CVS commit: pkgsrc

[Jun-ichiro itojun Hagino <itojun%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   itojun
Date:           Sun Jul  2 22:07:56 UTC 2000

Modified Files:
        pkgsrc/security/openssh: Makefile
        pkgsrc/security/openssh/files: md5 patch-sum
        pkgsrc/security/openssh/patches: patch-aa patch-ah
Added Files:
        pkgsrc/security/openssh/patches: patch-al patch-am

Log Message:
upgrade fro 2.1.1p1 to 2.1.1p2.

--- recent changelogs
20000701
 - (djm) Fix Tru64 SIA problems reported by John P Speno 
<speno%isc.upenn.edu@localhost>
 - (djm) Login fixes from Tom Bertelson <tbert%abac.com@localhost>
 - (djm) Replace "/bin/sh" with _PATH_BSHELL. Report from Corinna Vinschen
   <vinschen%cygnus.com@localhost>
 - (djm) Replace "/usr/bin/login" with LOGIN_PROGRAM
 - (djm) Added check for broken snprintf() functions which do not correctly
   terminate output string and attempt to use replacement.
 - (djm) Released 2.1.1p2

20000628
 - (djm) Fixes to lastlog code for Irix
 - (djm) Use atomicio in loginrec
 - (djm) Patch from Michael Stone <mstone%cs.loyola.edu@localhost> to add 
support for
   Irix 6.x array sessions, project id's, and system audit trail id.
 - (djm) Added 'distprep' make target to simplify packaging
 - (djm) Added patch from Chris Adams <cmadams%hiwaay.net@localhost> to add OSF 
SIA
   support. Enable using "USE_SIA=1 ./configure [options]"

20000627
 - (djm) Fixes to login code - not setting li->uid, cleanups
 - (djm) Formatting

20000626
 - (djm) Better fix to aclocal tests from Garrick James 
<garrick%james.net@localhost>
 - (djm) Account expiry support from Andreas Steinmetz <ast%domdv.de@localhost>
 - (djm) Added password expiry checking (no password change support)
 - (djm) Make EGD failures non-fatal if OpenSSL's entropy pool is still OK
   based on patch from Lutz Jaenicke <Lutz.Jaenicke%aet.TU-Cottbus.DE@localhost>
 - (djm) Fix fixed EGD code.
 - OpenBSD CVS update
   - provos%cvs.openbsd.org@localhost  2000/06/25 14:17:58
     [channels.c]
     correct check for bad channel ids; from Wei Dai 
<weidai%eskimo.com@localhost>

20000623
 - (djm) Use sa_family_t in prototype for rresvport_af. Patch from
   Svante Signell <svante.signell%telia.com@localhost>
 - (djm) Autoconf logic to define sa_family_t if it is missing
 - OpenBSD CVS Updates:
   - markus%cvs.openbsd.org@localhost  2000/06/22 10:32:27
     [sshd.c]
     missing atomicio; report from Steve.Marquess%DET.AMEDD.ARMY.MIL@localhost
   - djm%cvs.openbsd.org@localhost     2000/06/22 17:55:00
     [auth-krb4.c key.c radix.c uuencode.c]
     Missing CVS idents; ok markus

20000622
 - (djm) Automatically generate host key during "make install". Suggested
   by Gary E. Miller <gem%rellim.com@localhost>
 - (djm) Paranoia before kill() system call
 - OpenBSD CVS Updates:
   - markus%cvs.openbsd.org@localhost  2000/06/18 18:50:11
     [auth2.c compat.c compat.h sshconnect2.c]
     make userauth+pubkey interop with ssh.com-2.2.0
   - markus%cvs.openbsd.org@localhost  2000/06/18 20:56:17
     [dsa.c]
     mem leak + be more paranoid in dsa_verify.
   - markus%cvs.openbsd.org@localhost  2000/06/18 21:29:50
     [key.c]
     cleanup fingerprinting, less hardcoded sizes
   - markus%cvs.openbsd.org@localhost  2000/06/19 19:39:45
     [atomicio.c auth-options.c auth-passwd.c auth-rh-rsa.c auth-rhosts.c]
     [auth-rsa.c auth-skey.c authfd.c authfd.h authfile.c bufaux.c bufaux.h]
     [buffer.c buffer.h canohost.c channels.c channels.h cipher.c cipher.h]
     [clientloop.c compat.c compat.h compress.c compress.h crc32.c crc32.h]
     [deattack.c dispatch.c dsa.c fingerprint.c fingerprint.h getput.h hmac.c]
     [kex.c log-client.c log-server.c login.c match.c mpaux.c mpaux.h nchan.c]
     [nchan.h packet.c packet.h pty.c pty.h readconf.c readconf.h readpass.c]
     [rsa.c rsa.h scp.c servconf.c servconf.h ssh-add.c ssh-keygen.c ssh.c]
     [ssh.h tildexpand.c ttymodes.c ttymodes.h uidswap.c xmalloc.c xmalloc.h]
     OpenBSD tag
   - markus%cvs.openbsd.org@localhost  2000/06/21 10:46:10
     sshconnect2.c missing free; nuke old comment

20000620
 - (djm) Replace use of '-o' and '-a' logical operators in configure tests
   with '||' and '&&'. As suggested by Jim Knoble 
<jmknoble%pint-stowp.cx@localhost>
   to fix SCO Unixware problem reported by Gary E. Miller 
<gem%rellim.com@localhost>
 - (djm) Typo in loginrec.c

20000618
 - (djm) Add summary of configure options to end of ./configure run
 - (djm) Not all systems define RUSAGE_SELF & RUSAGE_CHILDREN. Report from
   Michael Stone <mstone%cs.loyola.edu@localhost>
 - (djm) rusage is a privileged operation on some Unices (incl.
   Solaris 2.5.1). Report from Paul D. Smith 
<pausmith%nortelnetworks.com@localhost>
 - (djm) Avoid PAM failures when running without a TTY. Report from
   Martin Petrak <petrak%spsknm.schools.sk@localhost>
 - (djm) Include sys/types.h when including netinet/in.h in configure tests.
   Patch from Jun-ichiro itojun Hagino <itojun%iijlab.net@localhost>
 - (djm) Started merge of Ben Lindstrom's <mouring%pconline.com@localhost> NeXT 
support
 - OpenBSD CVS updates:
   - deraadt%cvs.openbsd.org@localhost 2000/06/17 09:58:46
     [channels.c]
     everyone says "nix it" (remove protocol 2 debugging message)
   - markus%cvs.openbsd.org@localhost  2000/06/17 13:24:34
     [sshconnect.c]
     allow extended server banners
   - markus%cvs.openbsd.org@localhost  2000/06/17 14:30:10
     [sshconnect.c]
     missing atomicio, typo
   - jakob%cvs.openbsd.org@localhost   2000/06/17 16:52:34
     [servconf.c servconf.h session.c sshd.8 sshd_config]
     add support for ssh v2 subsystems. ok markus@.
   - deraadt%cvs.openbsd.org@localhost 2000/06/17 18:57:48
     [readconf.c servconf.c]
     include = in WHITESPACE; markus ok
   - markus%cvs.openbsd.org@localhost  2000/06/17 19:09:10
     [auth2.c]
     implement bug compatibility with ssh-2.0.13 pubkey, server side
   - markus%cvs.openbsd.org@localhost  2000/06/17 21:00:28
     [compat.c]
     initial support for ssh.com's 2.2.0
   - markus%cvs.openbsd.org@localhost  2000/06/17 21:16:09
     [scp.c]
     typo
   - markus%cvs.openbsd.org@localhost  2000/06/17 22:05:02
     [auth-rsa.c auth2.c serverloop.c session.c auth-options.c auth-options.h]
     split auth-rsa option parsing into auth-options
     add options support to authorized_keys2
   - markus%cvs.openbsd.org@localhost  2000/06/17 22:42:54
     [session.c]
     typo

20000613
 - (djm) Fixes from Andrew McGill <andrewm%datrix.co.za@localhost>:
  - Platform define for SCO 3.x which breaks on /dev/ptmx
  - Detect and try to fix missing MAXPATHLEN
 - (djm) Fix short copy in loginrec.c (based on patch from Phill Camp
   <P.S.S.Camp%ukc.ac.uk@localhost>

20000612
 - (djm) Glob manpages in RPM spec files to catch compressed files
 - (djm) Full license in auth-pam.c
 - (djm) Configure fixes from SAKAI Kiyotaka 
<ksakai%kso.netwk.ntt-at.co.jp@localhost>
 - (andre) AIX, lastlog, configure fixes from Tom Bertelson 
<tbert%abac.com@localhost>:
  - Don't try to retrieve lastlog from wtmp/wtmpx if DISABLE_LASTLOG is
     def'd
  - Set AIX to use preformatted manpages

20000610
 - (djm) Minor doc tweaks
 - (djm) Fix for configure on bash2 from Jim Knoble 
<jmknoble%jmknoble.cx@localhost>

20000609
 - (djm) Patch from Kenji Miyake <kenji%miyake.org@localhost> to disable utmp 
usage
   (in favour of utmpx) on Solaris 8

20000606
 - (djm) Cleanup of entropy.c. Reorganised code, removed second pass through
   list of commands (by default). Removed verbose debugging (by default).
 - (djm) Increased command entropy estimates and default entropy collection
   timeout
 - (djm) Remove duplicate headers from loginrec.c
 - (djm) Don't add /usr/local/lib to library search path on Irix
 - (djm) Fix rsh path in RPMs. Report from Jason L Tibbitts III
   <tibbs%math.uh.edu@localhost>
 - (djm) Warn user if grabs fail in GNOME askpass. Patch from Zack Weinberg
   <zack%wolery.cumb.org@localhost>
 - (djm) OpenBSD CVS updates:
  - todd%cvs.openbsd.org@localhost
    [sshconnect2.c]
    teach protocol v2 to count login failures properly and also enable an
    explanation of why the password prompt comes up again like v1; this is NOT
    crypto
  - markus%cvs.openbsd.org@localhost
    [readconf.c readconf.h servconf.c servconf.h session.c ssh.1 ssh.c sshd.8]
    xauth_location support; pr 1234
    [readconf.c sshconnect2.c]
    typo, unused
    [session.c]
    allow use_login only for login sessions, otherwise remote commands are
    execed with uid==0
    [sshd.8]
    document UseLogin better
    [version.h]
    OpenSSH 2.1.1
    [auth-rsa.c]
    fix match_hostname() logic for auth-rsa: deny access if we have a
    negative match or no match at all
    [channels.c hostfile.c match.c]
    don't panic if mkdtemp fails for authfwd; jkb%yahoo-inc.com@localhost via
    kris%FreeBSD.org@localhost


To generate a diff of this commit:
cvs rdiff -r1.14 -r1.15 pkgsrc/security/openssh/Makefile
cvs rdiff -r1.5 -r1.6 pkgsrc/security/openssh/files/md5
cvs rdiff -r1.10 -r1.11 pkgsrc/security/openssh/files/patch-sum
cvs rdiff -r1.7 -r1.8 pkgsrc/security/openssh/patches/patch-aa
cvs rdiff -r1.5 -r1.6 pkgsrc/security/openssh/patches/patch-ah
cvs rdiff -r0 -r1.1 pkgsrc/security/openssh/patches/patch-al \
    pkgsrc/security/openssh/patches/patch-am

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.