Changelog for openssh-askpass-gnome-debuginfo-6.2p2-63.2.i586.rpm :
Sat Aug 3 14:00:00 2013 crrodriguezAATTopensuse.org
- Update for 6.2p2

Tue Nov 13 13:00:00 2012 meissnerAATTsuse.com
- Updated to 6.1p1, a bugfix release
Features:

* sshd(8): This release turns on pre-auth sandboxing sshd by default for
new installs, by setting UsePrivilegeSeparation=sandbox in sshd_config.

* ssh-keygen(1): Add options to specify starting line number and number of
lines to process when screening moduli candidates, allowing processing
of different parts of a candidate moduli file in parallel

* sshd(8): The Match directive now supports matching on the local (listen)
address and port upon which the incoming connection was received via
LocalAddress and LocalPort clauses.

* sshd(8): Extend sshd_config Match directive to allow setting AcceptEnv
and {Allow,Deny}{Users,Groups}

* Add support for RFC6594 SSHFP DNS records for ECDSA key types. bz#1978

* ssh-keygen(1): Allow conversion of RSA1 keys to public PEM and PKCS8

* sshd(8): Allow the sshd_config PermitOpen directive to accept \"none\" as
an argument to refuse all port-forwarding requests.

* sshd(8): Support \"none\" as an argument for AuthorizedPrincipalsFile

* ssh-keyscan(1): Look for ECDSA keys by default. bz#1971

* sshd(8): Add \"VersionAddendum\" to sshd_config to allow server operators
to append some arbitrary text to the server SSH protocol banner.
Bugfixes:

* ssh(1)/sshd(8): Don\'t spin in accept() in situations of file
descriptor exhaustion. Instead back off for a while.

* ssh(1)/sshd(8): Remove hmac-sha2-256-96 and hmac-sha2-512-96 MACs as
they were removed from the specification. bz#2023,

* sshd(8): Handle long comments in config files better. bz#2025

* ssh(1): Delay setting tty_flag so RequestTTY options are correctly
picked up. bz#1995

* sshd(8): Fix handling of /etc/nologin incorrectly being applied to root
on platforms that use login_cap.
Portable OpenSSH:

* sshd(8): Allow sshd pre-auth sandboxing to fall-back to the rlimit
sandbox from the Linux SECCOMP filter sandbox when the latter is
not available in the kernel.

* ssh(1): Fix NULL dereference when built with LDNS and using DNSSEC to
retrieve a CNAME SSHFP record.

* Fix cross-compilation problems related to pkg-config. bz#1996

Wed Jun 27 14:00:00 2012 cooloAATTsuse.com
- the gnome askpass does not require the x11 askpass - especially not
in the version of openssh (it\'s at 1.X)

Tue May 29 14:00:00 2012 meissnerAATTsuse.com
- use correct tarball url
- update to 6.0p1.

Wed Mar 28 14:00:00 2012 ajAATTsuse.de
- Add build require on autoconf and automake.

Wed Dec 21 13:00:00 2011 cooloAATTsuse.com
- remove call to suse_update_config (very old work around)

Wed Oct 19 14:00:00 2011 pcernyAATTsuse.com
- Update to 5.9p1

Fri Feb 4 13:00:00 2011 lchiquittoAATTnovell.com
- Update to 5.8p1

Mon Jan 24 13:00:00 2011 lchiquittoAATTnovell.com
- Update to 5.7p1

Wed Jan 12 13:00:00 2011 sbrabecAATTsuse.cz
- Removed relics of no more implemented opensc support.

Tue Aug 24 14:00:00 2010 anickaAATTsuse.cz
- update to 5.6p1

Fri Mar 26 13:00:00 2010 anickaAATTsuse.cz
- update to 5.4p1
- remove -pam-fix4.diff (in upstream now)

Mon Feb 23 13:00:00 2009 anickaAATTsuse.cz
- update to 5.2p1

Wed Apr 9 14:00:00 2008 anickaAATTsuse.cz
- update to 5.0p1

Wed Apr 2 14:00:00 2008 anickaAATTsuse.cz
- update to 4.9p1

Wed Dec 5 13:00:00 2007 anickaAATTsuse.cz
- - update to 4.7p1

* Add \"-K\" flag for ssh to set GSSAPIAuthentication=yes and
GSSAPIDelegateCredentials=yes. This is symmetric with -k

* make scp try to skip FIFOs rather than blocking when nothing is
listening.

* increase default channel windows

* put the MAC list into a display

* many bugfixes

Tue Dec 12 13:00:00 2006 anickaAATTsuse.cz
- update to 4.5p1

* Use privsep_pw if we have it, but only require it if we
absolutely need it.

* Correctly check for bad signatures in the monitor, otherwise
the monitor and the unpriv process can get out of sync.

* Clear errno before calling the strtol functions.

* exit instead of doing a blocking tcp send if we detect
a client/server timeout, since the tcp sendqueue might
be already full (of alive requests)

* include signal.h, errno.h, sys/in.h

* some more bugfixes

Wed Oct 4 14:00:00 2006 postadalAATTsuse.cz
- updated to version 4.4p1 [#208662]

* fixed pre-authentication DoS, that would cause sshd(8) to spin
until the login grace time expired

* fixed unsafe signal hander, which was vulnerable to a race condition
that could be exploited to perform a pre-authentication DoS

* fixed a GSSAPI authentication abort that could be used to determine
the validity of usernames on some platforms

* implemented conditional configuration in sshd_config(5) using the
\"Match\" directive

* added support for Diffie-Hellman group exchange key agreement with a
final hash of SHA256

* added a \"ForceCommand\", \"PermitOpen\" directive to sshd_config(5)

* added optional logging of transactions to sftp-server(8)

* ssh(1) will now record port numbers for hosts stored in
~/.ssh/authorized_keys when a non-standard port has been requested

* added an \"ExitOnForwardFailure\" option to cause ssh(1) to exit (with
a non-zero exit code) when requested port forwardings could not be
established

* extended sshd_config(5) \"SubSystem\" declarations to allow the
specification of command-line arguments
- removed obsoleted patches: autoconf-fix.patch

Tue Jul 25 14:00:00 2006 schwabAATTsuse.de
- Fix syntax error in configure script.