CVS commit: pkgsrc/security/openssh

["Takahiro Kambe" <taca%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   taca
Date:           Wed Feb 16 17:45:09 UTC 2011

Modified Files:
        pkgsrc/security/openssh: Makefile distinfo options.mk
        pkgsrc/security/openssh/patches: patch-aa patch-ab patch-ac patch-ad
            patch-ag patch-ah patch-ak patch-am patch-an patch-ao patch-ap
            patch-av patch-aw
Added Files:
        pkgsrc/security/openssh/patches: patch-platform.c

Log Message:
Update openssh package to 5.8.1 (5.8p1).

For changes from 5.5 to 5.7, please refer http://openssh.com/txt/release-5.7
and http://openssh.com/txt/release-5.6 in detail.

Changes since OpenSSH 5.7
=========================

Security:

 * Fix vulnerability in legacy certificate signing introduced in
   OpenSSH-5.6 and found by Mateusz Kocielski.

   Legacy certificates signed by OpenSSH 5.6 or 5.7 included data from
   the stack in place of a random nonce field. The contents of the stack
   do not appear to contain private data at this point, but this cannot
   be stated with certainty for all platform, library and compiler
   combinations. In particular, there exists a risk that some bytes from
   the privileged CA key may be accidentally included.

   A full advisory for this issue is available at:
   http://www.openssh.com/txt/legacy-cert.adv

Portable OpenSSH Bugfixes:

 * Fix compilation failure when enableing SELinux support.

 * Do not attempt to call SELinux functions when SELinux is disabled.
   bz#1851


To generate a diff of this commit:
cvs rdiff -u -r1.198 -r1.199 pkgsrc/security/openssh/Makefile
cvs rdiff -u -r1.78 -r1.79 pkgsrc/security/openssh/distinfo
cvs rdiff -u -r1.19 -r1.20 pkgsrc/security/openssh/options.mk
cvs rdiff -u -r1.47 -r1.48 pkgsrc/security/openssh/patches/patch-aa
cvs rdiff -u -r1.29 -r1.30 pkgsrc/security/openssh/patches/patch-ab
cvs rdiff -u -r1.18 -r1.19 pkgsrc/security/openssh/patches/patch-ac
cvs rdiff -u -r1.14 -r1.15 pkgsrc/security/openssh/patches/patch-ad
cvs rdiff -u -r1.13 -r1.14 pkgsrc/security/openssh/patches/patch-ag
cvs rdiff -u -r1.28 -r1.29 pkgsrc/security/openssh/patches/patch-ah
cvs rdiff -u -r1.10 -r1.11 pkgsrc/security/openssh/patches/patch-ak
cvs rdiff -u -r1.8 -r1.9 pkgsrc/security/openssh/patches/patch-am
cvs rdiff -u -r1.11 -r1.12 pkgsrc/security/openssh/patches/patch-an \
    pkgsrc/security/openssh/patches/patch-ap
cvs rdiff -u -r1.16 -r1.17 pkgsrc/security/openssh/patches/patch-ao
cvs rdiff -u -r1.9 -r1.10 pkgsrc/security/openssh/patches/patch-av
cvs rdiff -u -r1.3 -r1.4 pkgsrc/security/openssh/patches/patch-aw
cvs rdiff -u -r0 -r1.1 pkgsrc/security/openssh/patches/patch-platform.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.