ssh (1.2.26-1.2) frozen unstable; urgency=high

  * Non-maintainer upload
  * Consistently enforce maximum length of 100 for error messages so
    internationalization won't cause unexpected buffer overruns
  * Fix errormessage for AIX usercredentials

 -- Wichert Akkerman <wakkerma@debian.org>  Tue,  3 Nov 1998 15:46:19 +0100

ssh (1.2.26-1.1) frozen unstable; urgency=high

  * Non-maintainer upload
  * Added snprintf implementation, taken from sendmail, for systems
    that don't have it
  * Protect against absurdly long hostnames or weird getpw*() values
  * Fixed and added lengthchecking for a couple of sprintf() calls

 -- Wichert Akkerman <wakkerma@debian.org>  Mon,  2 Nov 1998 00:01:29 +0100

ssh (1.2.26-1) unstable; urgency=high

  * New upstream release
  * includes fix for recently reported insertion attack vulnerability
  * get rid of the attempt to remove the 1's that were added upstream,
    because the binaries are starting to depend on the `1' versions
    (i.e. scp now calls ssh1)

 -- Philip Hands <phil@hands.com>  Fri, 17 Jul 1998 11:23:37 +0100

ssh (1.2.25-1) unstable; urgency=low

  * Revert to my 1.2.23 patches, against the new upstream release, with
    the addition of the undocumented.7 link
    [ the 0.1 NMU version was made, starting with the 1.2.22-5 diffs,
      which is why I mostly ignored it]

 -- Philip Hands <phil@hands.com>  Thu, 18 Jun 1998 21:05:38 +0100

ssh (1.2.25-0.1) frozen unstable; urgency=high

  * The upstream version now uses binaries ending in '1', and
    main executables are just symlinks (for upwards compability
    with v2). Had to adjust debian/ssh-askpass.files to add the 
    version with '1' and debian/rules to make sure slogin's man
    page is symlinked correctly.
  * Made ssh-askpass.1.gz link to undocumented.7.gz
  * Non-maintainer release, new upstream version with security
    bugfixes where anyone could inject data into an ssh stream
    (#23452, #23456).
 
 -- Tommi Virtanen <tv@debian.org>  Sat, 13 Jun 1998 05:23:34 +0300

ssh (1.2.23-1) unstable; urgency=low

  * New upstream release
  * remove libsocks4 support, since it is causing problems at present
    (closes: #22470)
  * add warning about use of libwrap to postinst (closes: #22190)
  * add note to ssh-add manual about ssh-askpass (closes: #23060)
  * add code to debian/rules to move everything back into their proper
    places, rather than using the upstream approach of adding 1's to
    all the files and putting symlinks all over the place.

 -- Philip Hands <phil@hands.com>  Wed, 27 May 1998 08:42:49 +0100

ssh (1.2.22-5) frozen unstable; urgency=low

  * use debhelper
  * split ssh-askpass into a package of it's own (closes: #12561)
  * add --with-rsh option to configure (closes: #20067)
  * add README info about removing group write from home directories to allow
    RSA authentication.

 -- Philip Hands <phil@hands.com>  Tue,  7 Apr 1998 16:44:21 +0100

ssh (1.2.22-4.1) frozen unstable; urgency=high

  * Non-maintainer release.
  * Fixes a serious use-after-free bug (fixes heaps of bugs, I'll let Philip
    close them :)

 -- Herbert Xu <herbert@debian.org>  Tue, 28 Apr 1998 19:28:28 +1000

ssh (1.2.22-1bo4) frozen unstable; urgency=low

  * recompile for libc5

 -- Philip Hands <phil@hands.com>  Mon,  6 Apr 1998 10:21:45 +0000

ssh (1.2.22-4) frozen unstable; urgency=low

  * use mktemp in make-ssh-known-hosts (closes: #19809)
  * fix spelling in description (closes: #18963)
  * fix init.d script w.r.t. console message standard (closes: #16631)

 -- Philip Hands <phil@hands.com>  Tue, 17 Mar 1998 14:35:30 +0000

ssh (1.2.22-3) unstable; urgency=low

  * apply Juan Cespedes' patch for sparc (closes: Bug #18012)

 -- Philip Hands <phil@hands.com>  Mon,  9 Feb 1998 12:22:56 +0000

ssh (1.2.22-2) unstable; urgency=high

  * rebuilt for libc6

 -- Philip Hands <phil@hands.com>  Wed, 21 Jan 1998 08:57:38 +0000

ssh (1.2.22-1) stable; urgency=high

  * New upstream release
  * built for libc5 because it closes a security bug (closes #17333)

 -- Philip Hands <phil@hands.com>  Wed, 21 Jan 1998 08:13:32 +0000

ssh (1.2.21-3) unstable; urgency=low

  * recompile with gmp2

 -- Philip Hands <phil@hands.com>  Sun, 30 Nov 1997 14:48:32 +0000

ssh (1.2.21-2) unstable; urgency=high

  * libc6

 -- Philip Hands <phil@hands.com>  Tue,  4 Nov 1997 18:02:50 +0000

ssh (1.2.21-1) stable; urgency=high

  * New upstream release
  * built for libc5 because it closes a security bug (Bug #12763)
  * only ask about disabling rlogin etc. on install (Bug #12628)
  * add trailing space to postinst prompt
  * fix #!/usr/bin/perl/line of make-ssh-known-hosts (Bug #11279)
  * get rid of spurious man pages (Bug #11803)

 -- Philip Hands <phil@hands.com>  Tue,  4 Nov 1997 17:10:23 +0000

ssh (1.2.20-7) unstable; urgency=low

  * recompile with xlib6-dev installed, to get ssh-askpass included

 -- Philip Hands <phil@hands.com>  Mon,  1 Sep 1997 09:22:15 +0100

ssh (1.2.20-6) unstable; urgency=low

  * fixed `privileged port local forward' security hole
  * compile with libc6

 -- Philip Hands <phil@hands.com>  Fri, 29 Aug 1997 11:23:59 +0100

ssh (1.2.20-5) unstable; urgency=low

  * #11803: stop debstd from including spurious man pages 
  * #11130: fixed lack of read permission for /usr/bin/ssh

 -- Philip Hands <phil@hands.com>  Fri,  8 Aug 1997 11:17:37 +0100

ssh (1.2.20-4) unstable; urgency=low

  * enable libwrap support, so ssh now takes note of /etc/hosts.(allow|deny)

 -- Philip Hands <phil@hands.com>  Mon, 28 Jul 1997 13:15:03 +0100

ssh (1.2.20-3) unstable; urgency=low

  * fixed postinst to actually disable the services it was claiming to disable
  * added `exec' to list of services to disable  (Bug #9207)
  * added reload patch from Nils <nils@uni-math.gwdg.de> (Bug #10329)
  * 1.2.20-2 forgot to mention:
      make  Architecture: any (Bug #9385)

 -- Philip Hands <phil@hands.com>  Wed, 9 Jul 1997 09:54:25 +0100

ssh (1.2.20-2) unstable; urgency=low

  * New maintainer
  * use pututline() to alleviate libc5/6 problems
  * changes in Makefile.in to let gmp be linked dynamically

 -- Philip Hands <phil@hands.com>  Tue, 8 Jul 1997 23:38:14 +0100

ssh (1.2.20-1) unstable; urgency=low

  * changes in the Makefile.in to let zlib1 be linked dynamically 

 -- jan camenisch <camenisch@inf.ethz.ch>  Tue, 15 Apr 1997 22:11:49 +0100 

Local variables:
mode: debian-changelog
add-log-mailing-address: "phil@hands.com"
End:
