beta/openssh-8.6p1-7.el9.1

imports/c9-beta/openssh-8.7p1-22.el9

imports/c9-beta/openssh-8.7p1-28.el9

imports/c9-beta/openssh-8.7p1-34.el9

imports/c9-beta/openssh-8.7p1-38.el9

imports/c9-beta/openssh-8.7p1-4.el9

imports/c9-beta/openssh-8.7p1-43.el9

imports/c9-beta/openssh-8.7p1-6.el9

imports/c9-beta/openssh-8.7p1-7.el9

imports/c9-beta/openssh-8.7p1-8.el9

imports/c9/openssh-8.7p1-10.el9_0

imports/c9/openssh-8.7p1-24.el9_1

imports/c9/openssh-8.7p1-28.el9

imports/c9/openssh-8.7p1-29.el9_2

imports/c9/openssh-8.7p1-30.el9_2

imports/c9/openssh-8.7p1-34.el9

imports/c9/openssh-8.7p1-34.el9_3.3

imports/c9/openssh-8.7p1-38.el9

imports/c9/openssh-8.7p1-38.el9_4.1

imports/c9/openssh-8.7p1-38.el9_4.4

imports/c9/openssh-8.7p1-8.el9

Mono Color

• 84c0936017 Bump release for October 2024 mass rebuild: imports/c10s/openssh-9.9p1-4.el10.1 c10s Troy Dawson 2024-10-29 08:53:07 -0700
• 15a3247272 Fix MLKEM for BE platforms imports/c10s/openssh-9.9p1-4.el10 Dmitry Belyavskiy 2024-10-28 17:49:18 +0100
• 6ec986a4e3 Provide details on crypto error instead of "error in libcrypto" Dmitry Belyavskiy 2024-10-21 13:36:43 +0200
• 76b570ae7c Allow duplicate Subsystem directive c9s Dmitry Belyavskiy 2024-10-21 13:38:05 +0200
• 2282e9f646 Provide details on crypto error instead of "error in libcrypto" Dmitry Belyavskiy 2024-10-21 13:36:43 +0200
• 48c1a09ba9 Add extra help information on ssh early failure Dmitry Belyavskiy 2024-10-21 11:03:50 +0200
• ebb51c8cab Extra help information should not be printed if stderr is not a TTY imports/c10s/openssh-9.9p1-3.el10 Dmitry Belyavskiy 2024-10-18 15:45:58 +0200
• 84ad70de57 Add extra help information on ssh early failure imports/c10s/openssh-9.9p1-2.el10 Dmitry Belyavskiy 2024-10-15 13:10:20 +0200
• ebf2d5fd08 Resolve memory management issues after rebase Dmitry Belyavskiy 2024-10-15 12:20:11 +0200
• 384febcdc2 Gssapi-keyex: fix issues found by static analysis Zoltan Fridrich 2024-10-14 15:29:16 +0200
• 0802365f07 Use FIPS KEX defaults in FIPS mode Dmitry Belyavskiy 2024-10-11 14:15:51 +0200
• 2a4f84e7ce Separate ssh-keysign to a dedicated package Dmitry Belyavskiy 2024-10-11 12:19:11 +0200
• 07172f36c4 Update to OpenSSH 9.9p1 imports/c10s/openssh-9.9p1-1.el10 Dmitry Belyavskiy 2024-10-10 12:30:39 +0200
• 4f059f7452 import CS openssh-8.7p1-43.el9 imports/c9-beta/openssh-8.7p1-43.el9 c9-beta eabdullin 2024-09-30 16:14:13 +0000
• d84f5f5164 Rebuilt imports/c10s/openssh-9.8p1-6.el10 Dmitry Belyavskiy 2024-09-16 16:16:16 +0200
• 01503ba517 Remove redundant patches Dmitry Belyavskiy 2024-08-29 21:08:27 +0200
• 262bb33bcb "publickey-hostbound@openssh.com" extension makes no sense with GSS Dmitry Belyavskiy 2024-08-28 16:55:18 +0200
• 5c31606342 Merge patches from gsskex regressions Zoltan Fridrich 2024-08-28 13:05:58 +0200
• fc550bd771 Add missing gsskeyex authentication method Zoltan Fridrich 2024-08-28 10:49:04 +0200
• 78bb33ab57 Restore GSS connectivity when no hostkeys are present Dmitry Belyavskiy 2024-08-27 13:52:28 +0200
• 303ff5b834 Remove obsoleted patches imports/c10s/openssh-9.8p1-4.el10 Dmitry Belyavskiy 2024-08-16 13:23:18 +0200
• dd7a5a9d22 Address SAST scan issues Dmitry Belyavskiy 2024-08-16 12:26:57 +0200
• 779aabdb52 import UBI openssh-8.0p1-25.el8_10 c8 imports/c8/openssh-8.0p1-25.el8_10 eabdullin 2024-08-13 18:19:37 +0000
• acc18112a5 remove tests directory Miluse Bezo Konecna 2024-08-06 14:09:01 +0200
• ba81972425 Reenabling self-test on rpm build Dmitry Belyavskiy 2024-08-05 16:36:20 +0200
• ce2e80c1d0 sshd doesn't propose to enter password again when a non-existing user is specified Dmitry Belyavskiy 2024-08-05 13:03:20 +0200
• a26f247c4f Fix gating.yaml Miluse Bezo Konecna 2024-07-31 10:22:02 +0200
• 3d59a15439 gating CI - fix in plans Miluse Bezo Konecna 2024-07-24 16:25:21 +0200
• f1bd13208d Use FIPS-compatible API for key derivation RHEL-10 imports/c10s/openssh-9.8p1-2.el10.0 Dmitry Belyavskiy 2024-07-26 16:15:19 +0200
• 1c01acf847 Change ssh-keygen defaults in FIPS mode Dmitry Belyavskiy 2024-07-26 13:18:20 +0200
• 7a357709f5 Temporary disabling self-test Dmitry Belyavskiy 2024-07-25 19:43:02 +0200
• 089d798931 Rebase OpenSSH to 9.8p1 Dmitry Belyavskiy 2024-07-25 12:54:19 +0200
• 9195080dcb add gating for RHEL-10 Miluse Bezo Konecna 2024-07-19 16:21:47 +0200
• 2231e36337 Remove pam_ssh_agent_auth subpackage Zoltan Fridrich 2024-07-10 14:36:23 +0200
• 0f2df32d18 Build OpenSSH without ENGINE API Zoltan Fridrich 2024-07-12 10:27:37 +0200
• 5399a9c9ff import UBI openssh-8.7p1-38.el9_4.4 imports/c9/openssh-8.7p1-38.el9_4.4 c9 eabdullin 2024-07-10 14:14:58 +0000
• 2a5b657c60 Possible remote code execution due to a race condition (CVE-2024-6409) Dmitry Belyavskiy 2024-07-09 16:54:56 +0200
• 40f1d8dfe6 CVE-2024-6409: Possible remote code execution in privsep child due to a race condition in signal handling changed/a9/openssh-8.7p1-38.el9_4.1.alma.1 a9 Andrew Lukoshko 2024-07-08 17:33:50 +0000
• c4d40580f3 Sync with c9 Andrew Lukoshko 2024-07-08 12:45:52 +0000
• 96149ae84f Possible remote code execution due to a race condition (CVE-2024-6387) Dmitry Belyavskiy 2024-07-04 09:38:45 +0200
• aa500db6e4 import UBI openssh-8.7p1-38.el9_4.1 imports/c9/openssh-8.7p1-38.el9_4.1 eabdullin 2024-07-03 14:22:23 +0000
• 4a307908cd Fix changelog entry changed/a9/openssh-8.7p1-38.el9.alma.2 Andrew Lukoshko 2024-07-01 17:37:07 +0000
• 872410a55b Fix CVE-2024-6387 patch Andrew Lukoshko 2024-07-01 17:28:42 +0000
• 70bab4b00f Actually apply patch Andrew Lukoshko 2024-07-01 17:15:42 +0000
• fe96fc42c4 Fix pam_ssh_agent_auth Release changed/a9/openssh-8.7p1-38.el9.alma.1 Andrew Lukoshko 2024-07-01 14:53:29 +0000
• 79086d6943 Merge pull request 'fix regreSSHion attack CVE-2024-6387' (#1) from jonathan/openssh:a9 into a9 Andrew Lukoshko 2024-07-01 14:17:33 +0000
• 1acb0bc5a9 fix CVE-2024-6387 Jonathan Wright 2024-07-01 08:50:53 -0500
• a6dc61048e Upstream: Ignore SIGPIPE earlier in main() c8s Stepan Broz 2024-06-25 17:57:25 +0200
• 8f0ad5fe82 Bump release for June 2024 mass rebuild Troy Dawson 2024-06-24 09:06:11 -0700
• 6ca18e235a Fix ssh multiplexing connect timeout processing Dmitry Belyavskiy 2024-06-03 12:12:04 +0200
• 6d16bfdb3c import UBI openssh-8.0p1-24.el8 imports/c8/openssh-8.0p1-24.el8 eabdullin 2024-05-22 13:26:20 +0000
• 17e559c555 Add key size variables into sshd.sysconfig Zoltan Fridrich 2024-05-10 10:39:36 +0200
• d23ed33031 Make default key sizes configurable in sshd-keygen Zoltan Fridrich 2024-05-09 17:08:11 +0200
• 2e80dd6896 Correctly audit hostname and IP address Zoltan Fridrich 2024-05-09 17:06:11 +0200
• 01178d1eef Make default key sizes configurable in sshd-keygen Zoltan Fridrich 2024-05-02 16:16:48 +0200
• 7fedb4cdc0 Correctly audit hostname and IP address Zoltan Fridrich 2024-05-02 16:12:31 +0200
• 1e5fcaacd5 import UBI openssh-8.7p1-38.el9 imports/c9/openssh-8.7p1-38.el9 eabdullin 2024-04-30 15:39:53 +0000
• 03eff3f0f1 Use FIPS-compatible API for key derivation Dmitry Belyavskiy 2024-04-24 21:26:06 +0200
• 828c949c3d import CS openssh-8.7p1-38.el9 imports/c9-beta/openssh-8.7p1-38.el9 eabdullin 2024-03-28 11:18:12 +0000
• 29a5db689e import CS openssh-8.0p1-24.el8 imports/c8-beta/openssh-8.0p1-24.el8 c8-beta eabdullin 2024-03-27 20:09:54 +0000
• 3188b36323 import UBI openssh-8.7p1-34.el9_3.3 imports/c9/openssh-8.7p1-34.el9_3.3 eabdullin 2024-03-05 21:02:56 +0000
• 13cf39f11a Providing a kill switch for scp to deal with CVE-2020-15778 Dmitry Belyavskiy 2024-02-06 12:32:38 +0100
• b6a876a1a7 import UBI openssh-8.0p1-19.el8_9.2 imports/c8/openssh-8.0p1-19.el8_9.2 eabdullin 2024-01-30 18:53:52 +0000
• 2f41ca7cd3 Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild Fedora Release Engineering 2024-01-25 11:29:57 +0000
• d089d5f71b Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild Fedora Release Engineering 2024-01-21 11:22:01 +0000
• f238307bdf Applying patches to rebase to OpenSSH 9.6p1 Dmitry Belyavskiy 2024-01-12 13:55:32 +0100
• ff2aae200d Fix Terrapin attack Dmitry Belyavskiy 2024-01-05 15:09:14 +0100
• 2c2ea1d489 Fix Terrapin attack Dmitry Belyavskiy 2024-01-05 14:43:26 +0100
• 4c42338c08 Fix Terrapin attack Dmitry Belyavskiy 2024-01-05 14:28:02 +0100
• 87ae5d1d5a Fix type errors in downstream gssapi-keyex patch Florian Weimer 2023-12-22 17:01:38 +0100
• 61a590faaf Forbid shell metasymbols in username/hostname Dmitry Belyavskiy 2023-12-20 12:20:37 +0100
• 99988fba8f Fix Terrapin attack Dmitry Belyavskiy 2023-12-21 13:57:30 +0100
• 8a8fae36ce Rebuild Dmitry Belyavskiy 2023-12-21 13:43:57 +0100
• 0521bb1a51 Forbid shell metasymbols in username/hostname Dmitry Belyavskiy 2023-12-20 12:20:37 +0100
• d18e1c1119 Relax OpenSSH build-time checks for OpenSSL version Dmitry Belyavskiy 2023-12-20 11:31:43 +0100
• 54fc8050ff Fix Terrapin attack Dmitry Belyavskiy 2023-12-20 11:26:41 +0100
• 2e04a3ede2 Using DigestSign/DigestVerify functions for better FIPS compatibility Dmitry Belyavskiy 2023-11-07 17:44:31 +0100
• 6d707df735 import UBI openssh-8.7p1-34.el9 imports/c9/openssh-8.7p1-34.el9 eabdullin 2023-11-07 11:34:42 +0000
• 6c888396c9 Fix GSS KEX causing ssh failures when connecting to WinSSHD Dmitry Belyavskiy 2023-11-01 11:29:52 +0100
• 6242770aa2 Using DigestSign/DigestVerify functions for better FIPS compatibility Dmitry Belyavskiy 2023-11-01 10:44:40 +0100
• c06e3e9d62 Avoid sshd_config 256K limit Dmitry Belyavskiy 2023-10-31 13:42:04 +0100
• ed9948fc28 Avoid killing all processes on system in case of race condition Dmitry Belyavskiy 2023-10-30 13:31:05 +0100
• 9c7572af98 Add comment to OpenSSH server config about FIPS-incompatible key Dmitry Belyavskiy 2023-10-30 13:09:20 +0100
• a636f3d32f Limit artificial delays in sshd while login using AD user Dmitry Belyavskiy 2023-10-30 12:50:36 +0100
• 5838d35972 Move users/groups creation logic to sysusers.d fragments Dmitry Belyavskiy 2023-10-24 14:22:42 +0200
• a43be164ec Limit artificial delays in sshd while login using AD user Dmitry Belyavskiy 2023-10-23 13:33:49 +0200
• d8b51e8341 Relax OpenSSH checks for OpenSSL version Dmitry Belyavskiy 2023-10-23 12:59:46 +0200
• 5c1da775a9 Fix issue with read-only ssh buffer during gssapi key exchange (rhbz#1938224) https://github.com/openssh-gsskex/openssh-gsskex/pull/19 Mattias Ellert 2023-10-06 17:27:39 +0200
• 4f07bfcfe1 Fix FTBFS due to implicit declarations (rhbz#2241211) Mattias Ellert 2023-10-15 06:42:32 +0200
• d80bf06988 import CS openssh-8.7p1-34.el9 imports/c9-beta/openssh-8.7p1-34.el9 eabdullin 2023-09-21 19:44:39 +0000
• d3cd3f2851 migrated to SPDX license Dmitry Belyavskiy 2023-09-19 12:19:43 +0200
• f98acbdc5d Revert "Remove sshd.socket unit" Timothée Ravier 2023-09-15 10:22:41 +0200
• c38c04eca8 rebuilt Dmitry Belyavskiy 2023-08-24 17:05:04 +0200
• d77b1b790a pkcs11: Add support for 'serial' in PKCS#11 URI Jakub Jelen 2023-04-13 14:59:50 +0200
• c7af8ecb76 Minor optimization of ssh_krb5_kuserok Dmitry Belyavskiy 2023-08-03 11:06:10 +0200
• 8a294387d0 Remove sshd.socket unit Dmitry Belyavskiy 2023-08-03 10:38:48 +0200
• f4f5944e31 Disable forking of ssh-agent on startup Dmitry Belyavskiy 2023-08-03 10:32:24 +0200
• ec2f61e2cf Split including crypto-policies to a separate config Dmitry Belyavskiy 2023-08-03 10:25:50 +0200
• 6afdefca5f import UBI openssh-8.7p1-30.el9_2 imports/c9/openssh-8.7p1-30.el9_2 Andrew Lukoshko 2023-08-02 06:43:31 +0000
• f47dcec1ba import UBI openssh-8.0p1-19.el8_8 imports/c8/openssh-8.0p1-19.el8_8 Andrew Lukoshko 2023-08-02 06:42:27 +0000