)]}' { "log": [ { "commit": "6e3b25e80c2b4a21ec3c545bde30b8ff45a25416", "tree": "ff6cc2d7b8fb85b3cbeba232d27d97827d19c7b1", "parents": [ "0d1abd52e25b9d345ce4f9a3dcc2b33dc63151c1", "fdcbfa9855ffc477c0df99e5da02adab5fcb5c94" ], "author": { "name": "Treehugger Robot", "email": "android-test-infra-autosubmit@system.gserviceaccount.com", "time": "Wed Dec 04 13:18:08 2024 +0000" }, "committer": { "name": "Gerrit Code Review", "email": "noreply-gerritcodereview@google.com", "time": "Wed Dec 04 13:18:08 2024 +0000" }, "message": "Merge \"Merge commit \u002746d1fb16b20e971b9ac15e86a3d3e350b49c9ad6\u0027 (V_9_9_P1)\" into main" }, { "commit": "fdcbfa9855ffc477c0df99e5da02adab5fcb5c94", "tree": "ff6cc2d7b8fb85b3cbeba232d27d97827d19c7b1", "parents": [ "0d1abd52e25b9d345ce4f9a3dcc2b33dc63151c1", "46d1fb16b20e971b9ac15e86a3d3e350b49c9ad6" ], "author": { "name": "Momoko Hattori", "email": "momohatt@google.com", "time": "Fri Nov 29 22:25:33 2024 +0900" }, "committer": { "name": "Momoko Hattori", "email": "momohatt@google.com", "time": "Mon Dec 02 14:40:48 2024 +0900" }, "message": "Merge commit \u002746d1fb16b20e971b9ac15e86a3d3e350b49c9ad6\u0027 (V_9_9_P1)\n\nBug: 381183768\nTest: arc.PlayFiles.vm\nTest: crostini.ShareMovies.(bullseye|bookworm)_stable_gaia\nTest: lunch aosp_cf_arm64_phone-trunk_staging-userdebug \u0026\u0026\n mmma -j32 external/openssh\nTest: lunch aosp_cf_x86_64_phone-trunk_staging-userdebug \u0026\u0026\n mmma -j32 external/openssh\n\nChange-Id: Ieed0607a2d1079b7da7137b4895484fa9eb2115c\n" }, { "commit": "46d1fb16b20e971b9ac15e86a3d3e350b49c9ad6", "tree": "7cd21cfce5c064f7d66067e7701aff6429003210", "parents": [ "0bdca1f218971b38728a0a129f482476baff0968" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Fri Sep 20 08:20:13 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Fri Sep 20 08:20:13 2024 +1000" }, "message": "update version numbers\n" }, { "commit": "0bdca1f218971b38728a0a129f482476baff0968", "tree": "4f42b38c35e9741ec86bf5b85a262653fd9b6359", "parents": [ "ef2d7f2d3e1b4c9ae71bacf963e76a92ab8be543" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Thu Sep 19 22:17:44 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Fri Sep 20 08:18:23 2024 +1000" }, "message": "upstream: openssh-9.9\n\nOpenBSD-Commit-ID: 303417285f1a73b9cb7a2ae78d3f493bbbe31f98\n" }, { "commit": "ef2d7f2d3e1b4c9ae71bacf963e76a92ab8be543", "tree": "56e3016cdf9949146b46d9f7804398f93a9e1c06", "parents": [ "7ef362b989c8d1f7596f557f22e5924b9c08f0ea" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Sep 18 16:03:23 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Sep 18 16:03:23 2024 +1000" }, "message": "include openbsd-compat/base64.c license in LICENSE\n" }, { "commit": "7ef362b989c8d1f7596f557f22e5924b9c08f0ea", "tree": "5d31ea07713241cb1be28c4946bce415046282b5", "parents": [ "5fb2b5ad0e748732a27fd8cc16a7ca3c21770806" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Sep 18 09:01:23 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Sep 18 09:01:23 2024 +1000" }, "message": "conditionally include mman.h in arc4random code\n" }, { "commit": "5fb2b5ad0e748732a27fd8cc16a7ca3c21770806", "tree": "a8c1ca81d6b691f8ee2620c8e73865bb2ec57cd3", "parents": [ "0ca128c9ee894f1b0067abd473bfb33171df67f8" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Sep 17 11:53:24 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Sep 17 11:53:24 2024 +1000" }, "message": "fix bug in recently-added sntrup761 fuzzer\n\nkey values need to be static to persist across invocations;\nspotted by the Qualys Security Advisory team.\n" }, { "commit": "0ca128c9ee894f1b0067abd473bfb33171df67f8", "tree": "8d4daa5e1360dc5cd5f5065158efcb933af866dd", "parents": [ "f82e5e22cad88c81d8a117de74241328c7b101c3" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Mon Sep 16 05:37:05 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Mon Sep 16 15:37:51 2024 +1000" }, "message": "upstream: use 64 bit math to avoid signed underflow. upstream code\n\nrelies on using -fwrapv to provide defined over/underflow behaviour, but we\nuse -ftrapv to catch integer errors and abort the program. ok dtucker@\n\nOpenBSD-Commit-ID: 8933369b33c17b5f02479503d0a92d87bc3a574b\n" }, { "commit": "f82e5e22cad88c81d8a117de74241328c7b101c3", "tree": "8598e9509cfcec6c1e9b518718e9c11dba2cbe51", "parents": [ "0c1165fc78e8fe69b5df71f81a8f944554a68b53" ], "author": { "name": "jmc@openbsd.org", "email": "jmc@openbsd.org", "time": "Sun Sep 15 08:27:38 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Mon Sep 16 15:37:44 2024 +1000" }, "message": "upstream: minor grammar/sort fixes for refuseconnection; ok djm\n\nOpenBSD-Commit-ID: 1c81f37b138b8b66abba811fec836388a0f3e6da\n" }, { "commit": "0c1165fc78e8fe69b5df71f81a8f944554a68b53", "tree": "b3672328d162bfa858a2b472623ba32bf107af7f", "parents": [ "ce171d0718104b643854b53443ff72f7283d33f2" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Sun Sep 15 13:30:13 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Sun Sep 15 13:30:13 2024 +1000" }, "message": "avoid gcc warning in fuzz test\n" }, { "commit": "ce171d0718104b643854b53443ff72f7283d33f2", "tree": "2e6b024592f54b99590da960b05b74fc76d9f960", "parents": [ "671c440786a5a66216922f15d0007b60f1e6733f" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Sun Sep 15 03:09:44 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Sun Sep 15 13:10:29 2024 +1000" }, "message": "upstream: bad whitespace in config dump output\n\nOpenBSD-Commit-ID: d899c13b0e8061d209298eaf58fe53e3643e967c\n" }, { "commit": "671c440786a5a66216922f15d0007b60f1e6733f", "tree": "648f4376245e944b92e29393ddcec7dbe84fec3c", "parents": [ "930cb02b6113df72fbc732b9feb8e4f490952a81" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Sun Sep 15 12:53:59 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Sun Sep 15 12:53:59 2024 +1000" }, "message": "use construct_utmp to construct btmp records\n\nSimpler and removes some code with the old-style BSD license.\n" }, { "commit": "930cb02b6113df72fbc732b9feb8e4f490952a81", "tree": "ab31187674d754a8a3f29ee706a08e66af2f2019", "parents": [ "9306d6017e0ce5dea6824c29ca5ba5673c2923ad" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Sun Sep 15 02:20:51 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Sun Sep 15 12:24:48 2024 +1000" }, "message": "upstream: update the Streamlined NTRU Prime code from the \"ref\"\n\nimplementation in SUPERCOP 20201130 to the \"compact\" implementation in\nSUPERCOP 20240808. The new version is substantially faster. Thanks to Daniel\nJ Bernstein for pointing out the new implementation (and of course for\nwriting it).\n\ntested in snaps/ok deraadt@\n\nOpenBSD-Commit-ID: bf1a77924c125ecdbf03e2f3df8ad13bd3dafdcb\n" }, { "commit": "9306d6017e0ce5dea6824c29ca5ba5673c2923ad", "tree": "a97010d2839813f5d10b2d5c1a38d797b65814f0", "parents": [ "0118a4da21147a88a56dc8b90bbc2849fefd5c1e" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Sun Sep 15 01:19:56 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Sun Sep 15 11:23:11 2024 +1000" }, "message": "upstream: document Match invalid-user\n\nOpenBSD-Commit-ID: 2c84a9b517283e9711e2812c1f268081dcb02081\n" }, { "commit": "0118a4da21147a88a56dc8b90bbc2849fefd5c1e", "tree": "bea90dba539be1ff731efd266cee103e7d12a6d9", "parents": [ "7875975136f275619427604900cb0ffd7020e845" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Sun Sep 15 01:18:26 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Sun Sep 15 11:23:11 2024 +1000" }, "message": "upstream: add a \"Match invalid-user\" predicate to sshd_config Match\n\noptions.\n\nThis allows writing Match conditions that trigger for invalid username.\nE.g.\n\nPerSourcePenalties refuseconnection:90s\nMatch invalid-user\n RefuseConnection yes\n\nWill effectively penalise bots try to guess passwords for bogus accounts,\nat the cost of implicitly revealing which accounts are invalid.\n\nfeedback markus@\n\nOpenBSD-Commit-ID: 93d3a46ca04bbd9d84a94d1e1d9d3a21073fbb07\n" }, { "commit": "7875975136f275619427604900cb0ffd7020e845", "tree": "ec89bf7a4abd7954bd3a49750db8e0523bbd07ca", "parents": [ "8d21713b669b8516ca6d43424a356fccc37212bb" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Sun Sep 15 01:11:26 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Sun Sep 15 11:23:10 2024 +1000" }, "message": "upstream: Add a \"refuseconnection\" penalty class to sshd_config\n\nPerSourcePenalties\n\nThis allows penalising connection sources that have had connections\ndropped by the RefuseConnection option. ok markus@\n\nOpenBSD-Commit-ID: 3c8443c427470bb3eac1880aa075cb4864463cb6\n" }, { "commit": "8d21713b669b8516ca6d43424a356fccc37212bb", "tree": "03cccdf7e665772721356421b5b722b7b7c6169e", "parents": [ "acad117e66018fe1fa5caf41b36e6dfbd61f76a1" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Sun Sep 15 01:09:40 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Sun Sep 15 11:23:10 2024 +1000" }, "message": "upstream: Add a sshd_config \"RefuseConnection\" option\n\nIf set, this will terminate the connection at the first authentication\nrequest (this is the earliest we can evaluate sshd_config Match blocks)\n\nok markus@\n\nOpenBSD-Commit-ID: 43cc2533984074c44d0d2f92eb93f661e7a0b09c\n" }, { "commit": "acad117e66018fe1fa5caf41b36e6dfbd61f76a1", "tree": "471de7227e45c7fee6632ab2b251d781256bd008", "parents": [ "baec3f7f4c60cd5aa1bb9adbeb6dfa4a172502a8" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Sun Sep 15 00:58:01 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Sun Sep 15 11:23:09 2024 +1000" }, "message": "upstream: switch sshd_config Match processing to the argv tokeniser\n\ntoo; ok markus@\n\nOpenBSD-Commit-ID: b74b5b0385f2e0379670e2b869318a65b0bc3923\n" }, { "commit": "baec3f7f4c60cd5aa1bb9adbeb6dfa4a172502a8", "tree": "ef184acff06b287c3622cdac63d2de86e3cc3d98", "parents": [ "dd424d7c382c2074ab70f1b8ad4f169a10f60ee7" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Sun Sep 15 00:57:36 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Sun Sep 15 11:23:09 2024 +1000" }, "message": "upstream: switch \"Match\" directive processing over to the argv\n\nstring tokeniser, making it possible to use shell-like quoting in Match\ndirectives, particularly \"Match exec\". ok markus@\n\nOpenBSD-Commit-ID: 0877309650b76f624b2194c35dbacaf065e769a5\n" }, { "commit": "dd424d7c382c2074ab70f1b8ad4f169a10f60ee7", "tree": "9b11334c19e9443fe46491a859d6d9feed471faa", "parents": [ "62bbf8f825cc390ecb0523752ddac1435006f206" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Sun Sep 15 00:47:01 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Sun Sep 15 11:23:08 2024 +1000" }, "message": "upstream: include pathname in some of the ssh-keygen passphrase\n\nprompts. Helps the user know what\u0027s going on when ssh-keygen is invoked via\nother tools. Requested in GHPR503\n\nOpenBSD-Commit-ID: 613b0bb6cf845b7e787d69a5b314057ceda6a8b6\n" }, { "commit": "62bbf8f825cc390ecb0523752ddac1435006f206", "tree": "ced3982b69047bf6fd3c991fadf81a3875fdcdf4", "parents": [ "49f325fd47af4e53fcd7aafdbcc280e53f5aa5ce" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Sun Sep 15 00:41:18 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Sun Sep 15 11:23:07 2024 +1000" }, "message": "upstream: Do not apply authorized_keys options when signature\n\nverification fails. Prevents restrictive key options being incorrectly\napplied to subsequent keys in authorized_keys. bz3733, ok markus@\n\nOpenBSD-Commit-ID: ba3776d9da4642443c19dbc015a1333622eb5a4e\n" }, { "commit": "49f325fd47af4e53fcd7aafdbcc280e53f5aa5ce", "tree": "8717236be8b77d8fba561179d88a38af4b25e32d", "parents": [ "c21c3a2419bbc1c59cb1a16ea356e703e99a90d9" ], "author": { "name": "Wu Weixin", "email": "wuweixin@gmail.com", "time": "Fri Aug 02 22:16:40 2024 +0800" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Fri Sep 13 14:09:19 2024 +1000" }, "message": "Fix without_openssl always being set to 1\n\nIn Fedora systems, %{?rhel} is empty. In RHEL systems, %{?fedora} is\nempty. Therefore, the original code always sets without_openssl to 1.\n" }, { "commit": "c21c3a2419bbc1c59cb1a16ea356e703e99a90d9", "tree": "46eecdc7321eeaad1bcd7aa01be199d7c3965c41", "parents": [ "1bc426f51b0a5cfdcfbd205218f0b6839ffe91e9" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Thu Sep 12 00:36:27 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Sep 12 10:37:34 2024 +1000" }, "message": "upstream: Relax absolute path requirement back to what it was prior to\n\nOpenSSH 9.8, which incorrectly required that sshd was started with an\nabsolute path in inetd mode. bz3717, patch from Colin Wilson\n\nOpenBSD-Commit-ID: 25c57f22764897242d942853f8cccc5e991ea058\n" }, { "commit": "1bc426f51b0a5cfdcfbd205218f0b6839ffe91e9", "tree": "c0962c61706f2a1bff9aa4e8f2eb932d57611342", "parents": [ "0a2db61a5ffc64d2e2961c52964f933879952fc7" ], "author": { "name": "naddy@openbsd.org", "email": "naddy@openbsd.org", "time": "Mon Sep 09 14:41:21 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Sep 11 09:38:22 2024 +1000" }, "message": "upstream: document the mlkem768x25519-sha256 key exchange algorithm\n\nOpenBSD-Commit-ID: fa18dccdd9753dd287e62ecab189b3de45672521\n" }, { "commit": "0a2db61a5ffc64d2e2961c52964f933879952fc7", "tree": "ed06e8fa233f540e3aa1bb85336a4b0b9831deae", "parents": [ "059ed698a47c9af541a49cf754fd09f984ac5a21" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Sep 10 21:11:14 2024 +1000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Sep 10 21:11:14 2024 +1000" }, "message": "Spell omnios test host correctly.\n" }, { "commit": "059ed698a47c9af541a49cf754fd09f984ac5a21", "tree": "f4a69530322381909d7840b4b452d30ff1c622a8", "parents": [ "f4ff91575a448b19176ceaa8fd6843a25f39d572" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Sep 10 18:52:02 2024 +1000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Sep 10 18:52:02 2024 +1000" }, "message": "Add omnios test target.\n" }, { "commit": "f4ff91575a448b19176ceaa8fd6843a25f39d572", "tree": "f45ae21255b161920e97f2ccea5f2a5bc062217c", "parents": [ "ff714f001d20a9c843ee1fd9d92a16d40567d264" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Sep 10 18:45:55 2024 +1000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Sep 10 18:45:55 2024 +1000" }, "message": "Wrap stdint.h in ifdef.\n" }, { "commit": "ff714f001d20a9c843ee1fd9d92a16d40567d264", "tree": "a71db453bf99c9bdca355dddc5769783b6d65144", "parents": [ "509b757c052ea969b3a41fc36818b44801caf1cf" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Mon Sep 09 19:31:54 2024 +1000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Sep 10 17:58:09 2024 +1000" }, "message": "Also test PAM on dfly64.\n" }, { "commit": "509b757c052ea969b3a41fc36818b44801caf1cf", "tree": "92fc6292133df87db8764369fe9f32cc19a51fce", "parents": [ "273581210c99ce7275b8efdefbb9f89e1c22e341" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Mon Sep 09 21:50:14 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Mon Sep 09 21:50:14 2024 +1000" }, "message": "stubs for ML-KEM KEX functions\n\nused for C89 compilers\n" }, { "commit": "273581210c99ce7275b8efdefbb9f89e1c22e341", "tree": "9afb17c5c11c7482fad04c3826804b8920d4d297", "parents": [ "e8a0f19b56dfa20f98ea9876d7171ec315fb338a" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Mon Sep 09 17:30:38 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Mon Sep 09 17:30:38 2024 +1000" }, "message": "declare defeat trying to detect C89 compilers\n\nI can\u0027t find a reliable way to detect the features the ML-KEM code\nrequires in configure. Give up for now and use VLA support (that we\ncan detect) as a proxy for \"old compiler\" and turn off ML-KEM if\nit isn\u0027t supported.\n" }, { "commit": "e8a0f19b56dfa20f98ea9876d7171ec315fb338a", "tree": "4d61f25d4f3f6acc63cbca3bc61c8192f069f5cf", "parents": [ "7c07bec1446978bebe0780ed822c8fedfb377ae8" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Mon Sep 09 16:46:40 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Mon Sep 09 16:46:40 2024 +1000" }, "message": "fix previous; check for C99 compound literals\n\nThe previous commit was incorrect (or at least insufficient), the\nML-KEM code is actually using compound literals, so test for them.\n" }, { "commit": "7c07bec1446978bebe0780ed822c8fedfb377ae8", "tree": "7324d3ba786560b60b71dc26bae7d321f25a5491", "parents": [ "d469d5f348772058789d35332d1ccb0b109c28ef" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Mon Sep 09 16:06:21 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Mon Sep 09 16:06:21 2024 +1000" }, "message": "test for compiler feature needed for ML-KEM\n\nThe ML-KEM implementation we uses need the compiler to support\nC99-style named struct initialisers (e.g foo \u003d {.bar \u003d 1}). We\nstill support (barely) building OpenSSH with older compilers, so\nadd a configure test for this.\n" }, { "commit": "d469d5f348772058789d35332d1ccb0b109c28ef", "tree": "f33adac621932870fba9f9115df3a0fe43d53c0d", "parents": [ "62fb2b51bb7f6863c3ab697f397b2068da1c993f" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Mon Sep 09 03:13:39 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Mon Sep 09 15:29:09 2024 +1000" }, "message": "upstream: test mlkem768x25519-sha256\n\nOpenBSD-Regress-ID: 7baf6bc39ae55648db1a2bfdc55a624954847611\n" }, { "commit": "62fb2b51bb7f6863c3ab697f397b2068da1c993f", "tree": "8af7d3d75c179aefc0760038d13d0dc8081a9b02", "parents": [ "a8ad7a2952111c6ce32949a775df94286550af6b" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Mon Sep 09 02:39:57 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Mon Sep 09 12:45:53 2024 +1000" }, "message": "upstream: pull post-quantum ML-KEM/x25519 key exchange out from\n\ncompile-time flag now than an IANA codepoint has been assigned for the\nalgorithm.\n\nAdd mlkem768x25519-sha256 in 2nd KexAlgorithms preference slot.\n\nok markus@\n\nOpenBSD-Commit-ID: 9f50a0fae7d7ae8b27fcca11f8dc6f979207451a\n" }, { "commit": "a8ad7a2952111c6ce32949a775df94286550af6b", "tree": "21faa3d72559a7a5121b8287a2f8dab31bec5a68", "parents": [ "13cc78d016b67a74a67f1c97c7c348084cd9212c" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Fri Sep 06 02:30:44 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Fri Sep 06 12:31:19 2024 +1000" }, "message": "upstream: make parsing user@host consistently look for the last \u0027@\u0027 in\n\nthe string rather than the first. This makes it possible to use usernames\nthat contain \u0027@\u0027 characters.\nMIME-Version: 1.0\nContent-Type: text/plain; charset\u003dUTF-8\nContent-Transfer-Encoding: 8bit\n\nPrompted by Max Zettlmeißl; feedback/ok millert@\n\nOpenBSD-Commit-ID: 0b16eec246cda15469ebdcf3b1e2479810e394c5\n" }, { "commit": "13cc78d016b67a74a67f1c97c7c348084cd9212c", "tree": "fde5c13b55ae79e67bfb146f811d5b273f4bd574", "parents": [ "ef8472309a68e319018def6f8ea47aeb40d806f5" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Wed Sep 04 05:33:34 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Sep 04 15:38:50 2024 +1000" }, "message": "upstream: be more strict in parsing key type names. Only allow\n\nshortnames (e.g \"rsa\") in user-interface code and require full SSH protocol\nnames (e.g. \"ssh-rsa\") everywhere else.\n\nPrompted by bz3725; ok markus@\n\nOpenBSD-Commit-ID: b3d8de9dac37992eab78adbf84fab2fe0d84b187\n" }, { "commit": "ef8472309a68e319018def6f8ea47aeb40d806f5", "tree": "755ae416d8a9b606aff5977c5b52fc73b34ee29e", "parents": [ "ba2ef20c75c5268d4d1257adfc2ac11c930d31e1" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Wed Sep 04 05:11:33 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Sep 04 15:38:50 2024 +1000" }, "message": "upstream: fix RCSID in output\n\nOpenBSD-Commit-ID: 889ae07f2d2193ddc4351711919134664951dd76\n" }, { "commit": "ba2ef20c75c5268d4d1257adfc2ac11c930d31e1", "tree": "4ae74357dedb624af55496373d15e0a5a2b2df21", "parents": [ "e66c0c5673a4304a3a9fbf8305c6a19f8653740f" ], "author": { "name": "jmc@openbsd.org", "email": "jmc@openbsd.org", "time": "Tue Sep 03 06:17:48 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Sep 04 15:38:49 2024 +1000" }, "message": "upstream: envrionment -\u003e environment;\n\nOpenBSD-Commit-ID: b719f39c20e8c671ec6135c832d6cc67a595af9c\n" }, { "commit": "e66c0c5673a4304a3a9fbf8305c6a19f8653740f", "tree": "ce34c3eac7cad1f98644a14b90d144902900a764", "parents": [ "d19dea6330ecd4eb403fef2423bd7e127f4c9828" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Sep 04 15:35:29 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Sep 04 15:36:22 2024 +1000" }, "message": "add basic fuzzers for our import of sntrup761\n" }, { "commit": "d19dea6330ecd4eb403fef2423bd7e127f4c9828", "tree": "04bcf8983fe32931bdffe59b73d2da6bec116a08", "parents": [ "8c4d6a628051e318bae2f283e8dc38b896400862" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Tue Sep 03 05:58:56 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Sep 03 16:03:11 2024 +1000" }, "message": "upstream: regression test for Include variable expansion\n\nOpenBSD-Regress-ID: 35477da3ba1abd9ca64bc49080c50a9c1350c6ca\n" }, { "commit": "8c4d6a628051e318bae2f283e8dc38b896400862", "tree": "f584e6e58ade7f2b44b697fc596a3be85d708916", "parents": [ "51b82648b6827675fc0cde21175fd1ed8e89aab2" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Tue Sep 03 05:29:55 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Sep 03 15:38:51 2024 +1000" }, "message": "upstream: allow the \"Include\" directive to expand the same set of\n\n%-tokens that \"Match Exec\" and environment variables.\n\nok dtucker@\n\nOpenBSD-Commit-ID: 12ef521eaa966a9241e684258564f52f1f3c5d37\n" }, { "commit": "51b82648b6827675fc0cde21175fd1ed8e89aab2", "tree": "bc26a796951f008b7de8b44ffdd757ea31ef2ab4", "parents": [ "f68312eb593943127b39ba79a4d7fa438c34c153" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Mon Sep 02 12:18:35 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Mon Sep 02 22:34:08 2024 +1000" }, "message": "upstream: missing ifdef\n\nOpenBSD-Commit-ID: 85f09da957dd39fd0abe08fe5ee19393f25c2021\n" }, { "commit": "f68312eb593943127b39ba79a4d7fa438c34c153", "tree": "10f8cb337068dfd8388dccca162b049e892f850f", "parents": [ "05f2b141cfcc60c7cdedf9450d2b9d390c19eaad" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Mon Sep 02 12:13:56 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Mon Sep 02 22:32:44 2024 +1000" }, "message": "upstream: Add experimental support for hybrid post-quantum key exchange\n\nML-KEM768 with ECDH/X25519 from the Internet-draft:\nhttps://datatracker.ietf.org/doc/html/draft-kampanakis-curdle-ssh-pq-ke-03\n\nThis is based on previous patches from markus@ but adapted to use the\nfinal FIPS203 standard ML-KEM using a formally-verified implementation\nfrom libcrux.\n\nNote this key exchange method is still a draft and thus subject to\nchange. It is therefore disabled by default; set MLKEM\u003dyes to build it.\nWe\u0027re making it available now to make it easy for other SSH\nimplementations to test against it.\n\nok markus@ deraadt@\n\nOpenBSD-Commit-ID: 02a8730a570b63fa8acd9913ec66353735dea42c\n" }, { "commit": "05f2b141cfcc60c7cdedf9450d2b9d390c19eaad", "tree": "ad32f593e8578ff9594ec326401916eb1f1e5563", "parents": [ "16eaf9d401e70996f89f3f417738a8db421aa959" ], "author": { "name": "Antonio Larrosa", "email": "alarrosa@suse.com", "time": "Fri Aug 23 12:21:06 2024 +0200" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Aug 28 22:09:46 2024 +1000" }, "message": "Don\u0027t skip audit before exitting cleanup_exit\n\nThis fixes an issue where the SSH_CONNECTION_ABANDON event is not\naudited because cleanup_exit overrides the regular _exit too soon and\nas a result, failed auth attempts are not logged correctly.\n\nThe problem was introduced in 81c1099d22b81ebfd20a334ce986c4f753b0db29\nwhere the code from upstream was merged before the audit_event call when\nit should have been merged right before the _exit call in order to honor\nthe comment that just mentions an override of the exit value.\n" }, { "commit": "16eaf9d401e70996f89f3f417738a8db421aa959", "tree": "9a2045b2713e0bcfd05948163a01678684e96d65", "parents": [ "10ccf611ab8ecba9ce6b0548c5ccd8c1220baf92" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Wed Aug 28 12:08:26 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Aug 28 22:09:31 2024 +1000" }, "message": "upstream: fix test: -F is the argument to specify a non-default\n\nssh_config, not -f (this is sadly not a new bug)\n\nOpenBSD-Regress-ID: 45a7bda4cf33f2cea218507d8b6a55cddbcfb322\n" }, { "commit": "10ccf611ab8ecba9ce6b0548c5ccd8c1220baf92", "tree": "ce6dc0c5c4f0f624323c54a2b5b260e1c078a673", "parents": [ "aee54878255d71bf93aa6e91bbd4eb1825c0d1b9" ], "author": { "name": "deraadt@openbsd.org", "email": "deraadt@openbsd.org", "time": "Fri Aug 23 04:51:00 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Aug 27 09:05:43 2024 +1000" }, "message": "upstream: As defined in the RFC, the SSH protocol has negotiable\n\ncompression support (which is requested as the name \"zlib\"). Compression\nstarts very early in the session. Relative early in OpenSSH lifetime, privsep\nwas added to sshd, and this required a shared-memory hack so the two\nprocesses could see what was going on in the dataflow. This shared-memory\nhack was soon recognized as a tremendous complexity risk, because it put libz\n(which very much trusts it\u0027s memory) in a dangerous place, and a new option\n(\"zlib@openssh.com\") was added begins compression after authentication (aka\ndelayed-compression). That change also permitted removal of the\nshared-memory hack. Despite removal from the server, the old \"zlib\" support\nremained in the client, to allow negotiation with non-OpenSSH daemons which\nlack the delayed-compression option. This commit deletes support for the\nolder \"zlib\" option in the client. It reduces our featureset in a small way,\nand encourages other servers to move to a better design. The SSH protocol is\ndifferent enough that compressed-key-material attacks like BEAST are\nunlikely, but who wants to take the chance? We encourage other ssh servers\nwho care about optional compression support to add delayed-zlib support.\n(Some already do \"zlib@openssh.com\") ok djm markus\n\nOpenBSD-Commit-ID: 6df986f38e4ab389f795a6e39e7c6857a763ba72\n" }, { "commit": "aee54878255d71bf93aa6e91bbd4eb1825c0d1b9", "tree": "ca7e56b792a5d5e9db7d97f43293642f7d18bf5d", "parents": [ "a76a6b85108e3032c8175611ecc5746e7131f876" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Thu Aug 22 23:11:30 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Fri Aug 23 09:27:35 2024 +1000" }, "message": "upstream: sntrup761x25519-sha512 now has an IANA codepoint assigned, so\n\nwe can make the algorithm available without the @openssh.com suffix too. ok\nmarkus@ deraadt@\n\nOpenBSD-Commit-ID: eeed8fcde688143a737729d3d56d20ab4353770f\n" }, { "commit": "a76a6b85108e3032c8175611ecc5746e7131f876", "tree": "362664e24df3bd81877775dd1e3df2036c8279c7", "parents": [ "7e75e3f57c41b9a6e6401e7674d7c2ff5c33975b" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Thu Aug 22 20:36:12 2024 +1000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Thu Aug 22 20:36:12 2024 +1000" }, "message": "Move rekey test into valgrind-2.\n\nNow that the rekey test has been optimized it\u0027s fast enough to not be in\nits own valgrind test, so move it into valgrind-2, which is currently\nthe quickest of the others, bringing all of them to roughly the same\nruntime of ~1.1 hours.\n" }, { "commit": "7e75e3f57c41b9a6e6401e7674d7c2ff5c33975b", "tree": "08d8dddda1a4e369432295bfc55417ebb0aaa674", "parents": [ "ebc890b8b4ba08c84cd1066b7b94b2b11f6c4cb4" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Thu Aug 22 10:21:02 2024 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Thu Aug 22 20:32:21 2024 +1000" }, "message": "upstream: Use aes128-ctr for MAC tests since default has implicit MAC.\n\nAlso verify that the Cipher or MAC we intended to use is actually the one\nselected during the test.\n\nOpenBSD-Regress-ID: ff43fed30552afe23d1364526fe8cf88cbfafe1d\n" }, { "commit": "ebc890b8b4ba08c84cd1066b7b94b2b11f6c4cb4", "tree": "0d1939953d3535d197b63215a310236d2c48d822", "parents": [ "15ace435ea1c2fab2a1cc7d9c3157fe20c776b80" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 22 09:45:49 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 22 09:46:30 2024 +1000" }, "message": "fix incorrect default for PasswordAuthentication\n\nmerge botch spotted by gsgleason\n" }, { "commit": "15ace435ea1c2fab2a1cc7d9c3157fe20c776b80", "tree": "eddb666aa0e2467705f15aa8692bbf9cbf605d9d", "parents": [ "51c96b6ed627779a04493a8fe25747996a37f3c2" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Wed Aug 21 10:33:27 2024 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Wed Aug 21 21:01:50 2024 +1000" }, "message": "upstream: Some awks won\u0027t match on the \\r so delete it instead. Fixes\n\nregress in portable on, eg Solaris.\n\nOpenBSD-Regress-ID: 44a96d6d2f8341d89b7d5fff777502b92ac9e9ba\n" }, { "commit": "51c96b6ed627779a04493a8fe25747996a37f3c2", "tree": "bc8175e8a3f526d76ce8c4e92713ca428c2e9815", "parents": [ "25c52f37a82c4da48ec537de37d7c168982b8d6d" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Wed Aug 21 07:06:27 2024 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Wed Aug 21 20:24:24 2024 +1000" }, "message": "upstream: Import regenerated moduli.\n\nOpenBSD-Commit-ID: 5db7049ad5558dee5b2079d3422e8ddab187c1cc\n" }, { "commit": "25c52f37a82c4da48ec537de37d7c168982b8d6d", "tree": "abd0fc300672efe7436fc755497aaec258442077", "parents": [ "3eb62b7ba49483c309b483eb9002a679014f3887" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Wed Aug 21 06:59:08 2024 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Wed Aug 21 17:08:06 2024 +1000" }, "message": "upstream: Use curve25519-sha256 kex where possible.\n\nExcept where we\u0027re explicitly testing a different kex, use\ncurve25519-sha256 since it\u0027s faster than the default and supported even\nwhen configured without OpenSSL. Add a check to ensure that the kex we\nintended to test is the one we actually tested. Speeds test up by ~5%.\n\nOpenBSD-Regress-ID: 3b27fcc2ae953cb08fd82a0d3155c498b226d6e0\n" }, { "commit": "3eb62b7ba49483c309b483eb9002a679014f3887", "tree": "ca8ded88e95bc0aeefb59306d11cdbf7fc147534", "parents": [ "cbd3f034bbf7853618fac99d7d868a2250154ea7" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Tue Aug 20 12:36:59 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Aug 21 09:24:44 2024 +1000" }, "message": "upstream: Send only as much data as needed to trigger rekeying. Speeds\n\nup tests by about 10% in the common case, hopefully more when instrumented\nwith something like valgrind.\n\nOpenBSD-Regress-ID: 7bf9292b4803357efcf0baf7cfbdc8521f212da1\n" }, { "commit": "cbd3f034bbf7853618fac99d7d868a2250154ea7", "tree": "6bf274be846a469f5bfd579a690e275029691b77", "parents": [ "4442bbc2fc661277a6dabfedb756a7e15ee8b8b8" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Aug 21 09:18:29 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Aug 21 09:22:28 2024 +1000" }, "message": "simplify sshkey_prekey_alloc(); always use mmap\n" }, { "commit": "4442bbc2fc661277a6dabfedb756a7e15ee8b8b8", "tree": "818b0f0d947a029c1800c72eeaba33b3250f30e5", "parents": [ "829976a63fd1efae3a4c3e7c16fded59d92edb67" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Tue Aug 20 09:15:49 2024 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Aug 20 22:39:40 2024 +1000" }, "message": "upstream: Merge AEAD test into main test loop.\n\nRemoves 3 duplicate tests and speeds overall test up by about 1%.\n\nOpenBSD-Regress-ID: 5e5c9ff3f7588091ed369e34ac28520490ad2619\n" }, { "commit": "829976a63fd1efae3a4c3e7c16fded59d92edb67", "tree": "9ead9d98b30da7248f6ed3f895716591f2bc25c4", "parents": [ "57d02c9ea36aebad4e7146d46e041b6b2e582f7f" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Tue Aug 20 09:02:45 2024 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Aug 20 22:39:28 2024 +1000" }, "message": "upstream: Set a default RekeyLimit of 256k.\n\nUsed unless overridden by a command-line flag, which simplifies some of\nthe ssh command lines.\n\nOpenBSD-Regress-ID: e7cffa57027088e10336e412b34113969f88cb87\n" }, { "commit": "57d02c9ea36aebad4e7146d46e041b6b2e582f7f", "tree": "a0c82e3e26a54b83a69d6d811c9a11afae389b4f", "parents": [ "7254eb26f7c0772c4b47c3b32f6d1b15855cdd8c" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Tue Aug 20 07:52:43 2024 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Aug 20 22:39:14 2024 +1000" }, "message": "upstream: Add Compression\u003dno to default ssh_config.\n\nAll of the rekey tests use it (otherwise the encrypted byte counts would\nnot match) so this lets us simplify the command lines.\n\nOpenBSD-Regress-ID: dab7ce10f4cf6c68827eb8658141272aab3ea262\n" }, { "commit": "7254eb26f7c0772c4b47c3b32f6d1b15855cdd8c", "tree": "244e6a4dc35182585dda04b98b2c5beb9fa92d78", "parents": [ "749896b874928c2785256cae4d75161dc3bfcc7d" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Tue Aug 20 07:41:35 2024 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Aug 20 22:39:07 2024 +1000" }, "message": "upstream: Remove duplicate curve25519-sha256 kex.\n\ncurve25519-sha256@libssh.org is the pre-standardization name for the same\nthing, so remove it as a duplicate. Speeds up test by a tiny amount.\n\nOpenBSD-Regress-ID: 5a5ee5fa1595a6e140b1cc16040bedf5996a5715\n" }, { "commit": "749896b874928c2785256cae4d75161dc3bfcc7d", "tree": "da6dfb3c17302ebecb20699615c3467d262229d0", "parents": [ "2b1762115481ff2b7a60fd4db2ae69b725437462" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Tue Aug 20 07:27:25 2024 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Aug 20 22:38:57 2024 +1000" }, "message": "upstream: Unnest rekey param parsing test and use ssh not sshd.\n\nssh uses the same parsing code, now has \"-G\" to dump its config and is\nslightly faster to start up. This speeds up the test slightly (~5%) in the\ncommon case but should help more during instrumented tests, eg under\nvalgrind, where startup costs are magnified.\n\nOpenBSD-Regress-ID: 07c3acaf4c728e641033071f4441afc88141b0d0\n" }, { "commit": "2b1762115481ff2b7a60fd4db2ae69b725437462", "tree": "3a94fce49139ca981f29c26bf138b30df489d619", "parents": [ "d922762ca16a7381131b242f49d7376c41fabcb5" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Tue Aug 20 11:10:04 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Aug 20 21:11:38 2024 +1000" }, "message": "upstream: actually use the length parameter that was passed in rather\n\nthan a constant (this makes no difference in practice because the length is\nalways the same); reported by martin AT nmkd.net\n\nOpenBSD-Commit-ID: 4aecce232c2fe9b16e9217ff6bcb3c848d853e7e\n" }, { "commit": "d922762ca16a7381131b242f49d7376c41fabcb5", "tree": "6bcc98890ceb021e719c5cae2fe5a149e02976c6", "parents": [ "cc048ca536d6bed6f2285b07040b0d57cd559ba5" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Aug 20 13:55:30 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Aug 20 13:55:30 2024 +1000" }, "message": "private key coredump protection for Linux/FreeBSD\n\nplatforms not supporting coredump exclusion using mmap/madvise flags\nfall back to plain old malloc(3).\n" }, { "commit": "cc048ca536d6bed6f2285b07040b0d57cd559ba5", "tree": "1952c39029e2a27cf74545380852dd033fd60d8e", "parents": [ "a0b35c791cad1f85481b23ba46373060292e1c80" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Tue Aug 20 03:48:30 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Aug 20 13:50:15 2024 +1000" }, "message": "upstream: place shielded keys (i.e. keys at rest in RAM) into memory\n\nallocated using mmap(3) with MAP_CONCEAL set. This prevents exposure of the\nkey material in coredumps, etc (this is in addition to other measures we take\nin this area).\n\nok deraadt@\n\nOpenBSD-Commit-ID: cbbae59f337a00c9858d6358bc65f74e62261369\n" }, { "commit": "a0b35c791cad1f85481b23ba46373060292e1c80", "tree": "97c2736b8124aa09edb93cb4166ff7cba1d9ac06", "parents": [ "127a50f2c80572ed1a021feb11ecf941e92cbbef" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Sat Aug 17 08:35:04 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Sat Aug 17 18:35:31 2024 +1000" }, "message": "upstream: mention that ed25519 is the default key type generated and\n\nclarify that rsa-sha2-512 is the default signature scheme when RSA is in use.\nBased on GHPR505 from SebastianRzk\n\nOpenBSD-Commit-ID: 1d90df71636a04601685d2a10a8233bcc8d4f4c5\n" }, { "commit": "127a50f2c80572ed1a021feb11ecf941e92cbbef", "tree": "5a7d6c6f520b0058ea187f3ffa4afac775c27564", "parents": [ "171427261d2079941eb1041079dbae875da37cbc" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Sat Aug 17 08:23:04 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Sat Aug 17 18:24:00 2024 +1000" }, "message": "upstream: fix minor memory leak in Subsystem option parsing; from\n\nAntonio Larrosa via GHPR515\n\nOpenBSD-Commit-ID: fff3bbefd1b2c45c98cbe45c6b857b15d8a2d364\n" }, { "commit": "171427261d2079941eb1041079dbae875da37cbc", "tree": "f15f8b9a283f5ad20c657289ef6e7d753c9b18c9", "parents": [ "2a50a8f1fa57857a5e124a2280bcf61cc63c77f7" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Sat Aug 17 08:09:50 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Sat Aug 17 18:16:53 2024 +1000" }, "message": "upstream: fix swapping of source and destination addresses in some sshd\n\nlog messages\n\nOpenBSD-Commit-ID: 24d4cbb86325275df1f037545aa3b91456e52d25\n" }, { "commit": "2a50a8f1fa57857a5e124a2280bcf61cc63c77f7", "tree": "beaf48eb497cca4f1dc83c72c9cd0caaad1b7b74", "parents": [ "1c3a7145260e03037cc18715b883880836fd122d" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sat Aug 17 11:10:19 2024 +1000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sat Aug 17 11:25:36 2024 +1000" }, "message": "Add compat functions for EVP_Digest{Sign,Verify}.\n\nThis should make LibreSSL 3.1.x through 3.3.x work again. Code from\ntb@, ok djm@. Restore the test configs covering those.\n" }, { "commit": "1c3a7145260e03037cc18715b883880836fd122d", "tree": "025132b2dde422c3d39ca9d968bdb21527c3ca67", "parents": [ "cd0d681645b9adcf2467e7838bfd9d5142de4c4e" ], "author": { "name": "Philip Hands", "email": "phil@hands.com", "time": "Thu Aug 08 13:03:51 2024 +0200" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sat Aug 17 11:19:40 2024 +1000" }, "message": "make sure that usage \u0026 man page match\n\nSSH-Copy-ID-Upstream: da5b1abe55b72a16e0430e7598e1573da01779c0\n" }, { "commit": "cd0d681645b9adcf2467e7838bfd9d5142de4c4e", "tree": "99dd4791177739629e579cd381d604a0b273d792", "parents": [ "7fc9ccdce18841ebd0a97e31e43258512ab32a32" ], "author": { "name": "Philip Hands", "email": "phil@hands.com", "time": "Thu Aug 08 13:01:47 2024 +0200" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sat Aug 17 11:19:39 2024 +1000" }, "message": "update copyright notices\n\nBump the year to 2024, but also reflect the fact that hands.com Ltd. has\nbeen wound up in the UK, and its assets (including this copyright) have\nnow reverted to its owner, Philip Hands.\n\nSSH-Copy-ID-Upstream: 0e4c4d072747a6568b11a790c29dd1b4ce663d7f\n" }, { "commit": "7fc9ccdce18841ebd0a97e31e43258512ab32a32", "tree": "def0f24da0fcdde468a7d1b844019fb894376b01", "parents": [ "c37aa7012b1a3c2c322fd19e71310aadc90fc674" ], "author": { "name": "Philip Hands", "email": "phil@hands.com", "time": "Sun Aug 04 20:45:00 2024 +0200" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sat Aug 17 11:19:37 2024 +1000" }, "message": "restore optionality of -i\u0027s argument\n\nSSH-Copy-ID-Upstream: f70e3abb510e4eeb040b47894e41828246c1b720\n" }, { "commit": "c37aa7012b1a3c2c322fd19e71310aadc90fc674", "tree": "136f7f939877843f71f422d01606e50ab605c37e", "parents": [ "777dce9e2e0d12f7e81e162f77749f30899869fe" ], "author": { "name": "Philip Hands", "email": "phil@hands.com", "time": "Fri Aug 02 15:52:07 2024 +0200" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sat Aug 17 11:19:36 2024 +1000" }, "message": "avoid exploring .ssh/id*.pub subdirectories\n\nSSH-Copy-ID-Upstream: 0b9e08b7707ad16de3c8e6a0410d9f42fbd56997\n" }, { "commit": "777dce9e2e0d12f7e81e162f77749f30899869fe", "tree": "99e3f6c10410d60a31de778ae1725e6cc3ae1b38", "parents": [ "fb94fd2339848e40cad6c9bb42b822244cc1a7bc" ], "author": { "name": "Philip Hands", "email": "phil@hands.com", "time": "Fri Aug 02 10:07:11 2024 +0200" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sat Aug 17 11:19:33 2024 +1000" }, "message": "ensure that we\u0027re always told the source of keys\n\nSSH-Copy-ID-Upstream: 1bee96f4793e8ec3fab9f9361204ae58f5cc7cae\n" }, { "commit": "fb94fd2339848e40cad6c9bb42b822244cc1a7bc", "tree": "8df4a04e60b96d4cc213103fe04eae223568f478", "parents": [ "eb5aafa1ffaeee75799141ec5ded406a65ec7d18" ], "author": { "name": "Philip Hands", "email": "phil@hands.com", "time": "Wed Jul 31 23:19:51 2024 +0200" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sat Aug 17 11:19:32 2024 +1000" }, "message": "add $HOME to ERROR if one cannot write to ~/.ssh\n\nSSH-Copy-ID-Upstream: ebef3e9c06e0447bff06e9d84b33023cf592e0ba\n" }, { "commit": "eb5aafa1ffaeee75799141ec5ded406a65ec7d18", "tree": "6e9cf8191ba818cb0ab580038ca62395705606a7", "parents": [ "abcc460a2af46f0d812f8433d97a8eae1d80724c" ], "author": { "name": "Philip Hands", "email": "phil@hands.com", "time": "Wed Jul 31 23:19:03 2024 +0200" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sat Aug 17 11:19:31 2024 +1000" }, "message": "assert that SCRATCH_DIR is a writable directory\n\nSSH-Copy-ID-Upstream: ecb2b9d10883b9a16df56c83896c9bb47a80cde2\n" }, { "commit": "abcc460a2af46f0d812f8433d97a8eae1d80724c", "tree": "82c615236df719250be0da5e13ff639524ffe16f", "parents": [ "b3f91411fd1473605f74c40c1a91a024c7171e27" ], "author": { "name": "Philip Hands", "email": "phil@hands.com", "time": "Wed Jul 31 23:17:54 2024 +0200" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sat Aug 17 11:19:30 2024 +1000" }, "message": "quote to avoid potential for word splitting\n\nSSH-Copy-ID-Upstream: f379adbe06ac2ef1daf0f130752234c7f8b97e3c\n" }, { "commit": "b3f91411fd1473605f74c40c1a91a024c7171e27", "tree": "096d74db6a41445cb4a2d673a75b5bb0127d6ccf", "parents": [ "674b8f30f0dbacd787eb1e4e7e1ece34b5543d8f" ], "author": { "name": "Philip Hands", "email": "phil@hands.com", "time": "Wed Jul 31 23:15:11 2024 +0200" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sat Aug 17 11:19:29 2024 +1000" }, "message": "ensure ERROR output goes to STDERR\n\nSSH-Copy-ID-Upstream: ac394b05eead3b91feb7c2ae4129a3e9b892f1e2\n" }, { "commit": "674b8f30f0dbacd787eb1e4e7e1ece34b5543d8f", "tree": "410045ef0b1902c1cbfb67861e70173d40624ddf", "parents": [ "0efa0e1c41427c0c6ba839a18c72c1afcd7b7cc0" ], "author": { "name": "Philip Hands", "email": "phil@hands.com", "time": "Thu Aug 01 14:03:06 2024 +0200" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sat Aug 17 11:19:28 2024 +1000" }, "message": "avoid extra space when no arg given to -i option\n\nSSH-Copy-ID-Upstream: feca9e67e6e37c5653445d1c733569d7abb1770e\n" }, { "commit": "0efa0e1c41427c0c6ba839a18c72c1afcd7b7cc0", "tree": "2730238ef3c1bb84b6d95fcabd2f4e8126bcf4b9", "parents": [ "87831345e9745f2d13bd7a4a7972809f6788f331" ], "author": { "name": "Philip Hands", "email": "phil@hands.com", "time": "Wed Jul 31 23:28:36 2024 +0200" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sat Aug 17 11:19:27 2024 +1000" }, "message": "put the -i before -[pP] (matching man pages)\n\nThe man pages (ssh, sftp \u0026 ssh-copy-id) all list -i before the port\nsetting, so make the output match that order, which also seems more\nnatural with the port being next to the server.\n\nSSH-Copy-ID-Upstream: 34d5d614172c78f9a42249466c4b81975b8883a1\n" }, { "commit": "87831345e9745f2d13bd7a4a7972809f6788f331", "tree": "5385e21391e678c95d33f7a17ef0ad1b78e6184b", "parents": [ "2f3010f4736b4b3f5c10a4be97a24e90ff04c5e7" ], "author": { "name": "Shreyas Mahangade", "email": "smahanga@redhat.com", "time": "Mon Jul 29 15:26:05 2024 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sat Aug 17 11:19:26 2024 +1000" }, "message": "Minor space issue fixed\n\nSSH-Copy-ID-Upstream: 335e44d7be78b03962a54c3a5c99a2ff45294a54\n" }, { "commit": "2f3010f4736b4b3f5c10a4be97a24e90ff04c5e7", "tree": "9423e1bf55900f93ae9e4c17b50379a1f672f063", "parents": [ "a13856374b894397a7682b32257ed0bf67cfede9" ], "author": { "name": "Shreyas Mahangade", "email": "smahanga@redhat.com", "time": "Mon Jul 29 16:55:28 2024 +0530" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sat Aug 17 11:19:24 2024 +1000" }, "message": "Show identity file in \u0027ssh\u0027 command\n\n- Previously no identity file is shown in \"ssh\" command output on the line \"Now try logging into the...\"\n- This commit makes sure whenever \"ssh-copy-id\" with \"-i\" is invoked, it also reflects in \"ssh\" command\n\nSSH-Copy-ID-Upstream: 58e022ec26cb2315eb3be581d01e0ba787082428\n" }, { "commit": "a13856374b894397a7682b32257ed0bf67cfede9", "tree": "3799b2d9319f0e3d30ea4a640d2348814c529f53", "parents": [ "4da2a1a7f648979bea6eaf3b17f5f250faed4afc" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Fri Aug 16 08:30:20 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Fri Aug 16 08:30:20 2024 +1000" }, "message": "more OPENSSL_HAS_ECC\n" }, { "commit": "4da2a1a7f648979bea6eaf3b17f5f250faed4afc", "tree": "95aba9c260efbd5a46b735b12a4a333d47b2749b", "parents": [ "2c53d2f32b8e3992b61682c909ae5bc5122b6e5d" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 15 23:35:54 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 15 23:35:54 2024 +1000" }, "message": "fix merge botch that broke !OPENSSL_HAS_ECC\n" }, { "commit": "2c53d2f32b8e3992b61682c909ae5bc5122b6e5d", "tree": "11ffad36df3e77fa5d1dd48dfdd658f90072a9ea", "parents": [ "342dd7a219f39119b8b686b5aaa99c8e15ede368" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 15 15:09:45 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 15 15:09:45 2024 +1000" }, "message": "missed OPENSSL_HAS_ECC case\n" }, { "commit": "342dd7a219f39119b8b686b5aaa99c8e15ede368", "tree": "f8aca38396873059a502edbec4b0f234201426f2", "parents": [ "a7c6ea8eebe0f179141ec5dbf0c9e5354417930f" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 15 15:06:55 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 15 15:06:55 2024 +1000" }, "message": "retire testing aginst older LibreSSL versions\n\nlibressl prior to 3.4.x lack support for the EVP_DigestSign and\nEVP_DigestVerify APIs that we need now that sshkey is converted\nto EVP_PKEY.\n\nIf someone makes a good case for why we should support these versions\nthen we could bring back support with wrappers.\n" }, { "commit": "a7c6ea8eebe0f179141ec5dbf0c9e5354417930f", "tree": "4ecf45a27f72ab0a272a538a215e295772d3d74f", "parents": [ "60c2cf22e8f64f35d8b1175e4671257313f2e4d3" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 15 12:44:17 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 15 12:44:17 2024 +1000" }, "message": "sync TEST_MALLOC_OPTIONS for OpenBSD\n" }, { "commit": "60c2cf22e8f64f35d8b1175e4671257313f2e4d3", "tree": "9a1de6aa001cb8e1f3215c71a580eb90dc3d9ab2", "parents": [ "339c4fc60a6250429d41fa8713f783d82aad4551" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 15 12:43:47 2024 +1000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 15 12:43:47 2024 +1000" }, "message": "remove gratuitious difference from OpenBSD\n" }, { "commit": "339c4fc60a6250429d41fa8713f783d82aad4551", "tree": "dbf477647075f466eda76df0bf3276690735af79", "parents": [ "63a94f99b9d7c8a48182a40192e45879d1ba8791" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Thu Aug 15 00:52:23 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 15 12:11:26 2024 +1000" }, "message": "upstream: adapt to EVP_PKEY conversion\n\nOpenBSD-Regress-ID: 0e2d4efb0ed0e392e23cd8fda183fe56531ac446\n" }, { "commit": "63a94f99b9d7c8a48182a40192e45879d1ba8791", "tree": "b958845a1b3d68af252cf8d243f1d76191f8bfc1", "parents": [ "7bdfc20516e288b58c8c847958059c7b141eeff9" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Fri Jul 19 04:33:36 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 15 12:08:34 2024 +1000" }, "message": "upstream: test transfers in mux proxy mode too\n\nOpenBSD-Regress-ID: 2edfc980628cfef3550649cab8d69fa23b5cd6c4\n" }, { "commit": "7bdfc20516e288b58c8c847958059c7b141eeff9", "tree": "c2058c785fc099f0e8741feeb6916e793c2792bc", "parents": [ "0af06e2c5b898992a18c74333e75a0136506acc6" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Thu Aug 15 00:51:51 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 15 12:07:59 2024 +1000" }, "message": "upstream: Convert RSA and ECDSA key to the libcrypto EVP_PKEY API.\n\nDSA remains unconverted as it will be removed within six months.\n\nBased on patches originally from Dmitry Belyavskiy, but significantly\nreworked based on feedback from Bob Beck, Joel Sing and especially\nTheo Buehler (apologies to anyone I\u0027ve missed).\n\nok tb@\n\nOpenBSD-Commit-ID: d098744e89f1dc7e5952a6817bef234eced648b5\n" }, { "commit": "0af06e2c5b898992a18c74333e75a0136506acc6", "tree": "4b333a00adde0d075cafc40eac2c103bebf13921", "parents": [ "56ce0aa3c6cf28d9fcbce3207457abeac91b5050" ], "author": { "name": "tobias@openbsd.org", "email": "tobias@openbsd.org", "time": "Wed Aug 14 15:42:18 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 15 11:01:50 2024 +1000" }, "message": "upstream: Reorder calloc arguments\n\nThe first argument should be the amount, the second argument should be the\nelement size. Fixing this also silences some gcc compiler warnings for\nportable.\n\nSpotted with Benny Baumann (BenBE at geshi dot org).\n\nok djm@\n\nOpenBSD-Commit-ID: 711ad6f7bd7fb48bf52208f2cf9f108cddb6d41a\n" }, { "commit": "56ce0aa3c6cf28d9fcbce3207457abeac91b5050", "tree": "1820560987b9b0d4987701b811090ff0d69945b3", "parents": [ "fc48ddf6998188517af42dce807e2088b6a0c0be" ], "author": { "name": "tobias@openbsd.org", "email": "tobias@openbsd.org", "time": "Wed Aug 14 15:40:30 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 15 11:01:49 2024 +1000" }, "message": "upstream: Extend sshbuf validation\n\nMultiple sshbuf structs can be linked through a parent/child relationship.\nMake sure that a single sshbuf cannot be its own parent. If this would ever\nhappen, it would result in reference counting issues.\n\nThis is a cheap way of testing this with very little overhead. It does not\ndetect A-\u003eB-\u003eA linkages though for performance reason and the fact that it\ntakes a programming error for this to occur anyway.\n\nAuthored with Benny Baumann (BenBE at geshi dot org).\n\nok djm@\n\nOpenBSD-Commit-ID: fb3fa9ee2cad3c7e842ebadfd7f5db220c4aaf16\n" }, { "commit": "fc48ddf6998188517af42dce807e2088b6a0c0be", "tree": "12184683722e6cfad455b3e161a921bae3ca8bad", "parents": [ "1ff6907ec26dac6ac59fe9fe232899a63b4c14d8" ], "author": { "name": "tobias@openbsd.org", "email": "tobias@openbsd.org", "time": "Wed Aug 14 15:37:11 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 15 11:01:49 2024 +1000" }, "message": "upstream: Use freezero for better readability\n\nIt has the same meaning as the current pair of calling explicit_bzero\nand free. Spotted with Benny Baumann (BenBE at geshi dot org).\n\nok djm@\n\nOpenBSD-Commit-ID: 939fbe9ccf52d0d48c5fa53694d6f3bb9927970c\n" }, { "commit": "1ff6907ec26dac6ac59fe9fe232899a63b4c14d8", "tree": "4bde9aedbeab9aa70b80e238f1f233e90661ebc0", "parents": [ "487faaed8f3bb9ffb19e8f807a3da72895b16421" ], "author": { "name": "tobias@openbsd.org", "email": "tobias@openbsd.org", "time": "Wed Aug 14 15:35:23 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 15 11:01:48 2024 +1000" }, "message": "upstream: Fix typo in comment\n\nSpotted with Benny Baumann (BenBE at geshi dot org).\n\nok djm@\n\nOpenBSD-Commit-ID: 829160ac8ef3ad3409695ce3a3ade835061cae57\n" }, { "commit": "487faaed8f3bb9ffb19e8f807a3da72895b16421", "tree": "92c4894a4678197f88801fa01f2b8ae1117f282b", "parents": [ "2865f5b7520bed3e74fbbb5f8d7a44193d7a4314" ], "author": { "name": "dlg@openbsd.org", "email": "dlg@openbsd.org", "time": "Wed Jul 31 12:00:18 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 15 11:01:48 2024 +1000" }, "message": "upstream: add a random amount of time (up to 4 seconds) to the\n\ngrace login time.\n\nok deraadt@ djm@\n\nOpenBSD-Commit-ID: abd3c57aaa5861517529b322df79b6be35ee67f4\n" }, { "commit": "2865f5b7520bed3e74fbbb5f8d7a44193d7a4314", "tree": "496610fc6b3fd9446d7e45f6c82bb0074269f95e", "parents": [ "1ec0a64c5dc57b8a2053a93b5ef0d02ff8598e5c" ], "author": { "name": "naddy@openbsd.org", "email": "naddy@openbsd.org", "time": "Fri Jul 26 15:24:49 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Aug 15 11:01:32 2024 +1000" }, "message": "upstream: document the reduced logingrace penalty\n\nOpenBSD-Commit-ID: 9b63e0e3599d524ddc10edc4f978081382c3548b\n" }, { "commit": "1ec0a64c5dc57b8a2053a93b5ef0d02ff8598e5c", "tree": "553fef302e9aac733b318c872a5680480853b2aa", "parents": [ "0bf6e5bb750b66b25c20a1c5a471f91850de3748" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sun Jul 28 21:26:51 2024 +1000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sun Jul 28 21:49:56 2024 +1000" }, "message": "Explicitly install libssl-devel cygwin.\n\nShould fix CI tests for cygwin default config.\n" }, { "commit": "0bf6e5bb750b66b25c20a1c5a471f91850de3748", "tree": "39d17c9bbe32a6ad582227bcb88ef8223e613680", "parents": [ "29fb6f6d46b67770084b4f12bcf8a01bd535041b" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Thu Jul 25 23:44:01 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Fri Jul 26 09:49:08 2024 +1000" }, "message": "upstream: reduce logingrace penalty.\n\nA single forgotton login that times out should be below the penalty\nthreshold.\n\nok deraadt/claudio\n\nOpenBSD-Commit-ID: cee1f7d17597c97bff8e5092af5d136fdb08f81d\n" }, { "commit": "29fb6f6d46b67770084b4f12bcf8a01bd535041b", "tree": "0a46a2b18f8386e3483b5ded512c6e8abd08c28d", "parents": [ "53d1d307438517805989c7d5616d752739a97e03" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Thu Jul 25 22:40:08 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Fri Jul 26 08:51:40 2024 +1000" }, "message": "upstream: Fix proxy multiplexing (-O proxy) bug\n\nIf a mux started with ControlPersist then later has a forwarding added using\nmux proxy connection and the forwarding was used, then when the mux proxy\nsession terminates, the mux master process will send a channel close to the\nserver with a bad channel ID and crash the connection.\n\nThis was caused by my stupidly reusing c-\u003eremote_id for mux channel\nassociations when I should have just added another member to struct channel.\n\nok markus@\n\nOpenBSD-Commit-ID: c9f474e0124e3fe456c5e43749b97d75e65b82b2\n" }, { "commit": "53d1d307438517805989c7d5616d752739a97e03", "tree": "ef30d751af0c88ab8d80eff9571dfa5620e78daf", "parents": [ "a9b90859d252c2f5a24142f985d38610ac74685f" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Thu Jul 18 01:47:27 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Fri Jul 26 08:51:19 2024 +1000" }, "message": "upstream: mention mux proxy mode\n\nOpenBSD-Commit-ID: fd77a77779f06d316a314e4540dc57c93fc3369a\n" }, { "commit": "a9b90859d252c2f5a24142f985d38610ac74685f", "tree": "28a56743e1f038fd5cb2bb031bf9566ad0013951", "parents": [ "b05fda224bbcd2f641254534ed2175c42487f3c8" ], "author": { "name": "jsg@openbsd.org", "email": "jsg@openbsd.org", "time": "Sun Jul 14 10:19:23 2024 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Fri Jul 26 08:51:18 2024 +1000" }, "message": "upstream: fix double word; ok dtucker@\n\nOpenBSD-Commit-ID: e6aff005914fa350b896d2be030be3d3b56ec0e8\n" } ], "next": "b05fda224bbcd2f641254534ed2175c42487f3c8" }