Commits - rpms/openssh - CentOS Git server

rcolebaugh / rpms / openssh

Forked from rpms/openssh 2 years ago

Source
Stats

Commits 56

Possible remote code execution due to a race condition (CVE-2024-6409)

Dmitry Belyavskiy • 7 months ago

2a5b65

Possible remote code execution due to a race condition (CVE-2024-6387)

Dmitry Belyavskiy • 7 months ago

96149a

Fix ssh multiplexing connect timeout processing

Dmitry Belyavskiy • 8 months ago

6ca18e

Use FIPS-compatible API for key derivation

Dmitry Belyavskiy • 10 months ago

03eff3

Fix Terrapin attack

Dmitry Belyavskiy • a year ago

2c2ea1

Fix Terrapin attack

Dmitry Belyavskiy • a year ago

4c4233

Dmitry Belyavskiy • a year ago

8a8fae

Forbid shell metasymbols in username/hostname

Dmitry Belyavskiy • a year ago

0521bb

Relax OpenSSH build-time checks for OpenSSL version

Dmitry Belyavskiy • a year ago

d18e1c

Fix Terrapin attack

Dmitry Belyavskiy • a year ago

54fc80

Move users/groups creation logic to sysusers.d fragments

Dmitry Belyavskiy • a year ago

5838d3

Limit artificial delays in sshd while login using AD user

Dmitry Belyavskiy • a year ago

a43be1

Relax OpenSSH checks for OpenSSL version

Dmitry Belyavskiy • a year ago

d8b51e

Avoid remote code execution in ssh-agent PKCS#11 support

Dmitry Belyavskiy • 2 years ago

edaf6c

Avoid remote code execution in ssh-agent PKCS#11 support

Dmitry Belyavskiy • 2 years ago

6fa799

Allow specifying validity interval in UTC

Dmitry Belyavskiy • 2 years ago

c5140c

Eliminating remnants of SHA1 usage in OpenSSH

Dmitry Belyavskiy • 2 years ago

b5ba5a

Some non-terminating processes were listening on ports.

Dmitry Belyavskiy • 2 years ago

cc7d7a

Resolve possible self-DoS with some clients

Dmitry Belyavskiy • 2 years ago

f7003b

Do not try to use SHA1 for host key ownership proof when we don't support it server-side

Dmitry Belyavskiy • 2 years ago

42aa6f

Do not try to use SHA1 for host key ownership proof when we don't support it server-side

Dmitry Belyavskiy • 2 years ago

ebbbfc

Minor cleanups from upstream

Dmitry Belyavskiy • 2 years ago

6f7478

- Build fix after OpenSSL rebase

Dmitry Belyavskiy • 2 years ago

b0f320

Set minimal value of RSA key length via configuration option

Dmitry Belyavskiy • 2 years ago

ad9644

Set minimal value of RSA key length via configuration option

Dmitry Belyavskiy • 2 years ago

d4ff0b

Set minimal value of RSA key length via configuration option

Dmitry Belyavskiy • 2 years ago

d92560

Avoid spirous message on connecting to the machine with ssh-rsa keys

Dmitry Belyavskiy • 2 years ago

a0db6b

IBMCA workaround

Dmitry Belyavskiy • 2 years ago

b53c53

FIX pam_ssh_agent_auth auth for RSA keys

Dmitry Belyavskiy • 2 years ago

9591af

Disable ed25519 and ed25519-sk keys in FIPS mode

Dmitry Belyavskiy • 2 years ago

d23afa

Disable ed25519 and ed25519-sk keys in FIPS mode

Dmitry Belyavskiy • 2 years ago

b17ff3

Disable ed25519 and ed25519-sk keys in FIPS mode

Dmitry Belyavskiy • 2 years ago

0d823b

Disable ed25519 and ed25519-sk keys in FIPS mode

Dmitry Belyavskiy • 2 years ago

399096

Disable sntrup761x25519-sha512 in FIPS mode

Dmitry Belyavskiy • 2 years ago

32a826

Use EVP functions for RSA and EC key generation

Dmitry Belyavskiy • 2 years ago

d0bf0e

Set minimal value of RSA key length via configuration option

Dmitry Belyavskiy • 2 years ago

4b21ae

Workaround for RHEL 8 incompatibility in scp utility in SFTP mode

Dmitry Belyavskiy • 2 years ago

cf05a2

Switch to SFTP protocol in scp utility by default - various improvements

Dmitry Belyavskiy • 3 years ago

149505

Switch to SFTP protocol in scp utility by default - upstream fixes

Dmitry Belyavskiy • 3 years ago

0b7faa

Fix SSH connection to localhost not possible in FIPS

Dmitry Belyavskiy • 3 years ago

829ee6

- Fix `ssh-keygen -Y find-principals -f /dev/null -s /dev/null` segfault

Dmitry Belyavskiy • 3 years ago

bf1985

Fix memory leaks introduced in OpenSSH 8.7

Dmitry Belyavskiy • 3 years ago

581a7d

Disable locale forwarding in default configurations

Dmitry Belyavskiy • 3 years ago

6e19d4

Upstream fix for CVE-2021-41617

Dmitry Belyavskiy • 3 years ago

aa1b33

Disabling SCP protocol as much as possible

Dmitry Belyavskiy • 3 years ago

f32839

Rebasing to OpenSSH 8.7p1

Dmitry Belyavskiy • 3 years ago

f9e5de

Sources and spec changes

Dmitry Belyavskiy • 3 years ago

62d88b

Upstream patch for restoring nonblock state

Dmitry Belyavskiy • 3 years ago

b82d68

Remove the recommendation of p11-kit

Dmitry Belyavskiy • 3 years ago

0695fd

Avoid warnings about deprecated functions

Dmitry Belyavskiy • 3 years ago

d1f2ed

Hostbased ssh authentication fails if session ID contains a '/'

Dmitry Belyavskiy • 3 years ago

9b598f

Powered by Pagure 5.14.1

SSH Hostkey/Fingerprint | Documentation