[ubuntu/maverick] openssh 1:5.5p1-4ubuntu1 (Accepted)

[Colin Watson]

openssh (1:5.5p1-4ubuntu1) maverick; urgency=low

  * Resynchronise with Debian.  Remaining changes:
    - Add support for registering ConsoleKit sessions on login.
    - Drop openssh-blacklist and openssh-blacklist-extra to Suggests; they
      take up a lot of CD space, and I suspect that rolling them out in
      security updates has covered most affected systems now.
    - Convert to Upstart.  The init script is still here for the benefit of
      people running sshd in chroots.
    - Install apport hook.

openssh (1:5.5p1-4) unstable; urgency=low

  [ Sebastian Andrzej Siewior ]
  * Add powerpcspe to architecture list for libselinux1-dev build-dependency
    (closes: #579843).

  [ Colin Watson ]
  * Allow ~/.ssh/authorized_keys and other secure files to be
    group-writable, provided that the group in question contains only the
    file's owner; this extends a patch previously applied to ~/.ssh/config
    (closes: #581919).
  * Check primary group memberships as well as supplementary group
    memberships, and only allow group-writability by groups with exactly one
    member, as zero-member groups are typically used by setgid binaries
    rather than being user-private groups (closes: #581697).

Date: Wed, 26 May 2010 19:59:05 +0100
Changed-By: Colin Watson <cjwatson at ubuntu.com>
Signed-By: Colin Watson <cjwatson at canonical.com>
https://launchpad.net/ubuntu/maverick/+source/openssh/1:5.5p1-4ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 26 May 2010 19:59:05 +0100
Source: openssh
Binary: openssh-client openssh-server ssh ssh-krb5 ssh-askpass-gnome openssh-client-udeb openssh-server-udeb
Architecture: source
Version: 1:5.5p1-4ubuntu1
Distribution: maverick
Urgency: low
Maintainer: Colin Watson <cjwatson at ubuntu.com>
Changed-By: Colin Watson <cjwatson at ubuntu.com>
Description: 
 openssh-client - secure shell (SSH) client, for secure access to remote machines
 openssh-client-udeb - secure shell client for the Debian installer (udeb)
 openssh-server - secure shell (SSH) server, for secure access from remote machines
 openssh-server-udeb - secure shell server for the Debian installer (udeb)
 ssh        - secure shell client and server (metapackage)
 ssh-askpass-gnome - interactive X program to prompt users for a passphrase for ssh-ad
 ssh-krb5   - secure shell client and server (transitional package)
Closes: 579843 581697 581919
Changes: 
 openssh (1:5.5p1-4ubuntu1) maverick; urgency=low
 .
   * Resynchronise with Debian.  Remaining changes:
     - Add support for registering ConsoleKit sessions on login.
     - Drop openssh-blacklist and openssh-blacklist-extra to Suggests; they
       take up a lot of CD space, and I suspect that rolling them out in
       security updates has covered most affected systems now.
     - Convert to Upstart.  The init script is still here for the benefit of
       people running sshd in chroots.
     - Install apport hook.
 .
 openssh (1:5.5p1-4) unstable; urgency=low
 .
   [ Sebastian Andrzej Siewior ]
   * Add powerpcspe to architecture list for libselinux1-dev build-dependency
     (closes: #579843).
 .
   [ Colin Watson ]
   * Allow ~/.ssh/authorized_keys and other secure files to be
     group-writable, provided that the group in question contains only the
     file's owner; this extends a patch previously applied to ~/.ssh/config
     (closes: #581919).
   * Check primary group memberships as well as supplementary group
     memberships, and only allow group-writability by groups with exactly one
     member, as zero-member groups are typically used by setgid binaries
     rather than being user-private groups (closes: #581697).
Checksums-Sha1: 
 eb253eb6dfec8aa21f74209ea661bfc74438d3bb 2457 openssh_5.5p1-4ubuntu1.dsc
 eea72617d60418317bc03ccb139330bb65f6b3ab 241805 openssh_5.5p1-4ubuntu1.debian.tar.gz
Checksums-Sha256: 
 ef2051c4c35ff84a44697ef972f050c7a5dc7b64c80046786da4f4f7324b9a33 2457 openssh_5.5p1-4ubuntu1.dsc
 6c9257fa6b5c0bf8b5eaefc61c9dc4a7fbbecd7adcfa405d8be8f581d03a740d 241805 openssh_5.5p1-4ubuntu1.debian.tar.gz
Files: 
 d81643d05159e7ac6bdc9adaf5013d14 2457 net standard openssh_5.5p1-4ubuntu1.dsc
 a08886c3d7cc2f85285c87997d45466b 241805 net standard openssh_5.5p1-4ubuntu1.debian.tar.gz
Original-Maintainer: Debian OpenSSH Maintainers <debian-ssh at lists.debian.org>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Colin Watson <cjwatson at debian.org> -- Debian developer
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=psmI
-----END PGP SIGNATURE-----