Commit Graph

Select branches

Hide Pull Requests

IBS

PRIVSEP

V_10_0

V_10_1

V_10_2

V_10_3

V_10_4

V_10_5

V_10_6

V_2_5_2

V_2_9_9

V_2_9_P1

V_3_0_2

V_3_2_3

V_3_3

V_3_5

V_3_6

V_3_6_1

V_3_7

V_3_8

V_3_8_1

V_3_9

V_4_0

V_4_1

V_4_2

V_4_3

V_4_4

V_4_5

V_4_6

V_4_7

V_4_9

V_5_3

V_5_4

V_5_6

V_5_8

V_5_9

V_6_0

V_6_2

V_6_3

V_6_4

V_6_5

V_6_6

V_6_7

V_6_8

V_6_9

V_7_0

V_7_1

V_7_2

V_7_3

V_7_4

V_7_5

V_7_6

V_7_7

V_7_8

V_7_9

V_8_0

V_8_1

V_8_2

V_8_3

V_8_4

V_8_5

V_8_6

V_8_7

V_8_8

V_8_9

V_9_0

V_9_1

V_9_2

V_9_3

V_9_4

V_9_5

V_9_6

V_9_7

V_9_8

V_9_9

master

#1

#1/merge

#10

#10/merge

#100

#100/merge

#101

#101/merge

#102

#103

#104

#105

#106

#107

#108

#109

#109/merge

#11

#11/merge

#110

#110/merge

#111

#112

#113

#114

#115

#116

#117

#118

#119

#12

#12/merge

#120

#121

#122

#123

#124

#125

#126

#127

#128

#129

#13

#13/merge

#130

#130/merge

#131

#132

#133

#134

#135

#136

#136/merge

#137

#138

#139

#14

#14/merge

#140

#141

#142

#143

#143/merge

#144

#145

#145/merge

#146

#146/merge

#147

#148

#149

#15

#150

#151

#152

#153

#154

#155

#156

#157

#158

#159

#16

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#170

#171

#172

#173

#174

#175

#176

#176/merge

#177

#177/merge

#178

#179

#179/merge

#18

#18/merge

#180

#181

#182

#182/merge

#183

#184

#185

#186

#187

#188

#189

#19

#19/merge

#190

#190/merge

#191

#192

#192/merge

#194

#195

#196

#197

#198

#199

#199/merge

#2

#2/merge

#20

#20/merge

#200

#201

#202

#203

#204

#204/merge

#205

#206

#207

#208

#209

#209/merge

#21

#21/merge

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#22/merge

#220

#221

#221/merge

#222

#223

#224

#225

#226

#226/merge

#227

#228

#228/merge

#229

#23

#23/merge

#230

#230/merge

#231

#232

#233

#233/merge

#234

#235

#236

#237

#238

#239

#240

#241

#242

#243

#243/merge

#244

#245

#246

#247

#248

#249

#25

#25/merge

#250

#251

#252

#253

#254

#255

#256

#257

#258

#259

#260

#261

#262

#263

#264

#264/merge

#265

#265/merge

#266

#267

#267/merge

#268

#269

#269/merge

#270

#270/merge

#271

#271/merge

#272

#273

#273/merge

#274

#275

#275/merge

#276

#277

#278

#279

#279/merge

#280

#281

#282

#283

#284

#285

#286

#287

#288

#289

#29

#29/merge

#290

#290/merge

#291

#292

#293

#294

#295

#296

#297

#298

#299

#299/merge

#3

#3/merge

#300

#301

#301/merge

#302

#302/merge

#303

#304

#305

#306

#307

#308

#309

#309/merge

#310

#311

#311/merge

#312

#313

#314

#315

#316

#317

#318

#318/merge

#319

#32

#32/merge

#320

#321

#321/merge

#322

#323

#324

#325

#326

#327

#327/merge

#328

#329

#329/merge

#33

#33/merge

#330

#331

#331/merge

#332

#333

#334

#334/merge

#335

#335/merge

#336

#336/merge

#337

#338

#339

#34

#340

#341

#342

#343

#344

#345

#345/merge

#346

#346/merge

#347

#347/merge

#348

#349

#35

#35/merge

#350

#351

#351/merge

#352

#353

#354

#355

#356

#357

#357/merge

#358

#359

#359/merge

#36

#36/merge

#360

#360/merge

#361

#362

#363

#364

#365

#365/merge

#366

#367

#367/merge

#368

#369

#37

#370

#371

#372

#373

#373/merge

#374

#375

#376

#377

#378

#379

#379/merge

#38

#38/merge

#380

#381

#381/merge

#382

#382/merge

#383

#384

#385

#386

#387

#388

#389

#39

#390

#390/merge

#391

#392

#393

#394

#395

#396

#397

#398

#399

#399/merge

#4

#4/merge

#40

#40/merge

#400

#401

#402

#403

#404

#404/merge

#405

#406

#407

#408

#408/merge

#409

#41

#41/merge

#410

#410/merge

#411

#411/merge

#412

#412/merge

#413

#414

#414/merge

#415

#416

#417

#418

#419

#42

#420

#420/merge

#421

#421/merge

#422

#423

#423/merge

#424

#424/merge

#425

#426

#426/merge

#427

#427/merge

#428

#429

#43

#43/merge

#430

#431

#432

#432/merge

#433

#433/merge

#434

#434/merge

#435

#435/merge

#436

#436/merge

#437

#438

#439

#44

#44/merge

#440

#441

#442

#443

#444

#445

#445/merge

#446

#447

#448

#449

#45

#45/merge

#450

#451

#452

#452/merge

#453

#454

#455

#455/merge

#456

#457

#458

#458/merge

#459

#46

#46/merge

#460

#461

#462

#463

#464

#465

#466

#466/merge

#467

#468

#469

#469/merge

#47

#47/merge

#470

#471

#472

#472/merge

#473

#473/merge

#474

#474/merge

#475

#476

#476/merge

#477

#478

#479

#48

#480

#481

#482

#483

#484

#484/merge

#485

#486

#486/merge

#487

#488

#489

#49

#49/merge

#490

#491

#491/merge

#492

#493

#494

#495

#496

#496/merge

#497

#498

#498/merge

#499

#499/merge

#5

#5/merge

#50

#50/merge

#500

#500/merge

#501

#502

#503

#504

#505

#506

#507

#508

#509

#51

#51/merge

#510

#511

#511/merge

#512

#512/merge

#513

#514

#515

#516

#517

#518

#519

#52

#520

#520/merge

#521

#522

#523

#524

#525

#526

#527

#528

#529

#53

#53/merge

#530

#531

#532

#533

#533/merge

#534

#534/merge

#535

#535/merge

#536

#536/merge

#537

#537/merge

#538

#539

#539/merge

#54

#54/merge

#540

#541

#542

#543

#544

#545

#546

#547

#547/merge

#548

#549

#549/merge

#55

#550

#551

#552

#553

#554

#554/merge

#555

#556

#557

#558

#559

#56

#56/merge

#560

#560/merge

#561

#561/merge

#562

#563

#564

#564/merge

#565

#566

#566/merge

#567

#567/merge

#568

#569

#57

#57/merge

#570

#571

#572

#573

#574

#575

#576

#577

#578

#579

#58

#58/merge

#580

#580/merge

#581

#581/merge

#582

#583

#583/merge

#584

#584/merge

#585

#585/merge

#586

#586/merge

#587

#588

#589

#59

#59/merge

#590

#591

#592

#593

#594

#595

#595/merge

#596

#597

#598

#599

#6

#6/merge

#60

#60/merge

#600

#601

#602

#603

#604

#604/merge

#605

#606

#607

#608

#609

#61

#61/merge

#610

#611

#612

#612/merge

#613

#613/merge

#614

#615

#616

#616/merge

#617

#617/merge

#618

#619

#619/merge

#62

#62/merge

#620

#621

#622

#622/merge

#623

#623/merge

#624

#625

#626

#627

#628

#628/merge

#629

#63

#630

#631

#632

#632/merge

#633

#634

#635

#636

#636/merge

#637

#638

#639

#64

#64/merge

#640

#640/merge

#641

#642

#643

#643/merge

#644

#645

#645/merge

#646

#647

#647/merge

#648

#649

#65

#650

#651

#652

#652/merge

#653

#653/merge

#654

#655

#656

#657

#658

#659

#66

#66/merge

#660

#661

#662

#662/merge

#663

#664

#665

#665/merge

#666

#666/merge

#667

#668

#669

#67

#67/merge

#670

#671

#672

#673

#674

#675

#676

#677

#678

#679

#68

#68/merge

#680

#681

#682

#683

#684

#685

#686

#687

#688

#689

#69

#69/merge

#690

#690/merge

#691

#691/merge

#692

#693

#694

#694/merge

#695

#696

#697

#697/merge

#698

#698/merge

#699

#7

#7/merge

#70

#70/merge

#700

#701

#701/merge

#702

#703

#704

#704/merge

#705

#705/merge

#706

#707

#708

#708/merge

#709

#71

#71/merge

#710

#710/merge

#711

#711/merge

#712

#712/merge

#713

#714

#714/merge

#715

#715/merge

#716

#716/merge

#717

#718

#718/merge

#719

#719/merge

#72

#720

#720/merge

#721

#721/merge

#722

#722/merge

#723

#724

#724/merge

#725

#725/merge

#726

#727

#727/merge

#728

#728/merge

#729

#729/merge

#73

#73/merge

#730

#730/merge

#731

#731/merge

#732

#732/merge

#733

#733/merge

#734

#734/merge

#735

#735/merge

#736

#736/merge

#737

#737/merge

#738

#738/merge

#74

#74/merge

#75

#76

#76/merge

#77

#77/merge

#78

#78/merge

#79

#8

#8/merge

#80

#81

#81/merge

#82

#82/merge

#83

#83/merge

#84

#84/merge

#85

#85/merge

#86

#87

#87/merge

#88

#88/merge

#89

#9

#9/merge

#90

#90/merge

#91

#91/merge

#92

#93

#93/merge

#94

#94/merge

#95

#96

#96/merge

#97

#98

#98/merge

#99

#99/merge

ABOUT_TO_ADD_INET_ATON

AFTER_FREEBSD_PAM_MERGE

AFTER_KRB5_GSSAPI_MERGE

BEFORE_FREEBSD_PAM_MERGE

BEFORE_KRB5_GSSAPI_MERGE

POST_KRB4_REMOVAL

PRE-REORDER

PRE_CYGWIN_MERGE

PRE_DAN_PATCH_MERGE

PRE_FIXPATHS_INTEGRATION

PRE_HPUX_INTEGRATION

PRE_IPV6

PRE_KRB4_REMOVAL

PRE_NEW_LOGIN_CODE

PRE_SW_KRBV

V_10_0_P1

V_10_0_P2

V_10_1_P1

V_10_2_P1

V_10_3_P1

V_10_4_P1

V_10_5_P1

V_10_6_P1

V_1_2PRE17

V_1_2_1_PRE18

V_1_2_1_PRE19

V_1_2_1_PRE20

V_1_2_1_PRE21

V_1_2_1_PRE22

V_1_2_1_PRE23

V_1_2_1_PRE24

V_1_2_1_PRE25

V_1_2_1_PRE26

V_1_2_1_PRE27

V_1_2_2

V_1_2_2_P1

V_1_2_2_PRE28

V_1_2_2_PRE29

V_1_2_3

V_1_2_3_PRE1

V_1_2_3_PRE2

V_1_2_3_PRE3

V_1_2_3_PRE4

V_1_2_3_PRE5

V_1_2_3_TEST1

V_1_2_3_TEST2

V_1_2_3_TEST3

V_1_2_PRE10

V_1_2_PRE11

V_1_2_PRE12

V_1_2_PRE13

V_1_2_PRE14

V_1_2_PRE15

V_1_2_PRE16

V_1_2_PRE3

V_1_2_PRE4

V_1_2_PRE5

V_1_2_PRE6

V_1_2_PRE7

V_1_2_PRE8

V_1_2_PRE9

V_2_0_0_BETA1

V_2_0_0_BETA2

V_2_0_0_TEST1

V_2_1_0

V_2_1_0_P1

V_2_1_0_P2

V_2_1_0_P3

V_2_1_1_P1

V_2_1_1_P2

V_2_1_1_P3

V_2_1_1_P4

V_2_2_0_P1

V_2_3_0_P1

V_2_5_0_P1

V_2_5_1_P1

V_2_5_1_P2

V_2_5_2_P1

V_2_5_2_P2

V_2_9_9_P1

V_2_9_9_P2

V_2_9_P2

V_3_0_1_P1

V_3_0_2_P1

V_3_0_P1

V_3_1_P1

V_3_2_2_P1

V_3_2_3_P1

V_3_3_P1

V_3_4_P1

V_3_5_P1

V_3_6_1_P1

V_3_6_1_P2

V_3_6_P1

V_3_7_1_P1

V_3_7_1_P2

V_3_7_P1

V_3_8_1_P1

V_3_8_P1

V_3_9_P1

V_4_0_P1

V_4_1_P1

V_4_2_P1

V_4_3_P1

V_4_3_P2

V_4_4_P1

V_4_5_P1

V_4_6_P1

V_4_7_P1

V_4_9_P1

V_5_0_P1

V_5_1_P1

V_5_2_P1

V_5_3_P1

V_5_4_P1

V_5_5_P1

V_5_6_P1

V_5_7_P1

V_5_8_P1

V_5_8_P2

V_5_9_P1

V_6_0_P1

V_6_1_P1

V_6_2_P1

V_6_2_P2

V_6_3_P1

V_6_4_P1

V_6_5_P1

V_6_6_P1

V_6_7_P1

V_6_8_P1

V_6_9_P1

V_7_0_P1

V_7_1_P1

V_7_1_P2

V_7_2_P1

V_7_2_P2

V_7_3_P1

V_7_4_P1

V_7_5_P1

V_7_6_P1

V_7_7_P1

V_7_8_P1

V_7_9_P1

V_8_0_P1

V_8_1_P1

V_8_2_P1

V_8_3_P1

V_8_4_P1

V_8_5_P1

V_8_6_P1

V_8_7_P1

V_8_8_P1

V_8_9_P1

V_9_0_P1

V_9_1_P1

V_9_2_P1

V_9_3_P1

V_9_3_P2

V_9_4_P1

V_9_5_P1

V_9_6_P1

V_9_7_P1

V_9_8_P1

V_9_9_P1

V_9_9_P2

Mono Color

• b5f711c496 include stdlib.h for free/freezero anongit/V_10_6 V_10_6 Michael Forney 2026-11-06 08:31:32 +11:00
• 102bee7f3a include stdlib.h for free/freezero master anongit/master Michael Forney 2026-11-06 08:31:32 +11:00
• d449e662b6 version github/V_10_6 github-selfhosted/V_10_6 Damien Miller 2026-11-05 10:57:15 +11:00
• f78fc73d31 version github/master github-selfhosted/master Damien Miller 2026-11-05 10:57:15 +11:00
• 3e29b958f6 RPM specs Damien Miller 2026-11-05 08:21:41 +11:00
• 3e616e0e8d depend Damien Miller 2026-11-05 08:58:45 +11:00
• 90f9c2f733 avoid password authn bypass Damien Miller 2026-11-05 08:18:18 +11:00
• c5cd8e8ccf depend Damien Miller 2026-11-05 08:58:10 +11:00
• 4353fdc43e avoid password authn bypass Damien Miller 2026-11-05 08:18:18 +11:00
• cc01f2363f RPM specs Damien Miller 2026-11-05 08:21:41 +11:00
• 3c6ec4c637 Save generated Makefile in logs on failure. Darren Tucker 2026-11-03 19:24:38 +11:00
• b79cb50c07 Update LibreSSL/OpenSSL versions tested against. Darren Tucker 2026-11-03 19:22:44 +11:00
• 4001f0adac upstream: Use ssh -Q addressfamily to determine if IPv6 is supported. dtucker@openbsd.org 2026-11-02 07:06:52 +00:00
• dec6e9e8ee Add hostkey_untrusted to fix build error. Darren Tucker 2026-11-02 18:26:40 +11:00
• 57fdc25ae9 Omit "inet6" from ssh -Qaddressfamily when unsupported Darren Tucker 2026-11-02 18:13:17 +11:00
• 0887340b43 upstream: Add ssh -Q addressfamily. ok djm@ dtucker@openbsd.org 2026-11-02 06:49:42 +00:00
• 511fcdc77d upstream: Move state sanity check to before potential use. CID dtucker@openbsd.org 2026-10-31 03:29:22 +00:00
• 721ad09d84 Disable IPv6 on aix51 test target. Darren Tucker 2026-11-01 09:14:17 +11:00
• 7413fddf8d Add hostkey_trusted to fix build error. Darren Tucker 2026-10-31 14:37:15 +11:00
• 0a49e4e883 Remove macos-14 as the runners are being retired. Darren Tucker 2026-10-31 14:20:03 +11:00
• 1fbdcb4025 Supply RSA limit params for BoringSSL/AWS-LC. Darren Tucker 2026-10-31 08:49:44 +11:00
• 61ead74082 upstream: regress test for AuthorizedPrincipalsCommand with no djm@openbsd.org 2026-10-30 09:05:12 +00:00
• 0ce209a1ca upstream: regress test for properly-delimited %C token djm@openbsd.org 2026-10-30 08:43:39 +00:00
• 65390d6328 upstream: regress test for "PubkeyAcceptedAlgorithms -*" and djm@openbsd.org 2026-10-30 08:12:58 +00:00
• d1d196070f upstream: unit test for accepting @revoked with tab separation djm@openbsd.org 2026-10-30 07:50:02 +00:00
• 9f95a516c8 upstream: regress test for ForkAfterAuthentication implying djm@openbsd.org 2026-10-30 06:41:17 +00:00
• 913d517fa2 upstream: regess test for link-local address without scope acting djm@openbsd.org 2026-10-30 06:25:27 +00:00
• 21b22540cb upstream: test for %C containing ProxyJump user/port/extra djm@openbsd.org 2026-10-30 04:16:47 +00:00
• 1bb37a9aac upstream: regression test for sshkey_check_rsa_length() checking CA djm@openbsd.org 2026-10-30 01:37:30 +00:00
• 1aacf10731 upstream: make a AuthorizedPrincipalsCommand with no specified djm@openbsd.org 2026-10-30 09:04:01 +00:00
• 9006a5d709 upstream: check RSA keys decoded from PEM against our hard size djm@openbsd.org 2026-10-30 09:02:03 +00:00
• 6321396a87 upstream: when updating known_hosts files for UpdateHostKeys, djm@openbsd.org 2026-10-30 09:00:39 +00:00
• bc01263f1f upstream: when uploading/crossloading, prefer to use LSETSTAT as djm@openbsd.org 2026-10-30 08:53:23 +00:00
• 00bc2a1124 upstream: nul-delemit the concatenation of user/hosts/port/etc djm@openbsd.org 2026-10-30 08:42:29 +00:00
• 83eeaca768 upstream: when StrictHostkeyChecking=no and an changed/revoked djm@openbsd.org 2026-10-30 08:39:48 +00:00
• 170dfa9cdd upstream: more completely close mux fds when the owning process djm@openbsd.org 2026-10-30 08:27:49 +00:00
• bb7ffdd796 upstream: check for errors when writing known_hosts files and djm@openbsd.org 2026-10-30 08:23:58 +00:00
• c914c757ef upstream: @revoked markers in known_hosts should apply to djm@openbsd.org 2026-10-30 08:21:42 +00:00
• e49312d045 upstream: ssh -Z is intended to be a purely local operation and djm@openbsd.org 2026-10-30 08:19:30 +00:00
• 45533eb438 upstream: be more careful when killing a ProxyCommand (including djm@openbsd.org 2026-10-30 08:17:19 +00:00
• c41a6c4371 upstream: Correctly error on a algorithm allowlist that removes djm@openbsd.org 2026-10-30 08:11:21 +00:00
• c30113f351 upstream: set a glob(3) error callback when globbing Include djm@openbsd.org 2026-10-30 08:07:36 +00:00
• 5c90a1d90e upstream: be more liberal in accepting tab-separated @revoked djm@openbsd.org 2026-10-30 07:48:23 +00:00
• 0e875c2d75 upstream: make ssh-keygen -H (hash a known_hosts file) also djm@openbsd.org 2026-10-30 07:46:41 +00:00
• 025a8a72ba upstream: fix CheckHostIP yes bypass in cases where a server djm@openbsd.org 2026-10-30 07:44:23 +00:00
• 1ec60f13ce upstream: fix a case where a mux proxy supporting a local (-D or djm@openbsd.org 2026-10-30 07:30:52 +00:00
• e3c9ed5ad4 upstream: sanitise some peer-provided strings that get written in djm@openbsd.org 2026-10-30 07:25:33 +00:00
• 69ccd0ff21 upstream: disallow remote removal of PKCS#11 providers from djm@openbsd.org 2026-10-30 07:18:18 +00:00
• cbd955ef9e upstream: when CheckHostIP=yes, ensure a known_hosts @revoked djm@openbsd.org 2026-10-30 07:12:55 +00:00
• 35ee7aad77 upstream: %C token documentation had local host/port and remote djm@openbsd.org 2026-10-30 07:02:23 +00:00
• 42751c85c5 upstream: force hostnames modified by CanonicalizePermittedCNAMEs djm@openbsd.org 2026-10-30 06:47:17 +00:00
• ebc833d1a1 upstream: make ForkAfterAuthentication=yes imply StdinNull=yes. djm@openbsd.org 2026-10-30 06:40:58 +00:00
• 3b42f3a2f4 upstream: fix inconsistency between unpriv hostbased code and djm@openbsd.org 2026-10-30 06:35:25 +00:00
• d62150ded3 upstream: Make @revoked keys in known_hosts apply to the host djm@openbsd.org 2026-10-30 06:31:49 +00:00
• 09e6d6be23 upstream: treat unscoped IPv6 link-local addresses as having djm@openbsd.org 2026-10-30 06:24:55 +00:00
• 99b84cbe66 upstream: add warning not to use Match exec in djm@openbsd.org 2026-10-30 06:03:54 +00:00
• da7fad2165 upstream: ssh-keysign identifies the name that it will sign a djm@openbsd.org 2026-10-30 05:52:02 +00:00
• 41ca97b4cc upstream: used cached hostname for Match host when UseDNS=yes; djm@openbsd.org 2026-10-30 05:38:16 +00:00
• 271edd1ee6 upstream: Add RBTREE index over keyblob for KRL CA sections djm@openbsd.org 2026-10-30 05:33:18 +00:00
• 2c34666e08 upstream: don't let SSH_MSG_PONG replies pile up if the peer djm@openbsd.org 2026-10-30 05:21:48 +00:00
• 097af23b8c upstream: ratelimit refused forwarding logs to avoid endless djm@openbsd.org 2026-10-30 05:16:48 +00:00
• b3325c708a upstream: check return value of sftp_glob() to avoid potential djm@openbsd.org 2026-10-30 04:54:01 +00:00
• 2247550884 upstream: make StrictModes apply to ~/.k5login and the home djm@openbsd.org 2026-10-30 04:52:11 +00:00
• a73db88df0 upstream: avoid fatal() if a PKCS#11 key was added multiple times djm@openbsd.org 2026-10-30 04:48:41 +00:00
• a76fb3adab upstream: terminate monitor when auth options merge fails; avoids djm@openbsd.org 2026-10-30 04:40:03 +00:00
• d373555d64 upstream: only replace prior auth_opts if merging later ones djm@openbsd.org 2026-10-30 04:39:16 +00:00
• f7a2c31dbf upstream: make strict KEX errors return an error rather than djm@openbsd.org 2026-10-30 04:36:21 +00:00
• c0ea89627a upstream: fix ChannelTimeout for PermitTunnel forwardings. These djm@openbsd.org 2026-10-30 04:25:21 +00:00
• 7b2fd9baa6 upstream: apply the existing limit for destination constraint djm@openbsd.org 2026-10-30 04:22:15 +00:00
• d71cc75c99 upstream: include the entire ProxyJump specification in the %j djm@openbsd.org 2026-10-30 04:14:37 +00:00
• ea1b64a404 upstream: enforce a global limit on the number of keys ssh-agent djm@openbsd.org 2026-10-30 04:08:33 +00:00
• da04dd48ee upstream: make ssh-keygen -Q check all pubkeys in a file, djm@openbsd.org 2026-10-30 03:47:56 +00:00
• 5c5fd68bbf upstream: harden privsep monitor: enforce CASignatureAlgorithms djm@openbsd.org 2026-10-30 03:44:02 +00:00
• 07e9138c87 upstream: grow destination buffer more aggressively to avoid bad djm@openbsd.org 2026-10-30 03:40:56 +00:00
• e7b23fc20f upstream: make RevokedKeys none inside a Match block do what djm@openbsd.org 2026-10-30 03:28:03 +00:00
• 78e3be233b upstream: don't try to print private key in `ssh-keygen -e -m djm@openbsd.org 2026-10-30 03:24:23 +00:00
• 8da33d6da8 upstream: harden private key serialisation API to avoid NULL djm@openbsd.org 2026-10-30 03:22:47 +00:00
• 81e0e4348e upstream: make ConnectTimeout apply to the initial KEX as ssh.1 djm@openbsd.org 2026-10-30 03:20:00 +00:00
• 98ce8b4985 upstream: don't count time spent in getaddrinfo() or obtaining djm@openbsd.org 2026-10-30 03:13:52 +00:00
• 76e0390ef6 upstream: better accounting when the peer exceeds it channel djm@openbsd.org 2026-10-30 02:59:36 +00:00
• ea2111b562 upstream: clean up Kerberos ccache if KerberosAuthentication djm@openbsd.org 2026-10-30 02:31:35 +00:00
• 9c65c2806c upstream: missing header djm@openbsd.org 2026-10-30 02:28:56 +00:00
• 9fccb0976b upstream: don't print stack garbage as a file's size in sftp `ls djm@openbsd.org 2026-10-30 02:24:52 +00:00
• 9327423571 upstream: disallow use of certificates signed with RSA/SHA1 in djm@openbsd.org 2026-10-30 02:18:03 +00:00
• 137e0ed524 upstream: avoid debug message printing past the end of an djm@openbsd.org 2026-10-30 02:15:00 +00:00
• b22dfc2854 upstream: avoid pty fd leak if a session is opened, a pty is djm@openbsd.org 2026-10-30 02:11:00 +00:00
• 53c77f1bc3 upstream: have unpriv process reject oversize DH-GEX groups djm@openbsd.org 2026-10-30 02:08:03 +00:00
• 340865c6e6 upstream: avoid fatal() exit of ssh-pkcs11-helper if asked to djm@openbsd.org 2026-10-30 02:02:22 +00:00
• ea370e65cf upstream: make UnusedConnectionTimeout and FingerprintHash djm@openbsd.org 2026-10-30 01:55:19 +00:00
• 3e2bbf8711 upstream: enforce some basic size and consistency checks on RSA djm@openbsd.org 2026-10-30 01:45:14 +00:00
• 551a528f05 upstream: don't leave ssh-agent is a useless state if `ssh-add djm@openbsd.org 2026-10-30 01:41:01 +00:00
• 409167b833 upstream: make RequiredRSASize apply to CA keys too djm@openbsd.org 2026-10-30 01:34:10 +00:00
• 49e412eab4 upstream: make gssapi-with-mic with malformed OIDs count against djm@openbsd.org 2026-10-30 01:30:55 +00:00
• 0630d978f1 upstream: clean up properly when stopping the progress meter, djm@openbsd.org 2026-10-30 01:26:02 +00:00
• d3bdf031d1 upstream: set an upper limit on the size of env names/values that djm@openbsd.org 2026-10-30 01:23:12 +00:00
• 2874152191 upstream: correct timeout accounting for ConnectTimeout and djm@openbsd.org 2026-10-30 01:16:44 +00:00
• 9ca942330f upstream: avoid spurious disconnect if connecting as root with djm@openbsd.org 2026-10-30 00:58:02 +00:00
• 37bb397d9a upstream: make ssh-keygen -lf /key more strict on detecting the djm@openbsd.org 2026-10-29 23:12:32 +00:00
• fafcaf8793 upstream: error on overlong paths rather than truncating. djm@openbsd.org 2026-10-29 23:07:43 +00:00
• f595d60bfd upstream: avoid input overrun when quoted argument ends in a djm@openbsd.org 2026-10-29 23:04:20 +00:00