CVS commit: [pkgsrc-2015Q2] pkgsrc/security/openssh

["Matthias Scheler" <tron%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tron
Date:           Mon Aug 24 19:06:40 UTC 2015

Modified Files:
        pkgsrc/security/openssh [pkgsrc-2015Q2]: Makefile PLIST distinfo
        pkgsrc/security/openssh/patches [pkgsrc-2015Q2]: patch-auth2-chall.c
            patch-auth2.c patch-loginrec.c patch-openbsd-compat_bsd-openpty.c
            patch-sftp-common.c patch-sshd.c patch-uidswap.c
Added Files:
        pkgsrc/security/openssh/files [pkgsrc-2015Q2]: org.openssh.sshd.sb.in
        pkgsrc/security/openssh/patches [pkgsrc-2015Q2]: patch-sandbox-darwin.c

Log Message:
Pullup ticket #4796 - requested by wiz
security/openssh: security update

Revisions pulled up:
- security/openssh/Makefile                                     patch
- security/openssh/PLIST                                        patch
- security/openssh/distinfo                                     patch
- security/openssh/files/org.openssh.sshd.sb.in                 patch
- security/openssh/patches/patch-auth2-chall.c                  patch
- security/openssh/patches/patch-auth2.c                        patch
- security/openssh/patches/patch-loginrec.c                     patch
- security/openssh/patches/patch-openbsd-compat_bsd-openpty.c   patch
- security/openssh/patches/patch-sandbox-darwin.c               patch
- security/openssh/patches/patch-sftp-common.c                  patch
- security/openssh/patches/patch-sshd.c                         patch
- security/openssh/patches/patch-uidswap.c                      patch

---
   Module Name: pkgsrc
   Committed By:        wiz
   Date:                Fri Aug 21 08:12:09 UTC 2015

   Modified Files:
        pkgsrc/security/openssh: Makefile distinfo
   Removed Files:
        pkgsrc/security/openssh/patches: patch-auth2-chall.c

   Log Message:
   Update to 7.1p1:

   Changes since OpenSSH 7.0
   =========================

   This is a bugfix release.

   Security
   --------

    * sshd(8): OpenSSH 7.0 contained a logic error in PermitRootLogin=
      prohibit-password/without-password that could, depending on
      compile-time configuration, permit password authentication to
      root while preventing other forms of authentication. This problem
      was reported by Mantas Mikulenas.

   Bugfixes
   --------

    * ssh(1), sshd(8): add compatability workarounds for FuTTY

    * ssh(1), sshd(8): refine compatability workarounds for WinSCP

    * Fix a number of memory faults (double-free, free of uninitialised
      memory, etc) in ssh(1) and ssh-keygen(1). Reported by Mateusz
      Kocielski.


To generate a diff of this commit:
cvs rdiff -u -r1.230.2.2 -r1.230.2.3 pkgsrc/security/openssh/Makefile
cvs rdiff -u -r1.16 -r1.16.12.1 pkgsrc/security/openssh/PLIST
cvs rdiff -u -r1.91.2.2 -r1.91.2.3 pkgsrc/security/openssh/distinfo
cvs rdiff -u -r0 -r1.1.2.2 \
    pkgsrc/security/openssh/files/org.openssh.sshd.sb.in
cvs rdiff -u -r1.1.2.2 -r1.1.2.3 \
    pkgsrc/security/openssh/patches/patch-auth2-chall.c
cvs rdiff -u -r1.3.12.1 -r1.3.12.2 \
    pkgsrc/security/openssh/patches/patch-auth2.c \
    pkgsrc/security/openssh/patches/patch-sshd.c
cvs rdiff -u -r1.3 -r1.3.4.1 pkgsrc/security/openssh/patches/patch-loginrec.c
cvs rdiff -u -r1.1 -r1.1.18.1 \
    pkgsrc/security/openssh/patches/patch-openbsd-compat_bsd-openpty.c
cvs rdiff -u -r0 -r1.1.2.2 \
    pkgsrc/security/openssh/patches/patch-sandbox-darwin.c
cvs rdiff -u -r1.2 -r1.2.12.1 \
    pkgsrc/security/openssh/patches/patch-sftp-common.c
cvs rdiff -u -r1.3 -r1.3.12.1 pkgsrc/security/openssh/patches/patch-uidswap.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.