)]}' { "log": [ { "commit": "4e07fc889194fdbc2d58de4a2c58ba9588b204ef", "tree": "2ef27c54370cdffec4e4ca0194e9f162d2f10a94", "parents": [ "98bc21f54e29f207d9a12b44724aef586497b51f" ], "author": { "name": "Aaron Wood", "email": "aaronwood@google.com", "time": "Fri May 22 15:05:54 2026 -0700" }, "committer": { "name": "Aaron Wood", "email": "aaronwood@google.com", "time": "Tue May 26 16:10:18 2026 -0700" }, "message": "[bazel] Add license info for Bazel\n\nAdd the targets for license collection in Bazel\n\nBug: 505830390\nChange-Id: I47eac495188dfdde600abcbc6131f92faacfc145\nReviewed-on: https://fuchsia-review.googlesource.com/c/third_party/openssh-portable/+/1621884\nReviewed-by: Jerry Belton \u003cjcecil@google.com\u003e\nCommit-Queue: Aaron Wood \u003caaronwood@google.com\u003e\n" }, { "commit": "98bc21f54e29f207d9a12b44724aef586497b51f", "tree": "f95bc947c626d7ac053715677ac6c46a1bd4ed98", "parents": [ "868dc524da1f20ee923fcc4bbea93a56209d43b3" ], "author": { "name": "Aaron Wood", "email": "aaronwood@google.com", "time": "Tue May 19 13:20:28 2026 -0700" }, "committer": { "name": "fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com", "email": "fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue May 19 14:18:11 2026 -0700" }, "message": "[bazel] Export config files for use with Bazel assembly rules\n\nThese config files need to be exported for use in Bazel.\n\nBug: 505830390\nChange-Id: Ifb850ffc9e58998934ee3ddc2c85cbfd98694b13\nReviewed-on: https://fuchsia-review.googlesource.com/c/third_party/openssh-portable/+/1618648\nFuchsia-Auto-Submit: Aaron Wood \u003caaronwood@google.com\u003e\nReviewed-by: David Fang \u003cfangism@google.com\u003e\nReviewed-by: Aidan Wolter \u003cawolter@google.com\u003e\nCommit-Queue: Aaron Wood \u003caaronwood@google.com\u003e\n" }, { "commit": "868dc524da1f20ee923fcc4bbea93a56209d43b3", "tree": "13cc2edbb450cfe5af8c15621afb8c0e6eb0929d", "parents": [ "b1f46438495a14bbde0db50ee786a1dcf3427319" ], "author": { "name": "Suraj Malhotra", "email": "surajmalhotra@google.com", "time": "Fri Oct 24 13:18:25 2025 -0700" }, "committer": { "name": "CQ Bot", "email": "fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Oct 24 14:34:04 2025 -0700" }, "message": "[fuchsia] Update PATH for SSH\n\n/system/bin has been gone for a while, and /boot-bin is required for\nsome binaries which have been migrated into boot packages.\n\nChange-Id: I1937b0602c934f11be58f232bd5713f066415fb9\nReviewed-on: https://fuchsia-review.googlesource.com/c/third_party/openssh-portable/+/1402716\nFuchsia-Auto-Submit: Suraj Malhotra \u003csurajmalhotra@google.com\u003e\nReviewed-by: James Robinson \u003cjamesr@google.com\u003e\nCommit-Queue: Suraj Malhotra \u003csurajmalhotra@google.com\u003e\n" }, { "commit": "b1f46438495a14bbde0db50ee786a1dcf3427319", "tree": "e493ee46eec5c63cebf3c2910c220dc1b05ef7cd", "parents": [ "f7af28e59968ead8ab711a04b6971492e2ffcd76" ], "author": { "name": "Brandon Castellano", "email": "bcastell@google.com", "time": "Tue Jan 28 21:31:59 2025 +0000" }, "committer": { "name": "CQ Bot", "email": "fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Jan 28 14:45:04 2025 -0800" }, "message": "[ssh] Complete io2 migration\n\nBug: 376575307\nChange-Id: I7ebb9d52d9da8f5427de7633f6676a73797509ad\nReviewed-on: https://fuchsia-review.googlesource.com/c/third_party/openssh-portable/+/1195035\nCommit-Queue: Brandon Castellano \u003cbcastell@google.com\u003e\nReviewed-by: Adam Barth \u003cabarth@google.com\u003e\n" }, { "commit": "f7af28e59968ead8ab711a04b6971492e2ffcd76", "tree": "3012a0f19c424fa40847faced59af242723819c9", "parents": [ "cd01adc1be5fec5841f52b937a2d543e8083db1f" ], "author": { "name": "Ian McKellar", "email": "ianloic@google.com", "time": "Thu Sep 05 18:24:08 2024 +0000" }, "committer": { "name": "CQ Bot", "email": "fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Sep 05 19:30:29 2024 +0000" }, "message": "[cleanup][sdk] Update async library paths.\n\nSee also: https://fxrev.dev/1113214\n\nChange-Id: I0a6b283767efdc87fbf83de3f89622760cb86aeb\nReviewed-on: https://fuchsia-review.googlesource.com/c/third_party/openssh-portable/+/1113075\nReviewed-by: Adam Barth \u003cabarth@google.com\u003e\nFuchsia-Auto-Submit: Ian McKellar \u003cianloic@google.com\u003e\nCommit-Queue: Auto-Submit \u003cauto-submit@fuchsia-infra.iam.gserviceaccount.com\u003e\n" }, { "commit": "cd01adc1be5fec5841f52b937a2d543e8083db1f", "tree": "8445a117a4dfd66f44b1c51ad2d34186923eae73", "parents": [ "2cf58f42cb95c8a971159194d639f31ca77b2491" ], "author": { "name": "Casey Dahlin", "email": "sadmac@google.com", "time": "Wed Aug 07 16:27:19 2024 -0700" }, "committer": { "name": "CQ Bot", "email": "fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Aug 08 18:32:01 2024 +0000" }, "message": "[sshd] Log commands when run\n\nThis logs at INFO level which is only enabled in eng builds, so it should be\nsafe.\n\nFixed: b/356709489\nChange-Id: I969ca63370462bcb354cca50660cfd88401356b1\nReviewed-on: https://fuchsia-review.googlesource.com/c/third_party/openssh-portable/+/1097332\nReviewed-by: Steven Grady \u003cslgrady@google.com\u003e\nFuchsia-Auto-Submit: Casey Dahlin \u003csadmac@google.com\u003e\nCommit-Queue: Auto-Submit \u003cauto-submit@fuchsia-infra.iam.gserviceaccount.com\u003e\n" }, { "commit": "2cf58f42cb95c8a971159194d639f31ca77b2491", "tree": "0d17187a8df90b367c5037109f811385094e7723", "parents": [ "ea2aafd79457d439bbe7d5d212eb1a4d30d6cd88" ], "author": { "name": "Clayton Wilkinson", "email": "wilkinsonclay@google.com", "time": "Mon May 13 08:50:17 2024 -0700" }, "committer": { "name": "CQ Bot", "email": "fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon May 13 17:25:24 2024 +0000" }, "message": "[ssh][docs] Updating Fuchsia README\n\nThis updates the Fuchsia README to refer to fuchsia.dev for information\non SSH keys.\n\nThis is part of the project to remove SSH keys usage at build time\nand only use them at run time.\n\nChange-Id: Iadc8ae79fc5c256f76166cc086cd3e7e53f3dbb2\nReviewed-on: https://fuchsia-review.googlesource.com/c/third_party/openssh-portable/+/1047021\nReviewed-by: Steven Grady \u003cslgrady@google.com\u003e\nReviewed-by: Casey Dahlin \u003csadmac@google.com\u003e\nCommit-Queue: Clayton Wilkinson \u003cwilkinsonclay@google.com\u003e\n" }, { "commit": "ea2aafd79457d439bbe7d5d212eb1a4d30d6cd88", "tree": "6c64bddfee0a7f5e5e6c9b4155ac92cc5b522d68", "parents": [ "2bd4843129271474d07cb826d70cb97c3eee6774" ], "author": { "name": "Casey Dahlin", "email": "sadmac@google.com", "time": "Mon May 06 14:18:03 2024 -0700" }, "committer": { "name": "CQ Bot", "email": "fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue May 07 18:56:06 2024 +0000" }, "message": "[sshd] Clean up children before exiting\n\nFixed: b/337122544\nChange-Id: I76e9c1ad2c17ec2f24e7b9de6639218e8fe41ae7\nReviewed-on: https://fuchsia-review.googlesource.com/c/third_party/openssh-portable/+/1041518\nReviewed-by: Suraj Malhotra \u003csurajmalhotra@google.com\u003e\nReviewed-by: Steven Grady \u003cslgrady@google.com\u003e\nCommit-Queue: Casey Dahlin \u003csadmac@google.com\u003e\n" }, { "commit": "2bd4843129271474d07cb826d70cb97c3eee6774", "tree": "bd14ca8178e6b1e41d5fde54f668882f1b9703a5", "parents": [ "9907b3ed5b59b21688ba5c17eb0d550d82e4be40" ], "author": { "name": "Casey Dahlin", "email": "sadmac@google.com", "time": "Tue Apr 23 00:14:08 2024 +0000" }, "committer": { "name": "CQ Bot", "email": "fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Apr 24 00:16:02 2024 +0000" }, "message": "[sshd_config] Add a separate config for eng builds\n\nBug: b/327015808\nChange-Id: I7611d4f8b763c125e670828cf377ef08295280b0\nReviewed-on: https://fuchsia-review.googlesource.com/c/third_party/openssh-portable/+/1035175\nFuchsia-Auto-Submit: Casey Dahlin \u003csadmac@google.com\u003e\nReviewed-by: Steven Grady \u003cslgrady@google.com\u003e\nCommit-Queue: Casey Dahlin \u003csadmac@google.com\u003e\n" }, { "commit": "9907b3ed5b59b21688ba5c17eb0d550d82e4be40", "tree": "3ed3fce03349921ad7606bdb7db18c6a873198a4", "parents": [ "250f64e746b0bcb58776099f3fe893089a51b221", "95cd4a090d5b378d75c8753e70249aadc65d858d" ], "author": { "name": "Casey Dahlin", "email": "sadmac@google.com", "time": "Fri Apr 12 11:42:42 2024 -0700" }, "committer": { "name": "CQ Bot", "email": "fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Apr 12 22:54:56 2024 +0000" }, "message": "Merge remote-tracking branch \u0027origin/upstream/V_9_6\u0027 into HEAD\n\nFixed: b/309918496\nChange-Id: I4b0b7ffe90928a76a8b49731a469ceb8d012855a\nReviewed-on: https://fuchsia-review.googlesource.com/c/third_party/openssh-portable/+/970777\nReviewed-by: Steven Grady \u003cslgrady@google.com\u003e\nCommit-Queue: Casey Dahlin \u003csadmac@google.com\u003e\n" }, { "commit": "250f64e746b0bcb58776099f3fe893089a51b221", "tree": "5cc78ef39240e0fa1953aa6e2aa7d013a8b7ddc5", "parents": [ "d2ed8ab94e5649a150065e24298f579ebf40ad0a" ], "author": { "name": "Clayton Wilkinson", "email": "wilkinsonclay@google.com", "time": "Mon Mar 25 23:38:39 2024 +0000" }, "committer": { "name": "CQ Bot", "email": "fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Mar 27 14:30:17 2024 +0000" }, "message": "[ssh][dev-keys] Removing developer-keys script\n\nThis removes the developer-keys build targets and\nscripts from being part of the openssh-portable repo.\n\nThe functionality has been moved to be in-tree and is\ndone at runtime vs. build time in order to be more reliable\nwhen using ssh keys configured outside Fuchsia.\n\nMore info: go/fuchsia-ssh-unification\n\nBug: b/329486457\nChange-Id: Ida84a1395d13e6797ac54530670dc5cd58559706\nReviewed-on: https://fuchsia-review.googlesource.com/c/third_party/openssh-portable/+/1014736\nReviewed-by: Casey Dahlin \u003csadmac@google.com\u003e\nCommit-Queue: Clayton Wilkinson \u003cwilkinsonclay@google.com\u003e\n" }, { "commit": "d2ed8ab94e5649a150065e24298f579ebf40ad0a", "tree": "7ee24b8b15b78b9fbaa4ac9945e1ab1ad15e7c22", "parents": [ "c3b60b7e4d7ca296cfc28c4c7ba825896e229d1f" ], "author": { "name": "Ina Huh", "email": "ihuh@google.com", "time": "Mon Mar 18 12:58:27 2024 -0700" }, "committer": { "name": "CQ Bot", "email": "fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Mon Mar 18 21:51:22 2024 +0000" }, "message": "[sshd_config] Bump the ClientAliveCountMax.\n\nThe current value might be too small for arm64 which could be causing\nkeepalive failures.\n\nBug: 329137552\nChange-Id: I35a9c90db7858e7347f56f888c6f6c201cb53c6b\nReviewed-on: https://fuchsia-review.googlesource.com/c/third_party/openssh-portable/+/1010459\nCommit-Queue: Auto-Submit \u003cauto-submit@fuchsia-infra.iam.gserviceaccount.com\u003e\nFuchsia-Auto-Submit: Ina Huh \u003cihuh@google.com\u003e\nReviewed-by: Steven Grady \u003cslgrady@google.com\u003e\n" }, { "commit": "c3b60b7e4d7ca296cfc28c4c7ba825896e229d1f", "tree": "b41653c7ec2a19711bc4d64ff6471da41a6186d9", "parents": [ "ebe643147faa583b2020613b285312863db3e519" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Thu Feb 02 12:10:05 2023 +0000" }, "committer": { "name": "CQ Bot", "email": "fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Sat Jan 27 00:31:50 2024 +0000" }, "message": "upstream: fix double-free caused by compat_kex_proposal(); bz3522\n\nby dtucker@, ok me\n\nOpenBSD-Commit-ID: 2bfc37cd2d41f67dad64c17a64cf2cd3806a5c80\n\nFixed: b/309918496\nChange-Id: I438c5399b70fd0a76c5dbe105558e7d55574a5d2\nReviewed-on: https://fuchsia-review.googlesource.com/c/third_party/openssh-portable/+/981495\nCommit-Queue: Auto-Submit \u003cauto-submit@fuchsia-infra.iam.gserviceaccount.com\u003e\nFuchsia-Auto-Submit: Casey Dahlin \u003csadmac@google.com\u003e\nReviewed-by: Ali Zhang \u003calizhang@google.com\u003e\n" }, { "commit": "ebe643147faa583b2020613b285312863db3e519", "tree": "3c5236059797119fd063de1ca78f65e9e2f874de", "parents": [ "17e85259860d5bbe4eb6e02995fc7656223db411" ], "author": { "name": "Mitchell Kember", "email": "mkember@google.com", "time": "Thu Jan 25 17:07:49 2024 -0800" }, "committer": { "name": "CQ Bot", "email": "fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Sat Jan 27 00:27:25 2024 +0000" }, "message": "[fxbug.dev] Migrate bug numbers\n\nThis changes fxbug.dev/ URLs from Monorail bug numbers to the new\nFuchsia Issue Tracker numbers.\n\nThe migration to the new issue tracker was announced here:\nhttps://groups.google.com/a/fuchsia.dev/g/announce/c/GOYfJozEqmk/m/qsGsaJ7UAAAJ\n\nBug: 298074672\nChange-Id: Id47213771997fb4bd3aabae7a602ca38e6a091d6\nReviewed-on: https://fuchsia-review.googlesource.com/c/third_party/openssh-portable/+/980262\nFuchsia-Auto-Submit: Mitchell Kember \u003cmkember@google.com\u003e\nCommit-Queue: Auto-Submit \u003cauto-submit@fuchsia-infra.iam.gserviceaccount.com\u003e\nReviewed-by: Ian McKellar \u003cianloic@google.com\u003e\n" }, { "commit": "95cd4a090d5b378d75c8753e70249aadc65d858d", "tree": "c2bccdc8c4a6eb3eb16bec6f3449f61b704bf85f", "parents": [ "8241b9c0529228b4b86d88b1a6076fb9f97e4a99" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Fri Dec 22 17:56:26 2023 +1100" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Fri Dec 22 18:00:59 2023 +1100" }, "message": "better detection of broken -fzero-call-used-regs\n\ngcc 13.2.0 on ppc64le refuses to compile some function, including\ncipher.c:compression_alg_list() with an error:\n\n\u003e sorry, unimplemented: argument ‘used’ is not supportedcw\n\u003e for ‘-fzero-call-used-regs’ on this target\n\nThis extends the autoconf will-it-work test with a similarly-\nstructured function that seems to catch this.\n\nSpotted/tested by Colin Watson; bz3645\n" }, { "commit": "8241b9c0529228b4b86d88b1a6076fb9f97e4a99", "tree": "27ce831f4458521090959751c97450f246ccbf7f", "parents": [ "2f2c65cb5f1518a9c556d3e8efa27ea0ca305c6b" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Dec 19 01:59:50 2023 +1100" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Dec 19 01:59:50 2023 +1100" }, "message": "crank versions\n" }, { "commit": "2f2c65cb5f1518a9c556d3e8efa27ea0ca305c6b", "tree": "7b1dc2bbf184cc433eea6cac9e51f02433c5768d", "parents": [ "e48cdee8e19059203b1aeeabec2350b8375fa61f" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Dec 19 01:59:06 2023 +1100" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Dec 19 01:59:06 2023 +1100" }, "message": "depend\n" }, { "commit": "e48cdee8e19059203b1aeeabec2350b8375fa61f", "tree": "de0826babd2498e546cee2ff218e6c068aa867e0", "parents": [ "2f512f862df1d5f456f82a0334c9e8cc7208a2a1" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Mon Dec 18 14:50:08 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Dec 19 01:57:37 2023 +1100" }, "message": "upstream: regress test for agent PKCS#11-backed certificates\n\nOpenBSD-Regress-ID: 38f681777cb944a8cc3bf9d0ad62959a16764df9\n" }, { "commit": "2f512f862df1d5f456f82a0334c9e8cc7208a2a1", "tree": "244e0a9dd6991c3a0bf0ec3fe71c6d4427f67a40", "parents": [ "cdddd66412ca5920ed4d3ebbfa6ace12dbd9b82f" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Mon Dec 18 14:49:39 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Dec 19 01:57:16 2023 +1100" }, "message": "upstream: regress test for constrained PKCS#11 keys\n\nOpenBSD-Regress-ID: b2f26ae95d609d12257b43aef7cd7714c82618ff\n" }, { "commit": "cdddd66412ca5920ed4d3ebbfa6ace12dbd9b82f", "tree": "cbdc7aab2396fcf3f9d4989a992fdd782504184d", "parents": [ "6d51feab157cedf1e7ef5b3f8781ca8ff9c4ab1b" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Mon Dec 18 14:48:44 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Dec 19 01:53:47 2023 +1100" }, "message": "upstream: openssh-9.6\n\nOpenBSD-Commit-ID: 21759837cf0e0092d9a2079f8fb562071c11016b\n" }, { "commit": "6d51feab157cedf1e7ef5b3f8781ca8ff9c4ab1b", "tree": "e7631190f19db44da47e19d092e74bf92e8b14ac", "parents": [ "7ef3787c84b6b524501211b11a26c742f829af1a" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Mon Dec 18 14:48:08 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Dec 19 01:53:40 2023 +1100" }, "message": "upstream: ssh-agent: record failed session-bind attempts\n\nRecord failed attempts to session-bind a connection and refuse signing\noperations on that connection henceforth.\n\nPrevents a future situation where we add a new hostkey type that is not\nrecognised by an older ssh-agent, that consequently causes session-bind\nto fail (this situation is only likely to arise when people mix ssh(1)\nand ssh-agent(1) of different versions on the same host). Previously,\nafter such a failure the agent socket would be considered unbound and\nnot subject to restriction.\n\nSpotted by Jann Horn\n\nOpenBSD-Commit-ID: b0fdd023e920aa4831413f640de4c5307b53552e\n" }, { "commit": "7ef3787c84b6b524501211b11a26c742f829af1a", "tree": "c23da4cf5caaf963000da18b464d8abed0c6928f", "parents": [ "0cb50eefdd29f0fec31d0e71cc4b004a5f704e67" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Mon Dec 18 14:47:44 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Dec 19 01:53:40 2023 +1100" }, "message": "upstream: ban user/hostnames with most shell metacharacters\n\nThis makes ssh(1) refuse user or host names provided on the\ncommandline that contain most shell metacharacters.\n\nSome programs that invoke ssh(1) using untrusted data do not filter\nmetacharacters in arguments they supply. This could create\ninteractions with user-specified ProxyCommand and other directives\nthat allow shell injection attacks to occur.\n\nIt\u0027s a mistake to invoke ssh(1) with arbitrary untrusted arguments,\nbut getting this stuff right can be tricky, so this should prevent\nmost obvious ways of creating risky situations. It however is not\nand cannot be perfect: ssh(1) has no practical way of interpreting\nwhat shell quoting rules are in use and how they interact with the\nuser\u0027s specified ProxyCommand.\n\nTo allow configurations that use strange user or hostnames to\ncontinue to work, this strictness is applied only to names coming\nfrom the commandline. Names specified using User or Hostname\ndirectives in ssh_config(5) are not affected.\n\nfeedback/ok millert@ markus@ dtucker@ deraadt@\n\nOpenBSD-Commit-ID: 3b487348b5964f3e77b6b4d3da4c3b439e94b2d9\n" }, { "commit": "0cb50eefdd29f0fec31d0e71cc4b004a5f704e67", "tree": "8bca2581bdf5d716cd55395c079167e9b708d58d", "parents": [ "4448a2938abc76e6bd33ba09b2ec17a216dfb491" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Mon Dec 18 14:47:20 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Dec 19 01:52:55 2023 +1100" }, "message": "upstream: stricter handling of channel window limits\n\nThis makes ssh/sshd more strict in handling non-compliant peers that\nsend more data than the advertised channel window allows. Previously\nthe additional data would be silently discarded. This change will\ncause ssh/sshd to terminate the connection if the channel window is\nexceeded by more than a small grace allowance.\n\nok markus@\n\nOpenBSD-Commit-ID: 811e21b41831eba3dd7f67b3d409a438f20d3037\n" }, { "commit": "4448a2938abc76e6bd33ba09b2ec17a216dfb491", "tree": "1b2ef94eda1b9139e580dbd4dde416fb831b4602", "parents": [ "881d9c6af9da4257c69c327c4e2f1508b2fa754b" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Mon Dec 18 14:46:56 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Dec 19 01:52:55 2023 +1100" }, "message": "upstream: Make it possible to load certs from PKCS#11 tokens\n\nAdds a protocol extension to allow grafting certificates supplied by\nssh-add to keys loaded from PKCS#11 tokens in the agent.\n\nfeedback/ok markus@\n\nOpenBSD-Commit-ID: bb5433cd28ede2bc910996eb3c0b53e20f86037f\n" }, { "commit": "881d9c6af9da4257c69c327c4e2f1508b2fa754b", "tree": "4ccc87e36326ffe96bbf8ca9b06f2bd5dd9b9eda", "parents": [ "a7ed931caeb68947d30af8a795f4108b6efad761" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Mon Dec 18 14:46:12 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Dec 19 01:51:46 2023 +1100" }, "message": "upstream: apply destination constraints to all p11 keys\n\nPreviously applied only to the first key returned from each token.\n\nok markus@\n\nOpenBSD-Commit-ID: 36df3afb8eb94eec6b2541f063d0d164ef8b488d\n" }, { "commit": "a7ed931caeb68947d30af8a795f4108b6efad761", "tree": "05b9c1e413acee36b37cbe5a0c4b938d19be595d", "parents": [ "1edb00c58f8a6875fad6a497aa2bacf37f9e6cd5" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Mon Dec 18 14:45:49 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Dec 19 01:51:46 2023 +1100" }, "message": "upstream: add \"ext-info-in-auth@openssh.com\" extension\n\nThis adds another transport protocol extension to allow a sshd to send\nSSH2_MSG_EXT_INFO during user authentication, after the server has\nlearned the username that is being logged in to.\n\nThis lets sshd to update the acceptable signature algoritms for public\nkey authentication, and allows these to be varied via sshd_config(5)\n\"Match\" directives, which are evaluated after the server learns the\nusername being authenticated.\n\nFull details in the PROTOCOL file\n\nOpenBSD-Commit-ID: 1de7da7f2b6c32a46043d75fcd49b0cbb7db7779\n" }, { "commit": "1edb00c58f8a6875fad6a497aa2bacf37f9e6cd5", "tree": "d1e2e3a301cdfb9fe828e290710faf1a5f273bdd", "parents": [ "59d691b886c79e70b1d1c4ab744e81fd176222fd" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Mon Dec 18 14:45:17 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Dec 19 01:51:11 2023 +1100" }, "message": "upstream: implement \"strict key exchange\" in ssh and sshd\n\nThis adds a protocol extension to improve the integrity of the SSH\ntransport protocol, particular in and around the initial key exchange\n(KEX) phase.\n\nFull details of the extension are in the PROTOCOL file.\n\nwith markus@\n\nOpenBSD-Commit-ID: 2a66ac962f0a630d7945fee54004ed9e9c439f14\n" }, { "commit": "59d691b886c79e70b1d1c4ab744e81fd176222fd", "tree": "cd06e8849c605bac35706a60db7e9c65dd75d8cc", "parents": [ "aa7b21708511a6d4aed3839fc9f6e82e849dd4a1" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Mon Dec 18 14:49:11 2023 +1100" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Mon Dec 18 14:49:11 2023 +1100" }, "message": "better detection of broken -fzero-call-used-regs\n\nUse OSSH_CHECK_CFLAG_LINK() for detection of these flags and extend\ntest program to exercise varargs, which seems to catch more stuff.\n\nok dtucker@\n" }, { "commit": "aa7b21708511a6d4aed3839fc9f6e82e849dd4a1", "tree": "b716a456c5091a1ef7b9ce547fd984ea4c8c8326", "parents": [ "4086bd6652c0badccc020218a62190a7798fb72c" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Wed Dec 13 03:28:19 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Dec 13 14:33:50 2023 +1100" }, "message": "upstream: when invoking KnownHostsCommand to determine the order of\n\nhost key algorithms to request, ensure that the hostname passed to the\ncommand is decorated with the port number for ports other than 22.\n\nThis matches the behaviour of KnownHostsCommand when invoked to look\nup the actual host key.\n\nbz3643, ok dtucker@\n\nOpenBSD-Commit-ID: 5cfabc0b7c6c7ab473666df314f377b1f15420b1\n" }, { "commit": "4086bd6652c0badccc020218a62190a7798fb72c", "tree": "ce20485e15c6e43ee1487f6aac75a29a3c48a7b1", "parents": [ "19d3ee2f3adf7d9a606ff015c1e153744702c4c9" ], "author": { "name": "markus@openbsd.org", "email": "markus@openbsd.org", "time": "Fri Dec 08 09:18:39 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Dec 13 14:33:50 2023 +1100" }, "message": "upstream: prevent leak in sshsig_match_principals; ok djm@\n\nOpenBSD-Commit-ID: 594f61ad4819ff5c72dfe99ba666a17f0e1030ae\n" }, { "commit": "19d3ee2f3adf7d9a606ff015c1e153744702c4c9", "tree": "071b2ccea15b00f2a02c66f091d0d7be12e78556", "parents": [ "947affad4831df015c498c00c6351ea6f13895d5" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Wed Dec 06 21:06:48 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Dec 07 08:09:11 2023 +1100" }, "message": "upstream: short circuit debug log processing early if we\u0027re not going\n\nto log anything. From Kobe Housen\n\nOpenBSD-Commit-ID: 2bcddd695872a1bef137cfff7823044dcded90ea\n" }, { "commit": "947affad4831df015c498c00c6351ea6f13895d5", "tree": "0fa42b1b2ae0bb58f99f8b33d3c83142ca369c37", "parents": [ "747dce36206675ca6b885010a835733df469351b" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Mon Nov 27 09:37:28 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Mon Nov 27 09:37:28 2023 +1100" }, "message": "Add tests for OpenSSL 3.2.0 and 3.2 stable branch.\n" }, { "commit": "747dce36206675ca6b885010a835733df469351b", "tree": "6542d2129e449306dcb409bd4163908642694a88", "parents": [ "3d44a5c56585d1c351dbc006240a591b6da502b1" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sat Nov 25 09:03:38 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sat Nov 25 09:03:38 2023 +1100" }, "message": "Use non-zero arg in compiler test program.\n\nNow that we\u0027re running the test program, passing zero to the test function\ncan cause divide-by-zero exceptions which might show up in logs.\n" }, { "commit": "3d44a5c56585d1c351dbc006240a591b6da502b1", "tree": "e9a636dd88503db9bd27b784c1a1edc6e5a58b5e", "parents": [ "1d7f9b6e297877bd00973e6dc5c0642dbefc3b5f" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Fri Nov 24 00:31:30 2023 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Fri Nov 24 12:01:34 2023 +1100" }, "message": "upstream: Plug mem leak of msg when processing a quit message.\n\nCoverity CID#427852, ok djm@\n\nOpenBSD-Commit-ID: bf85362addbe2134c3d8c4b80f16601fbff823b7\n" }, { "commit": "1d7f9b6e297877bd00973e6dc5c0642dbefc3b5f", "tree": "6fcdc77c180430eb2e647f10e028d4b5bbdaffa0", "parents": [ "f29934066bd0e561a2e516b7e584fb92d2eedee0" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Thu Nov 23 03:37:05 2023 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Fri Nov 24 12:01:31 2023 +1100" }, "message": "upstream: Include existing mux path in debug message.\n\nOpenBSD-Commit-ID: 1c3641be10c2f4fbad2a1b088a441d072e18bf16\n" }, { "commit": "f29934066bd0e561a2e516b7e584fb92d2eedee0", "tree": "b694f52b1bb9b44612b9e46045aa58e436c02ff0", "parents": [ "a93284a780cd3972afe5f89086b75d564ba157f3" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Thu Nov 23 19:41:27 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Thu Nov 23 19:41:27 2023 +1100" }, "message": "Add an Ubuntu 22.04 test VM.\n\nThis is the same version as Github\u0027s runners so most of the testing on\nit is over there, but having a local VM makes debugging much easier.\n" }, { "commit": "a93284a780cd3972afe5f89086b75d564ba157f3", "tree": "d3289b096e59a624c815edd61bdc5db41ba17149", "parents": [ "670f5a647e98b6fd95ad64f789f87ee3274b481b" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Thu Nov 23 19:36:22 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Thu Nov 23 19:36:22 2023 +1100" }, "message": "Add gcc-12 -Werror test on Ubuntu 22.04.\n\nExplictly specify gcc-11 on Ubuntu 22.04 (it\u0027s the system compiler).\n" }, { "commit": "670f5a647e98b6fd95ad64f789f87ee3274b481b", "tree": "bbb54893fe5d3d6ae13676f7e95baafcca5eab2e", "parents": [ "cea007d691cfedfa07a5b8599f97ce0511f53fc9" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Thu Nov 23 19:34:57 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Thu Nov 23 19:34:57 2023 +1100" }, "message": "Check return value from write to prevent warning.\n\n... and since we\u0027re testing for flags with -Werror, this caused\nconfigure to mis-detect compiler flags.\n" }, { "commit": "cea007d691cfedfa07a5b8599f97ce0511f53fc9", "tree": "f8f39328f1d38934cc2188a8e05daa5d556a8afb", "parents": [ "ee0d305828f13536c0a416bbf9c3e81039d9ea55" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Wed Nov 22 21:18:55 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Thu Nov 23 14:40:51 2023 +1100" }, "message": "Run compiler test program when compiling natively.\n\nok djm@\n" }, { "commit": "ee0d305828f13536c0a416bbf9c3e81039d9ea55", "tree": "ff5ef1965e6af43fc0f373a41984a004131ce85d", "parents": [ "de304c76316b029df460673725a9104224b9959b" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Wed Nov 22 21:18:07 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Thu Nov 23 14:40:48 2023 +1100" }, "message": "Factor out compiler test program into a macro.\n\nok djm@\n" }, { "commit": "de304c76316b029df460673725a9104224b9959b", "tree": "6658ad799c79c78934a8b95ec3e433eebabdbc75", "parents": [ "99a2df5e1994cdcb44ba2187b5f34d0e9190be91" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Wed Nov 22 08:55:36 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Wed Nov 22 08:55:36 2023 +1100" }, "message": "Add fbsd14 VM to test pool.\n" }, { "commit": "99a2df5e1994cdcb44ba2187b5f34d0e9190be91", "tree": "fa8dae7b3da1fdd34438f19b23b7e4b62b00de1e", "parents": [ "ff220d4010717f7bfbbc02a2400666fb9d24f250" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Nov 21 16:19:29 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Nov 21 16:24:17 2023 +1100" }, "message": "Expand -fzero-call-used-regs test to cover gcc 11.\n\nIt turns out that gcc also has some problems with -fzero-call-used-regs,\nat least v11 on mips. Previously the test in OSSH_CHECK_CFLAG_COMPILE\nwas sufficient to catch it with \"\u003dall\", but not sufficient for \"\u003dused\".\nExpand the testcase and include it in the other tests for good measure.\nSee bz#3629. ok djm@.\n" }, { "commit": "ff220d4010717f7bfbbc02a2400666fb9d24f250", "tree": "5925adb8c3d2ced1014ea0c9406e5e72106b63ad", "parents": [ "2a19e02f36b16f0f6cc915f7d1e60ead5e36303b" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Nov 21 14:04:34 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Nov 21 14:04:34 2023 +1100" }, "message": "Stop using -fzero-call-used-regs\u003dall\n\n... since it seems to be problematic with several different versions of\nclang. Only use -fzero-call-used-regs\u003dused which is less\nproblematic, except with Apple\u0027s clang where we don\u0027t use it at all.\nbz#3629, ok djm@\n" }, { "commit": "2a19e02f36b16f0f6cc915f7d1e60ead5e36303b", "tree": "52445c80142ffbb059cbfec978605981c7888793", "parents": [ "c52db0114826d73eff6cdbf205e9c1fa4f7ca6c6" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Nov 21 14:02:18 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Nov 21 14:02:18 2023 +1100" }, "message": "Allow for vendor prefix on clang version numbers.\n\nCorrectly detects the version of OpenBSD\u0027s native clang, as well as\nApple\u0027s. Spotted tb@, ok djm@.\n" }, { "commit": "17e85259860d5bbe4eb6e02995fc7656223db411", "tree": "044ba2d11684d86321173e8e673548996a285f90", "parents": [ "aff8fe1c2791f8dc90480eec72e64e5ebd5c9643" ], "author": { "name": "Aidan Wolter", "email": "awolter@google.com", "time": "Fri Nov 17 04:28:55 2023 +0000" }, "committer": { "name": "CQ Bot", "email": "fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Tue Nov 21 02:59:40 2023 +0000" }, "message": "[assembly] Remove unused ssh shell package\n\nBug: b/308694417\nChange-Id: I4ee0834d373948fdb92a613c95a55a8318e28ba1\nReviewed-on: https://fuchsia-review.googlesource.com/c/third_party/openssh-portable/+/947865\nFuchsia-Auto-Submit: Aidan Wolter \u003cawolter@google.com\u003e\nReviewed-by: David Iserovich \u003cdiserovich@google.com\u003e\nCommit-Queue: Auto-Submit \u003cauto-submit@fuchsia-infra.iam.gserviceaccount.com\u003e\n" }, { "commit": "c52db0114826d73eff6cdbf205e9c1fa4f7ca6c6", "tree": "e78992af405eef6623e99a567ccc8b5a5bba6317", "parents": [ "26f3f3bbc69196d908cad6558c8c7dc5beb8d74a" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Mon Nov 20 02:50:00 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Mon Nov 20 13:51:15 2023 +1100" }, "message": "upstream: set errno\u003dEAFNOSUPPORT when filtering addresses that don\u0027t\n\nmatch AddressFamily; yields slightly better error message if no address\nmatches. bz#3526\n\nOpenBSD-Commit-ID: 29cea900ddd8b04a4d1968da5c4a893be2ebd9e6\n" }, { "commit": "aff8fe1c2791f8dc90480eec72e64e5ebd5c9643", "tree": "37b6d57a34f26c71cdb63655045b177fd002e3a7", "parents": [ "2fe644ae7dcbe9052f4f10b21097884d63a5f3d8" ], "author": { "name": "Aidan Wolter", "email": "awolter@google.com", "time": "Fri Nov 17 04:28:15 2023 +0000" }, "committer": { "name": "CQ Bot", "email": "fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Fri Nov 17 17:32:58 2023 +0000" }, "message": "[assembly] Add non-shell-package for ssh tools\n\nssh is moving to a normal package so that it can be added to\ndiscoverable. The shell command metadata is added directly by assembly.\n\nBug: b/308694417\nChange-Id: I13e6765a3c88020c1e4e356b716db89569e5b97d\nReviewed-on: https://fuchsia-review.googlesource.com/c/third_party/openssh-portable/+/947864\nReviewed-by: David Iserovich \u003cdiserovich@google.com\u003e\nCommit-Queue: Auto-Submit \u003cauto-submit@fuchsia-infra.iam.gserviceaccount.com\u003e\nFuchsia-Auto-Submit: Aidan Wolter \u003cawolter@google.com\u003e\n" }, { "commit": "2fe644ae7dcbe9052f4f10b21097884d63a5f3d8", "tree": "3869b1fdb3668bd0e0078f8b7ae5c1ed7582dae3", "parents": [ "77323046fe749a12614230b03f679bfb0f2770ca" ], "author": { "name": "Steven Grady", "email": "slgrady@google.com", "time": "Wed Nov 15 22:01:05 2023 +0000" }, "committer": { "name": "CQ Bot", "email": "fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Thu Nov 16 21:50:13 2023 +0000" }, "message": "[openssh] Change ownership to Tools Team\n\nThe Tools Team should take responsibility for this, as its\nprimary use is for host tools (often Overnet).\n\nChange-Id: Iaa5617c63cc78e1d6242bf0a127988dd5b07293c\nReviewed-on: https://fuchsia-review.googlesource.com/c/third_party/openssh-portable/+/947512\nCommit-Queue: Steven Grady \u003cslgrady@google.com\u003e\nReviewed-by: Ian McKellar \u003cianloic@google.com\u003e\n" }, { "commit": "26f3f3bbc69196d908cad6558c8c7dc5beb8d74a", "tree": "d268faa80f4bca54be077ebe67faa44bf41c3c3d", "parents": [ "050c335c8da43741ed0df2570ebfbd5d1dfd0a31" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Wed Nov 15 23:03:38 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Nov 16 10:05:32 2023 +1100" }, "message": "upstream: when connecting via socket (the default case), filter\n\naddresses by AddressFamily if one was specified. Fixes the case where, if\nCanonicalizeHostname is enabled, ssh may ignore AddressFamily. bz5326; ok\ndtucker\n\nOpenBSD-Commit-ID: 6c7d7751f6cd055126b2b268a7b64dcafa447439\n" }, { "commit": "050c335c8da43741ed0df2570ebfbd5d1dfd0a31", "tree": "825e2a081e5716f56398ceaf8c5c30a1d3840426", "parents": [ "676377ce67807a24e08a54cd60ec832946cc6cae" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Wed Nov 15 22:51:49 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Nov 16 09:53:42 2023 +1100" }, "message": "upstream: when deciding whether to enable keystroke timing\n\nobfuscation, only consider enabling it when a channel with a tty is open.\n\nAvoids turning on the obfucation when X11 forwarding only is in use,\nwhich slows it right down. Reported by Roger Marsh\n\nOpenBSD-Commit-ID: c292f738db410f729190f92de100c39ec931a4f1\n" }, { "commit": "676377ce67807a24e08a54cd60ec832946cc6cae", "tree": "11005c0c3fc5da794afb3b77271ac8680218abe5", "parents": [ "64e0600f23c6dec36c3875392ac95b8a9100c2d6" ], "author": { "name": "tobhe@openbsd.org", "email": "tobhe@openbsd.org", "time": "Mon Nov 13 09:18:19 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Nov 16 09:53:42 2023 +1100" }, "message": "upstream: Make sure sftp_get_limits() only returns 0 if \u0027limits\u0027\n\nwas initialized. This fixes a potential uninitialized use of \u0027limits\u0027 in\nsftp_init() if sftp_get_limits() returned early because of an unexpected\nmessage type.\n\nok djm@\n\nOpenBSD-Commit-ID: 1c177d7c3becc1d71bc8763eecf61873a1d3884c\n" }, { "commit": "64e0600f23c6dec36c3875392ac95b8a9100c2d6", "tree": "5cf8c83124617127b74e64d3d784c76a0b15556d", "parents": [ "c8ed7cc545879ac15f6ce428be4b29c35598bb2a" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Mon Nov 13 20:03:31 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Mon Nov 13 20:03:31 2023 +1100" }, "message": "Test current releases of LibreSSL and OpenSSL.\n\nRetire some of the older releases.\n" }, { "commit": "c8ed7cc545879ac15f6ce428be4b29c35598bb2a", "tree": "18e0b4a2c79975572da52416b60ee7239c5b2d04", "parents": [ "e9fc2c48121cada1b4dcc5dadea5d447fe0093c3" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Wed Nov 01 02:08:38 2023 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Wed Nov 01 13:55:45 2023 +1100" }, "message": "upstream: Specify ssh binary to use\n\n... instead of relying on installed one. Fixes test failures in -portable\nwhen running tests prior to installation.\n\nOpenBSD-Regress-ID: b6d6ba71c23209c616efc805a60d9a445d53a685\n" }, { "commit": "e9fc2c48121cada1b4dcc5dadea5d447fe0093c3", "tree": "f68b5cfcd5ca109b4f04dbcfe9557cad756fe2bb", "parents": [ "7ddf27668f0e21233f08c0ab2fe9ee3fdd6ab1e2" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Wed Nov 01 13:11:31 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Wed Nov 01 13:11:31 2023 +1100" }, "message": "Put long-running test targets on hipri runners.\n\nSome of the selfhosted test targets take a long time to run for various\nreasons, so label them for \"libvirt-hipri\" runners so that they can\nstart immediately. This should reduce the time to complete all tests.\n" }, { "commit": "7ddf27668f0e21233f08c0ab2fe9ee3fdd6ab1e2", "tree": "90bc0dc270036d0d2c34d5fe6eaa1e0f944eea8a", "parents": [ "fb06f9b5a065dfbbef5916fc4accc03c0bf026dd" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Wed Nov 01 00:29:46 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Nov 01 11:39:55 2023 +1100" }, "message": "upstream: add some tests of forced commands overriding Subsystem\n\ndirectives\n\nOpenBSD-Regress-ID: eb48610282f6371672bdf2a8b5d2aa33cfbd322b\n" }, { "commit": "fb06f9b5a065dfbbef5916fc4accc03c0bf026dd", "tree": "bf254a4d4b7df44f537a0170d7619e8caf47a5de", "parents": [ "fc3cc33e88c242c704781c6c48087838f1dcfa2a" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Tue Oct 31 04:15:40 2023 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Oct 31 15:35:53 2023 +1100" }, "message": "upstream: Don\u0027t try to use sudo inside sshd log wrapper.\n\nWe still need to check if we\u0027re using sudo since we don\u0027t want to chown\nunecessarily, as on some platforms this causes an error which pollutes\nstderr. We also don\u0027t want to unnecessarily invoke sudo, since it\u0027s\nrunning in the context of the proxycommand, on *other* platforms it\nmay not be able to authenticate, and if we\u0027re using SUDO then it should\nalready be privileged.\n\nOpenBSD-Regress-ID: 70d58df7503db699de579a9479300e5f3735f4ee\n" }, { "commit": "fc3cc33e88c242c704781c6c48087838f1dcfa2a", "tree": "012eff1ad0f6a6bb0d725ae3d79413ac7a9ae727", "parents": [ "3a506598fddd3f18f9095af3fe917f24cbdd32e0" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Tue Oct 31 02:58:45 2023 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Tue Oct 31 14:01:25 2023 +1100" }, "message": "upstream: Only try to chmod logfile if we have sudo. If we don\u0027t have\n\nsudo then we won\u0027t need to chmod.\n\nOpenBSD-Regress-ID: dbad2f5ece839658ef8af3376cb1fb1cabe2e324\n" }, { "commit": "3a506598fddd3f18f9095af3fe917f24cbdd32e0", "tree": "0529254ae24f3351975f4309c40b10ff2cd6d14b", "parents": [ "f82fa227a52661c37404a6d33bbabf14fed05db0" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Mon Oct 30 23:00:25 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Oct 31 10:04:32 2023 +1100" }, "message": "upstream: move PKCS#11 setup code to test-exec.sh so it can be reused\n\nelsewhere\n\nOpenBSD-Regress-ID: 1d29e6be40f994419795d9e660a8d07f538f0acb\n" }, { "commit": "f82fa227a52661c37404a6d33bbabf14fed05db0", "tree": "3084c167d82f177794b36ff81602dda21f4ad609", "parents": [ "3cf698c6d4ffa9be1da55672a3519e2135a6366a" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Mon Oct 30 17:32:00 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Oct 31 04:36:27 2023 +1100" }, "message": "upstream: tidy and refactor PKCS#11 setup code\n\nReplace the use of a perl script to delete the controlling TTY with a\nSSH_ASKPASS script to directly load the PIN.\n\nMove PKCS#11 setup code to functions in anticipation of it being used\nelsewhere in additional tests.\n\nReduce stdout spam\n\nOpenBSD-Regress-ID: 07705c31de30bab9601a95daf1ee6bef821dd262\n" }, { "commit": "3cf698c6d4ffa9be1da55672a3519e2135a6366a", "tree": "358a4f37c14add8b06ebb2b58665d5edc53e519a", "parents": [ "3e21d58a09894acb38dc69ed615d101131f473d0" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Mon Oct 30 21:35:03 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Mon Oct 30 21:35:03 2023 +1100" }, "message": "Add obsd74 test VM and retire obsd69 and obsd70.\n" }, { "commit": "3e21d58a09894acb38dc69ed615d101131f473d0", "tree": "6c4bd5a6607d6ce531d04d8a796ec5a841a28b48", "parents": [ "917ba181c2cbdb250a443589ec732aa36fd51ffa" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Mon Oct 30 18:34:12 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Mon Oct 30 18:34:12 2023 +1100" }, "message": "Add OpenSSL 3.3.0 as a known dev version.\n" }, { "commit": "917ba181c2cbdb250a443589ec732aa36fd51ffa", "tree": "aad3ea019d1a5cc9e4ae389c41fab6053759db84", "parents": [ "c5698abad6d4ec98ca20bcaaabaeacd5e1ec3f4f" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Mon Oct 30 13:32:03 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Mon Oct 30 16:13:04 2023 +1100" }, "message": "Restore nopasswd sudo rule on Mac OS X.\n\nThis seems to be missing from some (but not all) github runners, so\nrestore it if it seems to be missing.\n" }, { "commit": "c5698abad6d4ec98ca20bcaaabaeacd5e1ec3f4f", "tree": "d4cde5992b9f01f0703db8172a7f34c47da74eda", "parents": [ "1d6a878ceba60b9dc14037dddc8f036070c0065f" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Mon Oct 30 13:26:52 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Mon Oct 30 13:54:00 2023 +1100" }, "message": "Don\u0027t exit early when setting up on Mac OS X.\n\nWe probably need some of the other bits in there (specifically, setting\nthe perms on the home directory) so make it less of a special snowflake.\n" }, { "commit": "1d6a878ceba60b9dc14037dddc8f036070c0065f", "tree": "8d519931928206b2c352709c43e29ed0b342fa86", "parents": [ "e612376427a66f835e284f6b426d16d7c85301bc" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Sun Oct 29 06:22:07 2023 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sun Oct 29 17:33:18 2023 +1100" }, "message": "upstream: Only try to chown logfiles that exist to prevent spurious\n\nerrors.\n\nOpenBSD-Regress-ID: f1b20a476734e885078c481f1324c9ea03af991e\n" }, { "commit": "e612376427a66f835e284f6b426d16d7c85301bc", "tree": "a23ef2c06614dbb88458c9095952f8a1bad2912e", "parents": [ "ea0039173957d0edcd6469b9614dcedb44dcb4f9" ], "author": { "name": "anton@openbsd.org", "email": "anton@openbsd.org", "time": "Thu Oct 26 18:52:45 2023 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Sun Oct 29 17:32:47 2023 +1100" }, "message": "upstream: make use of bsd.regress.mk in extra and interop targets; ok\n\ndtucker@\n\nOpenBSD-Regress-ID: 7ea21b5f6fc4506165093b2123d88d20ff13a4f0\n" }, { "commit": "ea0039173957d0edcd6469b9614dcedb44dcb4f9", "tree": "e9cc2810169ff307c228e1a521fda71b28bd5df2", "parents": [ "d220b9ed5494252b26b95f05be118472bc3ab5c0" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Thu Oct 26 12:44:07 2023 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Fri Oct 27 00:02:26 2023 +1100" }, "message": "upstream: Skip conch interop tests when not enabled instead of fatal.\n\nOpenBSD-Regress-ID: b0abf81c24ac6c21f367233663228ba16fa96a46\n" }, { "commit": "d220b9ed5494252b26b95f05be118472bc3ab5c0", "tree": "3610f8acd4b6105816b23eb1e657f4ca8c351e7d", "parents": [ "a611e4db4009447a0151f31a44e235ca32ed4429" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Wed Oct 25 05:38:08 2023 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Thu Oct 26 23:46:03 2023 +1100" }, "message": "upstream: Import regenerated moduli.\n\nOpenBSD-Commit-ID: 95f5dd6107e8902b87dc5b005ef2b53f1ff378b8\n" }, { "commit": "a611e4db4009447a0151f31a44e235ca32ed4429", "tree": "de00fddd0d00dec7ab14ca6cf15af41b24cecbca", "parents": [ "da951b5e08c167acb5d6e2eec6f146502f5d6ed8" ], "author": { "name": "anton@openbsd.org", "email": "anton@openbsd.org", "time": "Wed Oct 25 08:01:59 2023 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Thu Oct 26 23:44:53 2023 +1100" }, "message": "upstream: ssh conch interop tests requires a controlling terminal;\n\nok dtucker@\n\nOpenBSD-Regress-ID: cbf2701bc347c2f19d907f113779c666f1ecae4a\n" }, { "commit": "da951b5e08c167acb5d6e2eec6f146502f5d6ed8", "tree": "a6f192866397e07c004be09f732152b35bc43873", "parents": [ "1ca166dbb3c0ce632b98869cd955f69320aa6fe8" ], "author": { "name": "anton@openbsd.org", "email": "anton@openbsd.org", "time": "Mon Oct 23 11:30:49 2023 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Thu Oct 26 23:34:29 2023 +1100" }, "message": "upstream: Use private key that is allowed by sshd defaults in conch\n\ninterop tests.\n\nok dtucker@\n\nOpenBSD-Regress-ID: 3b7f65c8f409c328bcd4b704f60cb3d31746f045\n" }, { "commit": "1ca166dbb3c0ce632b98869cd955f69320aa6fe8", "tree": "3f032f51dbefd156fd54681b02345b913829f472", "parents": [ "f993bb58351c5cb71e61aede63805a34a6d4daea" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Fri Oct 20 20:43:00 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Fri Oct 20 20:43:00 2023 +1100" }, "message": "Install Dropbear for interop testing.\n" }, { "commit": "f993bb58351c5cb71e61aede63805a34a6d4daea", "tree": "0d081f1a097b2348ceb3e84b99f817deb71ebe23", "parents": [ "ff85becd5f5f06a76efa45d30fb204a3c5e5215c" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Fri Oct 20 20:39:03 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Fri Oct 20 20:39:03 2023 +1100" }, "message": "Resync PuTTY and Conch path handling with upstream.\n\nNow that configure finds these for us we can remove these -portable\nspecific changes.\n" }, { "commit": "ff85becd5f5f06a76efa45d30fb204a3c5e5215c", "tree": "4dfbd69585369ac4b4e0fc5b8aa519d3a0386723", "parents": [ "c54a50359b9cecddbf3ffcdc26efcb3cd6071ec1" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Fri Oct 20 20:35:46 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Fri Oct 20 20:35:46 2023 +1100" }, "message": "Have configure find PuTTY and Conch binaries.\n\nThis will let us remove some -portable specific changes from\ntest-exec.sh.\n" }, { "commit": "c54a50359b9cecddbf3ffcdc26efcb3cd6071ec1", "tree": "cb433df6f5e3fe5f8023af45bbd682c5ecfa1915", "parents": [ "fbaa707d455a61d0aef8ae65e02a25bac5351e5c" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Fri Oct 20 07:37:07 2023 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Fri Oct 20 20:28:20 2023 +1100" }, "message": "upstream: Allow overriding the locations of the Dropbear binaries\n\nsimilar to what we do for the PuTTY ones.\n\nOpenBSD-Regress-ID: 7de0e00518fb0c8fdc5f243b7f82f523c936049c\n" }, { "commit": "fbaa707d455a61d0aef8ae65e02a25bac5351e5c", "tree": "8a343dd1ea6c3463130dbf44add870f32b727841", "parents": [ "c2003d0dbdcdb61ca336c3f90c5c2b4a09c8e73f" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Fri Oct 20 06:56:45 2023 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Fri Oct 20 18:35:32 2023 +1100" }, "message": "upstream: Add interop test with Dropbear.\n\nRight now this is only dbclient not the Dropbear server since it won\u0027t\ncurrently run as a ProxyCommand.\n\nOpenBSD-Regress-ID: 8cb898c414fcdb252ca6328896b0687acdaee496\n" }, { "commit": "c2003d0dbdcdb61ca336c3f90c5c2b4a09c8e73f", "tree": "152b8d14a926d41f18d84e54f84bebfc98b1dc60", "parents": [ "064e09cd632721c7e6889904e07767443ee23821" ], "author": { "name": "Fabio Pedretti", "email": "pedretti.fabio@gmail.com", "time": "Mon Oct 16 11:59:53 2023 +0200" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Mon Oct 16 21:40:01 2023 +1100" }, "message": "Update openssl-devel dependency in RPM spec.\n\nSince openssh 9.4p1, openssl \u003e\u003d 1.1.1 is required, so\nbuild with --without-openssl elsewhere.\nAccording to https://repology.org/project/openssl/versions\nopenssl 1.1.1 is available on fedora \u003e\u003d 29 and rhel \u003e\u003d 8.\nSuccessfully build tested, installed and run on rhel 6\n" }, { "commit": "064e09cd632721c7e6889904e07767443ee23821", "tree": "846acdc815f561a96d941dde6c15478b5f763d86", "parents": [ "62db354b696b378a164b6e478cb6b0171dcb0c3d" ], "author": { "name": "Fabio Pedretti", "email": "pedretti.fabio@gmail.com", "time": "Mon Oct 16 10:13:06 2023 +0200" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Mon Oct 16 20:14:04 2023 +1100" }, "message": "Remove reference of dropped sshd.pam.old file\n\nThe file was removed in openssh 8.8\n" }, { "commit": "62db354b696b378a164b6e478cb6b0171dcb0c3d", "tree": "8df8ae461a413a386cb24f42d59129748b9b4202", "parents": [ "6eee8c972d5901d10e80634a006b4e346b2c8c19" ], "author": { "name": "dtucker@openbsd.org", "email": "dtucker@openbsd.org", "time": "Mon Oct 16 08:40:00 2023 +0000" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Mon Oct 16 20:13:41 2023 +1100" }, "message": "upstream: Move declaration of \"len\" into the block where it\u0027s used.\n\nThis lets us compile Portable with -Werror with when OpenSSL doesn\u0027t have\nEd25519 support.\n\nOpenBSD-Commit-ID: e02e4b4af351946562a7caee905da60eff16ba29\n" }, { "commit": "6eee8c972d5901d10e80634a006b4e346b2c8c19", "tree": "b1017d6285322c45e7d91cbfaa00105435254113", "parents": [ "637624dbbac13f2bc3c8ec5b15c9d627d07f2935" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Fri Oct 13 15:15:05 2023 +1100" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Fri Oct 13 15:15:05 2023 +1100" }, "message": "run t-extra regress tests\n\nThis exposes the t-extra regress tests (including agent-pkcs11.sh) as\na new extra-tests target in the top level Makefile and runs them by\ndefault. ok dtucker@\n" }, { "commit": "637624dbbac13f2bc3c8ec5b15c9d627d07f2935", "tree": "667a23999bbcd04067c1e39482f64fc15fa3cf01", "parents": [ "971e0cfcfd52ef1d73cf5244074c306a60006e89" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Thu Oct 12 22:01:23 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Thu Oct 12 22:01:23 2023 +1100" }, "message": "Don\u0027t use make -j2.\n\nWhile we have 2 cores available on github runners, not using it means\nthat the most recent log message is the actual failure, rather than\nhaving to search back through the log for it.\n" }, { "commit": "971e0cfcfd52ef1d73cf5244074c306a60006e89", "tree": "63494b424d77709c7c19c8ef30f79144225b8c85", "parents": [ "c616e64688b2a0c1b4daad69b056099be998d121" ], "author": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Thu Oct 12 16:23:05 2023 +1100" }, "committer": { "name": "Darren Tucker", "email": "dtucker@dtucker.net", "time": "Thu Oct 12 16:23:05 2023 +1100" }, "message": "Correct arg order for ED255519 AC_LINK_IFELSE test.\n" }, { "commit": "c616e64688b2a0c1b4daad69b056099be998d121", "tree": "fbf261730d737076a32a60c59e09e4bab1fc1c62", "parents": [ "c49a3fbf10162128c67c59562348de2041188974" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Thu Oct 12 03:51:08 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Oct 12 14:52:46 2023 +1100" }, "message": "upstream: typos and extra debug trace calls\n\nOpenBSD-Regress-ID: 98a2a6b9333743274359e3c0f0e65cf919a591d1\n" }, { "commit": "c49a3fbf10162128c67c59562348de2041188974", "tree": "9f85cab01a81fcb7df7baacd66c91d0bb5df1557", "parents": [ "5ec0ed79ac074c3437b25f6cba8b8cf21c8d4587" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Thu Oct 12 03:48:53 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Oct 12 14:52:45 2023 +1100" }, "message": "upstream: ensure logs are owned by correct user; feedback/ok\n\ndtucker@\n\nOpenBSD-Regress-ID: c3297af8f07717f1d400a5d34529962f1a76b5a3\n" }, { "commit": "5ec0ed79ac074c3437b25f6cba8b8cf21c8d4587", "tree": "befdce2bc635fcce3d5100215838263c6d96e405", "parents": [ "f59a94e22e46db2c23eddeb871aa9e8d93ab0016" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Thu Oct 12 03:36:32 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Oct 12 14:37:52 2023 +1100" }, "message": "upstream: 64 %-expansion keys ought to be enough for anybody; ok\n\ndtucker (we just hit the previous limit in some cases)\n\nOpenBSD-Commit-ID: 84070f8001ec22ff5d669f836b62f206e08c5787\n" }, { "commit": "f59a94e22e46db2c23eddeb871aa9e8d93ab0016", "tree": "cd6fab36ef95d83acec5a559e77e21d9d3c0415a", "parents": [ "281c79168edcc303abfd5bca983616eaa24c5f32" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Thu Oct 12 02:48:43 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Oct 12 13:58:19 2023 +1100" }, "message": "upstream: don\u0027t dereference NULL pointer when hashing jumphost\n\nOpenBSD-Commit-ID: 251c0263e1759a921341c7efe7f1d4c73e1c70f4\n" }, { "commit": "281c79168edcc303abfd5bca983616eaa24c5f32", "tree": "10dbd4e51d6425145605aaaa34be3dee74c18057", "parents": [ "98fc34df837f3a3b79d2a111b96fe8a39adcab55" ], "author": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Oct 12 13:20:01 2023 +1100" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Oct 12 13:20:01 2023 +1100" }, "message": "Solaris: prefer PRIV_XPOLICY to PRIV_LIMIT\n\nIf the system support PRIV_XPOLICY and one is set, then don\u0027t\nmodify PRIV_LIMIT. bz2833, patch from Ron Jordan, ok dtucker@\n" }, { "commit": "98fc34df837f3a3b79d2a111b96fe8a39adcab55", "tree": "e9e0eeac309e41715fcea9a62348c807ab1d30ef", "parents": [ "7f3180be8a85320b5d3221714b40c16e66881249" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Thu Oct 12 02:18:18 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Oct 12 13:19:41 2023 +1100" }, "message": "upstream: add %j token that expands to the configured ProxyJump\n\nhostname (or the empty string if this option is not being used). bz3610, ok\ndtucker\n\nOpenBSD-Commit-ID: ce9983f7efe6a178db90dc5c1698df025df5e339\n" }, { "commit": "7f3180be8a85320b5d3221714b40c16e66881249", "tree": "ed7b765c41d2827448ef95826f7ee052749f53ed", "parents": [ "a612b93de5d86e955bfb6e24278f621118eea500" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Thu Oct 12 02:15:53 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Oct 12 13:19:41 2023 +1100" }, "message": "upstream: release GSS OIDs only at end of authentication; bz2982,\n\nok dtucker@\n\nOpenBSD-Commit-ID: 0daa41e0525ae63cae4483519ecaa37ac485d94c\n" }, { "commit": "a612b93de5d86e955bfb6e24278f621118eea500", "tree": "a7ef9b1ada17da474b82d02e631562944d32fcd0", "parents": [ "531b27a006116fe7aff325510aaa576f24844452" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Thu Oct 12 02:12:53 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Oct 12 13:19:40 2023 +1100" }, "message": "upstream: mask SIGINT/TERM/QUIT/HUP before checking quit_pending\n\nand use ppoll() to unmask them in the mainloop. Avoids race condition between\nsignaling ssh to exit and polling. bz3531; ok dtucker\n\nOpenBSD-Commit-ID: 5c14e1aabcddedb95cdf972283d9c0d5083229e7\n" }, { "commit": "531b27a006116fe7aff325510aaa576f24844452", "tree": "441b430a8e21e44bc6fc9de7bbc97153f50344e2", "parents": [ "64f7ca881b19be754425dca60d1590d306c9d1d0" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Wed Oct 11 23:23:58 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Oct 12 13:19:40 2023 +1100" }, "message": "upstream: sync usage() with ssh.1; spotted by kn@\n\nOpenBSD-Commit-ID: 191a85639477dcb5fa1616d270d93b7c8d5c1dfd\n" }, { "commit": "64f7ca881b19be754425dca60d1590d306c9d1d0", "tree": "f551aeb39459e69ccbd63d260dd2c5fdc98187f2", "parents": [ "a752a6c0e1001f93696d7025f0c867f0376e2ecf" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Wed Oct 11 23:14:33 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Oct 12 10:15:47 2023 +1100" }, "message": "upstream: ssh -Q does not make sense with other command-line options,\n\nso give it its own line in the manpage\n\nOpenBSD-Commit-ID: 00a747f0655c12122bbb77c2796be0013c105361\n" }, { "commit": "a752a6c0e1001f93696d7025f0c867f0376e2ecf", "tree": "dbe5b78436bc288efe6f458e167864f38056f768", "parents": [ "76e91e7238cdc5662bc818e2a48d466283840d23" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Wed Oct 11 22:42:26 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Oct 12 10:00:13 2023 +1100" }, "message": "upstream: add ChannelTimeout support to the client, mirroring the\n\nsame option in the server. ok markus@\n\nOpenBSD-Commit-ID: 55630b26f390ac063980cfe7ad8c54b03284ef02\n" }, { "commit": "76e91e7238cdc5662bc818e2a48d466283840d23", "tree": "bfa428fc915ee1286c8bd12217bbd815ad157b87", "parents": [ "fc77c8e352c0f44125425c05265e3a00c183d78a" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Wed Oct 11 22:41:05 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Thu Oct 12 09:59:44 2023 +1100" }, "message": "upstream: add support for reading ED25519 private keys in PEM PKCS8\n\nformat; ok markus@ tb@\n\nOpenBSD-Commit-ID: 01b85c91757e6b057e9b23b8a23f96415c3c7174\n" }, { "commit": "77323046fe749a12614230b03f679bfb0f2770ca", "tree": "693e26a76a3fe067f7efded7354bf2ebf8f25957", "parents": [ "ebc71c62d9b36dc675f22d4e7aa4d244463ec5dd" ], "author": { "name": "Ian McKellar", "email": "ianloic@google.com", "time": "Wed Oct 11 18:35:52 2023 +0000" }, "committer": { "name": "CQ Bot", "email": "fuchsia-internal-scoped@luci-project-accounts.iam.gserviceaccount.com", "time": "Wed Oct 11 20:14:05 2023 +0000" }, "message": "[openssh][fidl] Flatten C++ layers\n\nChange-Id: Icf08b96889b0280045d47387cb6b7578f2ecbd51\nReviewed-on: https://fuchsia-review.googlesource.com/c/third_party/openssh-portable/+/930336\nFuchsia-Auto-Submit: Ian McKellar \u003cianloic@google.com\u003e\nCommit-Queue: Auto-Submit \u003cauto-submit@fuchsia-infra.iam.gserviceaccount.com\u003e\nReviewed-by: Aaron Wood \u003caaronwood@google.com\u003e\nReviewed-by: Mitchell Kember \u003cmkember@google.com\u003e\n" }, { "commit": "fc77c8e352c0f44125425c05265e3a00c183d78a", "tree": "fd8921ac257b281e537459c950bc872cae3cf37b", "parents": [ "c97520d23d1fe53d30725a2af25d2dddd6f2faff" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Wed Oct 11 06:40:54 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Oct 11 17:41:52 2023 +1100" }, "message": "upstream: mention \"none\" is a valid argument to IdentityFile; bz3080\n\nOpenBSD-Commit-ID: 1b4fb590ef731099349a7d468b77f02b240ac926\n" }, { "commit": "c97520d23d1fe53d30725a2af25d2dddd6f2faff", "tree": "3ce95fab231e0131912b7f27bdeae1a318822866", "parents": [ "208c2b719879805983398160791d6a1ef9c2c3fc" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Wed Oct 11 05:42:08 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Oct 11 16:44:40 2023 +1100" }, "message": "upstream: in olde rcp/scp protocol mode, when rejecting a path from the\n\nserver as not matching the glob that the client sent, log (at debug level)\nthe received pathname as well as the list of possible expected paths expanded\nfrom the glob. bz2966\n\nOpenBSD-Commit-ID: 0bd8db8a595334ca86bca8f36e23fc0395315765\n" }, { "commit": "208c2b719879805983398160791d6a1ef9c2c3fc", "tree": "3064ca53b4869171c5a2b269967f4060dd669dcd", "parents": [ "0354790826b97c41bbd171a965574e159b58d83e" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Wed Oct 11 04:46:29 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Oct 11 15:57:09 2023 +1100" }, "message": "upstream: s/%.100s/%s/ in SSH- banner construction as there\u0027s no\n\nreason to limit its size: the version string bring included is a compile time\nconstant going into an allocated banner string.\n\nOpenBSD-Commit-ID: 0ef73304b9bf3e534c60900cd84ab699f859ebcd\n" }, { "commit": "0354790826b97c41bbd171a965574e159b58d83e", "tree": "f386c7c0904ae8400ea3bd07022ada29d4823437", "parents": [ "8d29ee4115001a02641386ae394992c65ed279e0" ], "author": { "name": "tb@openbsd.org", "email": "tb@openbsd.org", "time": "Tue Oct 10 06:49:54 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Wed Oct 11 15:57:08 2023 +1100" }, "message": "upstream: Garbage collect cipher_get_keyiv_len()\n\nThis is a compat20 leftover, unused since 2017.\n\nok djm\n\nOpenBSD-Commit-ID: 91fa5497c9dc6883064624ac27813a567883fdce\n" }, { "commit": "8d29ee4115001a02641386ae394992c65ed279e0", "tree": "e2699630f4aa1788d1e461a013cadf651b6dd1eb", "parents": [ "90b0d73d63a706e85f6431f05a62d2ce1b476472" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Tue Oct 10 03:57:45 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Tue Oct 10 14:58:55 2023 +1100" }, "message": "upstream: Reserve a range of \"local extension\" message numbers that\n\nOpenSSH promises not to use (comment change only)\n\nOpenBSD-Commit-ID: e61795b453d4892d2c99ce1039112c4a00250e03\n" }, { "commit": "90b0d73d63a706e85f6431f05a62d2ce1b476472", "tree": "9febe5c77a17acc732ef8e5c9381c1ee8dbff693", "parents": [ "e84517f51532ec913d8fb01a8aab7307134774bb" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Fri Oct 06 03:32:15 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Fri Oct 06 14:33:37 2023 +1100" }, "message": "upstream: typo in error message\n\nOpenBSD-Regress-ID: 6a8edf0dc39941298e3780b147b10c0a600b4fee\n" }, { "commit": "e84517f51532ec913d8fb01a8aab7307134774bb", "tree": "0c90d040175c0b07b48a1ba068c9d2dc82a893bb", "parents": [ "cb54becff4d776238e0e9072943ba0872260535d" ], "author": { "name": "djm@openbsd.org", "email": "djm@openbsd.org", "time": "Fri Oct 06 03:25:14 2023 +0000" }, "committer": { "name": "Damien Miller", "email": "djm@mindrot.org", "time": "Fri Oct 06 14:31:20 2023 +1100" }, "message": "upstream: Perform the softhsm2 setup as discrete steps rather than\n\nas a long shell pipeline. Makes it easier to figure out what has happened\nwhen it breaks.\n\nOpenBSD-Regress-ID: b3f1292115fed65765d0a95414df16e27772d81c\n" } ], "next": "cb54becff4d776238e0e9072943ba0872260535d" }