59d2eb59ec
Previous versions have a security issue. Please update! Thanks to gendalia@ for testing. Changes since version 3.2.2: 2003-05-09 Sami J. Lehtinen <sjl@ssh.com> * ssh-3.2.5. * Fixed a critical security bug with RSA signature verification. Mitigating factors: DSA is used by default (not vulnerable). Also, the attack requires that attacker has the public key and the attacker needs to precompute the signature data so, that it looks like a valid PKCS#1 signature. This is a non-trivial task to perform without the private key. Nonetheless, all users should update their servers and clients as soon as convenient. Workarounds are to not use RSA keys as host keys (though connecting to existing hosts with RSA hostkeys poses a serious risk with a vulnerable client), and disabling publickey authentication. Update your clients and servers. 2003-04-22 Sami J. Lehtinen <sjl@ssh.com> * ssh-3.2.4. * sshd2: Binary (generated by us) is tagged as a "supported binary" for SecurID. (no actual code changes) * Previous: ssh-3.2.3.1. 2003-02-06 Sami J. Lehtinen <sjl@ssh.com> * sftp2 (etc): Fixed a bug with readline jamming when pressing backspace (etc) on AIX and some other platforms. 2003-01-12 Sami J. Lehtinen <sjl@ssh.com> * ssh-3.2.3. 2003-01-03 Sami J. Lehtinen <sjl@ssh.com> * scp2: Removed broken special handling for SIGHUP, so that "nohup" can again work. * ssh2: Check whether we should ignore SIGQUIT, SIGINT, and do so, if necessary. Thanks for J. Schilling for pointing this one out. * ssh-add2: Make sure fgets() from pipe to ssh-askpass2 recovers from if interrupted by signal, i.e. SIGCHLD. * ssh2 (lib/sshsession/sshtty.c): As entry above, but for tcsetattr(). * During "make install", use default size of key instead of hardcoded 1024 when generating hostkey. 2002-12-18 Sami J. Lehtinen <sjl@ssh.com> * scp2,sftp2: Print progress output to stdout, to make it distinguishable from errors in cron jobs etc. 2002-12-17 Sami J. Lehtinen <sjl@ssh.com> * apps/ssh/sshchsession.c: Fixed a bug which caused sshd2 child server to jam occasionally after logging an event, if nsswitch had been configured to use LDAP. 2002-12-13 Sami J. Lehtinen <sjl@ssh.com> * sshd2: Previous (by Tomi Mickelsson): Fixed a bug where specifying a local forwarding endpoint as an IP-address which was unresolvable would result in a crash. 2002-12-12 Sami J. Lehtinen <sjl@ssh.com> * scp2: Fixed a bug/missing feature from scp2. It now reports information also when run when there is no tty. Also implemented --statistics=[no,yes,simple], where "yes" is old-style, "no" is analogous to "-Q" command-line option, and "simple" is the way the statistics are printed when there is no tty (no intermittent reporting, file size, transfer time and full file name are printed after the transfer for the specific file is finished). 2002-12-11 Sami J. Lehtinen <sjl@ssh.com> * ssh-keygen2: respect "-P" and "-p" options when converting ssh1-keys. 2002-12-10 Sami J. Lehtinen <sjl@ssh.com> * lib/sshutil/sshcore/sshdebug.c: Fixed a compilation problem manifested on older AIX and debugging enabled (as is default). * scp2: You can now specify the newline convention when using the "-a" option. See manual page scp2(1). 2002-11-08 Sami J. Lehtinen <sjl@ssh.com> * Removed ssh-pubkeymgr and ssh-chrootmgr from the distribution (they didn't work too well). * apps/ssh/lib/sshproto/trcommon.c: Fixed a crash if hostkey algorithms or kex-methods couldn't be negotiated. 2002-11-05 Sami J. Lehtinen <sjl@ssh.com> * lib/sshapputil/sshuserfile.c: Changed to use lib/sshsession/sigchld.c, instead of using wait() directly. This fixes the bug where the number of connections would slowly rise to the maximum when using MaxConnections and tcp-wrappers (it was a race-condition). * lib/sshsession/sigchld.c: Sigchld now keeps a list of recently exited children. This fixes a race condition, where the child process could exit before the mother process had registered a handler for it. * lib/sshsession: Fixed NetBSD 1.6 compilation. Also, NetBSD 1.6 supports openpty style ptys, so fixed check to actually detect them on NetBSD. Don't use utmpx on NetBSD, as it doesn't seem to work (at least not in the way we use it). * lib/sshsession/sshunixuser.c: Make sure we have room for the NULL pointer in the groups array. * ssh2 (ssh1-emulation): Fixed a bug, which in some cases caused an assertion failure later. 2002-10-29 Sami J. Lehtinen <sjl@ssh.com> * configure: Added /usr/X11R6/bin and /usr/X11/bin to search PATH for xauth to ease installation on pristine systems. 2002-10-22 Sami J. Lehtinen <sjl@ssh.com> * lib/sshutil/sshnet/sshtcp.c: (by Tomi Ollila) Fixed a bug with SOCKS handling. 2002-10-01 Sami J. Lehtinen <sjl@ssh.com> * lib/sshutil/sshpacketstream/sshpacketwrapper.c: (by Tomi Kause) Fixed a latent (in ssh2) bug, when writing to the stream from the received_cb. * lib/sshutil/sshnet/sshsocks.c: (by Tomi Ollila) Decode ipv6-mapped-ipv4-addresses when doing SOCKS4, as SOCKS4 only supports plain ipv4-addresses. * scp2: Implemented --overwrite, which controls whether to overwrite the destination file(s). Default is "yes", i.e. to overwrite. * scp2: Implemented interactive mode, i.e. you can make scp2 prompt you whether to overwrite an existing destination file. Works by giving --interactive (-I) on the command-line. 2002-08-15 Sami J. Lehtinen <sjl@ssh.com> * sshd2: Fixed a bug with originator-pat with ForwardACLs. 2002-08-02 Sami J. Lehtinen <sjl@ssh.com> * scp2, sftp2: Fixed a bug, which caused file transfer to stall, if trying to transfer a zero sized file with ascii transfer (newline mangling). 2002-07-21 Sami J. Lehtinen <sjl@ssh.com> * sftp2: Added option "S" and "r" to "ls" (for sorting by size and reversing the sort order, respectively). * sftp2: "ls" works much better now. Tab completion understand directories (appends a '/', for easier directory traversal). * sftp2, scp2: Extensive rewrite of SshFileCopy, and as a consequence, of both scp2 and sftp2 core functionality. 2002-06-13 Sami J. Lehtinen <sjl@ssh.com> * ssh2: Fixed a bug with one-shot forwarding.
54 lines
2 KiB
Text
54 lines
2 KiB
Text
$NetBSD: patch-af,v 1.4 2003/08/12 19:08:58 seb Exp $
|
|
|
|
--- lib/sshsession/wtmp.c.orig 2003-06-30 12:22:13.000000000 +0000
|
|
+++ lib/sshsession/wtmp.c
|
|
@@ -34,6 +34,13 @@ In particular, this updates:
|
|
# include <sys/mkdev.h> /* for minor() */
|
|
# endif /* HAVE_SYS_MKDEV_H */
|
|
# endif /* !SCO */
|
|
+# if !defined(WTMPX_FILE)
|
|
+# if defined(_WTMPX_FILE) /* Solaris without _XPG4_2 or with __EXTENSIONS__ */
|
|
+# define WTMPX_FILE _WTMPX_FILE
|
|
+# elif defined(_PATH_WTMPX) /* NetBSD at least */
|
|
+# define WTMPX_FILE _PATH_WTMPX
|
|
+# endif
|
|
+# endif
|
|
#endif /* HAVE_UTMPX_H */
|
|
#ifdef HAVE_USERSEC_H
|
|
# include <usersec.h>
|
|
@@ -62,9 +69,15 @@ void login(const struct utmp *);
|
|
#ifndef HAVE_PROTO_LOGOUT
|
|
int logout(const char *);
|
|
#endif /* !HAVE_PROTO_LOGOUT */
|
|
+#ifndef HAVE_PROTO_LOGOUTX
|
|
+int logoutx(const char *, int, int);
|
|
+#endif /* !HAVE_PROTO_LOGOUTX */
|
|
#ifndef HAVE_PROTO_LOGWTMP
|
|
void logwtmp(const char *, const char *, const char *);
|
|
#endif /* !HAVE_PROTO_LOGWTMP */
|
|
+#ifndef HAVE_PROTO_LOGWTMPX
|
|
+void logwtmpx(const char *, const char *, const char *, int, int);
|
|
+#endif /* !HAVE_PROTO_LOGWTMPX */
|
|
|
|
/* Returns the time when the user last logged in, and name of the host
|
|
from which the user logged in from. Returns 0 if the information
|
|
@@ -217,7 +230,7 @@ void ssh_user_record_login(SshUser user,
|
|
# endif /* LASTLOG_IS_DIR */
|
|
#endif /* HAVE_LASTLOG_H || HAVE_LASTLOG */
|
|
|
|
-#if defined(HAVE_UTMP_H) && !defined(HAVE_UTMPX_H)
|
|
+#if defined(HAVE_UTMP_H) && (!defined(HAVE_UTMPX_H) || defined(SSH_UTMP_UTMPX))
|
|
struct utmp u;
|
|
const char *utmp, *wtmp;
|
|
|
|
@@ -587,6 +600,10 @@ void ssh_user_record_logout(pid_t pid, c
|
|
const char *line = ttyname + 5; /* /dev/ttyq8 -> ttyq8 */
|
|
if (logout((char *)line))
|
|
logwtmp((char *)line, "", "");
|
|
+# ifdef HAVE_LIBUTIL_LOGINX
|
|
+ if (logoutx((char *)line, 0, DEAD_PROCESS))
|
|
+ logwtmpx((char *)line, "", "", 0, DEAD_PROCESS);
|
|
+# endif
|
|
#else /* HAVE_LIBUTIL_LOGIN */
|
|
ssh_user_record_login(NULL, pid, ttyname, "", "");
|
|
#endif /* HAVE_LIBUTIL_LOGIN */
|