SEO

Hello all,

I'm tracking 3.4 Patch branch with a nightly job that does;

cvs -d $CVSROOT -q up -rOPENBSD_3_4 src

Last night, the following was pulled from CVS;


P src/usr.bin/ssh/LICENCE
P src/usr.bin/ssh/Makefile
P src/usr.bin/ssh/Makefile.inc
P src/usr.bin/ssh/OVERVIEW
P src/usr.bin/ssh/README
P src/usr.bin/ssh/README.dns
P src/usr.bin/ssh/README.smartcard
P src/usr.bin/ssh/auth-chall.c
P src/usr.bin/ssh/auth-krb5.c
P src/usr.bin/ssh/auth-passwd.c
P src/usr.bin/ssh/auth-rh-rsa.c
P src/usr.bin/ssh/auth-rhosts.c
P src/usr.bin/ssh/auth-rsa.c
P src/usr.bin/ssh/auth.c
P src/usr.bin/ssh/auth.h
P src/usr.bin/ssh/auth1.c
P src/usr.bin/ssh/auth2-gss.c
P src/usr.bin/ssh/auth2-hostbased.c
P src/usr.bin/ssh/auth2-passwd.c
P src/usr.bin/ssh/auth2-pubkey.c
P src/usr.bin/ssh/auth2.c
P src/usr.bin/ssh/authfd.c
P src/usr.bin/ssh/authfd.h
P src/usr.bin/ssh/authfile.c
P src/usr.bin/ssh/bufaux.c
P src/usr.bin/ssh/bufaux.h
P src/usr.bin/ssh/buffer.c
P src/usr.bin/ssh/canohost.c
P src/usr.bin/ssh/channels.c
P src/usr.bin/ssh/channels.h
P src/usr.bin/ssh/cipher-3des1.c
P src/usr.bin/ssh/cipher-aes.c
P src/usr.bin/ssh/cipher-ctr.c
P src/usr.bin/ssh/cipher.c
P src/usr.bin/ssh/cipher.h
U src/usr.bin/ssh/cleanup.c
P src/usr.bin/ssh/clientloop.c
P src/usr.bin/ssh/clientloop.h
P src/usr.bin/ssh/compat.c
P src/usr.bin/ssh/compat.h
P src/usr.bin/ssh/compress.c
P src/usr.bin/ssh/deattack.c
P src/usr.bin/ssh/dh.c
P src/usr.bin/ssh/dns.c
P src/usr.bin/ssh/dns.h
P src/usr.bin/ssh/fatal.c
P src/usr.bin/ssh/gss-genr.c
P src/usr.bin/ssh/gss-serv-krb5.c
P src/usr.bin/ssh/gss-serv.c
P src/usr.bin/ssh/hostfile.c
P src/usr.bin/ssh/hostfile.h
P src/usr.bin/ssh/kex.c
P src/usr.bin/ssh/kexgexc.c
P src/usr.bin/ssh/key.c
P src/usr.bin/ssh/key.h
P src/usr.bin/ssh/log.c
P src/usr.bin/ssh/log.h
P src/usr.bin/ssh/mac.c
P src/usr.bin/ssh/misc.c
P src/usr.bin/ssh/moduli.c
P src/usr.bin/ssh/monitor.c
P src/usr.bin/ssh/monitor.h
P src/usr.bin/ssh/monitor_wrap.c
P src/usr.bin/ssh/monitor_wrap.h
P src/usr.bin/ssh/msg.c
P src/usr.bin/ssh/msg.h
P src/usr.bin/ssh/nchan.ms
P src/usr.bin/ssh/nchan2.ms
P src/usr.bin/ssh/packet.c
P src/usr.bin/ssh/pathnames.h
P src/usr.bin/ssh/progressmeter.c
P src/usr.bin/ssh/readconf.c
P src/usr.bin/ssh/readconf.h
P src/usr.bin/ssh/rijndael.c
P src/usr.bin/ssh/scp.1
P src/usr.bin/ssh/scp.c
P src/usr.bin/ssh/servconf.c
P src/usr.bin/ssh/servconf.h
P src/usr.bin/ssh/serverloop.c
P src/usr.bin/ssh/session.c
P src/usr.bin/ssh/session.h
P src/usr.bin/ssh/sftp-client.c
P src/usr.bin/ssh/sftp-client.h
P src/usr.bin/ssh/sftp-common.c
P src/usr.bin/ssh/sftp-common.h
P src/usr.bin/ssh/sftp-glob.c
cvs server: src/usr.bin/ssh/sftp-glob.h is no longer in the repository
cvs server: src/usr.bin/ssh/sftp-int.c is no longer in the repository
cvs server: src/usr.bin/ssh/sftp-int.h is no longer in the repository
P src/usr.bin/ssh/sftp-server.8
P src/usr.bin/ssh/sftp-server.c
P src/usr.bin/ssh/sftp.1
P src/usr.bin/ssh/sftp.c
P src/usr.bin/ssh/ssh-add.1
P src/usr.bin/ssh/ssh-add.c
P src/usr.bin/ssh/ssh-agent.c
P src/usr.bin/ssh/ssh-dss.c
P src/usr.bin/ssh/ssh-gss.h
P src/usr.bin/ssh/ssh-keygen.1
P src/usr.bin/ssh/ssh-keygen.c
P src/usr.bin/ssh/ssh-keyscan.c
P src/usr.bin/ssh/ssh-keysign.c
P src/usr.bin/ssh/ssh-rsa.c
P src/usr.bin/ssh/ssh.1
P src/usr.bin/ssh/ssh.c
P src/usr.bin/ssh/ssh.h
P src/usr.bin/ssh/ssh_config.5
P src/usr.bin/ssh/sshconnect.c
P src/usr.bin/ssh/sshconnect2.c
P src/usr.bin/ssh/sshd.8
P src/usr.bin/ssh/sshd.c
P src/usr.bin/ssh/sshd_config
P src/usr.bin/ssh/sshd_config.5
P src/usr.bin/ssh/sshpty.c
P src/usr.bin/ssh/sshtty.c
P src/usr.bin/ssh/sshtty.h
P src/usr.bin/ssh/uuencode.c
P src/usr.bin/ssh/uuencode.h
U src/usr.bin/ssh/version.h
P src/usr.bin/ssh/lib/Makefile
P src/usr.bin/ssh/sftp/Makefile
P src/usr.bin/ssh/ssh/Makefile
P src/usr.bin/ssh/sshd/Makefile


this looks like a fairly major amount of code, in fact version.h shows
that it appears to be OpenSSH 3.8.

Since there doesn't appear to have been a related security announcement,
and I wasn't aware that this sort of 'nice to have' feature is included
in the patch branch, how/why did it get in CVS ?



Cheers.

Dixitur illum bards1888@yahoo.com.au.au scribere...

>Since there doesn't appear to have been a related security announcement,
>and I wasn't aware that this sort of 'nice to have' feature is included
>in the patch branch, how/why did it get in CVS ?

Uhm, because new OpenSSH versions are _always_ backported (for good
reasons)?

//Thorsten
--
Solange man keine schmutzigen Tricks macht, und ich meine *wirklich*
schmutzige Tricks, wie bei einer doppelt verketteten Liste beide
Pointer XORen und in nur einem Word speichern, funktioniert Boehm ganz
hervorragend. -- Andreas Bogk über boehm-gc in d.a.s.r

Thorsten Glaser wrote:
> Dixitur illum bards1888@yahoo.com.au.au scribere...
>
>
>>Since there doesn't appear to have been a related security announcement,
>>and I wasn't aware that this sort of 'nice to have' feature is included
>>in the patch branch, how/why did it get in CVS ?
>
>
> Uhm, because new OpenSSH versions are _always_ backported (for good
> reasons)?
>
> //Thorsten

Thats cool Thorsten, I thought it might be something like that, where is
this documented (if anywhere) ?


Cheers.

read stable.html

--

Ted Unangst wrote:
> read stable.html
>

Indeed, thanks Ted.