subject:"commit dropbear for openSUSE\:Factory"

commit dropbear for openSUSE:Factory

2016-03-26 Thread h_root

Hello community,

here is the log from the commit of package dropbear for openSUSE:Factory 
checked in at 2016-03-26 15:24:58

Comparing /work/SRC/openSUSE:Factory/dropbear (Old)
 and  /work/SRC/openSUSE:Factory/.dropbear.new (New)


Package is "dropbear"

Changes:

--- /work/SRC/openSUSE:Factory/dropbear/dropbear.changes2016-03-16 
10:36:20.0 +0100
+++ /work/SRC/openSUSE:Factory/.dropbear.new/dropbear.changes   2016-03-26 
15:25:01.0 +0100
@@ -1,0 +2,20 @@
+Mon Mar 21 08:38:43 UTC 2016 - thard...@suse.com
+
+- updated to upstream version 2016.73
+  * Support syslog in dbclient, option -o usesyslog=yes. Patch from Konstantin 
Tokarev
+  * Kill a proxycommand when dbclient exits, patch from Konstantin Tokarev
+  * Option to exit when a TCP forward fails, patch from Konstantin Tokarev
+  * New "-o" option parsing from Konstantin Tokarev. This allows handling some 
extra options
+in the style of OpenSSH, though implementing all OpenSSH options is not 
planned.
+  * Fix crash when fallback initshells() is used, reported by Michael Nowak 
and Mike Tzou
+  * Allow specifying commands eg "dropbearmulti dbclient ..." instead of 
symlinks
+  * Various cleanups for issues found by a lint tool, patch from Francois 
Perrad
+  * Fix tab indent consistency, patch from Francois Perrad
+  * Fix issues found by cppcheck, reported by Mike Tzou
+  * Use system memset_s() or explicit_bzero() if available to clear memory. 
Also make
+libtomcrypt/libtommath routines use that (or Dropbear's own m_burn()).
+  * Prevent scp failing when the local user doesn't exist. Based on patch from 
Michael Witten.
+  * Improved Travis CI test running, thanks to Mike Tzou
+  * Improve some code that was flagged by Coverity and Fortify Static Code 
Analyzer
+
+---

Old:

  dropbear-2016.72.tar.bz2
  dropbear-2016.72.tar.bz2.asc

New:

  dropbear-2016.73.tar.bz2
  dropbear-2016.73.tar.bz2.asc



Other differences:
--
++ dropbear.spec ++
--- /var/tmp/diff_new_pack.2TsGu4/_old  2016-03-26 15:25:02.0 +0100
+++ /var/tmp/diff_new_pack.2TsGu4/_new  2016-03-26 15:25:02.0 +0100
@@ -21,7 +21,7 @@
 %endif
 
 Name:   dropbear
-Version:2016.72
+Version:2016.73
 Release:0
 Summary:A relatively small SSH 2 server and client
 License:MIT

++ dropbear-2016.72.tar.bz2 -> dropbear-2016.73.tar.bz2 ++
 3046 lines of diff (skipped)

commit dropbear for openSUSE:Factory

2016-03-16 Thread h_root

Hello community,

here is the log from the commit of package dropbear for openSUSE:Factory 
checked in at 2016-03-16 10:36:05

Comparing /work/SRC/openSUSE:Factory/dropbear (Old)
 and  /work/SRC/openSUSE:Factory/.dropbear.new (New)


Package is "dropbear"

Changes:

--- /work/SRC/openSUSE:Factory/dropbear/dropbear.changes2015-12-06 
07:44:04.0 +0100
+++ /work/SRC/openSUSE:Factory/.dropbear.new/dropbear.changes   2016-03-16 
10:36:20.0 +0100
@@ -1,0 +2,8 @@
+Fri Mar 11 16:00:23 UTC 2016 - thard...@suse.com
+
+- updated to upstream version 2016.72
+  * Validate X11 forwarding input. Could allow bypass of authorized_keys 
command= restrictions,
+found by github.com/tintinweb. Thanks for Damien Miller for a patch.
+- used as bug fix release for bnc#970633 - VUL-0: CVE-2016-3116
+
+---

Old:

  dropbear-2015.71.tar.bz2
  dropbear-2015.71.tar.bz2.asc

New:

  dropbear-2016.72.tar.bz2
  dropbear-2016.72.tar.bz2.asc



Other differences:
--
++ dropbear.spec ++
--- /var/tmp/diff_new_pack.1CF1SH/_old  2016-03-16 10:36:21.0 +0100
+++ /var/tmp/diff_new_pack.1CF1SH/_new  2016-03-16 10:36:21.0 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package dropbear
 #
-# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -21,7 +21,7 @@
 %endif
 
 Name:   dropbear
-Version:2015.71
+Version:2016.72
 Release:0
 Summary:A relatively small SSH 2 server and client
 License:MIT

++ dropbear-2015.71.tar.bz2 -> dropbear-2016.72.tar.bz2 ++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/dropbear-2015.71/.hg_archival.txt 
new/dropbear-2016.72/.hg_archival.txt
--- old/dropbear-2015.71/.hg_archival.txt   2015-12-03 14:23:59.0 
+0100
+++ new/dropbear-2016.72/.hg_archival.txt   2016-03-09 15:54:53.0 
+0100
@@ -1,6 +1,6 @@
 repo: d7da3b1e15401eb234ec866d5eac992fc4cd5878
-node: 9a944a243f08be6b22d32f166a0690eb4872462b
+node: 78b12b6549be08b0bea3da329b2578060a76ca31
 branch: default
-latesttag: DROPBEAR_2015.70
-latesttagdistance: 10
-changessincelatesttag: 11
+latesttag: DROPBEAR_2015.71
+latesttagdistance: 3
+changessincelatesttag: 3
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/dropbear-2015.71/CHANGES new/dropbear-2016.72/CHANGES
--- old/dropbear-2015.71/CHANGES2015-12-03 14:23:59.0 +0100
+++ new/dropbear-2016.72/CHANGES2016-03-09 15:54:53.0 +0100
@@ -1,3 +1,8 @@
+2016.72 - 9 March 2016
+
+- Validate X11 forwarding input. Could allow bypass of authorized_keys 
command= restrictions,
+  found by github.com/tintinweb. Thanks for Damien Miller for a patch.
+
 2015.71 - 3 December 2015
 
 - Fix "bad buf_incrpos" when data is transferred, broke in 2015.69
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/dropbear-2015.71/debian/changelog 
new/dropbear-2016.72/debian/changelog
--- old/dropbear-2015.71/debian/changelog   2015-12-03 14:23:59.0 
+0100
+++ new/dropbear-2016.72/debian/changelog   2016-03-09 15:54:53.0 
+0100
@@ -1,8 +1,8 @@
-dropbear (2015.71-0.1) unstable; urgency=low
+dropbear (2016.72-0.1) unstable; urgency=low
 
   * New upstream release.
 
- -- Matt Johnston   Thu, 3 Dec 2015 22:52:58 +0800
+ -- Matt Johnston   Wed, 10 Mar 2016 22:52:58 +0800
 
 dropbear (2015.70-0.1) unstable; urgency=low
 
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/dropbear-2015.71/svr-x11fwd.c 
new/dropbear-2016.72/svr-x11fwd.c
--- old/dropbear-2015.71/svr-x11fwd.c   2015-12-03 14:24:00.0 +0100
+++ new/dropbear-2016.72/svr-x11fwd.c   2016-03-09 15:54:54.0 +0100
@@ -42,11 +42,29 @@
 static int bindport(int fd);
 static int send_msg_channel_open_x11(int fd, struct sockaddr_in* addr);
 
+/* Check untrusted xauth strings for metacharacters */
+/* Returns DROPBEAR_SUCCESS/DROPBEAR_FAILURE */
+static int
+xauth_valid_string(const char *s)
+{
+   size_t i;
+
+   for (i = 0; s[i] != '\0'; i++) {
+   if (!isalnum(s[i]) &&
+   s[i] != '.' && s[i] != ':' && s[i] != '/' &&
+   s[i] != '-' && s[i] != '_') {
+   return DROPBEAR_FAILURE;
+   }
+   }
+   return DROPBEAR_SUCCESS;
+}
+
+
 /* called as a request for a session channel, sets up

commit dropbear for openSUSE:Factory

2015-12-05 Thread h_root

Hello community,

here is the log from the commit of package dropbear for openSUSE:Factory 
checked in at 2015-12-06 07:44:02

Comparing /work/SRC/openSUSE:Factory/dropbear (Old)
 and  /work/SRC/openSUSE:Factory/.dropbear.new (New)


Package is "dropbear"

Changes:

--- /work/SRC/openSUSE:Factory/dropbear/dropbear.changes2015-08-21 
07:42:16.0 +0200
+++ /work/SRC/openSUSE:Factory/.dropbear.new/dropbear.changes   2015-12-06 
07:44:04.0 +0100
@@ -1,0 +2,29 @@
+Fri Dec  4 15:39:10 UTC 2015 - thard...@suse.com
+
+- updated to upstream version 2015.71
+  * Fix "bad buf_incrpos" when data is transferred, broke in 2015.69
+  * Fix crash on exit when -p address:port is used, broke in 2015.68
+  * Fix building with only ENABLE_CLI_REMOTETCPFWD given, patch from 
Konstantin Tokarev
+  * Fix bad configure script test which didn't work with dash shell, patch 
from Juergen Daubert,
+broke in 2015.70
+  * Fix server race condition that could cause sessions to hang on exit,
+https://github.com/robotframework/SSHLibrary/issues/128
+
+---
+Thu Nov 26 15:40:52 UTC 2015 - thard...@suse.com
+
+- updated to upstream version 2015.70
+  * Fix server password authentication on Linux, broke in 2015.69
+  * Fix crash when forwarded TCP connections fail to connect (bug introduced 
in 2015.68)
+  * Avoid hang on session close when multiple sessions are started, affects Qt 
Creator
+Patch from Andrzej Szombierski
+  * Reduce per-channel memory consumption in common case, increase default
+channel limit from 100 to 1000 which should improve SOCKS forwarding for 
modern
+webpages
+  * Handle multiple command line arguments in a single flag, thanks to Guilhem 
Moulin
+  * Manpage improvements from Guilhem Moulin
+  * Build fixes for Android from Mike Frysinger
+  * Don't display the MOTD when an explicit command is run from Guilhem Moulin
+  * Check curve25519 shared secret isn't zero
+
+---

Old:

  dropbear-2015.68.tar.bz2
  dropbear-2015.68.tar.bz2.asc

New:

  dropbear-2015.71.tar.bz2
  dropbear-2015.71.tar.bz2.asc



Other differences:
--
++ dropbear.spec ++
--- /var/tmp/diff_new_pack.nFWLTF/_old  2015-12-06 07:44:05.0 +0100
+++ /var/tmp/diff_new_pack.nFWLTF/_new  2015-12-06 07:44:05.0 +0100
@@ -21,7 +21,7 @@
 %endif
 
 Name:   dropbear
-Version:2015.68
+Version:2015.71
 Release:0
 Summary:A relatively small SSH 2 server and client
 License:MIT

++ dropbear-2015.68.tar.bz2 -> dropbear-2015.71.tar.bz2 ++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/dropbear-2015.68/.hg_archival.txt 
new/dropbear-2015.71/.hg_archival.txt
--- old/dropbear-2015.68/.hg_archival.txt   2015-08-08 14:35:33.0 
+0200
+++ new/dropbear-2015.71/.hg_archival.txt   2015-12-03 14:23:59.0 
+0100
@@ -1,6 +1,6 @@
 repo: d7da3b1e15401eb234ec866d5eac992fc4cd5878
-node: 809feaa9408f036734129c77f2b3c7e779d4f099
+node: 9a944a243f08be6b22d32f166a0690eb4872462b
 branch: default
-latesttag: DROPBEAR_2015.67
-latesttagdistance: 105
-changessincelatesttag: 125
+latesttag: DROPBEAR_2015.70
+latesttagdistance: 10
+changessincelatesttag: 11
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/dropbear-2015.68/.hgsigs new/dropbear-2015.71/.hgsigs
--- old/dropbear-2015.68/.hgsigs2015-08-08 14:35:33.0 +0200
+++ new/dropbear-2015.71/.hgsigs2015-12-03 14:23:59.0 +0100
@@ -14,3 +14,7 @@
 caac692b366c153cea0e9cd59aa2d79a7d843d4e 0 
iEYEABECAAYFAlPk1mcACgkQjPn4sExkf7wLpgCeOqMYqpkf4lYUuyrn9VYThNpc7PkAn3JOSNgIqkKUcmSy6FstrI8jwJzq
 2d421bc0545d1be6d59a4ebfe61606d94b124b0c 0 
iEYEABECAAYFAlRJDCQACgkQjPn4sExkf7xUYACcCwVJkYWXJn5x/D5A+qMupy778lEAn0rg1oNiq96YU/4jOPsS5IMItihu
 1d2d81b1b7c1b100e9c369e40b9fa5b2d491eea9 0 
iEYEABECAAYFAlTKOKUACgkQjPn4sExkf7xWMACfYFozyHiRk5GaocTa5z6Ws1uyB4kAoLubxoxcnM3E7AA9mHAzc3OB5M0Y
+a687f835236c7025b5cb2968fe9c4ebc4a49f0ea 0

commit dropbear for openSUSE:Factory

2015-08-20 Thread h_root

Hello community,

here is the log from the commit of package dropbear for openSUSE:Factory 
checked in at 2015-08-21 07:41:43

Comparing /work/SRC/openSUSE:Factory/dropbear (Old)
 and  /work/SRC/openSUSE:Factory/.dropbear.new (New)


Package is dropbear

Changes:

--- /work/SRC/openSUSE:Factory/dropbear/dropbear.changes2015-02-06 
10:23:30.0 +0100
+++ /work/SRC/openSUSE:Factory/.dropbear.new/dropbear.changes   2015-08-21 
07:42:16.0 +0200
@@ -1,0 +2,36 @@
+Mon Aug 10 08:13:56 UTC 2015 - thard...@suse.com
+
+- updated to upstream version 2015.68
+  * Reduce local data copying for improved efficiency. Measured 30%
+increase in throughput for connections to localhost
+  * Forwarded TCP ports connect asynchronously and try all available addresses
+(IPv4, IPv6, round robin DNS)
+  * Fix all compile warnings, many patches from Gaël Portay
+Note that configure with -Werror may not be successful on some platforms 
(OS X)
+and some configuration options may still result in unused variable
+warnings.
+  * Use TCP Fast Open on Linux if available. Saves a round trip at connection
+to hosts that have previously been connected.
+Needs a recent Linux kernel and possibly sysctl -w 
net.ipv4.tcp_fastopen=3
+Client side is disabled by default pending further compatibility testing
+with networks and systems.
+  * Increase maximum command length to 9000 bytes
+  * Free memory before exiting, patch from Thorsten Horstmann. Useful for
+Dropbear ports to embedded systems and for checking memory leaks
+with valgrind. Only partially implemented for dbclient.
+This is disabled by default, enable with DROPBEAR_CLEANUP in sysoptions.h
+  * DROPBEAR_DEFAULT_CLI_AUTHKEY setting now always prepends home directory 
unless
+there is a leading slash (~ isn't treated specially)
+  * Fix small ECC memory leaks
+  * Tighten validation of Diffie-Hellman parameters, from Florent Daigniere of
+Matta Consulting. Odds of bad values are around 2**-512 -- improbable.
+  * Twofish-ctr cipher is supported though disabled by default
+  * Fix pre-authentication timeout when waiting for client SSH-2.0 banner, 
thanks
+to CL Ouyang
+  * Fix null pointer crash with restrictions in authorized_keys without a 
command, patch from
+Guilhem Moulin
+  * Ensure authentication timeout is handled while reading the initial banner,
+thanks to CL Ouyang for finding it.
+  * Fix null pointer crash when handling bad ECC keys. Found by afl-fuzz
+
+---

Old:

  dropbear-2015.67.tar.bz2
  dropbear-2015.67.tar.bz2.asc
  dropbear.keyring

New:

  dropbear-2015.68.tar.bz2
  dropbear-2015.68.tar.bz2.asc



Other differences:
--
++ dropbear.spec ++
--- /var/tmp/diff_new_pack.VkX9Kr/_old  2015-08-21 07:42:17.0 +0200
+++ /var/tmp/diff_new_pack.VkX9Kr/_new  2015-08-21 07:42:17.0 +0200
@@ -1,7 +1,7 @@
 #
 # spec file for package dropbear
 #
-# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -21,15 +21,14 @@
 %endif
 
 Name:   dropbear
-Version:2015.67
+Version:2015.68
 Release:0
 Summary:A relatively small SSH 2 server and client
 License:MIT
 Group:  Productivity/Networking/SSH
 Url:http://matt.ucc.asn.au/dropbear/dropbear.html
-Source0:
http://matt.ucc.asn.au/dropbear/releases/%{name}-%{version}.tar.bz2
-Source1:
https://matt.ucc.asn.au/dropbear/SHA256SUM.asc#/%{name}-%{version}.tar.bz2.asc
-Source2:dropbear.keyring
+Source0:https://matt.ucc.asn.au/dropbear/%{name}-%{version}.tar.bz2
+Source1:https://matt.ucc.asn.au/dropbear/%{name}-%{version}.tar.bz2.asc
 Source3:dropbear.service
 Source4:dropbear-keygen.service
 Source5:dropbear.sysconfig

++ dropbear-2015.67.tar.bz2 - dropbear-2015.68.tar.bz2 ++
 5656 lines of diff (skipped)

commit dropbear for openSUSE:Factory

2015-02-06 Thread h_root

Hello community,

here is the log from the commit of package dropbear for openSUSE:Factory 
checked in at 2015-02-06 10:23:29

Comparing /work/SRC/openSUSE:Factory/dropbear (Old)
 and  /work/SRC/openSUSE:Factory/.dropbear.new (New)


Package is dropbear

Changes:

--- /work/SRC/openSUSE:Factory/dropbear/dropbear.changes2014-12-16 
14:47:33.0 +0100
+++ /work/SRC/openSUSE:Factory/.dropbear.new/dropbear.changes   2015-02-06 
10:23:30.0 +0100
@@ -1,0 +2,26 @@
+Thu Feb  5 16:26:06 UTC 2015 - thard...@suse.com
+
+- fixed checksum URL
+
+---
+Wed Jan 28 21:40:28 UTC 2015 - thard...@suse.com
+
+- updated to upstream version 2015.67
+  * Call fsync() after generating private keys to ensure they aren't lost if a
+reboot occurs. Thanks to Peter Korsgaard
+  * Disable non-delayed zlib compression by default on the server. Can be
+enabled if required for old clients with DROPBEAR_SERVER_DELAY_ZLIB
+  * Default client key path ~/.ssh/id_dropbear
+  * Prefer stronger algorithms by default, from Fedor Brunner. 
+AES256 over 3DES
+Diffie-hellman group14 over group1
+  * Add option to disable CBC ciphers.
+  * Disable twofish in default options.h
+  * Enable sha2 HMAC algorithms by default, the code was already required
+for ECC key exchange. sha1 is the first preference still for performance. 
+  * Fix installing dropbear.8 in a separate build directory, from Like Ma
+  * Allow configure to succeed if libtomcrypt/libtommath are missing, from 
Elan Ruusamäe
+  * Don't crash if ssh-agent provides an unknown type of key. From Catalin 
Patulea
+  * Minor bug fixes, a few issues found by Coverity scan 
+
+---

Old:

  dropbear-2014.66.tar.bz2
  dropbear-2014.66.tar.bz2.asc

New:

  dropbear-2015.67.tar.bz2
  dropbear-2015.67.tar.bz2.asc



Other differences:
--
++ dropbear.spec ++
--- /var/tmp/diff_new_pack.6uiw4j/_old  2015-02-06 10:23:31.0 +0100
+++ /var/tmp/diff_new_pack.6uiw4j/_new  2015-02-06 10:23:31.0 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package dropbear
 #
-# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -21,14 +21,14 @@
 %endif
 
 Name:   dropbear
-Version:2014.66
+Version:2015.67
 Release:0
 Summary:A relatively small SSH 2 server and client
 License:MIT
 Group:  Productivity/Networking/SSH
 Url:http://matt.ucc.asn.au/dropbear/dropbear.html
 Source0:
http://matt.ucc.asn.au/dropbear/releases/%{name}-%{version}.tar.bz2
-Source1:
https://matt.ucc.asn.au/dropbear/SHA1SUM.asc#/%{name}-%{version}.tar.bz2.asc
+Source1:
https://matt.ucc.asn.au/dropbear/SHA256SUM.asc#/%{name}-%{version}.tar.bz2.asc
 Source2:dropbear.keyring
 Source3:dropbear.service
 Source4:dropbear-keygen.service

++ dropbear-2014.66.tar.bz2 - dropbear-2015.67.tar.bz2 ++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/dropbear-2014.66/.hg_archival.txt 
new/dropbear-2015.67/.hg_archival.txt
--- old/dropbear-2014.66/.hg_archival.txt   2014-10-23 15:43:38.0 
+0200
+++ new/dropbear-2015.67/.hg_archival.txt   2015-01-28 15:57:36.0 
+0100
@@ -1,5 +1,5 @@
 repo: d7da3b1e15401eb234ec866d5eac992fc4cd5878
-node: 735511a4c761141416ad0e6728989d2dafa55bc2
+node: 48a0ba346de446e413433f93b731187fb4772508
 branch: default
-latesttag: DROPBEAR_2014.65
-latesttagdistance: 12
+latesttag: DROPBEAR_2015.67
+latesttagdistance: 2
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/dropbear-2014.66/.hgsigs new/dropbear-2015.67/.hgsigs
--- old/dropbear-2014.66/.hgsigs2014-10-23 15:43:38.0 +0200
+++ new/dropbear-2015.67/.hgsigs2015-01-28 15:57:36.0 +0100
@@ -12,3 +12,4 @@
 277429102f1337bd10c89107d3e01de509cc1a7e 0 
iEYEABECAAYFAlMEvF4ACgkQjPn4sExkf7xeVQCgtbxJ4G3hsFwUOM0K1WGr1J2vsbEAoMM8dEyr1mdrbgO1tzNLfD1nxbyn
 96584b934d04ebab443f603e78d38fe692d36313 0 
iEYEABECAAYFAlPVFrQACgkQjPn4sExkf7xr6ACglRiLE21vRrS1rJ809o2yMADIKtwAn1f5SyZUngSde8eE55JxCMwtMC5m
 caac692b366c153cea0e9cd59aa2d79a7d843d4e 0 
iEYEABECAAYFAlPk1mcACgkQjPn4sExkf7wLpgCeOqMYqpkf4lYUuyrn9VYThNpc7PkAn3JOSNgIqkKUcmSy6FstrI8jwJzq
+2d421bc0545d1be6d59a4ebfe61606d94b124b0c 0 
iEYEABECAAYFAlRJDCQACgkQjPn4sExkf7xUYACcCwVJkYWXJn5x/D5A+qMupy778lEAn0rg1oNiq96YU/4jOPsS5IMItihu
diff

commit dropbear for openSUSE:Factory

2014-12-16 Thread h_root

Hello community,

here is the log from the commit of package dropbear for openSUSE:Factory 
checked in at 2014-12-16 14:48:07

Comparing /work/SRC/openSUSE:Factory/dropbear (Old)
 and  /work/SRC/openSUSE:Factory/.dropbear.new (New)


Package is dropbear

Changes:

--- /work/SRC/openSUSE:Factory/dropbear/dropbear.changes2014-11-02 
16:46:41.0 +0100
+++ /work/SRC/openSUSE:Factory/.dropbear.new/dropbear.changes   2014-12-16 
14:47:33.0 +0100
@@ -1,0 +2,5 @@
+Thu Dec  4 12:13:24 UTC 2014 - thard...@suse.com
+
+- replaced deprecated gpg-offline check by obs-service-source_validator
+
+---

Old:

  SHA1SUM.asc

New:

  dropbear-2014.66.tar.bz2.asc



Other differences:
--
++ dropbear.spec ++
--- /var/tmp/diff_new_pack.qbaMj0/_old  2014-12-16 14:47:35.0 +0100
+++ /var/tmp/diff_new_pack.qbaMj0/_new  2014-12-16 14:47:35.0 +0100
@@ -28,7 +28,7 @@
 Group:  Productivity/Networking/SSH
 Url:http://matt.ucc.asn.au/dropbear/dropbear.html
 Source0:
http://matt.ucc.asn.au/dropbear/releases/%{name}-%{version}.tar.bz2
-Source1:https://matt.ucc.asn.au/dropbear/SHA1SUM.asc
+Source1:
https://matt.ucc.asn.au/dropbear/SHA1SUM.asc#/%{name}-%{version}.tar.bz2.asc
 Source2:dropbear.keyring
 Source3:dropbear.service
 Source4:dropbear-keygen.service
@@ -36,9 +36,6 @@
 Source6:dropbear.init
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 BuildRequires:  zlib-devel
-%if 0%{?suse_version} = 1230
-BuildRequires:  gpg-offline
-%endif
 %if 0%{?using_systemd}
 %{?systemd_requires}
 %else
@@ -52,9 +49,6 @@
 It implements most required features of the SSH 2 protocol, and other features 
such as X11 and authentication agent forwarding.
 
 %prep
-%if 0%{?suse_version} = 1230
-  %{?gpg_verify:  %gpg_verify %{SOURCE1}}
-%endif
 %setup -q
 
 %build

++ dropbear-2014.66.tar.bz2.asc ++
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

07a147b70a5402f38b2965e386cbe63dee1afd69  CHANGES
a7b04ff3c27059477ecdd8dccef7d43f644abe46  dropbear-2014.65.tar.bz2
793f5f1bb465b3c55e795d607932e8b21c130e95  dropbear-2014.66.tar.bz2
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.13 (Darwin)

iEYEARECAAYFAlRJDGYACgkQjPn4sExkf7wHRgCdH3TEUSKebFmT74e6NIuAAkpB
m78AoNIly2cnFzoimxixnNa7LDDRi64y
=MfF3
-END PGP SIGNATURE-

-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

commit dropbear for openSUSE:Factory

2014-11-02 Thread h_root

Hello community,

here is the log from the commit of package dropbear for openSUSE:Factory 
checked in at 2014-11-02 16:46:20

Comparing /work/SRC/openSUSE:Factory/dropbear (Old)
 and  /work/SRC/openSUSE:Factory/.dropbear.new (New)


Package is dropbear

Changes:

--- /work/SRC/openSUSE:Factory/dropbear/dropbear.changes2014-08-20 
10:51:05.0 +0200
+++ /work/SRC/openSUSE:Factory/.dropbear.new/dropbear.changes   2014-11-02 
16:46:41.0 +0100
@@ -1,0 +2,12 @@
+Fri Oct 24 08:30:31 UTC 2014 - thard...@suse.com
+
+- updated to upstream version 2014.66
+  * Use the same keepalive handling behaviour as OpenSSH. This will work better
+with some SSH implementations that have different behaviour with unknown
+message types.
+  * Don't reply with SSH_MSG_UNIMPLEMENTED when we receive a reply to our own
+keepalive message
+  * Set $SSH_CLIENT to keep bash happy, patch from Ryan Cleere
+  * Fix wtmp which broke since 2013.62, patch from Whoopie
+
+---

Old:

  dropbear-2014.65.tar.bz2

New:

  dropbear-2014.66.tar.bz2



Other differences:
--
++ dropbear.spec ++
--- /var/tmp/diff_new_pack.pESFd8/_old  2014-11-02 16:46:42.0 +0100
+++ /var/tmp/diff_new_pack.pESFd8/_new  2014-11-02 16:46:42.0 +0100
@@ -21,7 +21,7 @@
 %endif
 
 Name:   dropbear
-Version:2014.65
+Version:2014.66
 Release:0
 Summary:A relatively small SSH 2 server and client
 License:MIT

++ SHA1SUM.asc ++
--- /var/tmp/diff_new_pack.pESFd8/_old  2014-11-02 16:46:42.0 +0100
+++ /var/tmp/diff_new_pack.pESFd8/_new  2014-11-02 16:46:42.0 +0100
@@ -1,13 +1,13 @@
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
-17758da1c3361557c5f0e78a100c8f2b81937fdc  CHANGES
-54e3738a4335a8dbb1e4acb29316b07f3a1fa354  dropbear-2014.64.tar.bz2
+07a147b70a5402f38b2965e386cbe63dee1afd69  CHANGES
 a7b04ff3c27059477ecdd8dccef7d43f644abe46  dropbear-2014.65.tar.bz2
+793f5f1bb465b3c55e795d607932e8b21c130e95  dropbear-2014.66.tar.bz2
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.13 (Darwin)
 
-iEYEARECAAYFAlPk1kUACgkQjPn4sExkf7zCtgCfccmwAJ28VDggN/lPzfXix48/
-Qp0AnjRb6dLYj4SUhjbvt6ZiIe11HUzu
-=L8D3
+iEYEARECAAYFAlRJDGYACgkQjPn4sExkf7wHRgCdH3TEUSKebFmT74e6NIuAAkpB
+m78AoNIly2cnFzoimxixnNa7LDDRi64y
+=MfF3
 -END PGP SIGNATURE-

++ dropbear-2014.65.tar.bz2 - dropbear-2014.66.tar.bz2 ++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/dropbear-2014.65/.hg_archival.txt 
new/dropbear-2014.66/.hg_archival.txt
--- old/dropbear-2014.65/.hg_archival.txt   2014-08-08 15:40:46.0 
+0200
+++ new/dropbear-2014.66/.hg_archival.txt   2014-10-23 15:43:38.0 
+0200
@@ -1,5 +1,5 @@
 repo: d7da3b1e15401eb234ec866d5eac992fc4cd5878
-node: e9579816f20ea85affc6135e87f8477992808948
+node: 735511a4c761141416ad0e6728989d2dafa55bc2
 branch: default
-latesttag: DROPBEAR_2014.64
+latesttag: DROPBEAR_2014.65
 latesttagdistance: 12
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/dropbear-2014.65/.hgsigs new/dropbear-2014.66/.hgsigs
--- old/dropbear-2014.65/.hgsigs2014-08-08 15:40:46.0 +0200
+++ new/dropbear-2014.66/.hgsigs2014-10-23 15:43:38.0 +0200
@@ -11,3 +11,4 @@
 3d1d7d151c0ce3a79da62e86463f5632fa2b144a 0 
iEYEABECAAYFAlKd5AEACgkQjPn4sExkf7wzWgCfdvPEEIdlMPqcbOQMJ7b+eAyy164An2ip1lPh1eS5g26/gSfruvWBVym4
 277429102f1337bd10c89107d3e01de509cc1a7e 0 
iEYEABECAAYFAlMEvF4ACgkQjPn4sExkf7xeVQCgtbxJ4G3hsFwUOM0K1WGr1J2vsbEAoMM8dEyr1mdrbgO1tzNLfD1nxbyn
 96584b934d04ebab443f603e78d38fe692d36313 0 
iEYEABECAAYFAlPVFrQACgkQjPn4sExkf7xr6ACglRiLE21vRrS1rJ809o2yMADIKtwAn1f5SyZUngSde8eE55JxCMwtMC5m
+caac692b366c153cea0e9cd59aa2d79a7d843d4e 0 
iEYEABECAAYFAlPk1mcACgkQjPn4sExkf7wLpgCeOqMYqpkf4lYUuyrn9VYThNpc7PkAn3JOSNgIqkKUcmSy6FstrI8jwJzq
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/dropbear-2014.65/.hgtags new/dropbear-2014.66/.hgtags
--- old/dropbear-2014.65/.hgtags2014-08-08 15:40:46.0 +0200
+++ new/dropbear-2014.66/.hgtags2014-10-23 15:43:38.0 +0200
@@ -44,3 +44,4 @@
 3d1d7d151c0ce3a79da62e86463f5632fa2b144a DROPBEAR_2013.62
 2351b2da8e0d08dcc6e64fcc328b53b9630bda68 DROPBEAR_2014.63
 0d2d39957c029adb7f4327d37fe6b4900f0736d9 DROPBEAR_2014.64
+e9579816f20ea85affc6135e87f8477992808948 DROPBEAR_2014.65
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/dropbear-2014.65/CHANGES new/dropbear-2014.66/CHANGES
--- old/dropbear-2014.65/CHANGES2014-08-08 15:40:46.0 +0200
+++

commit dropbear for openSUSE:Factory

2014-08-20 Thread h_root

Hello community,

here is the log from the commit of package dropbear for openSUSE:Factory 
checked in at 2014-08-20 10:50:53

Comparing /work/SRC/openSUSE:Factory/dropbear (Old)
 and  /work/SRC/openSUSE:Factory/.dropbear.new (New)


Package is dropbear

Changes:

--- /work/SRC/openSUSE:Factory/dropbear/dropbear.changes2014-07-31 
21:50:52.0 +0200
+++ /work/SRC/openSUSE:Factory/.dropbear.new/dropbear.changes   2014-08-20 
10:51:05.0 +0200
@@ -1,0 +2,14 @@
+Mon Aug 11 08:38:04 UTC 2014 - thard...@suse.com
+
+- updated to upstream version 2014.65
+  * Fix 2014.64 regression, server session hang on exit with scp (and probably
+others), thanks to NiLuJe for tracking it down
+  * Fix 2014.64 regression, clock_gettime() error handling which broke on older
+Linux kernels, reported by NiLuJe
+  * Fix 2014.64 regression, writev() could occassionally fail with EAGAIN which
+wasn't caught
+  * Avoid error message when trying to set QoS on proxycommand or multihop 
pipes
+  * Use /usr/bin/xauth, thanks to Mike Frysinger
+  * Don't exit the client if the local user entry can't be found, thanks to 
iquaba
+
+---

Old:

  dropbear-2014.64.tar.bz2

New:

  dropbear-2014.65.tar.bz2



Other differences:
--
++ dropbear.spec ++
--- /var/tmp/diff_new_pack.ja2NTA/_old  2014-08-20 10:51:06.0 +0200
+++ /var/tmp/diff_new_pack.ja2NTA/_new  2014-08-20 10:51:06.0 +0200
@@ -21,7 +21,7 @@
 %endif
 
 Name:   dropbear
-Version:2014.64
+Version:2014.65
 Release:0
 Summary:A relatively small SSH 2 server and client
 License:MIT

++ SHA1SUM.asc ++
--- /var/tmp/diff_new_pack.ja2NTA/_old  2014-08-20 10:51:06.0 +0200
+++ /var/tmp/diff_new_pack.ja2NTA/_new  2014-08-20 10:51:06.0 +0200
@@ -1,13 +1,13 @@
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
-f88f705e143224974a4c2f1e7faee56a4918  CHANGES
-63bbb967feb1df8bc1a7cb7d96925ed653960078  dropbear-2014.63.tar.bz2
+17758da1c3361557c5f0e78a100c8f2b81937fdc  CHANGES
 54e3738a4335a8dbb1e4acb29316b07f3a1fa354  dropbear-2014.64.tar.bz2
+a7b04ff3c27059477ecdd8dccef7d43f644abe46  dropbear-2014.65.tar.bz2
 -BEGIN PGP SIGNATURE-
 Version: GnuPG v1.4.13 (Darwin)
 
-iEYEARECAAYFAlPVFogACgkQjPn4sExkf7zPzQCfSNrgesfXcO8EkY1OpBM9XcyI
-2YgAn0xEhRS0xkFtNHWvc8vTNWuQr+MO
-=/Tcr
+iEYEARECAAYFAlPk1kUACgkQjPn4sExkf7zCtgCfccmwAJ28VDggN/lPzfXix48/
+Qp0AnjRb6dLYj4SUhjbvt6ZiIe11HUzu
+=L8D3
 -END PGP SIGNATURE-

++ dropbear-2014.64.tar.bz2 - dropbear-2014.65.tar.bz2 ++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/dropbear-2014.64/.hg_archival.txt 
new/dropbear-2014.65/.hg_archival.txt
--- old/dropbear-2014.64/.hg_archival.txt   2014-07-27 16:56:59.0 
+0200
+++ new/dropbear-2014.65/.hg_archival.txt   2014-08-08 15:40:46.0 
+0200
@@ -1,5 +1,5 @@
 repo: d7da3b1e15401eb234ec866d5eac992fc4cd5878
-node: 0d2d39957c029adb7f4327d37fe6b4900f0736d9
+node: e9579816f20ea85affc6135e87f8477992808948
 branch: default
-latesttag: DROPBEAR_2014.63
-latesttagdistance: 34
+latesttag: DROPBEAR_2014.64
+latesttagdistance: 12
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/dropbear-2014.64/.hgsigs new/dropbear-2014.65/.hgsigs
--- old/dropbear-2014.64/.hgsigs2014-07-27 16:56:59.0 +0200
+++ new/dropbear-2014.65/.hgsigs2014-08-08 15:40:46.0 +0200
@@ -10,3 +10,4 @@
 9ec083a21adfcb099f21eb03704b66d14a4ba800 0 
iEYEABECAAYFAlKE4JoACgkQjPn4sExkf7wLDgCghkVGwMjI138bEv+ORVzN7zIH7cEAoLckaxZc1k1aXlmlSCRlP8cuKH3o
 3d1d7d151c0ce3a79da62e86463f5632fa2b144a 0 
iEYEABECAAYFAlKd5AEACgkQjPn4sExkf7wzWgCfdvPEEIdlMPqcbOQMJ7b+eAyy164An2ip1lPh1eS5g26/gSfruvWBVym4
 277429102f1337bd10c89107d3e01de509cc1a7e 0 
iEYEABECAAYFAlMEvF4ACgkQjPn4sExkf7xeVQCgtbxJ4G3hsFwUOM0K1WGr1J2vsbEAoMM8dEyr1mdrbgO1tzNLfD1nxbyn
+96584b934d04ebab443f603e78d38fe692d36313 0 
iEYEABECAAYFAlPVFrQACgkQjPn4sExkf7xr6ACglRiLE21vRrS1rJ809o2yMADIKtwAn1f5SyZUngSde8eE55JxCMwtMC5m
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/dropbear-2014.64/.hgtags new/dropbear-2014.65/.hgtags
--- old/dropbear-2014.64/.hgtags2014-07-27 16:56:59.0 +0200
+++ new/dropbear-2014.65/.hgtags2014-08-08 15:40:46.0 +0200
@@ -43,3 +43,4 @@
 e894dbc015ba7ff4c3bf897ee20e28ca90c55a16 DROPBEAR_2013.61test
 3d1d7d151c0ce3a79da62e86463f5632fa2b144a DROPBEAR_2013.62
 2351b2da8e0d08dcc6e64fcc328b53b9630bda68 DROPBEAR_2014.63
+0d2d39957c029adb7f4327d37fe6b4900f0736d9 DROPBEAR_2014.64
diff -urN '--exclude=CVS' '--exclude=.cvsignore'

commit dropbear for openSUSE:Factory

2014-07-31 Thread h_root

Hello community,

here is the log from the commit of package dropbear for openSUSE:Factory 
checked in at 2014-07-31 21:50:34

Comparing /work/SRC/openSUSE:Factory/dropbear (Old)
 and  /work/SRC/openSUSE:Factory/.dropbear.new (New)


Package is dropbear

Changes:

--- /work/SRC/openSUSE:Factory/dropbear/dropbear.changes2014-02-22 
18:09:15.0 +0100
+++ /work/SRC/openSUSE:Factory/.dropbear.new/dropbear.changes   2014-07-31 
21:50:52.0 +0200
@@ -1,0 +2,25 @@
+Mon Jul 28 09:40:02 UTC 2014 - thard...@suse.com
+
+- removed obsolete gpg soure code verifcation workaround
+- added missing systemd entries for dropbear-keygen.service
+- updated to upstream version 2014.64
+  * Fix compiling with ECDSA and DSS disabled
+  * Don't exit abruptly if too many outgoing packets are queued for writev(). 
Patch
+thanks to Ronny Meeus
+  * The -K keepalive option now behaves more like OpenSSH's 
ServerAliveInterval.
+If no response is received after 3 keepalives then the session is 
terminated. This
+will close connections faster than waiting for a TCP timeout.
+  * Rework TCP priority setting. New settings are
+if (connecting || ptys || x11) tos = LOWDELAY
+else if (tcp_forwards) tos = 0
+else tos = BULK
+Thanks to Catalin Patulea for the suggestion.
+  * Improve handling of many concurrent new TCP forwarded connections, should 
now
+be able to handle as many as MAX_CHANNELS. Thanks to Eduardo Silva for 
reporting
+and investigating it.
+  * Make sure that exit messages from the client are printed, regression in 
2013.57
+  * Use monotonic clock where available, timeouts won't be affected by system 
time
+changes
+  * Add -V for version
+
+---

Old:

  dropbear-2014.63.tar.bz2

New:

  dropbear-2014.64.tar.bz2



Other differences:
--
++ dropbear.spec ++
--- /var/tmp/diff_new_pack.eMOA0h/_old  2014-07-31 21:50:54.0 +0200
+++ /var/tmp/diff_new_pack.eMOA0h/_new  2014-07-31 21:50:54.0 +0200
@@ -21,7 +21,7 @@
 %endif
 
 Name:   dropbear
-Version:2014.63
+Version:2014.64
 Release:0
 Summary:A relatively small SSH 2 server and client
 License:MIT
@@ -40,10 +40,9 @@
 BuildRequires:  gpg-offline
 %endif
 %if 0%{?using_systemd}
-BuildRequires:  systemd
+%{?systemd_requires}
 %else
 Requires(pre): %insserv_prereq
-%{?systemd_requires}
 %endif
 Requires(pre): %fillup_prereq
 
@@ -54,12 +53,7 @@
 
 %prep
 %if 0%{?suse_version} = 1230
-#gpg_verify doesn't work because of dropbear's sha1sum structure
-gpg-offline -f %{SOURCE2} --verify %{SOURCE1}
-pushd %{_sourcedir}
-  grep %{name}-%{version}.tar.bz2 %{SOURCE1}  sha1sum
-  sha1sum -c sha1sum
-popd
+  %{?gpg_verify:  %gpg_verify %{SOURCE1}}
 %endif
 %setup -q
 
@@ -76,6 +70,7 @@
install -m 0644 %{SOURCE3} %{buildroot}%{_unitdir}/%{name}.service
install -m 0644 %{SOURCE4} 
%{buildroot}%{_unitdir}/%{name}-keygen.service
   ln -sf /usr/sbin/service %{buildroot}%{_sbindir}/rc%{name}
+  ln -sf /usr/sbin/service %{buildroot}%{_sbindir}/rc%{name}-keygen
 %else
   install -D -m0755 %{SOURCE6} %{buildroot}%{_initrddir}/%{name}
   ln -sf ../../%{_initrddir}/%{name} %{buildroot}%{_sbindir}/rc%{name}
@@ -84,12 +79,14 @@
 %pre
 %if 0%{?using_systemd}
   %service_add_pre %{name}.service
+  %service_add_pre %{name}-keygen.service
 %endif
 
 %post
 %if 0%{?using_systemd}
   %fillup_only
   %service_add_post %{name}.service
+  %service_add_post %{name}-keygen.service
 %else
   %{fillup_and_insserv %{name}}
 %endif
@@ -97,6 +94,7 @@
 %preun
 %if 0%{?using_systemd}
   %service_del_preun %{name}.service
+  %service_del_preun %{name}-keygen.service
 %else
   %stop_on_removal %{name}
 %endif
@@ -104,6 +102,7 @@
 %postun
 %if 0%{?using_systemd}
   %service_del_postun %{name}.service
+  %service_del_postun %{name}-keygen.service
 %else
   %restart_on_update %{name}
   %insserv_cleanup
@@ -119,6 +118,7 @@
 %if 0%{?using_systemd}
%{_unitdir}/%{name}.service
%{_unitdir}/dropbear-keygen.service
+  %{_sbindir}/rcdropbear-keygen
 %else
   %{_initrddir}/%{name}
 %endif

++ SHA1SUM.asc ++
--- /var/tmp/diff_new_pack.eMOA0h/_old  2014-07-31 21:50:54.0 +0200
+++ /var/tmp/diff_new_pack.eMOA0h/_new  2014-07-31 21:50:54.0 +0200
@@ -1,13 +1,13 @@
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
-a99b392e6ed99706b3eb787a75b95651775ca893  CHANGES
-1d0abb6c46206a2c95b26a6f454844855f585403  dropbear-2013.62.tar.bz2
+f88f705e143224974a4c2f1e7faee56a4918  CHANGES
 63bbb967feb1df8bc1a7cb7d96925ed653960078  dropbear-2014.63.tar.bz2
+54e3738a4335a8dbb1e4acb29316b07f3a1fa354  dropbear-2014.64.tar.bz2
 -BEGIN PGP SIGNATURE-

commit dropbear for openSUSE:Factory

2014-02-22 Thread h_root

Hello community,

here is the log from the commit of package dropbear for openSUSE:Factory 
checked in at 2014-02-22 18:09:14

Comparing /work/SRC/openSUSE:Factory/dropbear (Old)
 and  /work/SRC/openSUSE:Factory/.dropbear.new (New)


Package is dropbear

Changes:

--- /work/SRC/openSUSE:Factory/dropbear/dropbear.changes2013-12-13 
11:56:33.0 +0100
+++ /work/SRC/openSUSE:Factory/.dropbear.new/dropbear.changes   2014-02-22 
18:09:15.0 +0100
@@ -1,0 +2,32 @@
+Thu Feb 20 09:25:00 UTC 2014 - thard...@suse.com
+
+- fixed automatic tarball verfication 
+- updated regular init script to also create ECDSA keys
+
+---
+Wed Feb 19 14:40:50 UTC 2014 - thard...@suse.com
+
+- update to upstream version 2014.63
+  * Fix ~. to terminate a client interactive session after waking a laptop
+  from sleep.
+  * Changed port separator syntax again, now using host^port. This is because
+  IPv6 link-local addresses use %. Reported by Gui Iribarren
+  * Avoid constantly relinking dropbearmulti target, fix make install
+  for multi target, thanks to Mike Frysinger
+  * Avoid getting stuck in a loop writing huge key files, reported by Bruno
+  Thomsen
+  * Don't link dropbearkey or dropbearconvert to libz or libutil,
+  thanks to Nicolas Boos
+  * Fix linking -lcrypt on systems without /usr/lib, thanks to Nicolas Boos
+  * Avoid crash on exit due to cleaned up keys before last packets are sent,
+  debugged by Ronald Wahl
+  * Fix a race condition in rekeying where Dropbear would exit if it received a
+  still-in-flight packet after initiating rekeying. Reported by Oliver Metz.
+  This is a longstanding bug but is triggered more easily since 2013.57
+  * [...]
+- updated service files and activated building of ecdsa keys
+- only package the old init service in distributions without systemd
+- adapted spec to follow systemd package guidelines
+- cleaned up spec file
+
+---

Old:

  dropbear-2013.62.tar.bz2
  rcdropbear

New:

  dropbear-2014.63.tar.bz2
  dropbear.init



Other differences:
--
++ dropbear.spec ++
--- /var/tmp/diff_new_pack.spKV0b/_old  2014-02-22 18:09:16.0 +0100
+++ /var/tmp/diff_new_pack.spKV0b/_new  2014-02-22 18:09:16.0 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package dropbear
 #
-# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -16,8 +16,12 @@
 #
 
 
+%if 0%{?suse_version} = 1230
+  %define using_systemd 1
+%endif
+
 Name:   dropbear
-Version:2013.62
+Version:2014.63
 Release:0
 Summary:A relatively small SSH 2 server and client
 License:MIT
@@ -29,18 +33,19 @@
 Source3:dropbear.service
 Source4:dropbear-keygen.service
 Source5:dropbear.sysconfig
-Source6:rcdropbear
+Source6:dropbear.init
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 BuildRequires:  zlib-devel
 %if 0%{?suse_version} = 1230
 BuildRequires:  gpg-offline
 %endif
-Requires(post):%fillup_prereq %insserv_prereq
-%if 0%{?suse_version} = 1210
-Requires(post):systemd
-Requires(preun):   systemd
-Requires(postun):  systemd
+%if 0%{?using_systemd}
+BuildRequires:  systemd
+%else
+Requires(pre): %insserv_prereq
+%{?systemd_requires}
 %endif
+Requires(pre): %fillup_prereq
 
 %description
 Dropbear is a SSH 2 server and client designed to be small enough to be used 
in small memory environments, while still being functional and secure enough 
for general use.
@@ -48,7 +53,14 @@
 It implements most required features of the SSH 2 protocol, and other features 
such as X11 and authentication agent forwarding.
 
 %prep
-%{?gpg_verify: %gpg_verify %{SOURCE1}}
+%if 0%{?suse_version} = 1230
+#gpg_verify doesn't work because of dropbear's sha1sum structure
+gpg-offline -f %{SOURCE2} --verify %{SOURCE1}
+pushd %{_sourcedir}
+  grep %{name}-%{version}.tar.bz2 %{SOURCE1}  sha1sum
+  sha1sum -c sha1sum
+popd
+%endif
 %setup -q
 
 %build
@@ -59,45 +71,43 @@
 make install DESTDIR=%{buildroot}
 install -d %{buildroot}%{_sysconfdir}/%{name}
 install -D -m 0644 %{SOURCE5} 
%{buildroot}%{_localstatedir}/adm/fillup-templates/sysconfig.%{name}
-#no init service needed anymore for 12.3+
-install -D -m0755 %{SOURCE6} %{buildroot}%{_initrddir}/%{name}
-ln -sf ../../%{_initrddir}/%{name} %{buildroot}%{_sbindir}/rc%{name}
-%if 0%{?suse_version} = 1210
-   # systemd unit files
+%if

commit dropbear for openSUSE:Factory

2013-12-13 Thread h_root

Hello community,

here is the log from the commit of package dropbear for openSUSE:Factory 
checked in at 2013-12-13 11:56:31

Comparing /work/SRC/openSUSE:Factory/dropbear (Old)
 and  /work/SRC/openSUSE:Factory/.dropbear.new (New)


Package is dropbear

Changes:

--- /work/SRC/openSUSE:Factory/dropbear/dropbear.changes2013-11-07 
08:39:22.0 +0100
+++ /work/SRC/openSUSE:Factory/.dropbear.new/dropbear.changes   2013-12-13 
11:56:33.0 +0100
@@ -1,0 +2,24 @@
+Wed Dec  4 13:50:10 UTC 2013 - thard...@suse.com
+
+- imported upstream version 2013.62
+  * Disable interactive QoS connection options when a connection doesn't
+have a PTY (eg scp, rsync). Thanks to Catalin Patulea for the patch.
+  * Log when a hostkey is generated with -R, fix some bugs in handling server
+hostkey commandline options
+  * Fix crash in Dropbearconvert and 521 bit key, reported by NiLuJe
+  * Update config.guess and config.sub again
+  * ECC (elliptic curve) support. Supports ECDSA hostkeys (requires new keys to
+be generated) and ECDH for setting up encryption keys (no intervention
+required). This is significantly faster.
+  * curve25519-sha...@libssh.org support for setting up encryption keys. This 
is
+another elliptic curve mode with less potential of NSA interference in
+algorithm parameters. curve25519-donna code thanks to Adam Langley
+  * -R option to automatically generate hostkeys. This is recommended for
+embedded platforms since it allows the system random number device
+/dev/urandom a longer startup time to generate a secure seed before the
+hostkey is required.
+  * Compile fixes for old vendor compilers like Tru64 from Daniel Richard G.
+  * Make authorized_keys handling more robust, don't exit encountering
+malformed lines. Thanks to Lorin Hochstein and Mark Stillwell
+
+---

Old:

  dropbear-2013.60.tar.bz2

New:

  dropbear-2013.62.tar.bz2



Other differences:
--
++ dropbear.spec ++
--- /var/tmp/diff_new_pack.axW2yM/_old  2013-12-13 11:56:33.0 +0100
+++ /var/tmp/diff_new_pack.axW2yM/_new  2013-12-13 11:56:33.0 +0100
@@ -17,7 +17,7 @@
 
 
 Name:   dropbear
-Version:2013.60
+Version:2013.62
 Release:0
 Summary:A relatively small SSH 2 server and client
 License:MIT

++ SHA1SUM.asc ++
--- /var/tmp/diff_new_pack.axW2yM/_old  2013-12-13 11:56:33.0 +0100
+++ /var/tmp/diff_new_pack.axW2yM/_new  2013-12-13 11:56:33.0 +0100
@@ -1,108 +1,13 @@
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
-87a1b2d302553eb8b5fb320e1cd3aeba38d56dd2  dropbear-0.23.tar.bz2
-6d4db1612de20d094518bf4a7f90f4ccc501c307  dropbear-0.23.tar.gz
-8cc247c584e3836c18a3fe1852ace16deef12cd6  dropbear-0.255.tar.bz2
-ce81bb82649af9a8ae6edb401e36f7363fcc4d70  dropbear-0.255.tar.gz
-03b4f4d71c02c03f9cf200fdcfa717f7fb4691bb  dropbear-0.28.tar.bz2
-52b8c595c2a5a885292fbc425b20473dc233e06c  dropbear-0.28.tar.gz
-c57cb938e76bcf6378fb8659c8f3170d18b71965  dropbear-0.29.tar.bz2
-381704f5999d0dfb73449eed16fc119d34035928  dropbear-0.29.tar.gz
-e079dc07e1e94984ae97f8ea8261447a9d9dfd5b  dropbear-0.30.tar.bz2
-d8a47b803e436409c5d79e52bfbc8a8bd04526ec  dropbear-0.30.tar.gz
-5ae0c9a1d8d2e7518a0b6f5fc6ec01a41f03b612  dropbear-0.31.tar.bz2
-ee5364af5d08f012169c79f31dd825bdab08b53c  dropbear-0.31.tar.gz
-6ea4274b6a4c6574e43775333a4588ee9233038e  dropbear-0.32.tar.bz2
-5d33fe20b96f5e23a5a9573f9cfb88e00bb42c64  dropbear-0.32.tar.gz
-40807147292d0ccce9b4f24848561284885dda5a  dropbear_0.33-1_i386.deb
-47f7484099aaa24503c61e1f2e88a185d1d8d559  dropbear-0.33.tar.bz2
-477ee40474220be2b7d80ddc11800dc56d567f9d  dropbear-0.33.tar.gz
-4c7bbe194e1a560491e1b9252f9a0b9a7187bbea  dropbear_0.34-1_i386.deb
-466c99d8f07a69b1cf7ce245f2ec1cdcc47cc37c  dropbear-0.34.tar.bz2
-9b57c595e7c4556921cb3bfb3272109367261c16  dropbear-0.34.tar.gz
-71054c81fc5e2001f17ddbb3ca34f34cf19193b4  dropbear_0.35-1_i386.deb
-1797732bfe1e07118fcd07743ce57acb1e4ef6e4  dropbear-0.35.tar.bz2
-3017164c713f66e1659883c8c341ad5085e93343  dropbear-0.35.tar.gz
-1ead82c2ceb9e2eb8d2cd255923d957f04ef4159  dropbear_0.36-1_i386.deb
-89977e99411c5bc67c2de006665afde7bfc3dff2  dropbear-0.36.tar.bz2
-a1d685e36cb2e406101a7d149a8f9e9cd305dc0e  dropbear-0.36.tar.gz
-d136debba86f405c77374f1eaf726101497a903d  dropbear_0.37-1_i386.deb
-41c03ff61b46dae591f060f4ca721deba65735fc  dropbear-0.37.tar.bz2
-777d2ec4c001284f32887a9872fcfd0cc3e12615  dropbear-0.37.tar.gz
-e60cc690b512a7a13133da117375ac886b91eb0b  dropbear_0.38-1_i386.deb
-e6afb8861155fd26903e6207850baec6f3ad04de  dropbear-0.38.tar.bz2
-b3fc115cc35e2916e97d97eff026817886741e03  dropbear-0.38.tar.gz

commit dropbear for openSUSE:Factory

2013-11-06 Thread h_root

Hello community,

here is the log from the commit of package dropbear for openSUSE:Factory 
checked in at 2013-11-07 08:39:21

Comparing /work/SRC/openSUSE:Factory/dropbear (Old)
 and  /work/SRC/openSUSE:Factory/.dropbear.new (New)


Package is dropbear

Changes:

--- /work/SRC/openSUSE:Factory/dropbear/dropbear.changes2013-10-17 
20:40:42.0 +0200
+++ /work/SRC/openSUSE:Factory/.dropbear.new/dropbear.changes   2013-11-07 
08:39:22.0 +0100
@@ -8,0 +9 @@
+- used as bug fix release for bnc#845306 - VUL-0: CVE-2013-4421



Other differences:
--

-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

commit dropbear for openSUSE:Factory

2013-10-17 Thread h_root

Hello community,

here is the log from the commit of package dropbear for openSUSE:Factory 
checked in at 2013-10-17 20:36:13

Comparing /work/SRC/openSUSE:Factory/dropbear (Old)
 and  /work/SRC/openSUSE:Factory/.dropbear.new (New)


Package is dropbear

Changes:

--- /work/SRC/openSUSE:Factory/dropbear/dropbear.changes2013-10-15 
10:40:04.0 +0200
+++ /work/SRC/openSUSE:Factory/.dropbear.new/dropbear.changes   2013-10-17 
20:40:42.0 +0200
@@ -1,0 +2,9 @@
+Thu Oct 17 08:35:01 UTC 2013 - thard...@suse.com
+
+- imported upstream version 2013.60
+  * Fix make install so that it doesn't always install to /bin and /sbin
+  * Fix make install MULTI=1, installing manpages failed
+  * Fix make install when scp is included since it has no manpage
+  * Make --disable-bundled-libtom work 
+
+---

Old:

  dropbear-2013.59.tar.bz2

New:

  dropbear-2013.60.tar.bz2



Other differences:
--
++ dropbear.spec ++
--- /var/tmp/diff_new_pack.SSFCRL/_old  2013-10-17 20:40:46.0 +0200
+++ /var/tmp/diff_new_pack.SSFCRL/_new  2013-10-17 20:40:46.0 +0200
@@ -17,7 +17,7 @@
 
 
 Name:   dropbear
-Version:2013.59
+Version:2013.60
 Release:0
 Summary:A relatively small SSH 2 server and client
 License:MIT

++ SHA1SUM.asc ++
--- /var/tmp/diff_new_pack.SSFCRL/_old  2013-10-17 20:40:46.0 +0200
+++ /var/tmp/diff_new_pack.SSFCRL/_new  2013-10-17 20:40:46.0 +0200
@@ -1,13 +1,108 @@
 -BEGIN PGP SIGNED MESSAGE-
 Hash: SHA1
 
-4f2563ddb5eb82868b5ae0648f24a2ac5fc781fc  CHANGES
+87a1b2d302553eb8b5fb320e1cd3aeba38d56dd2  dropbear-0.23.tar.bz2
+6d4db1612de20d094518bf4a7f90f4ccc501c307  dropbear-0.23.tar.gz
+8cc247c584e3836c18a3fe1852ace16deef12cd6  dropbear-0.255.tar.bz2
+ce81bb82649af9a8ae6edb401e36f7363fcc4d70  dropbear-0.255.tar.gz
+03b4f4d71c02c03f9cf200fdcfa717f7fb4691bb  dropbear-0.28.tar.bz2
+52b8c595c2a5a885292fbc425b20473dc233e06c  dropbear-0.28.tar.gz
+c57cb938e76bcf6378fb8659c8f3170d18b71965  dropbear-0.29.tar.bz2
+381704f5999d0dfb73449eed16fc119d34035928  dropbear-0.29.tar.gz
+e079dc07e1e94984ae97f8ea8261447a9d9dfd5b  dropbear-0.30.tar.bz2
+d8a47b803e436409c5d79e52bfbc8a8bd04526ec  dropbear-0.30.tar.gz
+5ae0c9a1d8d2e7518a0b6f5fc6ec01a41f03b612  dropbear-0.31.tar.bz2
+ee5364af5d08f012169c79f31dd825bdab08b53c  dropbear-0.31.tar.gz
+6ea4274b6a4c6574e43775333a4588ee9233038e  dropbear-0.32.tar.bz2
+5d33fe20b96f5e23a5a9573f9cfb88e00bb42c64  dropbear-0.32.tar.gz
+40807147292d0ccce9b4f24848561284885dda5a  dropbear_0.33-1_i386.deb
+47f7484099aaa24503c61e1f2e88a185d1d8d559  dropbear-0.33.tar.bz2
+477ee40474220be2b7d80ddc11800dc56d567f9d  dropbear-0.33.tar.gz
+4c7bbe194e1a560491e1b9252f9a0b9a7187bbea  dropbear_0.34-1_i386.deb
+466c99d8f07a69b1cf7ce245f2ec1cdcc47cc37c  dropbear-0.34.tar.bz2
+9b57c595e7c4556921cb3bfb3272109367261c16  dropbear-0.34.tar.gz
+71054c81fc5e2001f17ddbb3ca34f34cf19193b4  dropbear_0.35-1_i386.deb
+1797732bfe1e07118fcd07743ce57acb1e4ef6e4  dropbear-0.35.tar.bz2
+3017164c713f66e1659883c8c341ad5085e93343  dropbear-0.35.tar.gz
+1ead82c2ceb9e2eb8d2cd255923d957f04ef4159  dropbear_0.36-1_i386.deb
+89977e99411c5bc67c2de006665afde7bfc3dff2  dropbear-0.36.tar.bz2
+a1d685e36cb2e406101a7d149a8f9e9cd305dc0e  dropbear-0.36.tar.gz
+d136debba86f405c77374f1eaf726101497a903d  dropbear_0.37-1_i386.deb
+41c03ff61b46dae591f060f4ca721deba65735fc  dropbear-0.37.tar.bz2
+777d2ec4c001284f32887a9872fcfd0cc3e12615  dropbear-0.37.tar.gz
+e60cc690b512a7a13133da117375ac886b91eb0b  dropbear_0.38-1_i386.deb
+e6afb8861155fd26903e6207850baec6f3ad04de  dropbear-0.38.tar.bz2
+b3fc115cc35e2916e97d97eff026817886741e03  dropbear-0.38.tar.gz
+fbbfa9463efe0014b035ac6f44624d631333b680  dropbear_0.39-1_i386.deb
+856490f5c27ed084a42935fd1c97077c5cae1278  dropbear-0.39.tar.bz2
+26241668ad2a8a1b3c86ac879ad7d6f425b7c24d  dropbear-0.39.tar.gz
+4b0dcc34775ec25b0c5168c2fee6d64cd332bd63  dropbear_0.40-1_i386.deb
+368477a822e665fee5fcde010c0ef65c95f91bfb  dropbear-0.40pre1.tar.gz
+566f1224943a6874949a6d4757921b94e33af4ef  dropbear-0.40.tar.bz2
+29865d22cbf876565a18bf3ba8f9ed7e8b23667f  dropbear-0.40.tar.gz
+c98b9532788bb24f687132d04f23a1a04e61d58c  dropbear_0.41-1_i386.deb
+d1e15a53439a0bc7ae5955fd2afc9139dbb54c0c  dropbear-0.41.tar.bz2
+87e75c5c1ce3cffe5385a3faf18bb90a06a8f450  dropbear-0.41.tar.gz
+886c96bb9a8206c353a707ac79867730e29e2dac  dropbear_0.42-1_i386.deb
+2b4f1e22af1dfaffdfe7fbcf75cb6b79b322efc3  dropbear-0.42.tar.bz2
+af7635283b3c71074214453e4116bc7b0b165fe3  dropbear-0.42.tar.gz
+e3bfba27deb12a8dc123d1887b6513ec51359b3c  dropbear_0.43-1_i386.deb
+0bce83ad1a90b9b91e34d0c777f0d914516fd99d  dropbear-0.43.tar.bz2

commit dropbear for openSUSE:Factory

2013-10-15 Thread h_root

Hello community,

here is the log from the commit of package dropbear for openSUSE:Factory 
checked in at 2013-10-15 10:40:02

Comparing /work/SRC/openSUSE:Factory/dropbear (Old)
 and  /work/SRC/openSUSE:Factory/.dropbear.new (New)


Package is dropbear

Changes:

--- /work/SRC/openSUSE:Factory/dropbear/dropbear.changes2013-04-29 
09:52:49.0 +0200
+++ /work/SRC/openSUSE:Factory/.dropbear.new/dropbear.changes   2013-10-15 
10:40:04.0 +0200
@@ -1,0 +2,30 @@
+Thu Oct 10 07:29:00 UTC 2013 - thard...@suse.com
+
+- provided links for download sources
+- employed gpg-offline - verify sources 
+
+---
+Mon Oct  7 08:10:32 UTC 2013 - thard...@suse.com
+
+- imported upstream version 2013.59
+  * Fix crash from -J command 
+Thanks to Lluís Batlle i Rossell and Arnaud Mouiche for patches
+  * Avoid reading too much from /proc/net/rt_cache since that causes
+system slowness. 
+  * Improve EOF handling for half-closed connections
+Thanks to Catalin Patulea
+  * Send a banner message to report PAM error messages intended for the user
+Patch from Martin Donnelly
+  * Limit the size of decompressed payloads, avoids memory exhaustion denial
+of service 
+Thanks to Logan Lamb for reporting and investigating it
+  * Avoid disclosing existence of valid users through inconsistent delays
+Thanks to Logan Lamb for reporting
+  * Update config.guess and config.sub for newer architectures
+  * Avoid segfault in server for locked accounts
+  * make install now installs manpages
+dropbearkey.8 has been renamed to dropbearkey.1
+manpage added for dropbearconvert
+  * Get rid of one second delay when running non-interactive commands 
+
+---

Old:

  dropbear-2013.58.tar.bz2

New:

  SHA1SUM.asc
  dropbear-2013.59.tar.bz2
  dropbear.keyring



Other differences:
--
++ dropbear.spec ++
--- /var/tmp/diff_new_pack.b4qtdp/_old  2013-10-15 10:40:05.0 +0200
+++ /var/tmp/diff_new_pack.b4qtdp/_new  2013-10-15 10:40:05.0 +0200
@@ -17,19 +17,24 @@
 
 
 Name:   dropbear
-Version:2013.58
+Version:2013.59
 Release:0
 Summary:A relatively small SSH 2 server and client
 License:MIT
 Group:  Productivity/Networking/SSH
 Url:http://matt.ucc.asn.au/dropbear/dropbear.html
 Source0:
http://matt.ucc.asn.au/dropbear/releases/%{name}-%{version}.tar.bz2
-Source1:dropbear.service
-Source2:dropbear-keygen.service
-Source3:dropbear.sysconfig
-Source4:rcdropbear
+Source1:https://matt.ucc.asn.au/dropbear/SHA1SUM.asc
+Source2:dropbear.keyring
+Source3:dropbear.service
+Source4:dropbear-keygen.service
+Source5:dropbear.sysconfig
+Source6:rcdropbear
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
 BuildRequires:  zlib-devel
+%if 0%{?suse_version} = 1230
+BuildRequires:  gpg-offline
+%endif
 Requires(post):%fillup_prereq %insserv_prereq
 %if 0%{?suse_version} = 1210
 Requires(post):systemd
@@ -43,6 +48,7 @@
 It implements most required features of the SSH 2 protocol, and other features 
such as X11 and authentication agent forwarding.
 
 %prep
+%{?gpg_verify: %gpg_verify %{SOURCE1}}
 %setup -q
 
 %build
@@ -52,21 +58,16 @@
 %install
 make install DESTDIR=%{buildroot}
 install -d %{buildroot}%{_sysconfdir}/%{name}
-install -D -m 0644 %{SOURCE3} 
%{buildroot}%{_localstatedir}/adm/fillup-templates/sysconfig.%{name}
+install -D -m 0644 %{SOURCE5} 
%{buildroot}%{_localstatedir}/adm/fillup-templates/sysconfig.%{name}
 #no init service needed anymore for 12.3+
-install -D -m0755 %{SOURCE4} %{buildroot}%{_initrddir}/%{name}
+install -D -m0755 %{SOURCE6} %{buildroot}%{_initrddir}/%{name}
 ln -sf ../../%{_initrddir}/%{name} %{buildroot}%{_sbindir}/rc%{name}
 %if 0%{?suse_version} = 1210
# systemd unit files
install -d %{buildroot}%{_unitdir}
-   install -m 0644 %{SOURCE1} %{buildroot}%{_unitdir}/%{name}.service
-   install -m 0644 %{SOURCE2} 
%{buildroot}%{_unitdir}/dropbear-keygen.service
+   install -m 0644 %{SOURCE3} %{buildroot}%{_unitdir}/%{name}.service
+   install -m 0644 %{SOURCE4} 
%{buildroot}%{_unitdir}/dropbear-keygen.service
 %endif
-install -d %{buildroot}%{_mandir}/man1/
-install -m644 dbclient.1 %{buildroot}%{_mandir}/man1/
-install -d %{buildroot}%{_mandir}/man8/
-install -m644 dropbear.8 %{buildroot}%{_mandir}/man8/
-install -m644 dropbearkey.8 %{buildroot}%{_mandir}/man8/
 
 %post
 %if 0%{?suse_version} = 1210
@@ -112,8 +113,9 @@
 %endif
 %dir %{_sysconfdir}/%{name}

commit dropbear for openSUSE:Factory

2013-04-29 Thread h_root

Hello community,

here is the log from the commit of package dropbear for openSUSE:Factory 
checked in at 2013-04-29 09:52:46

Comparing /work/SRC/openSUSE:Factory/dropbear (Old)
 and  /work/SRC/openSUSE:Factory/.dropbear.new (New)


Package is dropbear, Maintainer is 

Changes:

--- /work/SRC/openSUSE:Factory/dropbear/dropbear.changes2013-03-30 
14:55:32.0 +0100
+++ /work/SRC/openSUSE:Factory/.dropbear.new/dropbear.changes   2013-04-29 
09:52:49.0 +0200
@@ -1,0 +2,14 @@
+Sat Apr 20 18:49:38 UTC 2013 - thard...@suse.com
+
+- reverted init file installation on 12.3
+
+---
+Fri Apr 19 08:26:17 UTC 2013 - thard...@suse.com
+
+- imported upstream version 2013.58
+  * Fix building with Zlib disabled, thanks to Hans Harder and cuma@freetz
+  * Use % as a separator for ports, fixes scp in multihop mode, from Hans 
Harder
+  * Reject logins for other users when running as non-root, from Hans Harder
+  * Disable client immediate authentication request by default, it prevents 
passwordless logins from working 
+
+---
@@ -17 +31 @@
-  * A few improvements for Android from Reimar D�ffinger
+  * A few improvements for Android from Reimar Döffinger
@@ -19 +33 @@
-  reported by Norbert Bencz�r. Appears to be a very long-standing bug.
+  reported by Norbert Benczúr. Appears to be a very long-standing bug.

Old:

  dropbear-2013.56.tar.bz2

New:

  dropbear-2013.58.tar.bz2



Other differences:
--
++ dropbear.spec ++
--- /var/tmp/diff_new_pack.5Z03Ez/_old  2013-04-29 09:52:50.0 +0200
+++ /var/tmp/diff_new_pack.5Z03Ez/_new  2013-04-29 09:52:50.0 +0200
@@ -17,7 +17,7 @@
 
 
 Name:   dropbear
-Version:2013.56
+Version:2013.58
 Release:0
 Summary:A relatively small SSH 2 server and client
 License:MIT
@@ -53,6 +53,7 @@
 make install DESTDIR=%{buildroot}
 install -d %{buildroot}%{_sysconfdir}/%{name}
 install -D -m 0644 %{SOURCE3} 
%{buildroot}%{_localstatedir}/adm/fillup-templates/sysconfig.%{name}
+#no init service needed anymore for 12.3+
 install -D -m0755 %{SOURCE4} %{buildroot}%{_initrddir}/%{name}
 ln -sf ../../%{_initrddir}/%{name} %{buildroot}%{_sbindir}/rc%{name}
 %if 0%{?suse_version} = 1210

++ dropbear-2013.56.tar.bz2 - dropbear-2013.58.tar.bz2 ++
 4378 lines of diff (skipped)

-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

commit dropbear for openSUSE:Factory

2013-03-30 Thread h_root

Hello community,

here is the log from the commit of package dropbear for openSUSE:Factory 
checked in at 2013-03-30 14:55:31

Comparing /work/SRC/openSUSE:Factory/dropbear (Old)
 and  /work/SRC/openSUSE:Factory/.dropbear.new (New)


Package is dropbear, Maintainer is 

Changes:

--- /work/SRC/openSUSE:Factory/dropbear/dropbear.changes2012-08-04 
09:11:47.0 +0200
+++ /work/SRC/openSUSE:Factory/.dropbear.new/dropbear.changes   2013-03-30 
14:55:32.0 +0100
@@ -1,0 +2,22 @@
+Fri Mar 22 08:48:43 UTC 2013 - thard...@suse.com
+
+- imported upstream version 2013.56 
+  * Allow specifying cipher (-c) and MAC (-m) lists for dbclient
+  * Allow using 'none' cipher or MAC (off by default, use options.h). 
Encryption
+  is used during authentication then disabled, similar to OpenSSH HPN mode
+  * Allow a user in immediately if the account has a blank password and blank
+  passwords are enabled
+  * Include a few extra sources of entropy from /proc on Linux, hash private 
keys
+  as well. Dropbear will also write gathered entropy back into /dev/urandom
+  * Added hmac-sha2-256 and hmac-sha2-512 support (off by default, use 
options.h)
+  * Don't sent bad address localhost for -R forward connections, 
+  reported by Denis Bider
+  * Add -B runtime option to allow blank passwords
+  * Allow using IPv6 bracket notation for addresses in server -p option, 
from Ben Jencks
+  * A few improvements for Android from Reimar D�ffinger
+  * Fix memory leak for TCP forwarded connections to hosts that timed out,
+  reported by Norbert Bencz�r. Appears to be a very long-standing bug.
+  * Fix make clean for out of tree builds
+  * Fix compilation when ENABLE_{SVR,CLI}_AGENTFWD are unset
+
+---

Old:

  dropbear-2012.55.tar.bz2

New:

  dropbear-2013.56.tar.bz2



Other differences:
--
++ dropbear.spec ++
--- /var/tmp/diff_new_pack.lwXVK5/_old  2013-03-30 14:55:34.0 +0100
+++ /var/tmp/diff_new_pack.lwXVK5/_new  2013-03-30 14:55:34.0 +0100
@@ -1,7 +1,7 @@
 #
 # spec file for package dropbear
 #
-# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2013 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
 
 
 Name:   dropbear
-Version:2012.55
+Version:2013.56
 Release:0
 Summary:A relatively small SSH 2 server and client
 License:MIT

++ dropbear-2012.55.tar.bz2 - dropbear-2013.56.tar.bz2 ++
 22318 lines of diff (skipped)

-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

commit dropbear for openSUSE:Factory

2012-08-04 Thread h_root

Hello community,

here is the log from the commit of package dropbear for openSUSE:Factory 
checked in at 2012-08-04 09:10:17

Comparing /work/SRC/openSUSE:Factory/dropbear (Old)
 and  /work/SRC/openSUSE:Factory/.dropbear.new (New)


Package is dropbear, Maintainer is 

Changes:

--- /work/SRC/openSUSE:Factory/dropbear/dropbear.changes2012-07-10 
13:41:21.0 +0200
+++ /work/SRC/openSUSE:Factory/.dropbear.new/dropbear.changes   2012-08-04 
09:11:47.0 +0200
@@ -1,0 +2,5 @@
+Thu Aug  2 11:13:49 UTC 2012 - thard...@suse.com
+
+- removed PAM dependency since Dropbear should be usable in initrd and PAM 
wasn't used without an additional patch anyway 
https://wiki.yoctoproject.org/wiki/PAM_Integration#dropbear
+
+---



Other differences:
--
++ dropbear.spec ++
--- /var/tmp/diff_new_pack.doxAgX/_old  2012-08-04 09:11:52.0 +0200
+++ /var/tmp/diff_new_pack.doxAgX/_new  2012-08-04 09:11:52.0 +0200
@@ -29,7 +29,6 @@
 Source3:dropbear.sysconfig
 Source4:rcdropbear
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
-BuildRequires:  pam-devel
 BuildRequires:  zlib-devel
 Requires(post):%fillup_prereq %insserv_prereq
 %if 0%{?suse_version} = 1210
@@ -47,7 +46,7 @@
 %setup -q
 
 %build
-%configure --enable-pam
+%configure
 make %{?_smp_mflags}
 
 %install

-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

commit dropbear for openSUSE:Factory

2012-07-10 Thread h_root

Hello community,

here is the log from the commit of package dropbear for openSUSE:Factory 
checked in at 2012-07-10 13:41:19

Comparing /work/SRC/openSUSE:Factory/dropbear (Old)
 and  /work/SRC/openSUSE:Factory/.dropbear.new (New)


Package is dropbear, Maintainer is 

Changes:

--- /work/SRC/openSUSE:Factory/dropbear/dropbear.changes2012-07-09 
07:56:43.0 +0200
+++ /work/SRC/openSUSE:Factory/.dropbear.new/dropbear.changes   2012-07-10 
13:41:21.0 +0200
@@ -1,0 +2,5 @@
+Mon Jul  9 20:11:26 UTC 2012 - thard...@suse.com
+
+- fixed typo in service file
+
+---



Other differences:
--
++ dropbear.spec ++
--- /var/tmp/diff_new_pack.KpzJbq/_old  2012-07-10 13:41:23.0 +0200
+++ /var/tmp/diff_new_pack.KpzJbq/_new  2012-07-10 13:41:23.0 +0200
@@ -52,14 +52,14 @@
 
 %install
 make install DESTDIR=%{buildroot}
-install -d %{buildroot}%{_sysconfdir}/dropbear
+install -d %{buildroot}%{_sysconfdir}/%{name}
 install -D -m 0644 %{SOURCE3} 
%{buildroot}%{_localstatedir}/adm/fillup-templates/sysconfig.%{name}
 install -D -m0755 %{SOURCE4} %{buildroot}%{_initrddir}/%{name}
 ln -sf ../../%{_initrddir}/%{name} %{buildroot}%{_sbindir}/rc%{name}
 %if 0%{?suse_version} = 1210
# systemd unit files
install -d %{buildroot}%{_unitdir}
-   install -m 0644 %{SOURCE1} %{buildroot}%{_unitdir}/dropbear.service
+   install -m 0644 %{SOURCE1} %{buildroot}%{_unitdir}/%{name}.service
install -m 0644 %{SOURCE2} 
%{buildroot}%{_unitdir}/dropbear-keygen.service
 %endif
 install -d %{buildroot}%{_mandir}/man1/
@@ -81,8 +81,8 @@
 %if 0%{?suse_version} = 1210
if [ $1 -eq 0 ] ; then
# Package removal, not upgrade
-   /bin/systemctl --no-reload disable dropbear.service  /dev/null 
21 || :
-   /bin/systemctl stop dropbear.service  /dev/null 21 || :
+   /bin/systemctl --no-reload disable %{name}.service  /dev/null 
21 || :
+   /bin/systemctl stop %{name}.service  /dev/null 21 || :
fi
 %endif
 %stop_on_removal %{name}
@@ -92,7 +92,7 @@
/bin/systemctl daemon-reload /dev/null 21 || :
if [ $1 -ge 1 ] ; then
# Package upgrade, not uninstall
-   /bin/systemctl try-restart dropbear.service /dev/null 21 || :
+   /bin/systemctl try-restart %{name}.service /dev/null 21 || :
fi
 %endif
 %restart_on_update %{name}
@@ -107,10 +107,10 @@
 %{_sbindir}/rcdropbear
 %{_initrddir}/%{name}
 %if 0%{?suse_version} = 1210
-   %{_unitdir}/dropbear.service
+   %{_unitdir}/%{name}.service
%{_unitdir}/dropbear-keygen.service
 %endif
-%dir %{_sysconfdir}/dropbear
+%dir %{_sysconfdir}/%{name}
 %{_localstatedir}/adm/fillup-templates/sysconfig.%{name}
 %{_mandir}/man1/dbclient.1.gz
 %{_mandir}/man8/dropbear.8.gz

++ dropbear-keygen.service ++
--- /var/tmp/diff_new_pack.KpzJbq/_old  2012-07-10 13:41:23.0 +0200
+++ /var/tmp/diff_new_pack.KpzJbq/_new  2012-07-10 13:41:23.0 +0200
@@ -1,5 +1,5 @@
 [Unit]
-Description=Dropbear SSH Key Generatior
+Description=Dropbear SSH Key Generator
 Before=dropbear.service
 ConditionPathExists=!/etc/dropbear/dropbear_rsa_host_key
 ConditionPathExists=!/etc/dropbear/dropbear_dss_host_key

-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

commit dropbear for openSUSE:Factory

2012-07-08 Thread h_root

Hello community,

here is the log from the commit of package dropbear for openSUSE:Factory 
checked in at 2012-07-09 07:56:41

Comparing /work/SRC/openSUSE:Factory/dropbear (Old)
 and  /work/SRC/openSUSE:Factory/.dropbear.new (New)


Package is dropbear, Maintainer is 

Changes:

--- /work/SRC/openSUSE:Factory/dropbear/dropbear.changes2012-06-18 
17:33:39.0 +0200
+++ /work/SRC/openSUSE:Factory/.dropbear.new/dropbear.changes   2012-07-09 
07:56:43.0 +0200
@@ -1,0 +2,17 @@
+Sat Jun 30 11:49:10 UTC 2012 - thard...@suse.com
+
+- added systemd service files for 12.1 and later
+- cleaned up sysconfig and rcdropbear files
+
+---
+Tue Jun 19 12:42:00 UTC 2012 - thard...@suse.com
+
+- added init daemon with key generation option
+- added sysconfig file with default configuration 
+
+---
+Fri Jun 15 09:45:36 UTC 2012 - thard...@suse.com
+
+- updated spec file - changed the group
+
+---

New:

  dropbear-keygen.service
  dropbear.service
  dropbear.sysconfig
  rcdropbear



Other differences:
--
++ dropbear.spec ++
--- /var/tmp/diff_new_pack.oYlLEP/_old  2012-07-09 07:56:46.0 +0200
+++ /var/tmp/diff_new_pack.oYlLEP/_new  2012-07-09 07:56:46.0 +0200
@@ -1,5 +1,5 @@
 #
-# spec file for package 
+# spec file for package dropbear
 #
 # Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
 #
@@ -15,16 +15,28 @@
 # Please submit bugfixes or comments via http://bugs.opensuse.org/
 #
 
+
 Name:   dropbear
 Version:2012.55
 Release:0
+Summary:A relatively small SSH 2 server and client
 License:MIT
+Group:  Productivity/Networking/SSH
 Url:http://matt.ucc.asn.au/dropbear/dropbear.html
+Source0:
http://matt.ucc.asn.au/dropbear/releases/%{name}-%{version}.tar.bz2
+Source1:dropbear.service
+Source2:dropbear-keygen.service
+Source3:dropbear.sysconfig
+Source4:rcdropbear
 BuildRoot:  %{_tmppath}/%{name}-%{version}-build
-BuildRequires:  zlib-devel pam-devel
-Group:  System/Daemons
-Summary:A relatively small SSH 2 server and client
-Source: 
http://matt.ucc.asn.au/dropbear/releases/%{name}-%{version}.tar.bz2
+BuildRequires:  pam-devel
+BuildRequires:  zlib-devel
+Requires(post):%fillup_prereq %insserv_prereq
+%if 0%{?suse_version} = 1210
+Requires(post):systemd
+Requires(preun):   systemd
+Requires(postun):  systemd
+%endif
 
 %description
 Dropbear is a SSH 2 server and client designed to be small enough to be used 
in small memory environments, while still being functional and secure enough 
for general use.
@@ -40,10 +52,51 @@
 
 %install
 make install DESTDIR=%{buildroot}
-install -d -m755 %{buildroot}%{_mandir}/man8/
+install -d %{buildroot}%{_sysconfdir}/dropbear
+install -D -m 0644 %{SOURCE3} 
%{buildroot}%{_localstatedir}/adm/fillup-templates/sysconfig.%{name}
+install -D -m0755 %{SOURCE4} %{buildroot}%{_initrddir}/%{name}
+ln -sf ../../%{_initrddir}/%{name} %{buildroot}%{_sbindir}/rc%{name}
+%if 0%{?suse_version} = 1210
+   # systemd unit files
+   install -d %{buildroot}%{_unitdir}
+   install -m 0644 %{SOURCE1} %{buildroot}%{_unitdir}/dropbear.service
+   install -m 0644 %{SOURCE2} 
%{buildroot}%{_unitdir}/dropbear-keygen.service
+%endif
+install -d %{buildroot}%{_mandir}/man1/
+install -m644 dbclient.1 %{buildroot}%{_mandir}/man1/
+install -d %{buildroot}%{_mandir}/man8/
 install -m644 dropbear.8 %{buildroot}%{_mandir}/man8/
 install -m644 dropbearkey.8 %{buildroot}%{_mandir}/man8/
 
+%post
+%if 0%{?suse_version} = 1210
+   if [ $1 -eq 1 ] ; then 
+   # Initial installation 
+   /bin/systemctl daemon-reload /dev/null 21 || :
+   fi
+%endif
+%{fillup_and_insserv %{name}}
+
+%preun
+%if 0%{?suse_version} = 1210
+   if [ $1 -eq 0 ] ; then
+   # Package removal, not upgrade
+   /bin/systemctl --no-reload disable dropbear.service  /dev/null 
21 || :
+   /bin/systemctl stop dropbear.service  /dev/null 21 || :
+   fi
+%endif
+%stop_on_removal %{name}
+
+%postun
+%if 0%{?suse_version} = 1210
+   /bin/systemctl daemon-reload /dev/null 21 || :
+   if [ $1 -ge 1 ] ; then
+   # Package upgrade, not uninstall
+   /bin/systemctl try-restart dropbear.service /dev/null 21 || :
+   fi
+%endif
+%restart_on_update %{name}
+%insserv_cleanup
 
 %files
 %defattr(-,root,root)
@@ -51,7 +104,16 @@
 %{_bindir}/dropbearconvert
 %{_bindir}/dropbearkey
 %{_sbindir}/dropbear

commit dropbear for openSUSE:Factory

commit dropbear for openSUSE:Factory

commit dropbear for openSUSE:Factory

commit dropbear for openSUSE:Factory

commit dropbear for openSUSE:Factory

commit dropbear for openSUSE:Factory

commit dropbear for openSUSE:Factory

commit dropbear for openSUSE:Factory

commit dropbear for openSUSE:Factory

commit dropbear for openSUSE:Factory

commit dropbear for openSUSE:Factory

commit dropbear for openSUSE:Factory

commit dropbear for openSUSE:Factory

commit dropbear for openSUSE:Factory

commit dropbear for openSUSE:Factory

commit dropbear for openSUSE:Factory

commit dropbear for openSUSE:Factory

commit dropbear for openSUSE:Factory

commit dropbear for openSUSE:Factory

19 matches

Site Navigation

Mail list logo

Footer information