openssh-ssh1 (1:7.5p1-11) [PTS] [DDPO]

COMMITS: VCS has seen 15 commits since the debian/1%7.5p1-11 tag

Git: https://salsa.debian.org/ssh-team/openssh-ssh1.git
Enter a full Vcs-* header, supported schemes are: Vcs-Bzr, Vcs-Cvs, Vcs-Darcs, Vcs-Git, Vcs-Hg, Vcs-Mtn, Vcs-Svn.
For Vcs-Git append -b branch to select the branch name; append [subdir] if the debian/ directory is not in the repository root.
The next upload will reset the information from the source package headers.
Branch: master
Path: debian/changelog
Browser: https://salsa.debian.org/ssh-team/openssh-ssh1
Last scan: 2019-06-23 21:00:26+00
Next scan: 2019-06-24 21:24:00+00

Debian changelog in Git:

openssh-ssh1 (1:7.5p1-11) unstable; urgency=medium

  * Remove dh_builddeb override to use xz compression; this has been the
    default since dpkg 1.17.0.
  * Simplify debian/rules using /usr/share/dpkg/default.mk.
  * Change priority to optional, since "Priority: extra" is now deprecated.

 -- Colin Watson <cjwatson@debian.org>  Sat, 27 Oct 2018 21:31:14 +0100

This branch is 15 commits ahead of tag debian/1%7.5p1-11

Git log:

commit b0e2629e27af836a8eae6f51ed3be69ab7908f69
Merge: 34fdde14 e4e1cb27
Author: Colin Watson <cjwatson@debian.org>
Date:   Fri Jun 21 16:20:23 2019 +0100

    Update contact information for Natalie Amery

commit e4e1cb27a385c0b89208da4e3d1ecd511e2283b4
Author: Jakub Jelen <jjelen@redhat.com>
Date:   Mon Nov 27 11:09:08 2017 +0000

    OpenSSL 1.1.0 compat
    
    This is too risky for the main OpenSSH packages, but for openssh-ssh1
    it's unlikely to make matters significantly worse.  See:
    
      https://lists.mindrot.org/pipermail/openssh-unix-dev/2017-November/036467.html
    
    Bug-Debian: https://bugs.debian.org/873574
    Origin: vendor, https://src.fedoraproject.org/rpms/openssh/blob/9e46aafab9baa6bb905efdf442cd963ea074e8cd/f/openssh-7.3p1-openssl-1.1.0.patch
    Author: Kurt Roeckx <kurt@roeckx.be>
    Author: Colin Watson <cjwatson@debian.org>
    Forwarded: https://github.com/openssh/openssh-portable/pull/48
    Last-Update: 2017-11-27
    
    Patch-Name: openssl-1.1.patch

commit f8d84f35f535aede80e4d40555b06bc404334edd
Author: Russell Coker <russell@coker.com.au>
Date:   Tue Jun 6 15:00:20 2017 +0100

    Fix incoming compression statistics
    
    Bug-Debian: https://bugs.debian.org/797964
    Forwarded: https://lists.mindrot.org/pipermail/openssh-unix-dev/2017-June/036077.html
    Last-Update: 2017-06-06
    
    Patch-Name: fix-incoming-compression-statistics.patch

commit 703dcf3469b373e52fd2687e0ef58821b260df2f
Author: Colin Watson <cjwatson@debian.org>
Date:   Sun Feb 9 16:10:18 2014 +0000

    Various Debian-specific configuration changes
    
    ssh: Enable ForwardX11Trusted, returning to earlier semantics which cause
    fewer problems with existing setups (http://bugs.debian.org/237021).
    
    ssh: Set 'SendEnv LANG LC_*' by default (http://bugs.debian.org/264024).
    
    ssh: Enable HashKnownHosts by default to try to limit the spread of ssh
    worms.
    
    ssh: Enable GSSAPIAuthentication by default.
    
    Document all of this.
    
    Author: Russ Allbery <rra@debian.org>
    Forwarded: not-needed
    Last-Update: 2017-05-03
    
    Patch-Name: debian-config.patch

commit 14c317a866eccf889502d0ceb83b0f68f2e4c277
Author: Kurt Roeckx <kurt@roeckx.be>
Date:   Sun Feb 9 16:10:14 2014 +0000

    Don't check the status field of the OpenSSL version
    
    There is no reason to check the version of OpenSSL (in Debian).  If it's
    not compatible the soname will change.  OpenSSH seems to want to do a
    check for the soname based on the version number, but wants to keep the
    status of the release the same.  Remove that check on the status since
    it doesn't tell you anything about how compatible that version is.
    
    Author: Colin Watson <cjwatson@debian.org>
    Bug-Debian: https://bugs.debian.org/93581
    Bug-Debian: https://bugs.debian.org/664383
    Bug-Debian: https://bugs.debian.org/732940
    Forwarded: not-needed
    Last-Update: 2014-10-07
    
    Patch-Name: no-openssl-version-status.patch

commit 96e6f51298aeaa0aadf3137ae9720779ce452e25
Author: Colin Watson <cjwatson@debian.org>
Date:   Sun Feb 9 16:10:10 2014 +0000

    ssh(1): Refer to ssh-argv0(1)
    
    Old versions of OpenSSH (up to 2.5 or thereabouts) allowed creating symlinks
    to ssh with the name of the host you want to connect to.  Debian ships an
    ssh-argv0 script restoring this feature; this patch refers to its manual
    page from ssh(1).
    
    Bug-Debian: http://bugs.debian.org/111341
    Forwarded: not-needed
    Last-Update: 2013-09-14
    
    Patch-Name: ssh-argv0.patch

commit 9c804285f66f834cbe7423c716830d597e71cbf9
Author: Colin Watson <cjwatson@debian.org>
Date:   Sun Feb 9 16:10:09 2014 +0000

    Adjust various OpenBSD-specific references in manual pages
    
    No single bug reference for this patch, but history includes:
     http://bugs.debian.org/154434 (login.conf(5))
     http://bugs.debian.org/513417 (/etc/rc)
     http://bugs.debian.org/530692 (ssl(8))
     https://bugs.launchpad.net/bugs/456660 (ssl(8))
    
    Forwarded: not-needed
    Last-Update: 2017-05-03
    
    Patch-Name: openbsd-docs.patch

commit 234dcaaa5bb00f76d1ec17e54e7fd1b998ab520d
Author: Matthew Vernon <matthew@debian.org>
Date:   Sun Feb 9 16:10:05 2014 +0000

    Include the Debian version in our identification
    
    This makes it easier to audit networks for versions patched against security
    vulnerabilities.  It has little detrimental effect, as attackers will
    generally just try attacks rather than bothering to scan for
    vulnerable-looking version strings.  (However, see debian-banner.patch.)
    
    Forwarded: not-needed
    Last-Update: 2013-09-14
    
    Patch-Name: package-versioning.patch

commit 6acd2aa423506f397a19a671492bfc99c4eff2cf
Author: Scott Moser <smoser@ubuntu.com>
Date:   Sun Feb 9 16:10:03 2014 +0000

    Mention ssh-keygen in ssh fingerprint changed warning
    
    Author: Chris Lamb <lamby@debian.org>
    Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1843
    Bug-Ubuntu: https://bugs.launchpad.net/bugs/686607
    Last-Update: 2017-08-22
    
    Patch-Name: mention-ssh-keygen-on-keychange.patch

commit 54a16b2edc5eebcf89c849e090e79b2949fecd07
Author: Colin Watson <cjwatson@debian.org>
Date:   Sun Feb 9 16:10:01 2014 +0000

    Force use of DNSSEC even if "options edns0" isn't in resolv.conf
    
    This allows SSHFP DNS records to be verified if glibc 2.11 is installed.
    
    Origin: vendor, https://cvs.fedoraproject.org/viewvc/F-12/openssh/openssh-5.2p1-edns.patch?revision=1.1&view=markup
    Bug: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=572049
    Bug-Debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=572049
    Last-Update: 2010-04-06
    
    Patch-Name: dnssec-sshfp.patch

commit 5116286e4d7e74fc0d743034b0b8b93c6ae3f93c
Author: Colin Watson <cjwatson@debian.org>
Date:   Sun Feb 9 16:10:00 2014 +0000

    Look for $SHELL on the path for ProxyCommand/LocalCommand
    
    There's some debate on the upstream bug about whether POSIX requires this.
    I (Colin Watson) agree with Vincent and think it does.
    
    Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1494
    Bug-Debian: http://bugs.debian.org/492728
    Last-Update: 2013-09-14
    
    Patch-Name: shell-path.patch

commit 77d1e67a43d96f5fa1dd56a374ba1050317f62f7
Author: Nicolas Valcárcel <nvalcarcel@ubuntu.com>
Date:   Sun Feb 9 16:09:59 2014 +0000

    Adjust scp quoting in verbose mode
    
    Tweak scp's reporting of filenames in verbose mode to be a bit less
    confusing with spaces.
    
    This should be revised to mimic real shell quoting.
    
    Bug-Ubuntu: https://bugs.launchpad.net/bugs/89945
    Last-Update: 2010-02-27
    
    Patch-Name: scp-quoting.patch

commit 49a66e89ce73edf82f99592242f0502bf2f683d9
Author: Colin Watson <cjwatson@debian.org>
Date:   Sun Feb 9 16:09:58 2014 +0000

    Allow harmless group-writability
    
    Allow secure files (~/.ssh/config, ~/.ssh/authorized_keys, etc.) to be
    group-writable, provided that the group in question contains only the file's
    owner.  Rejected upstream for IMO incorrect reasons (e.g. a misunderstanding
    about the contents of gr->gr_mem).  Given that per-user groups and umask 002
    are the default setup in Debian (for good reasons - this makes operating in
    setgid directories with other groups much easier), we need to permit this by
    default.
    
    Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1060
    Bug-Debian: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=314347
    Last-Update: 2013-09-14
    
    Patch-Name: user-group-modes.patch

commit 71e48274abb35fef99fdd27a22bc9b0d9b252941
Author: Peter Samuelson <peter@p12n.org>
Date:   Sun Feb 9 16:09:55 2014 +0000

    Reduce severity of "Killed by signal %d"
    
    This produces irritating messages when using ProxyCommand or other programs
    that use ssh under the covers (e.g. Subversion).  These messages are more
    normally printed by the calling program, such as the shell.
    
    According to the upstream bug, the right way to avoid this is to use the -q
    option, so we may drop this patch after further investigation into whether
    any software in Debian is still relying on it.
    
    Author: Colin Watson <cjwatson@debian.org>
    Bug: https://bugzilla.mindrot.org/show_bug.cgi?id=1118
    Bug-Debian: http://bugs.debian.org/313371
    Last-Update: 2013-09-14
    
    Patch-Name: quieter-signals.patch

commit 41bd4fc02ff23e9ac678f5408bdd9e1e8c50873c
Author: Natalie Amery <nmamery@chiark.greenend.org.uk>
Date:   Sun Feb 9 16:09:54 2014 +0000

    "LogLevel SILENT" compatibility
    
    "LogLevel SILENT" (-qq) was introduced in Debian openssh 1:3.0.1p1-1 to
    match the behaviour of non-free SSH, in which -q does not suppress fatal
    errors.  However, this was unintentionally broken in 1:4.6p1-2 and nobody
    complained, so we've dropped most of it.  The parts that remain are basic
    configuration file compatibility, and an adjustment to "Pseudo-terminal will
    not be allocated ..." which should be split out into a separate patch.
    
    Author: Matthew Vernon <matthew@debian.org>
    Author: Colin Watson <cjwatson@debian.org>
    Last-Update: 2013-09-14
    
    Patch-Name: syslog-level-silent.patch