Chen Qi ac9725acc5 openssh: fix for CVE-2014-2653 ...

The verify_host_key function in sshconnect.c in the client in OpenSSH 6.6 and
earlier allows remote servers to trigger the skipping of SSHFP DNS RR checking
by presenting an unacceptable HostCertificate.

(From OE-Core rev: 7b2fff61b3d1c0566429793ee348fa8978ef0cba)

(From OE-Core rev: 6a8a9903de24cc7e1f27b1f7202bd4157719327c)

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

Conflicts:
	meta/recipes-connectivity/openssh/openssh_6.5p1.bb

2014-05-29 13:43:28 +01:00

..

init

openssh: Update init file to add ED25519 Key generation

2014-03-19 14:19:07 +00:00

nostrip.patch

openssh: upgrade to 6.5p1

2014-03-02 17:25:27 +00:00

openssh-CVE-2011-4327.patch

openssh: upgrade to 6.5p1

2014-03-02 17:25:27 +00:00

openssh-CVE-2014-2532.patch

openssh: fix for CVE-2014-2532

2014-05-29 13:43:28 +01:00

openssh-CVE-2014-2653.patch

openssh: fix for CVE-2014-2653

2014-05-29 13:43:28 +01:00

ssh_config

openssh: upgrade to 6.5p1

2014-03-02 17:25:27 +00:00

sshd

openssh: upgrade to 6.5p1

2014-03-02 17:25:27 +00:00

sshd_config

openssh: upgrade to 6.5p1

2014-03-02 17:25:27 +00:00

sshd.socket

openssh: upgrade to 6.5p1

2014-03-02 17:25:27 +00:00

sshd@.service

openssh: upgrade to 6.5p1

2014-03-02 17:25:27 +00:00

sshdgenkeys.service

openssh: upgrade to 6.5p1

2014-03-02 17:25:27 +00:00

volatiles.99_sshd

openssh: add /var/log/lastlog to volatile list

2014-05-29 13:42:22 +01:00