Lines Matching refs:upstream
17 upstream: openssh-9.7
42 upstream: avoid logging in signal handler by converting mainloop to
52 upstream: skip more whitespace, fixes find-principals on
62 upstream: Invoke ProxyCommand that uses stderr redirection via
82 upstream: fix memory leak in mux proxy mode when requesting forwarding.
92 upstream: wrap a few PKCS#11-specific bits in ENABLE_PKCS11
118 upstream: fix leak of CanonicalizePermittedCNAMEs on error path;
128 upstream: Separate parsing of string array options from applying them
157 upstream: explain arguments of internal-sftp GHPR#454 from Niklas
170 upstream: clarify permissions requirements for ChrootDirectory Part
183 upstream: .Cm for a keyword. Part of GHPR#454 from Niklas Hambüchen
191 upstream: fix typo in match directive predicate (s/tagged/tag) GHPR#462
201 upstream: fix proxy multiplexing mode, broken when keystroke timing
211 upstream: don't append a gratuitous space to the end of subsystem
221 upstream: Always define puttysetup function.
229 upstream: Exapnd PuTTY test coverage.
240 upstream: Factor out PuTTY setup.
253 upstream: clean sshd random relinking kit; ok miod@
261 upstream: whitespace
313 upstream: whitespace
330 upstream: don't disable RSA test when DSA is disabled; bug introduced
340 upstream: make DSA testing optional, defaulting to on
350 upstream: ensure key_fd is filled when DSA is disabled; spotted by
360 upstream: make DSA key support compile-time optional, defaulting to
372 upstream: fix incorrect capitalisation;
380 upstream: extend ChannelTimeout regression test to exercise multiplexed
390 upstream: add a "global" ChannelTimeout type to ssh(1) and sshd(8)
409 upstream: adapt ssh_api.c code for kex-strict
441 upstream: Remove outdated note from PROTOCOL.mux
454 upstream: fix missing field in [email protected] reply
466 upstream: make kex-strict section more explicit about its intent:
499 upstream: remove ext-info-* in the kex.c code, not in callers;
509 upstream: fix typo; spotted by Albert Chin
517 upstream: Import regenerated moduli.
525 upstream: spelling; ok markus@
533 upstream: sort -C, and add to usage(); ok djm
541 upstream: correct section numbers; from Ed Maste
549 upstream: match flag type (s/int/u_int)
586 upstream: regress test for agent PKCS#11-backed certificates
594 upstream: regress test for constrained PKCS#11 keys
602 upstream: openssh-9.6
610 upstream: ssh-agent: record failed session-bind attempts
630 upstream: ban user/hostnames with most shell metacharacters
660 upstream: stricter handling of channel window limits
676 upstream: Make it possible to load certs from PKCS#11 tokens
689 upstream: apply destination constraints to all p11 keys
701 upstream: add "[email protected]" extension
720 upstream: implement "strict key exchange" in ssh and sshd
747 upstream: when invoking KnownHostsCommand to determine the order of
763 upstream: prevent leak in sshsig_match_principals; ok djm@
771 upstream: short circuit debug log processing early if we're not going
796 upstream: Plug mem leak of msg when processing a quit message.
806 upstream: Include existing mux path in debug message.
894 upstream: set errno=EAFNOSUPPORT when filtering addresses that don't
905 upstream: when connecting via socket (the default case), filter
917 upstream: when deciding whether to enable keystroke timing
930 upstream: Make sure sftp_get_limits() only returns 0 if 'limits'
952 upstream: Specify ssh binary to use
973 upstream: add some tests of forced commands overriding Subsystem
983 upstream: Don't try to use sudo inside sshd log wrapper.
998 upstream: Only try to chmod logfile if we have sudo. If we don't have
1008 upstream: move PKCS#11 setup code to test-exec.sh so it can be reused
1018 upstream: tidy and refactor PKCS#11 setup code
1064 upstream: Only try to chown logfiles that exist to prevent spurious
1074 upstream: make use of bsd.regress.mk in extra and interop targets; ok
1084 upstream: Skip conch interop tests when not enabled instead of fatal.
1092 upstream: Import regenerated moduli.
1100 upstream: ssh conch interop tests requires a controlling terminal;
1110 upstream: Use private key that is allowed by sshd defaults in conch
1128 Resync PuTTY and Conch path handling with upstream.
1146 upstream: Allow overriding the locations of the Dropbear binaries
1156 upstream: Add interop test with Dropbear.
1187 upstream: Move declaration of "len" into the block where it's used.
1224 upstream: typos and extra debug trace calls
1232 upstream: ensure logs are owned by correct user; feedback/ok
1242 upstream: 64 %-expansion keys ought to be enough for anybody; ok
1252 upstream: don't dereference NULL pointer when hashing jumphost
1269 upstream: add %j token that expands to the configured ProxyJump
1280 upstream: release GSS OIDs only at end of authentication; bz2982,
1290 upstream: mask SIGINT/TERM/QUIT/HUP before checking quit_pending
1301 upstream: sync usage() with ssh.1; spotted by kn@
1309 upstream: ssh -Q does not make sense with other command-line options,
1319 upstream: add ChannelTimeout support to the client, mirroring the
1329 upstream: add support for reading ED25519 private keys in PEM PKCS8
1339 upstream: mention "none" is a valid argument to IdentityFile; bz3080
1347 upstream: in olde rcp/scp protocol mode, when rejecting a path from the
1359 upstream: s/%.100s/%s/ in SSH- banner construction as there's no
1370 upstream: Garbage collect cipher_get_keyiv_len()
1382 upstream: Reserve a range of "local extension" message numbers that
1392 upstream: typo in error message
1400 upstream: Perform the softhsm2 setup as discrete steps rather than
1411 upstream: REGRESS_FAIL_EARLY defaults to yes now. So no need to
1421 upstream: spelling fix;
1435 upstream: openssh-9.5
1443 upstream: add some cautionary text about % token expansion and
1453 upstream: fix link to agent draft; spotted by Jann Horn
1469 upstream: typo; from Jim Spath
1477 upstream: rename remote_glob() -> sftp_glob() to match other API
1485 upstream: typo in comment
1496 corresponding upstream clang versions. Unfortunately, they do still
1506 upstream: randomise keystroke obfuscation intervals and average
1516 upstream: fix sizeof(*ptr) instead sizeof(ptr) in realloc (pointer here
1526 upstream: regress test recursive remote-remote directories copies where
1538 upstream: fix recursive remote-remote copies of directories that
1548 upstream: regress test for recursive copies of directories containing
1558 upstream: the sftp code was one of my first contributions to
1574 upstream: fix scp in SFTP mode recursive upload and download of
1585 upstream: regression test for override of subsystem in match blocks
1593 upstream: allow override of Sybsystem directives in sshd Match
1603 upstream: allocate the subsystems array as necessary and remove the
1614 upstream: preserve quoting of Subsystem commands and arguments.
1625 upstream: downgrade duplicate Subsystem directives from being a
1636 upstream: handle cr+lf (instead of just cr) in sshsig signature
1646 upstream: Generate Ed25519 keys when invoked without arguments
1659 upstream: trigger keystroke timing obfucation only if the channels
1674 upstream: avoid bogus "obfuscate_keystroke_timing: stopping ..."
1685 upstream: make channel_output_poll() return a flag indicating
1696 upstream: set interactive mode for ControlPersist sessions if they
1717 upstream: make PerSourceMaxStartups first-match-wins; ok dtucker@
1725 upstream: descriptive text shouldn't be under .Cm
1733 upstream: limit artificial login delay to a reasonable maximum (5s)
1744 upstream: add spacing for punctuation when macro args;
1752 upstream: explicit long long type in timing calculations (doesn't
1762 upstream: Add keystroke timing obfuscation to the client.
1778 upstream: Introduce a transport-level ping facility
1793 upstream: Log errors in kex_exchange_identification() with level
1807 upstream: correct math for ClientAliveInterval that caused the
1845 upstream: want stdlib.h for free(3)
1867 upstream: fix regression in OpenSSH 9.4 (mux.c r1.99) that caused
1878 upstream: defence-in-depth MaxAuthTries check in monitor; ok markus
1886 upstream: add message number of SSH2_MSG_NEWCOMPRESS defined in RFC8308
1900 upstream: better debug logging of sessions' exit status
1908 upstream: drop a wayward comma, ok jmc@
1934 upstream: openssh-9.4
1954 upstream: Apply ConnectTimeout to multiplexing local socket
1976 upstream: CheckHostIP has defaulted to 'no' for a while; make the
1986 upstream: remove unnecessary if statement.
1996 upstream: %C is a callable macro in mdoc(7)
2006 upstream: don't need to start a command here; use ssh -N instead.
2016 upstream: add LTESTS_FROM variable to allow skipping of tests up to
2027 upstream: test ChrootDirectory in Match block
2035 upstream: better error messages
2043 upstream: don't incorrectly truncate logged strings retrieved from
2053 upstream: make sshd_config AuthorizedPrincipalsCommand and
2064 upstream: increase default KDF work-factor for OpenSSH format
2099 upstream: make ssh -f (fork after authentication) work properly in
2110 upstream: man page typos; ok jmc@
2118 upstream: tweak the allow-remote-pkcs11 text;
2146 upstream: Separate ssh-pkcs11-helpers for each p11 module
2166 upstream: Ensure FIDO/PKCS11 libraries contain expected symbols
2180 upstream: Disallow remote addition of FIDO/PKCS11 provider
2199 upstream: terminate process if requested to load a PKCS#11 provider
2231 upstream: missing match localnetwork negation check
2239 upstream: - add -P to usage() - sync the arg name to -J in usage()
2249 upstream: -P before -p in SYNOPSIS;
2257 upstream: configuation -> configuration
2265 upstream: move other RCSIDs to before their respective license blocks
2275 upstream: Move RCSID to before license block and away from #includes,
2285 upstream: return SSH_ERR_KRL_BAD_MAGIC when a KRL doesn't contain a
2302 upstream: Add support for configuration tags to ssh(1).
2317 upstream: add a "match localnetwork" predicate.
2332 upstream: remove vestigal support for KRL signatures
2352 upstream: Support for KRL extensions.
2366 upstream: Include stdint.h for SIZE_MAX. Fixes OPENSSL=no build.
2389 upstream: add defence-in-depth checks for some unreachable integer
2399 upstream: misplaced debug message
2419 upstream: minleft and maxsign are u_int so cast appropriately. Prompted
2429 upstream: add support for unix domain sockets to ssh -W
2467 upstream: better validate CASignatureAlgorithms in ssh_config and
2482 upstream: make `ssh -Q CASignatureAlgorithms` only list signature
2494 upstream: handle rlimits > INT_MAX (rlim_t is u64); ok dtucker
2504 upstream: prepare for support for connecting to unix domain sockets
2516 upstream: reset comment=NULL for each key in do_fingerprint();
2528 upstream: Store timeouts as int, not u_int as they are limited to
2668 upstream: fix AuthorizedPrincipalsCommand when AuthorizedKeysCommand
2679 upstream: Remove unused prototypes for ssh1 RSA functions.
2744 upstream: Import regenerated moduli.
2760 upstream: adjust ftruncate() logic to handle servers that reorder
2782 upstream: Check for ProxyJump=none in CanonicalizeHostname logic.
2795 upstream: remove duplicate signal.h include
2803 upstream: fix double words ok dtucker@
2826 upstream: simplify sshsig_find_principals() similar to what happened to
2836 upstream: remove redundant ssh!=NULL check; we'd already
2846 upstream: match_user() shouldn't be called with user==NULL unless
2856 upstream: don't care about glob() return value here.
2864 upstream: Move up null check and simplify process_escapes.
2885 upstream: Explicitly ignore return from waitpid here too.
2893 upstream: Explictly ignore return codes
2903 upstream: Return immediately from get_sock_port
2914 upstream: don't leak arg2 on parse_pubkey_algos error path; ok
2924 upstream: clamp max number of GSSAPI mechanisms to 2048; ok dtucker
2932 upstream: don't print key if printing hostname failed; with/ok
2942 upstream: remove redundant test
2950 upstream: don't attempt to decode a ridiculous number of
2960 upstream: remove unused variable; prompted by Coverity CID 291879
2968 upstream: Check fd against >=0 instead of >0 in error path. The
2979 upstream: Ignore return value from muxclient(). It normally loops
2998 upstream: return SSH_ERR_KEY_NOT_FOUND if the allowed_signers file
3009 upstream: Remove dead code from inside if block.
3030 upstream: Ignore return from sshpkt_disconnect
3041 upstream: Plug potential mem leak in process_put.
3052 upstream: fix memory leak; Coverity CID 291848
3062 upstream: Plug more mem leaks in sftp by making
3075 upstream: Remove compat code for OpenSSL < 1.1.*
3085 upstream: Remove compat code for OpenSSL 1.0.*
3140 upstream: Add RevokedHostKeys to percent expansion test.
3148 upstream: Add tilde and environment variable expansion to
3158 upstream: fix test: getnameinfo returns a non-zero value on error, not
3168 upstream: scp: when copying local->remote, check that source file
3300 upstream: openssh-9.3
3308 upstream: Free KRL ptr in addition to its contents.
3318 upstream: Check pointer for NULL before deref.
3329 upstream: Limit number of entries in SSH2_MSG_EXT_INFO
3340 upstream: calloc can return NULL but xcalloc can't.
3350 upstream: Explicitly ignore return from fcntl
3368 upstream: Plug mem leak on error path. Coverity CID 405026, ok djm@.
3384 upstream: Expliticly ignore return code from fcntl(.. FD_CLOEXEC) since
3394 upstream: Like sshd_config, some ssh_config options are not
3405 upstream: Remove no-op (int) > INT_MAX checks
3425 upstream: modify parentheses in conditionals to make it clearer what is
3437 upstream: Re-split the merge of the reorder-hostkeys test.
3450 upstream: include destination constraints for smartcard keys too.
3477 upstream: Plug mem leak. Coverity CID 405196, ok djm@
3485 upstream: ssh-pkcs11: synchronize error messages with errors
3498 upstream: Delete obsolete /* ARGSUSED */ lint comments.
3514 upstream: use RSA/SHA256 when testing usability of private key in
3524 upstream: use RSA/SHA256 when testing usability of private key;
3534 upstream: refactor to be more readable top to bottom. Prompted by
3550 upstream: Fix mem leak in environment setup.
3560 upstream: Unit test for kex_proposal_populate_entries.
3568 upstream: fix memory leak in process_read() path; Spotted by James
3578 upstream: correct size for array argument when changing
3588 upstream: Refactor creation of KEX proposal.
3602 upstream: Fix mem and FILE leaks in moduli screening.
3614 upstream: Plug mem leak in moduli checkpoint option parsing.
3624 upstream: Remove unused compat.h includes.
3636 upstream: Use time_t for x11 timeout.
3647 upstream: Ensure ms_remain is always initialized
3658 upstream: Check for non-NULL before string
3668 upstream: guard against getsockname(-1, ...) from Coverity CID
3678 upstream: some options are not first-match-wins. Mention that there
3689 upstream: actually print "channeltimeout none" in config dump mode;
3705 upstream: Check return values of dup2. Spotted by Coverity, ok djm@
3713 upstream: Use time_t for x11_refuse_time timeout. We need
3724 upstream: Check return value from fctnl and warn on failure.
3734 upstream: Remove SUDO in proxy command wrapper. Anything that needs
3744 upstream: Fix breakage on dhgex test.
3757 upstream: Quote grep and log message better.
3765 upstream: Always call fclose on checkpoints.
3777 upstream: Remove old log symlinks
3794 upstream: Rework logging for the regression tests.
3816 upstream: fatal out if allocating banner string fails to avoid
3826 upstream: Explicitly ignore return from fchmod
3836 upstream: Plug mem leak on globbed ls error path.
3902 upstream: fix progressmeter corruption on wide displays; bz3534
3912 upstream: fseek to end of known_hosts before writing to it.
3957 upstream: Remove now-unused compat bit SSH_BUG_RSASIGMD5. The code
3968 upstream: Remove now-unused compat bit SSH_BUG_BIGENDIANAES. This
3991 upstream: Remove SSH_BUG_PASSWORDPAD compat bit
4001 upstream: Remove SSH_BUG_IGNOREMSG compat flag
4012 upstream: space between macro and punctuation; sort usage();
4020 upstream: space between macro and punctuation;
4028 upstream: sort SYNOPSIS;
4046 upstream: test -Ohashalg=... and that the default output contains both
4056 upstream: let ssh-keygen and ssh-keyscan accept
4067 upstream: add a `sshd -G` option that parses and prints the
4081 upstream: make `ssh -Q CASignatureAlgorithms` work as the manpage says
4097 upstream: Test adding terminating newline to known_hosts.
4105 upstream: ssh-agent doesn't actually take -v,
4116 upstream: Ensure that there is a terminating newline when adding a new
4174 upstream: test compat_kex_proposal(); by dtucker@
4182 upstream: Check if we can copy sshd or need to use sudo to do so
4193 upstream: openssh-9.2
4201 upstream: fix double-free caused by compat_kex_proposal(); bz3522
4230 upstream: delete useless dependency
4238 upstream: Create and install sshd random relink kit.
4254 upstream: tweak previous; ok djm
4280 upstream: when restoring non-blocking mode to stdio fds, restore
4293 upstream: Add a -V (version) option to sshd like the ssh client
4303 upstream: For "ssh -V" always exit 0, there is no need to check opt
4314 upstream: also check that an active session inhibits
4324 upstream: regression test for UnusedConnectionTimeout
4332 upstream: unbreak test: cannot access shell positional parameters
4342 upstream: Add a sshd_config UnusedConnectionTimeout option to terminate
4356 upstream: adapt to ed25519 changes in src/usr.bin/ssh
4364 upstream: update OpenSSH's Ed25519 code to the last version of SUPERCOP
4387 upstream: Shell syntax fix. From ren mingshuai vi github PR#369.
4395 upstream: Instead of skipping the all-tokens test if we don't have
4406 upstream: fix double phrase in previous;
4414 upstream: Document "UserKnownHostsFile none". ok djm@
4432 upstream: Move scp path setting to a helper function. The previous
4444 upstream: Add scp's path to test sshd's PATH.
4466 upstream: Add a "Host" line to the output of ssh -G showing the
4477 upstream: avoid printf("%s", NULL) if using ssh
4488 upstream: clamp the minimum buffer lengths and number of inflight
4498 upstream: ignore bogus upload/download buffer lengths in the limits
4508 upstream: remove whitespace at EOL from code extracted from SUPERCOP
4516 upstream: rewrite this test to use a multiplexed ssh session so we can
4545 upstream: Switch scp from using pipes to a socketpair for
4558 upstream: tweak previous; ok djm
4592 upstream: When OpenSSL is not available, skip parts of percent test
4634 upstream: Save debug logs from ssh for debugging purposes.
4642 upstream: regression test for ChannelTimeout
4650 upstream: fix typo in verbose logging
4658 upstream: unit tests for misc.c:ptimeout_* API
4666 upstream: Copy bytes from the_banana[] rather than banana()
4693 upstream: Implement channel inactivity timeouts
4712 upstream: Add channel_set_xtype()
4726 upstream: tweak channel ctype names
4739 upstream: Add channel_force_close()
4758 upstream: replace manual poll/ppoll timeout math with ptimeout API
4768 upstream: add ptimeout API for keeping track of poll/ppoll
4778 upstream: suppress "Connection closed" message when in quiet mode
4786 upstream: regression test for PermitRemoteOpen
4794 upstream: fix bug in PermitRemoteOpen which caused it to ignore its
4806 upstream: spelling fixes; from paul tagliamonte amendments to his
4816 upstream: Mention that scp uses the SFTP protocol and remove
4826 upstream: Clear signal mask early in main(); sshd may have been
4843 upstream: add -X to usage();
4851 upstream: add a -X option to both scp(1) and sftp(1) to allow
4869 upstream: The idiomatic way of coping with signed char vs unsigned
4924 Run upstream obsdsnap tests on ephemeral runners.
4944 upstream: Warn if no host keys for hostbased auth can be loaded.
4952 upstream: Add server debugging for hostbased auth.
4964 upstream: remove '?' from getopt(3) loops
4985 upstream: Fix comment typo.
5023 upstream: Remove duplicate includes.
5033 upstream: make struct sshbuf private
5051 upstream: Clean up ssh-add and ssh-agent logs.
5059 upstream: Log output of ssh-agent and ssh-add
5069 upstream: Add void to client_repledge args to fix compiler warning. ok djm@
5077 upstream: tighten pledge(2) after session establishment
5087 upstream: New EnableEscapeCommandline ssh_config(5) option
5101 upstream: In channel_request_remote_forwarding the parameters for
5223 upstream: Handle dynamic remote port forwarding in escape commandline's
5254 upstream: Fix typo in fatal error message.
5264 upstream: Remove errant colon and simplify format
5274 upstream: rename client_global_hostkeys_private_confirm() to
5285 upstream: typo in comment
5361 upstream: The IdentityFile option in ssh_config can also be used to
5373 upstream: Remove some set but otherwise unused variables, spotted
5383 upstream: Check for and disallow MaxStartups values less than or
5394 upstream: fix parsing of hex cert expiry time; was checking whether the
5450 upstream: Import regenerated moduli.
5458 upstream: Fix typo. From pablomh via -portable github PR#344.
5542 upstream: replace recently-added valid_domain() check for hostnames
5637 upstream: Use variable for diff options
5656 upstream: put sshkey_check_rsa_length() back in sshkey.c to unbreak
5666 upstream: allow ssh-keyscan(1) to accept CIDR address ranges, e.g.
5687 upstream: refactor sshkey_private_deserialize
5697 upstream: refactor sshkey_private_serialize_opt()
5707 upstream: refactor certify
5717 upstream: refactor sshkey_sign() and sshkey_verify()
5727 upstream: refactor sshkey_from_blob_internal()
5737 upstream: refactor sshkey_from_private()
5747 upstream: factor out key generation
5757 upstream: refactor and simplify sshkey_read()
5767 upstream: factor out public key serialization
5777 upstream: factor out sshkey_equal_public()
5787 upstream: begin big refactor of sshkey
5802 upstream: Be more paranoid with host/domain names coming from the
5814 upstream: regress test for unmatched glob characters; fails before
5824 upstream: when scp(1) is using the SFTP protocol for transport (the
5841 upstream: use correct type with sizeof ok djm@
5849 upstream: ssh-agent.1: - use Nm not Xr for self-ref - while here,
5862 upstream: document "-O no-restrict-websafe"; spotted by Ross L
5909 upstream: honour user's umask if it is more restrictive then the ssh
5935 Only test OpenBSD upstream on commits to master since that's what it
5980 upstream: openssh-9.1
5988 upstream: Fix typo. From AlexanderStohr via github PR#343.
5996 upstream: add RequiredRSASize to the list of keywords accepted by
6020 upstream: use [email protected] sftp-server extension
6031 upstream: sftp client library support for
6041 upstream: extend sftp-common.c:extend ls_file() to support supplied
6051 upstream: sftp-server(8): add a "[email protected]"
6067 upstream: better debugging for connect_next()
6075 upstream: Add RequiredRSASize for sshd(8); RSA keys that fall
6087 upstream: add a RequiredRSASize for checking RSA key length in
6102 upstream: Add a sshkey_check_rsa_length() call for checking the
6112 upstream: actually hook up restrict_websafe; the command-line flag
6122 upstream: correct error value
6130 upstream: sftp: Be a bit more clever about completions
6149 upstream: sftp: Don't attempt to complete arguments for
6165 upstream: sk_enroll: never drop SSH_SK_USER_VERIFICATION_REQD flag
6182 upstream: a little extra debugging
6190 upstream: ssh-agent: attempt FIDO key signing without PIN and use
6201 upstream: .Li -> .Vt where appropriate; from josiah frentsos,
6213 upstream: fix repeated words ok miod@ jmc@
6221 upstream: notifier_complete(NULL, ...) is a noop, so no need to test
6284 upstream: sk-usbhid: fix key_lookup() on tokens with built-in UV
6301 upstream: whitespace
6349 upstream: whitespace
6357 upstream: whitespace
6377 upstream: attemp FIDO key signing without PIN and use the error
6388 upstream: remove incorrect check that can break enrolling a
6398 upstream: Strictly enforce the maximum allowed SSH2 banner size in
6431 upstream: double free() in error path; from Eusgor via GHPR333
6460 upstream: add an extra flag to sk_probe() to indicate whether we're
6471 upstream: use .Cm for "sign"; from josiah frentsos
6503 upstream: sftp-server: support home-directory request
6551 upstream: add some tests for parse_absolute_time(), including cases
6561 upstream: allow certificate validity intervals, sshsig verification
6626 upstream: don't prompt for FIDO passphrase before attempting to enroll
6690 upstream: avoid double-free in error path introduced in r1.70; report
6778 upstream: Restore missing "!" in TEST_SSH_ELAPSED_TIMES test.
6786 upstream: Test TEST_SSH_ELAPSED_TIMES for empty string not
6823 upstream: ssh-keygen: fix touch prompt, pin retries;
6833 upstream: sk-usbhid: preserve error code returned by key_lookup()
6845 upstream: when enrolling a resident key on a security token, check
6861 upstream: pull passphrase reading and confirmation into a separate
7015 upstream: Add TEST_REGRESS_CACHE_DIR.
7051 upstream: Remove leftover line.
7061 upstream: use consistent field names (s/char/byte)
7080 upstream: bump up loglevel from debug to info when unable to open
7090 upstream: Don't leak the strings allocated by order_hostkeyalgs()
7104 upstream: Always return allocated strings from the kex filtering so
7115 upstream: ignore SIGPIPE earlier in main(), specifically before
7126 upstream: reflect the update to -D arg name in usage();
7140 upstream: allow arguments to sftp -D option, e.g. sftp -D
7152 upstream: Roll back previous KEX changes as they aren't safe until
7163 upstream: Don't leak the strings allocated by order_hostkeyalgs()
7203 upstream: make it clear that RekeyLimit applies to both transmitted
7213 upstream: Make sure not to fclose() the same fd twice in case of an
7225 upstream: Don't attempt to fprintf a null identity comment. From
7235 upstream: Log an error if pipe() fails while accepting a
7265 upstream: make sure that UseDNS hostname lookup happens in the monitor
7276 upstream: move auth_openprincipals() and auth_openkeyfile() over to
7286 upstream: test setenv in both client and server, test first-match-wins
7296 upstream: Make SetEnv directives first-match-wins in both
7311 upstream: Add missing *-sk types to ssh-keyscan manpage. From
7321 upstream: Add period at end of "not known by any other names"
7331 upstream: ssh-keygen -A: do not generate DSA keys by default.
7342 upstream: ssh-keygen: implement "verify-required" certificate option.
7355 upstream: keywords ref ssh_config.5;
7392 upstream: split the low-level file handling functions out from
7408 upstream: refactor authorized_keys/principals handling
7422 upstream: f sshpkt functions fail, then password is not cleared
7435 upstream: Avoid kill with -1 argument. The out_ctx label can be
7448 upstream: Note that ProxyJump also accepts the same tokens as
7458 upstream: revert previous; it was broken (spotted by Theo)
7466 upstream: make SSHBUF_DBG/SSHBUF_TELL (off by default and only enabled
7484 upstream: regress test for in-place transfers and clobbering larger
7494 upstream: Only run agent-ptrace.sh if gdb is available as all
7504 upstream: fix in-place copies; r1.163 incorrectly skipped truncation in
7515 upstream: arrange for scp, when in sftp mode, to not ftruncate(3) files
7531 upstream: Remove errant apostrophe. From haruyama at queen-ml org.
7539 upstream: Allow existing -U (use agent) flag to work with "-Y sign"
7550 upstream: improve error message when 'ssh-keygen -Y sign' is unable to
7569 upstream: When performing operations that glob(3) a remote path, ensure
7586 Also retest OpenBSD upstream on .yml changes.
7606 upstream: sshkey_unshield_private() contains a exact duplicate of
7617 upstream: channel_new no longer frees remote_name. So update the
7628 upstream: mux.c: mark argument as const; from Martin Vahlensieck
7636 upstream: make sure stdout is non-blocking; ok djm@
7644 upstream: Add FIDO AUTHENTICATOR section and explain a bit how FIDO
7660 upstream: remove an obsolete rsa1 format example from an example;
7671 upstream: fix some integer overflows in sieve_large() that show up when
7682 upstream: be stricter in which characters will be accepted in
7713 upstream: mention that the helpers are used by ssh(1), ssh-agent(1)
7724 upstream: Don't leak SK device. Patch from Pedro Martelletto via
7734 upstream: fix memleak on session-bind path; from Pedro Martelletto, ok
7744 upstream: avoid printing hash algorithm twice; from lucas AT sexy.is
7752 upstream: Add authfd path to debug output. ok markus@
7760 upstream: Check sshauthopt_new() for NULL. bz#3425, from
7770 upstream: Remove unnecessary includes: openssl/hmac.h and
7780 upstream: Add missing includes of stdlib.h and stdint.h. We need
7792 upstream: Avoid an unnecessary xstrdup in rm_env() when matching
7833 upstream: It looks like we can't completely avoid
7844 upstream: Use ssh -f and ControlPersist ..
7855 upstream: Simplify forward-control test.
7867 upstream: regression test for sftp cp command
7875 upstream: Import regenerated moduli
7883 upstream: Try to continue running local I/O for channels in state
7895 upstream: Import regenerated moduli
7903 upstream: list the correct version number
7914 upstream: Correct path for system known hosts file in description
7924 Resync moduli.5 with upstream.
7942 upstream: clear io_want/io_ready flags at start of poll() cycle;
7953 upstream: Note that curve25519-sha256 was later published in
7963 upstream: two defensive changes from Tobias Stoeckmann via GHPR287
8003 upstream: openssh-9.0
8011 upstream: ssh: document [email protected] as
8021 upstream: man pages: add missing commas between subordinate and
8105 upstream: add a sftp client "cp" command that supports server-side
8116 upstream: add support for the "corp-data" protocol extension to
8127 upstream: select post-quantum KEX
8137 upstream: fix poll() spin when a channel's output fd closes without
8148 upstream: ssh is almost out of getopt() characters; note the
8158 upstream: avoid NULL deref via ssh-keygen -Y find-principals.
8220 upstream: don't leak argument list; bz3404, reported by Balu
8230 upstream: make addargs() and replacearg() a little more robust and
8244 upstream: don't try to resolve ListenAddress directives in the sshd
8256 upstream: remove blank line
8264 upstream: helpful comment
8272 upstream: ssh-keygen -Y check-novalidate requires namespace or SEGV
8282 upstream: improve DEBUG_CHANNEL_POLL debugging message
8290 upstream: ssh: xstrdup(): use memcpy(3)