Lines Matching +full:not +full:- +full:date

3 Date:   Mon Mar 20 13:38:27 2017 +1100
9 Date:   Mon Mar 20 12:23:04 2017 +1100
15 Date:   Mon Mar 20 01:18:59 2017 +0000
19     openssh-7.5
21     Upstream-ID: b8b9a4a949427c393cd868215e1724ceb3467ee5
25 Date:   Mon Mar 20 12:07:20 2017 +1100
33 Date:   Mon Mar 20 11:53:34 2017 +1100
41 Date:   Mon Mar 20 11:48:34 2017 +1100
50 Date:   Mon Mar 20 09:58:34 2017 +1100
60 Date:   Wed Mar 15 07:07:39 2017 +0000
67     Upstream-ID: 3668852d1f145050e62f1da08917de34cb0c5234
71 Date:   Thu Mar 16 14:05:46 2017 +1100
77 Date:   Thu Mar 16 13:45:17 2017 +1100
83 Date:   Thu Mar 16 11:22:42 2017 +1100
91 Date:   Wed Mar 15 03:52:30 2017 +0000
97     Upstream-ID: b7a9dbd71011ffde95e06f6945fe7197dedd1604
101 Date:   Wed Mar 15 02:25:09 2017 +0000
105     fix regression in 7.4: deletion of PKCS#11-hosted keys
109     Upstream-ID: 5b5bc20ca11cacb5d5eb29c3f93fd18425552268
113 Date:   Wed Mar 15 02:19:09 2017 +0000
121     Upstream-ID: 8fdaec2ba4b5f65db1d094f6714ce64b25d871d7
125 Date:   Tue Mar 14 07:19:07 2017 +0000
136     Upstream-ID: b4c52666256c4dd865f8ce9431af5d6ce2d74a0a
140 Date:   Tue Mar 14 18:26:29 2017 +1100
142     Make seccomp-bpf sandbox work on Linux/X32
150 Date:   Tue Mar 14 18:01:52 2017 +1100
156 Date:   Tue Mar 14 17:48:43 2017 +1100
168 Date:   Tue Mar 14 13:15:18 2017 +1100
176 Date:   Tue Mar 14 14:19:36 2017 +1100
182 Date:   Tue Mar 14 01:20:29 2017 +0000
188     Upstream-Regress-ID: 8717bc0ca4c21120f6dd3a1d3b7a363f707c31e1
192 Date:   Tue Mar 14 01:10:07 2017 +0000
198     Upstream-Regress-ID: fe15beaea8f5063c7f21b0660c722648e3d76431
202 Date:   Tue Mar 14 00:55:37 2017 +0000
209     Upstream-ID: 51f14c507ea87a3022e63f574100613ab2ba5708
213 Date:   Tue Mar 14 00:25:03 2017 +0000
220     Upstream-ID: 35e6a4e98f6fa24df50bfb8ba1307cf70e966f13
224 Date:   Tue Mar 14 13:38:15 2017 +1100
230 Date:   Tue Mar 14 12:24:47 2017 +1100
232     Fix weakness in seccomp-bpf sandbox arg inspection
234     Syscall arguments are passed via an array of 64-bit values in struct
235     seccomp_data, but we were only inspecting the bottom 32 bits and not
246 Date:   Sat Mar 11 23:44:16 2017 +0000
253     Upstream-Regress-ID: 0145d19328ed995b73fe2d9da33596b17429d0d0
257 Date:   Sat Mar 11 23:40:26 2017 +0000
265     Upstream-ID: 295668dca2c39505281577217583ddd2bd4b00b9
269 Date:   Sat Mar 11 13:07:35 2017 +0000
274     many bytes to discard for the work around for the attacks against CBC-mode.
277     Upstream-ID: f445f509a4e0a7ba3b9c0dae7311cb42458dc1e2
281 Date:   Fri Mar 10 07:18:32 2017 +0000
287     Upstream-ID: fc5e695d5d107d730182e2da7b23f00b489e0ee1
291 Date:   Sun Mar 12 10:48:14 2017 +1100
296 … date: 2017/03/11 23:37:23;  author: djm;  state: Exp;  lines: +14 -1;  commitid: jnFKyHkB3CEiEZ2R;
299     ----------------------------
301     date: 2013/11/29 19:00:51;  author: deraadt;  state: Exp;  lines: +6 -5;
304     ----------------------------
306     date: 2012/11/12 14:07:20;  author: halex;  state: Exp;  lines: +4 -2;
311     ----------------------------
313     date: 2009/06/20 15:00:04;  author: martynas;  state: Exp;  lines: +4 -4;
314     use llabs instead of the home-grown version;  and some comment changes
316     ----------------------------
320 Date:   Fri Mar 10 05:01:13 2017 +0000
326     keys when any of the ssh-rsa-sha2-* methods was enabled in HostkeyAlgorithms
327     nit ssh-rsa (SHA1 signatures) was not. bz#2650 reported by Luis Ressel; ok
330     Upstream-ID: c5e8cfee15c42f4a05d126158a0766ea06da79d2
334 Date:   Fri Mar 10 04:24:55 2017 +0000
341     Upstream-ID: e467622ff154269e36ba8b6c9e3d105e1c4a9253
345 Date:   Fri Mar 10 03:52:48 2017 +0000
351     Upstream-ID: 4ef509a66b96c7314bbcc87027c2af71fa9d0ba4
355 Date:   Fri Mar 10 04:27:32 2017 +0000
363     Upstream-ID: b175ae7e0ba403833f1ee566edf10f67443ccd18
367 Date:   Fri Mar 10 04:26:06 2017 +0000
371     ensure hostname is lower-case before hashing it;
374     Upstream-ID: c3b8b93804f376bd00d859b8bcd9fc0d86b4db17
378 Date:   Fri Mar 10 04:24:55 2017 +0000
385     Upstream-ID: e632b7a9bf0d0558d5ff56dab98b7cca6c3db549
389 Date:   Fri Mar 10 04:11:00 2017 +0000
396     Upstream-ID: 824ab71467b78c4bab0dd1b3a38e8bc5f63dd528
400 Date:   Fri Mar 10 04:07:20 2017 +0000
404     fix regression in 7.4 server-sig-algs, where we were
408     Upstream-ID: 81ac8bfb30960447740b9b8f6a214dcf322f12e8
412 Date:   Fri Mar 10 03:53:11 2017 +0000
419     Upstream-ID: 059e33cd43cba88dc8caf0b1936fd4dd88fd5b8e
423 Date:   Fri Mar 10 03:52:48 2017 +0000
429     Upstream-ID: b4b48b4487c0821d16e812c40c9b09f03b28e349
433 Date:   Fri Mar 10 03:48:57 2017 +0000
440     Upstream-ID: c2d00c2ea50c4861d271d0a586f925cc64a87e0e
444 Date:   Fri Mar 10 03:45:40 2017 +0000
451     Upstream-ID: 3fb030149598957a51b7c8beb32bf92cf30c96f2
455 Date:   Fri Mar 10 03:24:48 2017 +0000
462     Upstream-ID: 8016a7ae97719d3aa55fb723fc2ad3200058340d
466 Date:   Fri Mar 10 03:22:40 2017 +0000
473     Upstream-ID: 248acb99a5ed2fdca37d1aa33c0fcee7be286d88
477 Date:   Fri Mar 10 03:18:24 2017 +0000
484     Upstream-ID: 468e357ff143e00acc05bdd2803a696b3d4b6442
488 Date:   Fri Mar 10 03:15:58 2017 +0000
495     Upstream-ID: cdfdc4ba90639af807397ce996153c88af046ca4
499 Date:   Fri Mar 10 02:59:51 2017 +0000
506     Upstream-ID: dbe5494dfddfe523fab341a3dab5a79e7338f878
510 Date:   Fri Mar 10 13:40:18 2017 +1100
518 Date:   Fri Mar 10 13:22:32 2017 +1100
527 Date:   Wed Mar 8 12:07:47 2017 +0000
535     Upstream-ID: 65cdd161460e1351c3d778e974c1c2a4fa4bc182
539 Date:   Mon Mar 6 02:03:20 2017 +0000
543     Check l->hosts before dereferencing; fixes potential null
546     Upstream-ID: 81c0327c6ec361da794b5c680601195cc23d1301
550 Date:   Mon Mar 6 00:44:51 2017 +0000
557     Upstream-ID: 9dc582d9bb887ebe0164e030d619fc20b1a4ea08
561 Date:   Fri Mar 3 06:13:11 2017 +0000
565     fix ssh-keygen -H accidentally corrupting known_hosts that
566     contained already-hashed entries. HKF_MATCH_HOST_HASHED is only set by
570     Upstream-ID: da82ad653b93e8a753580d3cf5cd448bc2520528
574 Date:   Tue Feb 28 06:10:08 2017 +0000
581     Upstream-ID: 10e3dadbb8199845b66581473711642d9e6741c4
585 Date:   Mon Feb 27 14:30:33 2017 +0000
591     Upstream-ID: 83d93366a5acf47047298c5d3ebc5e7426f37921
595 Date:   Fri Feb 24 03:16:34 2017 +0000
601     Upstream-ID: 9c538433d6a0ca79f5f21decc5620e46fb68ab57
605 Date:   Sun Feb 19 00:11:29 2017 +0000
611     Upstream-Regress-ID: 783d75de35fbc923d46e2a5e6cee30f8f381ba87
615 Date:   Sun Feb 19 00:10:57 2017 +0000
619     Add a common nl_langinfo(CODESET) alias for US-ASCII
620     "ANSI_X3.4-1968" that is used by Linux. Fixes mprintf output truncation for
621     non-UTF-8 locales on Linux spotted by dtucker@; ok deraadt@ schwarze@
623     Upstream-ID: c6808956ebffd64066f9075d839f74ff0dd60719
627 Date:   Tue Feb 7 23:03:11 2017 +0000
634     Upstream-Regress-ID: 8066b753d9dce7cf02ff87af5c727ff680d99491
638 Date:   Fri Feb 17 02:32:05 2017 +0000
642     Do not show rsa1 key type in usage when compiled without
645     Upstream-ID: 068b5c41357a02f319957746fa4e84ea73960f57
649 Date:   Fri Feb 17 02:31:14 2017 +0000
656     Upstream-ID: cea93a26433d235bb1d64b1d990f19a9c160a70f
660 Date:   Fri Feb 17 02:04:15 2017 +0000
664     For ProxyJump/-J, surround host name with brackets to
667     Upstream-ID: 3a5d3b0171250daf6a5235e91bce09c1d5746bf1
671 Date:   Wed Feb 15 23:38:31 2017 +0000
679     Upstream-ID: c7f96ac0877f6dc9188bbc908100a8d246cc7f0e
683 Date:   Wed Feb 15 01:46:47 2017 +0000
691     Upstream-ID: 6fb6c2ae6b289aa07b6232dbc0be54682ef5419f
695 Date:   Sun Feb 12 15:45:15 2017 +1100
704 Date:   Fri Feb 10 04:34:50 2017 +0000
715     bz#2525 bz#2523 re-ok dtucker@
717     Upstream-ID: a9d5bc0306f4473d9b4f4484f880e95f3c1cc031
721 Date:   Fri Feb 10 03:36:40 2017 +0000
726     but preserve valid UTF-8 when the locale supports it; bz#2520 ok dtucker@
728     Upstream-ID: e8eed28712ba7b22d49be534237eed019875bd1e
732 Date:   Wed Feb 8 20:32:43 2017 +0000
738     Upstream-ID: 06beef7344da0208efa9275d504d60d2a5b9266c
742 Date:   Mon Feb 6 09:22:51 2017 +0000
749     Upstream-ID: 5333fd43ce5396bf5999496096fac5536e678fac
753 Date:   Fri Feb 3 23:01:42 2017 +0000
760     Upstream-Regress-ID: 840ad6118552c35111f0a897af9c8d93ab8de92a
764 Date:   Fri Feb 3 23:05:57 2017 +0000
775     Upstream-ID: 3591b88bdb5416d6066fb3d49d8fff2375bf1a15
779 Date:   Fri Feb 3 23:03:33 2017 +0000
786     Upstream-ID: 34cb41182cd76d414c214ccb01c01707849afead
790 Date:   Fri Feb 3 23:01:19 2017 +0000
794     support =- for removing methods from algorithms lists,
795     e.g. Ciphers=-*cbc; suggested by Cristian Ionescu-Idbohrn in bz#2671 "I like
798     Upstream-ID: c78c38f9f81a963b33d0eade559f6048add24a6d
802 Date:   Fri Feb 3 05:05:56 2017 +0000
806     allow form-feed characters at EOL; bz#2431 ok dtucker@
808     Upstream-ID: 1f453afaba6da2ae69d6afdf1ae79a917552f1a2
812 Date:   Fri Feb 3 16:01:22 2017 +1100
814     prefer to use ldns-config to find libldns
816     Should fix bz#2603 - "Build with ldns and without kerberos support
824 Date:   Fri Feb 3 02:56:00 2017 +0000
833     rekey_time is cast to int64 for the comparison which is a no-op
834     on OpenBSD, but should also do the right thing in -portable on
840     Upstream-ID: c9f18613afb994a07e7622eb326f49de3d123b6c
844 Date:   Thu Feb 2 10:54:25 2017 +0000
853     Upstream-ID: 1efffffff2f51d53c9141f245b90ac23d33b9779
857 Date:   Wed Feb 1 02:59:09 2017 +0000
864     Upstream-ID: d901d9887951774e604ca970e1827afaaef9e419
868 Date:   Mon Jan 30 23:27:39 2017 +0000
876     Upstream-ID: 1834d7af179dea1a12ad2137f84566664af225d5
880 Date:   Fri Feb 3 14:10:34 2017 +1100
885     and configurations, notably Solaris 64-bit binaries.  It was there for
886     the benefit of Linux put the required bits in the *-*linux* section.
892 Date:   Mon Jan 30 05:22:14 2017 +0000
896     fully unbreak: some $SSH invocations did not have -F
899     Upstream-Regress-ID: f362d1892c0d3e66212d5d3fc02d915c58ef6b89
903 Date:   Mon Jan 30 04:54:07 2017 +0000
907     partially unbreak: was not specifying hostname on some
910     Upstream-Regress-ID: bc8a5e98e57bad0a92ef4f34ed91c1d18294e2cc
914 Date:   Mon Jan 30 01:03:00 2017 +0000
922     Upstream-ID: 7cb04b31a61f8c78c4e48ceededcd2fd5c4ee1bc
926 Date:   Mon Jan 30 00:38:50 2017 +0000
932     remove SSHv1-isms in commented examples
934     reorder token table to group deprecated and compile-time conditional tokens
937     fix config dumping code for some compile-time conditional options that
940     Upstream-ID: f2e96b3cb3158d857c5a91ad2e15925df3060105
944 Date:   Mon Jan 30 00:34:01 2017 +0000
951     Upstream-ID: 40957b8dea69672b0e50df6b4a91a94e3e37f72d
955 Date:   Mon Jan 30 00:32:28 2017 +0000
961     Upstream-ID: f7b794074d3aae8e35b69a91d211c599c94afaae
965 Date:   Mon Jan 30 00:32:03 2017 +0000
972     Upstream-ID: 794243aad1e976ebc717885b7a97a25e00c031b2
976 Date:   Fri Jan 6 02:51:16 2017 +0000
980     use correct ssh-add program; bz#2654, from Colin Watson
982     Upstream-Regress-ID: 7042a36e1bdaec6562f6e57e9d047efe9c7a6030
986 Date:   Fri Jan 6 02:26:10 2017 +0000
997     Upstream-Regress-ID: e7467613b0badedaa300bc6fc7495ec2f44e2fb9
1001 Date:   Fri Jan 6 02:09:25 2017 +0000
1009     Upstream-Regress-ID: 4756375aac5916ef9d25452a1c1d5fa9e90299a9
1013 Date:   Sun Jan 29 21:35:23 2017 +0000
1021     Upstream-ID: 0d4a7e5ead6cc59c9a44b4c1e5435ab3aada09af
1025 Date:   Sat Jan 21 11:32:04 2017 +0000
1035     Upstream-ID: ca6e49e2f22f2b9e81d6d924b90ecd7e422e7437
1039 Date:   Fri Jan 6 16:28:12 2017 +0000
1045     Upstream-ID: b96239dae4fb3aa94146bb381afabcc7740a1638
1049 Date:   Fri Jan 6 09:27:52 2017 +0000
1055     Upstream-ID: c107d6a69bc22325d79fbf78a2a62e04bcac6895
1059 Date:   Fri Jan 6 03:53:58 2017 +0000
1066     Upstream-ID: f598b73b5dfe497344cec9efc9386b4e5a3cb95b
1070 Date:   Fri Jan 6 03:45:41 2017 +0000
1078     Upstream-ID: 99ef8ac51f17f0f7aec166cb2e34228d4d72a665
1082 Date:   Fri Jan 6 03:41:58 2017 +0000
1087     ssh-keyscan built without SSH protocol v.1 to scan for v.1 keys; bz#2583
1089     Upstream-ID: 5d214abd3a21337d67c6dcc5aa6f313298d0d165
1093 Date:   Fri Jan 6 02:34:54 2017 +0000
1097     Re-add '%k' token for AuthorizedKeysCommand which was
1098     lost during the re-org in rev 1.235.  bz#2656, from jboning at gmail.com.
1100     Upstream-ID: 2884e203c02764d7b3fe7472710d9c24bdc73e38
1104 Date:   Wed Jan 4 05:37:40 2017 +0000
1111     Upstream-ID: 6649c76eb7a3fa15409373295ca71badf56920a2
1115 Date:   Mon Jan 16 09:08:32 2017 +1100
1123 Date:   Wed Jan 4 02:21:43 2017 +0000
1130     Upstream-ID: cf5617958e2e2d39f8285fd3bc63b557da484702
1134 Date:   Tue Jan 3 05:46:51 2017 +0000
1141     Upstream-ID: b6b2b434a6d6035b1644ca44f24cd8104057420f
1145 Date:   Fri Dec 30 22:08:02 2016 +0000
1152     Upstream-ID: e19456429bf99087ea994432c16d00a642060afe
1156 Date:   Tue Dec 20 12:16:11 2016 +1100
1158     Re-add missing "Prerequisites" header and fix typo
1164 Date:   Mon Dec 19 22:35:23 2016 +0000
1170     Upstream-Regress-ID: 7b6f0b63525f399844c8ac211003acb8e4b0bec2
1174 Date:   Mon Dec 19 15:59:26 2016 +1100
1180 Date:   Mon Dec 19 04:55:51 2016 +0000
1184     openssh-7.4
1186     Upstream-ID: 1ee404adba6bbe10ae9277cbae3a94abe2867b79
1190 Date:   Mon Dec 19 04:55:18 2016 +0000
1197     Upstream-Regress-ID: cab4288531766bd9593cb556613b91a2eeefb56f
1201 Date:   Mon Dec 19 03:32:57 2016 +0000
1206     not set. Mainly to benefit -portable since some platforms don't have whoami.
1208     Upstream-Regress-ID: e3a16b7836a3ae24dc8f8a4e43fdf8127a60bdfa
1212 Date:   Fri Dec 16 03:51:19 2016 +0000
1219     Upstream-Regress-ID: 8f1aac24d52728398871dac14ad26ea38b533fb9
1223 Date:   Fri Dec 16 15:02:24 2016 +1100
1231 Date:   Fri Dec 16 02:48:55 2016 +0000
1238     Upstream-Regress-ID: 828ffc2c7afcf65d50ff2cf3dfc47a073ad39123
1242 Date:   Fri Dec 16 01:06:27 2016 +0000
1249     Upstream-Regress-ID: a113dea77df5bd97fb4633ea31f3d72dbe356329
1253 Date:   Fri Dec 16 01:01:07 2016 +0000
1260     Upstream-Regress-ID: 2e74dc2c726f4dc839609b3ce045466b69f01115
1264 Date:   Thu Dec 15 23:50:37 2016 +0000
1271     Upstream-Regress-ID: f6b1c7ffbc5a0dfb7d430adb2883344899174a98
1275 Date:   Thu Dec 15 21:29:05 2016 +0000
1282     Upstream-ID: d747ace338dcf943b077925f90f85f789714b54e
1286 Date:   Thu Dec 15 21:20:41 2016 +0000
1293     Upstream-ID: deb0486e175e7282f98f9a15035d76c55c84f7f6
1297 Date:   Wed Dec 14 00:36:34 2016 +0000
1301     disable Unix-domain socket forwarding when privsep is
1304     Upstream-ID: ab61516ae0faadad407857808517efa900a0d6d0
1308 Date:   Fri Dec 9 03:04:29 2016 +0000
1315     Upstream-ID: 703ae690dbf9b56620a6018f8a3b2389ce76d92b
1319 Date:   Tue Dec 13 13:51:32 2016 +1100
1325 Date:   Tue Dec 13 12:56:40 2016 +1100
1327     Remove commented-out includes.
1329     These commented-out includes have "Still needed?" comments.  Since
1330     they've been commented out for ~13 years I assert that they're not.
1334 Date:   Tue Dec 13 12:54:23 2016 +1100
1340 Date:   Tue Dec 13 10:23:03 2016 +1100
1348 Date:   Mon Dec 12 13:57:10 2016 +1100
1355     OpenSSH to use the C/POSIX locale and try to preserve the UTF-8
1362 Date:   Fri Dec 9 12:52:02 2016 +1100
1364     exit is in stdlib.h not unistd.h (that's _exit).
1368 Date:   Fri Dec 9 12:33:25 2016 +1100
1374 Date:   Thu Dec 8 15:48:34 2016 +1100
1378     Check for utf8 local support and if not found, do not attempt to run the
1383 Date:   Thu Dec 8 12:57:24 2016 +1100
1385     Use AC_PATH_TOOL for krb5-config.
1387     This will use the host-prefixed version when cross compiling; patch from
1392 Date:   Tue Dec 6 07:48:01 2016 +0000
1398     certificate id_rsa-cert.pub (and no id_rsa.pub).
1402     Upstream-ID: c1e9699b8c0e3b63cc4189e6972e3522b6292604
1406 Date:   Fri Nov 25 14:04:21 2016 +1100
1408     Add a gnome-ssh-askpass3 target for GTK+3 version
1414 Date:   Fri Nov 25 14:03:53 2016 +1100
1416     Make gnome-ssh-askpass2.c GTK+3-friendly
1422 Date:   Sun Dec 4 23:54:02 2016 +0000
1427     authentication is in use. Instead of deleting and re-preparing the entire
1429     order (with already- tried keys at the back)
1433     Upstream-ID: 7123f12dc2f3bcaae715853035a97923d7300176
1437 Date:   Sun Dec 4 22:27:25 2016 +0000
1446     Upstream-ID: 132dd6dda0c77dd49d2f15b2573b5794f6160870
1450 Date:   Wed Nov 30 03:01:33 2016 +0000
1454     test new behaviour of cert force-command restriction vs.
1457     Upstream-Regress-ID: 399efa7469d40c404c0b0a295064ce75d495387c
1461 Date:   Wed Nov 30 06:54:26 2016 +0000
1467     Upstream-ID: 93f6e54086145a75df8d8ec7d8689bdadbbac8fa
1471 Date:   Wed Nov 30 03:07:37 2016 +0000
1475     add a whitelist of paths from which ssh-agent will load
1476     (via ssh-pkcs11-helper) a PKCS#11 module; ok markus@
1478     Upstream-ID: fe79769469d9cd6d26fe0dc15751b83ef2a06e8f
1482 Date:   Wed Nov 30 03:00:05 2016 +0000
1491     simple and future-proof way of restricting an account. Suggested as
1494     Upstream-ID: 203803f66e533a474086b38a59ceb4cf2410fcf7
1498 Date:   Wed Nov 30 02:57:40 2016 +0000
1502     When a forced-command appears in both a certificate and
1506     The previous (documented) behaviour of having the certificate forced-
1507     command override the other could be a bit confused and more error-prone.
1511     Upstream-ID: 79d811b6eb6bbe1221bf146dde6928f92d2cd05f
1515 Date:   Wed Nov 30 00:28:31 2016 +0000
1520     and if so, skip the call to daemon() and do not rewrite the PidFile.  This
1521     means that when sshd re-execs itself on SIGHUP the process ID will no longer
1524     Upstream-ID: 5ea0355580056fb3b25c1fd6364307d9638a37b9
1528 Date:   Wed Nov 30 13:51:49 2016 +1100
1538 Date:   Fri Nov 25 03:02:01 2016 +0000
1545     Upstream-Regress-ID: 4345253558ac23b2082aebabccd48377433b6fe0
1549 Date:   Fri Nov 25 02:56:49 2016 +0000
1553     Reverse args to sshd-log-wrapper.  Matches change in
1556     Upstream-Regress-ID: b438d1c6726dc5caa2a45153e6103a0393faa906
1560 Date:   Fri Nov 25 02:49:18 2016 +0000
1566     Upstream-Regress-ID: 4c4a2ba0d37faf5fd230a91b4c7edb5699fbd73a
1570 Date:   Tue Nov 1 13:43:27 2016 +0000
1579     Upstream-Regress-ID: 890d497e0a38eeddfebb11cc429098d76cf29f12
1583 Date:   Mon Oct 31 23:45:08 2016 +0000
1591     Upstream-Regress-ID: 6cc25024c8174a87e5734a0dc830194be216dd59
1595 Date:   Tue Nov 29 03:54:50 2016 +0000
1602     Upstream-ID: 39fd9e8ebd7222615a837312face5cc7ae962885
1606 Date:   Fri Nov 25 23:24:45 2016 +0000
1610     use sshbuf_allocate() to pre-allocate the buffer used for
1618     Upstream-ID: d620e1d46a29fdea56aeadeda120879eddc60ab1
1622 Date:   Fri Nov 25 23:22:04 2016 +0000
1629     Upstream-ID: 11b8a2795afeeb1418d508a2c8095b3355577ec2
1633 Date:   Wed Nov 23 23:14:15 2016 +0000
1640     Upstream-ID: 8beb4c1eadd588f1080b58932281983864979f55
1644 Date:   Tue Nov 8 22:04:34 2016 +0000
1650     Upstream-ID: 1c67d4148f5e953c35acdb62e7c08ae8e33f7cb2
1654 Date:   Sun Nov 6 05:46:37 2016 +0000
1666     Upstream-ID: 9dfcdd9672b06e65233ea4434c38226680d40bfb
1670 Date:   Fri Oct 28 03:33:52 2016 +0000
1678     Upstream-ID: 3223ef693cfcbff9079edfc7e89f55bf63e1973d
1682 Date:   Tue Nov 1 08:12:33 2016 +1100
1688 Date:   Fri Oct 28 14:34:07 2016 +1100
1690     Unbreak AES-CTR ciphers on old (~0.9.8) OpenSSL
1696 Date:   Fri Oct 28 14:26:58 2016 +1100
1705 Date:   Fri Oct 28 13:52:31 2016 +1100
1711 Date:   Fri Oct 28 13:38:19 2016 +1100
1715     cipher-3des1.c and cipher-bf1.c are specific to sshv1 so don't even try
1716     to compile them when Protocol 1 is not enabled.
1720 Date:   Tue Oct 25 04:08:13 2016 +0000
1726     forwarding for non-priv ports as a non root user.
1730     Upstream-ID: ddb8156ca03cc99997de284ce7777536ff9570c9
1734 Date:   Mon Oct 24 01:09:17 2016 +0000
1741     Upstream-ID: ad9cc655829d67fad219762810770787ba913069
1745 Date:   Wed Oct 26 08:43:25 2016 +1100
1755 Date:   Sun Oct 23 22:04:05 2016 +0000
1764     Upstream-ID: 86213df4183e92b8f189a6d2dac858c994bfface
1768 Date:   Wed Oct 19 23:21:56 2016 +0000
1775     Upstream-ID: d9b3a68b2a7c2f2fc7f74678e29a4618d55ceced
1779 Date:   Mon Oct 24 09:06:18 2016 +1100
1785 Date:   Fri Oct 21 09:46:46 2016 +1100
1791 Date:   Fri Oct 21 06:55:58 2016 +1100
1800 Date:   Fri Oct 21 06:48:46 2016 +1100
1804     Remove ssh1 host key generation, add ssh-keygen -A
1808 Date:   Fri Oct 21 05:22:55 2016 +1100
1818 Date:   Thu Oct 20 03:42:09 2016 +1100
1826 Date:   Tue Oct 18 17:32:54 2016 +0000
1831     was the recently-removed SSH1 server code so it's now dead code.  ok markus@
1833     Upstream-ID: 05453983230a1f439562535fec2818f63f297af9
1837 Date:   Tue Oct 18 12:41:22 2016 +0000
1841     Install a signal handler for tty-generated signals and
1846     Upstream-ID: a31c1f42aa3e2985dcc91e46e6a17bd22e372d69
1850 Date:   Sat Oct 15 19:56:25 2016 +0000
1856     Upstream-ID: 81e85df2b8e474f5f93d66e61d9a4419ce87347c
1860 Date:   Wed Oct 19 03:26:09 2016 +1100
1866     SIGTTOU it means the process is not in the foreground process group
1875 Date:   Wed Oct 19 03:23:16 2016 +1100
1882     (DEF_WEAK is a no-op in portable.)
1886 Date:   Sat Oct 15 05:51:12 2016 +1100
1895 Date:   Sat Oct 15 04:34:46 2016 +1100
1904 Date:   Thu Oct 13 18:53:43 2016 +1100
1906     unbreak principals-command test
1912 Date:   Tue Oct 11 21:49:54 2016 +0000
1916     fix the KEX fuzzer - the previous method of obtaining the
1917     packet contents was broken. This now uses the new per-packet input hook, so
1918     it sees exact post-decrypt packets and doesn't have to pass packet integrity
1921     Upstream-Regress-ID: 402fb6ffabd97de590e8e57b25788949dce8d2fd
1925 Date:   Thu Oct 6 09:31:38 2016 +0000
1932     Upstream-Regress-ID: 74ab9687417dd071d62316eaadd20ddad1d5af3c
1936 Date:   Fri Sep 30 11:55:20 2016 +0000
1943     Upstream-Regress-ID: 77bcb50e47b68c7209c7f0a5a020d73761e5143b
1947 Date:   Tue Oct 11 21:47:45 2016 +0000
1951     Add a per-packet input hook that is called with the
1954     Upstream-ID: a3221cee6b1725dd4ae1dd2c13841b4784cb75dc
1958 Date:   Mon Oct 10 19:28:48 2016 +0000
1964     allocation of up to 128MB -- until the connection is closed. Reported by
1965     shilei-c at 360.cn
1967     Upstream-ID: 43649ae12a27ef94290db16d1a98294588b75c05
1971 Date:   Thu Oct 13 04:07:20 2016 +1100
1976     date: 2013/11/24 23:51:29;  author: deraadt;  state: Exp;  lines: +4 -4;
1982 Date:   Thu Oct 13 04:04:44 2016 +1100
1987     date: 2010/05/14 13:30:34;  author: millert;  state: Exp;  lines: +41 -39;
1989     get suspended normally when not the foreground process.  Fix potential
1995 Date:   Thu Oct 13 03:53:51 2016 +1100
1999     This makes it a no-op when we use it below, which allows us to re-sync
2004 Date:   Fri Oct 7 14:41:52 2016 +0000
2011     Upstream-ID: ff8e90aa0343d9bb56f40a535e148607973cc738
2015 Date:   Tue Oct 4 21:34:40 2016 +0000
2019     add a comment about implicitly-expected checks to
2022     Upstream-ID: 74a7f71c28f7c13a50f89fc78e7863b9cd61713f
2026 Date:   Fri Sep 30 20:24:46 2016 +0000
2030     fix some -Wpointer-sign warnings in the new mux proxy; ok
2033     Upstream-ID: b1ba7b3769fbc6b7f526792a215b0197f5e55dfd
2037 Date:   Wed Sep 28 20:09:52 2016 +0000
2045     Upstream-Regress-ID: ce489bd53afcd471225a125b4b94565d4717c025
2049 Date:   Mon Sep 26 21:34:38 2016 +0000
2054     is already root, the test should not expect that SUDO is set.  If ssh needs
2057     Upstream-Regress-ID: b464e55185ac4303529e3e6927db41683aaeace2
2061 Date:   Fri Sep 30 09:19:13 2016 +0000
2065     ssh proxy mux mode (-O proxy; idea from Simon Tatham): - mux
2066     client speaks the ssh-packet protocol directly over unix-domain socket. - mux
2067     server acts as a proxy, translates channel IDs and relays to the server. - no
2068     filedescriptor passing necessary. - combined with unix-domain forwarding it's
2072     Upstream-ID: 666a2fb79f58e5c50e246265fb2b9251e505c25b
2076 Date:   Wed Sep 28 21:44:52 2016 +0000
2080     put back some pre-auth zlib bits that I shouldn't have
2081     removed - they are still used by the client. Spotted by naddy@
2083     Upstream-ID: 80919468056031037d56a1f5b261c164a6f90dc2
2087 Date:   Wed Sep 28 20:32:42 2016 +0000
2091     restore pre-auth compression support in the client -- the
2094     remove a few server-side pre-auth compression bits that escaped
2100     Upstream-ID: d23696ed72a228dacd4839dd9f2dec424ba2016b
2104 Date:   Wed Sep 28 17:59:22 2016 +0000
2111     Upstream-ID: 640e32b5e4838e4363738cdec955084b3579481d
2115 Date:   Thu Sep 29 03:19:23 2016 +1000
2120     pre-auth compression has been removed from OpenSSH.
2124 Date:   Wed Sep 28 16:33:06 2016 +0000
2128     Remove support for pre-authentication compression. Doing
2133     Moreover, to support it across privilege-separation zlib needed
2134     the assistance of a complex shared-memory manager that made the
2137     Prompted by Guido Vranken pointing out a compiler-elided security
2141     NB. pre-auth authentication has been disabled by default in sshd
2144     Upstream-ID: 32af9771788d45a0779693b41d06ec199d849caf
2148 Date:   Mon Sep 26 21:16:11 2016 +0000
2159     Upstream-ID: f8508c830c86d8f36c113985e52bf8eedae23505
2163 Date:   Wed Sep 28 07:40:33 2016 +1000
2165     fix mdoc2man.awk formatting for top-level lists
2172 Date:   Thu Sep 22 21:15:41 2016 +0000
2178     Upstream-ID: 438d5ed6338b28b46e822eb13eee448aca31df37
2182 Date:   Thu Sep 22 19:19:01 2016 +0000
2189     Upstream-ID: 81a6daa506a4a5af985fce7cf9e59699156527c8
2193 Date:   Thu Sep 22 17:55:13 2016 +0000
2197     mention curve25519-sha256 KEX
2199     Upstream-ID: 33ae1f433ce4795ffa6203761fbdf86e0d7ffbaf
2203 Date:   Thu Sep 22 17:52:53 2016 +0000
2207     support plain curve25519-sha256 KEX algorithm now that it
2209     curve25519-sha256@libssh.org)
2211     Upstream-ID: 5e2b6db2e72667048cf426da43c0ee3fc777baa2
2215 Date:   Thu Sep 22 02:29:57 2016 +0000
2223     Upstream-ID: b3afe126c0839d2eae6cddd41ff2ba317eda0903
2227 Date:   Wed Sep 21 19:53:12 2016 +0000
2232     Sami Farin via https://github.com/openssh/openssh-portable/pull/50
2234     Upstream-ID: c85999af28aaecbf92cfa2283381df81e839b42c
2238 Date:   Wed Sep 21 17:44:20 2016 +0000
2244     Upstream-ID: 76d23e89419ccbd2320f92792a6d878211666ac1
2248 Date:   Wed Sep 21 17:03:54 2016 +0000
2255     Upstream-Regress-ID: acebb8e5042f03d66d86a50405c46c4de0badcfd
2259 Date:   Wed Sep 21 16:55:42 2016 +0000
2279     Upstream-ID: ec96c770f0f5b9a54e5e72fda25387545e9c80c6
2283 Date:   Wed Sep 21 01:35:12 2016 +0000
2289     Upstream-Regress-ID: 0a79a84dfaa59f958e46b474c3db780b454d30e3
2293 Date:   Wed Sep 21 01:34:45 2016 +0000
2300     Upstream-ID: 0d30978bdcf7e8eaeee4eea1b030eb2eb1823fcb
2304 Date:   Fri Sep 16 06:09:31 2016 +0000
2310     Upstream-Regress-ID: 03804d4a0dbc5163e1a285a4c8cc0a76a4e864ec
2314 Date:   Fri Sep 16 01:01:41 2016 +0000
2319     (diffie-hellman-group14-sha256 etc)
2321     Upstream-Regress-ID: fe942c669959462b507516ae1634fde0725f1c68
2325 Date:   Mon Sep 19 19:02:19 2016 +0000
2333     Upstream-ID: 9a68b882892e9f51dc7bfa9f5a423858af358b2f
2337 Date:   Mon Sep 19 07:52:42 2016 +0000
2347     Upstream-ID: 738d3229130ccc7eac975c190276ca6fcf0208e4
2351 Date:   Sat Sep 17 18:00:27 2016 +0000
2358     Upstream-ID: e18ede972d1737df54b49f011fa4f3917a403f48
2362 Date:   Wed Sep 14 20:11:26 2016 +0000
2369     Upstream-ID: 553581a549cd6a3e73ce9f57559a325cc2cb1f38
2373 Date:   Wed Sep 14 05:42:25 2016 +0000
2377     add %-escapes to AuthorizedPrincipalsCommand to match those
2381     Upstream-ID: 6b00fd446dbebe67f4e4e146d2e492d650ae04eb
2385 Date:   Wed Sep 14 00:45:31 2016 +0000
2389     Improve test coverage of ssh-keygen -T a bit.
2391     Upstream-Regress-ID: 8851668c721bcc2b400600cfc5a87644cc024e72
2395 Date:   Mon Sep 12 02:25:46 2016 +0000
2399     Add testcase for ssh-keygen -j, -J and -K options for
2400     moduli screening. Does not currently test generation as that is extremely
2403     Upstream-Regress-ID: 9de6ce801377ed3ce0a63a1413f1cd5fd3c2d062
2407 Date:   Tue Aug 23 08:17:04 2016 +0000
2413     Upstream-Regress-ID: fae2d1fef84687ece584738a924c7bf969616c8e
2417 Date:   Mon Sep 12 23:39:34 2016 +0000
2424     Upstream-ID: 901cb081c59d6d2698b57901c427f3f6dc7397d4
2428 Date:   Mon Sep 12 23:31:27 2016 +0000
2433     server-sig-algs Reported by mb AT smartftp.com in bz#2547 and (independantly)
2436     Upstream-ID: ddf702d721f54646b11ef2cee6d916666cb685cd
2440 Date:   Mon Sep 12 14:43:58 2016 +1000
2442     Remove no-op brackets to resync with upstream.
2446 Date:   Mon Sep 12 13:57:28 2016 +1000
2448     Resync ssh-keygen -W error message with upstream.
2452 Date:   Mon Sep 12 13:55:37 2016 +1000
2454     Move ssh-keygen -W handling code to match upstream
2458 Date:   Mon Sep 12 13:52:17 2016 +1000
2460     Move ssh-keygen -T handling code to match upstream.
2464 Date:   Mon Sep 12 13:30:50 2016 +1000
2466     Move -M handling code to match upstream.
2470 Date:   Mon Sep 12 03:29:16 2016 +0000
2474     Spaces->tabs.
2476     Upstream-ID: f4829dfc3f36318273f6082b379ac562eead70b7
2480 Date:   Mon Sep 12 03:25:20 2016 +0000
2484     Style whitespace fix.  Also happens to remove a no-op
2487     Upstream-ID: 45d90f9a62ad56340913a433a9453eb30ceb8bf3
2491 Date:   Mon Sep 12 01:22:38 2016 +0000
2499     Upstream-ID: 712cafa816c9f012a61628b66b9fbd5687223fb8
2503 Date:   Wed Sep 7 18:39:24 2016 +0000
2509     Upstream-ID: 73cec7f7ecc82d37a4adffad7745e4684de67ce7
2513 Date:   Tue Sep 6 09:22:56 2016 +0000
2520     Upstream-ID: 32bb7a9cb9919ff5bab28d50ecef3a2b2045dd1e
2524 Date:   Tue Sep 6 09:14:05 2016 +0000
2532     Upstream-ID: 2ceaa1076e19dbd3542254b4fb8e42d608f28856
2536 Date:   Mon Sep 5 14:02:42 2016 +0000
2540     remove 3des-cbc from the client's default proposal;
2541     64-bit block ciphers are not safe in 2016 and we don't want to wait until
2544     As 3des-cbc was the only mandatory cipher in the SSH RFCs, this may
2551     Upstream-ID: a505dfe65c6733af0f751b64cbc4bb7e0761bc2f
2555 Date:   Mon Sep 5 13:57:31 2016 +0000
2562     Upstream-ID: d4bc0e70e1be403735d3d9d7e176309b1fd626b9
2566 Date:   Mon Sep 12 11:07:00 2016 +1000
2568     Restore ssh-keygen's -J and -j option handling.
2574 Date:   Wed Aug 31 10:48:07 2016 +1000
2578     only allow kbd-interactive ones when that authentication method is
2583 Date:   Tue Aug 30 07:50:21 2016 +0000
2592     Upstream-ID: 6eb3f89332b3546d41d6dbf5a8e6ff920142b553
2596 Date:   Mon Aug 29 11:47:07 2016 +1000
2598     Tighten monitor state-machine flow for PAM calls
2604 Date:   Sun Aug 28 22:28:12 2016 +0000
2612     Upstream-ID: 1987ccee508ba5b18f016c85100d7ac3f70ff965
2616 Date:   Sat Aug 27 04:05:12 2016 +0000
2624     Upstream-ID: ae34525485a173bccd61ac8eefeb91c57e3b7df6
2628 Date:   Sat Aug 27 04:04:56 2016 +0000
2636     Upstream-ID: 7baa6a0f1e049bb3682522b4b95a26c866bfc043
2640 Date:   Thu Aug 25 23:57:54 2016 +0000
2649     Upstream-ID: 9fe040aca3d6ff393f6f7e60045cdd821dc4cbe0
2653 Date:   Thu Aug 25 23:56:51 2016 +0000
2659     Upstream-ID: a7485c1f1be618e8c9e38fd9be46c13b2d03b90c
2663 Date:   Tue Aug 23 16:21:45 2016 +0000
2670     Upstream-ID: c443e339768e7ed396dff3bb55f693e7d3641453
2674 Date:   Tue Aug 23 08:17:42 2016 +0000
2681     Upstream-ID: 07c3d53e357214153d9d08f234411e0d1a3d6f5c
2685 Date:   Tue Aug 23 06:36:23 2016 +0000
2695     Upstream-Regress-ID: c16662c631af51633f9fd06aca552a70535de181
2699 Date:   Tue Aug 23 16:33:48 2016 +1000
2705 Date:   Fri Aug 19 06:44:13 2016 +0000
2711     Upstream-Regress-ID: 0869d4f5c5d627c583c6a929d69c17d5dd65882c
2715 Date:   Tue Aug 23 14:32:37 2016 +1000
2721 Date:   Tue Aug 23 03:24:10 2016 +0000
2730     Upstream-ID: 01dcac3f3e6ca47518cf293e31c73597a4bb40d8
2734 Date:   Tue Aug 23 03:22:49 2016 +0000
2743     Upstream-ID: 05a0cb323ea4bc20e98db099b42c067bfb9ea1ea
2747 Date:   Fri Aug 19 03:18:06 2016 +0000
2754     Upstream-ID: bea7213fbf158efab7e602d9d844fba4837d2712
2758 Date:   Mon Aug 15 12:32:04 2016 +0000
2767     Upstream-ID: 850328854675b4b6a0d4a90f0b4a9dd9ca4e905f
2771 Date:   Mon Aug 15 12:27:56 2016 +0000
2775     Remove more SSH1 server code: * Drop sshd's -k option. *
2781     Upstream-ID: 9402f82886de917779db12f8ee3f03d4decc244d
2785 Date:   Wed Aug 17 16:26:04 2016 +1000
2791 Date:   Wed Aug 17 15:33:10 2016 +1000
2797 Date:   Wed Aug 17 14:25:43 2016 +1000
2801     --with-ldflags isn't used until after the -ftrapv test, so mention
2806 Date:   Wed Aug 17 14:08:42 2016 +1000
2810     Since -portable switched to git the CVS $Id tags are no longer being
2815 Date:   Wed Aug 17 13:40:58 2016 +1000
2817     Remove now-obsolete CVS $Id tags from text files.
2819     Since -portable switched to git, the CVS $Id tags are no longer being
2824 Date:   Wed Aug 17 13:38:30 2016 +1000
2833 Date:   Wed Aug 17 13:35:43 2016 +1000
2837     When using clang with -ftrapv or -sanitize=integer the tests would pass
2839     Explicitly test for this before enabling -trapv.
2843 Date:   Tue Aug 16 14:47:34 2016 +1000
2845     add a --with-login-program configure argument
2852 Date:   Tue Aug 16 13:30:56 2016 +1000
2854     add --with-pam-service to specify PAM service name
2860 Date:   Tue Aug 16 13:28:23 2016 +1000
2864     Our explicit_bzero successfully confused clang -fsanitize-memory
2870 Date:   Sat Aug 13 17:47:40 2016 +0000
2876     Upstream-ID: c24c0c32c49b91740d5a94ae914fb1898ea5f534
2880 Date:   Fri Aug 12 19:19:04 2016 +0000
2892     Upstream-ID: b027f3d0e0073419a132fd1bf002e8089b233634
2896 Date:   Thu Aug 11 01:42:11 2016 +0000
2902     Upstream-ID: 6da9a37f74aef9f9cc639004345ad893cad582d8
2906 Date:   Thu Aug 11 11:42:48 2016 +1000
2912 Date:   Mon Aug 8 22:40:57 2016 +0000
2919     Upstream-ID: aed374e2e88dd3eb41390003e5303d0089861eb5
2923 Date:   Wed Aug 3 05:41:57 2016 +0000
2930     Upstream-ID: 094849f8be68c3bdad2c0f3dee551ecf7be87f6f
2934 Date:   Wed Aug 3 04:23:55 2016 +0000
2941     2", no SSH1 host key supplied).  Reported by rainer.laatsch at t-online.de,
2944     Upstream-ID: aa6b132da5c325523aed7989cc5a320497c919dc
2948 Date:   Wed Jul 27 23:18:12 2016 +0000
2955     Upstream-ID: 9baa6eb5cd6e30c9dc7398e5fe853721a3a5bdee
2959 Date:   Tue Aug 2 15:22:40 2016 +1000
2965 Date:   Tue Aug 2 12:16:34 2016 +1000
2984 Date:   Tue Aug 2 11:06:23 2016 +1000
2990 Date:   Tue Aug 2 10:48:04 2016 +1000
2998 Date:   Tue Aug 2 10:01:52 2016 +1000
3002     Mechanically replace spaces with tabs in compat files not synced with
3007 Date:   Tue Aug 2 09:44:25 2016 +1000
3011     Mechanically strip trailing whitespace on files not synced with OpenBSD
3012     (or in the case of bsd-snprint.c, rsync).
3016 Date:   Tue Aug 2 09:06:27 2016 +1000
3022 Date:   Tue Aug 2 09:02:42 2016 +1000
3028 Date:   Mon Aug 1 14:31:52 2016 -0700
3032     Spotted by Jean-Pierre Radley
3036 Date:   Thu Jul 28 08:54:27 2016 +1000
3045 Date:   Wed Jul 27 08:25:42 2016 +1000
3051 Date:   Wed Jul 27 08:25:23 2016 +1000
3057 Date:   Wed Jul 27 08:18:05 2016 +1000
3065 Date:   Sun Jul 24 21:50:13 2016 +1000
3071 Date:   Sun Jul 24 11:45:36 2016 +0000
3075     openssh-7.3
3077     Upstream-ID: af106a7eb665f642648cf1993e162c899f358718
3081 Date:   Sat Jul 23 16:14:42 2016 +1000
3089 Date:   Sat Jul 23 02:54:08 2016 +0000
3093     fix pledge violation with ssh -f; reported by Valentin
3096     Upstream-ID: a61db7988db88d9dac3c4dd70e18876a8edf84aa
3100 Date:   Fri Jul 22 07:00:46 2016 +0000
3106     Upstream-ID: 55cb0a24c8e0618b3ceec80998dc82c85db2d2f8
3110 Date:   Fri Jul 22 05:46:11 2016 +0000
3118     Upstream-ID: 3faab814e947dc7b2e292edede23e94c608cb4dd
3122 Date:   Fri Jul 22 14:06:36 2016 +1000
3130 Date:   Fri Jul 22 03:47:36 2016 +0000
3137     Upstream-ID: f2043f51454ea37830ff6ad60c8b32b4220f448d
3141 Date:   Fri Jul 22 03:39:13 2016 +0000
3148     Upstream-ID: 767f323e1f5819508a0e35e388ec241bac2f953a
3152 Date:   Fri Jul 22 03:35:11 2016 +0000
3156     reverse the order in which -J/JumpHost proxies are visited to
3161     Upstream-ID: 3a68fd6a841fd6cf8cedf6552a9607ba99df179a
3165 Date:   Thu Jul 21 01:39:35 2016 +0000
3173     Brought to our attention by tomas.kuthan at oracle.com, shilei-c at
3176     Upstream-ID: d0af7d4a2190b63ba1d38eec502bc4be0be9e333
3180 Date:   Wed Jul 20 10:45:27 2016 +0000
3184     Do not clobber the global jump_host variables when
3187     Upstream-ID: 5362210944d91417d5976346d41ac0b244350d31
3191 Date:   Tue Jul 19 12:59:16 2016 +0000
3197     Upstream-ID: f3c1a5b3f05dff366f60c028728a2b43f15ff534
3201 Date:   Tue Jul 19 11:38:53 2016 +0000
3209     Upstream-ID: af0294e9b9394c4e16e991424ca0a47a7cc605f2
3213 Date:   Mon Jul 18 11:35:33 2016 +0000
3221     Upstream-ID: f20a13279b00ba0afbacbcc1f04e62e9d41c2912
3225 Date:   Thu Jul 21 14:17:31 2016 +1000
3235 Date:   Mon Jul 18 17:22:49 2016 +1000
3241     seem to work on some non-GNU makes, so do what works everywhere.
3245 Date:   Mon Jul 18 17:12:22 2016 +1000
3251 Date:   Mon Jul 18 16:26:26 2016 +1000
3255     We now have a shared implementation in libopenbsd-compat.
3259 Date:   Mon Jul 18 06:08:01 2016 +0000
3267     Upstream-ID: 4d4be8450ab2fc1b852d5884339f8e8c31c3fd76
3271 Date:   Mon Jul 18 15:43:25 2016 +1000
3279 Date:   Mon Jul 18 13:47:39 2016 +1000
3285 Date:   Mon Jul 18 09:33:25 2016 +1000
3290     password and keyboard-interative authentication methods.  Should prevent
3293     It probably won't trigger with keyboard-interactive in the default
3294     configuration because the retry counter is stored in module-private
3300 Date:   Sun Jul 17 04:20:16 2016 +0000
3304     support UTF-8 characters in ssh(1) banners using
3309     Upstream-ID: a72ce4e3644c957643c9524eea2959e41b91eea7
3313 Date:   Sat Jul 16 06:57:55 2016 +0000
3317     - add proxyjump to the options list - formatting fixes -
3322     Upstream-ID: 43d318e14ce677a2eec8f21ef5ba2f9f68a59457
3326 Date:   Fri Jul 15 05:01:58 2016 +0000
3334     Upstream-ID: 9005805227c94edf6ac02a160f0e199638d288e5
3338 Date:   Fri Jul 15 19:14:48 2016 +1000
3344 Date:   Fri Jul 15 18:47:07 2016 +1000
3350 Date:   Fri Jul 15 14:48:30 2016 +1000
3357     shared header and use for sshbuf-getput-basic.c too.  Should fix building
3362 Date:   Fri Jul 15 14:45:34 2016 +1000
3364     disable ciphers not supported by OpenSSL
3370 Date:   Fri Jul 15 13:54:31 2016 +1000
3372     add a --disable-pkcs11 knob
3376 Date:   Fri Jul 15 13:44:38 2016 +1000
3380     The hmac-ripemd160 was incorrect and could lead to broken
3386 Date:   Fri Jul 15 00:24:30 2016 +0000
3390     Add a ProxyJump ssh_config(5) option and corresponding -J
3391     ssh(1) command-line flag to allow simplified indirection through a SSH
3396     port-forwarding to establish a connection to the next destination.
3403     Upstream-ID: fa899cb8b26d889da8f142eb9774c1ea36b04397
3407 Date:   Fri Jul 15 12:56:39 2016 +1000
3415 Date:   Fri Jul 15 13:49:44 2016 +1000
3419     When sshd decides to not allow a login (eg PermitRootLogin=no) and
3421     the failure is not noticeably different whether or not the password
3431 Date:   Fri Jul 15 13:32:45 2016 +1000
3435     When sshd is processing a non-PAM login for a non-existent user it uses
3442     by EddieEzra.Harari at verint.com (CVE-2016-6210).
3445     passwords for users that do not exist on the system.  ok djm@
3449 Date:   Thu Jul 14 21:19:59 2016 +1000
3451     OpenSSL 1.1.x not currently supported.
3455 Date:   Thu Jul 14 12:25:24 2016 +1000
3463 Date:   Thu Jul 14 01:24:21 2016 +0000
3469     Upstream-Regress-ID: 4e32f7a5c57a619c4e8766cb193be2a1327ec37a
3473 Date:   Mon Jul 11 21:38:13 2016 +0000
3483     Upstream-ID: ca2099eade1ef3e87a79614fefa26a0297ad8a3b
3487 Date:   Mon Jul 11 03:19:44 2016 +0000
3494     Upstream-ID: dae60df23b2bb0e89f42661ddd96a7b0d1b7215a
3498 Date:   Thu Jul 14 10:59:09 2016 +1000
3507 Date:   Thu Jul 14 09:48:48 2016 +1000
3513 Date:   Wed Jul 13 14:42:35 2016 +1000
3518     in the libopenbsd-compat so we can use them in kexfuzz.c too.  ok djm@
3522 Date:   Mon Jul 11 17:23:38 2016 +1000
3530 Date:   Fri Jul 8 13:59:13 2016 +1000
3532     whitelist more architectures for seccomp-bpf
3534     bz#2590 - testing and patch from Jakub Jelen
3538 Date:   Mon Jul 4 18:01:44 2016 +0000
3543     it.  CFLAGS contains -g by default anyway
3545     problem noted by Edgar Pettijohn (edgar (at) pettijohn-web.com)
3548     Upstream-Regress-ID: 4a0bb72f95c63f2ae9daa8a040ac23914bddb542
3552 Date:   Fri Jul 8 03:44:42 2016 +0000
3556     Improve crypto ordering for Encrypt-then-MAC (EtM) mode
3561     side-channel oracle in the decryption step, though no such oracle has
3571     Upstream-ID: 1999bb67cab47dda5b10b80d8155fe83d4a1867b
3575 Date:   Mon Jul 4 18:01:44 2016 +0000
3580     delete it.  CFLAGS contains -g by default anyway
3582     problem noted by Edgar Pettijohn (edgar (at) pettijohn-web.com)
3585     Upstream-ID: 96c5054e3e1f170c6276902d5bc65bb3b87a2603
3589 Date:   Thu Jun 30 05:17:05 2016 +0000
3598     Upstream-ID: a166870c5878e422f3c71ff802e2ccd7032f715d
3602 Date:   Wed Jun 29 17:14:28 2016 +0000
3606     sort the -o list;
3608     Upstream-ID: 1a97465ede8790b4d47cb618269978e07f41f8ac
3612 Date:   Thu Jun 23 05:17:51 2016 +0000
3616     fix AuthenticationMethods during configuration re-parse;
3619     Upstream-ID: 8ffa1dac25c7577eca8238e825317ab20848f9b4
3623 Date:   Sun Jun 19 07:48:02 2016 +0000
3631     Upstream-ID: b393794f8935c8b15d98a407fe7721c62d2ed179
3635 Date:   Fri Jun 17 06:33:30 2016 +0000
3641     Upstream-ID: 5d5b21c80f1e81db367333ce0bb3e5874fb3e463
3645 Date:   Fri Jun 17 05:06:23 2016 +0000
3652     Upstream-ID: 4cb0795a366381724314e6515d57790c5930ffe5
3656 Date:   Fri Jun 17 05:03:40 2016 +0000
3661     AuthenticationMethods=any for the default behaviour of not requiring multiple
3666     Upstream-ID: fabd7f44d59e4518d241d0d01e226435cc23cf27
3670 Date:   Thu Jun 16 11:00:17 2016 +0000
3676     Upstream-ID: 105d6b2f1af2fbd9d91c893c436ab121434470bd
3680 Date:   Thu Jun 16 06:10:45 2016 +0000
3689     Upstream-ID: 03d48536da6e51510d73ade6fcd44ace731ceb27
3693 Date:   Mon Jun 20 15:55:34 2016 +1000
3697     Apply the same get_remote_name_or_ip -> session_get_remote_name_or_ip
3703 Date:   Fri Jun 17 14:34:09 2016 +1000
3709 Date:   Wed Jun 15 00:40:40 2016 +0000
3713     Remove "POSSIBLE BREAK-IN ATTEMPT!" from log message
3714     about forward and reverse DNS not matching.  We haven't supported IP-based
3718     Upstream-ID: 5565ef0ee0599b27f0bd1d3bb1f8a323d8274e29
3722 Date:   Wed Jun 15 11:22:38 2016 +1000
3727     gets linked into ssh-agent when building --with-pam.
3731 Date:   Tue Jun 14 13:55:12 2016 +1000
3735     There are a small number of "upstream" commits that do not correspond to
3736     a file in -portable.  This file tracks those so that we can reconcile
3739     If you add something to .skipped-commit-ids please also add an upstream
3742         Upstream-ID: 321065a95a7ccebdd5fd08482a1e19afbf524e35
3743         Upstream-ID: d4f699a421504df35254cf1c6f1a7c304fb907ca
3744         Upstream-ID: aafe246655b53b52bc32c8a24002bc262f4230f7
3745         Upstream-ID: 8fa9cd1dee3c3339ae329cf20fb591db6d605120
3746         Upstream-ID: f31327a48dd4103333cc53315ec53fe65ed8a17a
3747         Upstream-ID: edbfde98c40007b7752a4ac106095e060c25c1ef
3748         Upstream-ID: 052fd565e3ff2d8cec3bc957d1788f50c827f8e2
3749         Upstream-ID: 7cf73737f357492776223da1c09179fa6ba74660
3750         Upstream-ID: 180d84674be1344e45a63990d60349988187c1ae
3751         Upstream-ID: f6ae971186ba68d066cd102e57d5b0b2c211a5ee
3755 Date:   Tue Jun 14 13:51:01 2016 +1000
3757     Remove now-defunct .cvsignore files. ok djm
3761 Date:   Wed Jun 8 02:13:01 2016 +0000
3767     that send a DH-GEX min value less that DH_GRP_MIN, eg old OpenSSH and PuTTY.
3770     Upstream-ID: 452979d3ca5c1e9dff063287ea0a5314dd091f65
3774 Date:   Tue Jun 14 10:48:27 2016 +1000
3779     ssh-agent and sftp-server.  bz#2584, based on a patch from huieying.lee
3784 Date:   Tue Jun 14 10:43:53 2016 +1000
3790 Date:   Thu Jun 9 16:23:07 2016 +1000
3799 Date:   Fri Jun 3 04:10:41 2016 +0000
3805     Upstream-Regress-ID: 558b7f4dc45cc3761cc3d3e889b9f3c5bc91e601
3809 Date:   Fri Jun 3 03:47:59 2016 +0000
3816     Upstream-Regress-ID: aea7a9c3bac638530165c801ce836875b228ae7a
3820 Date:   Mon May 30 12:14:08 2016 +0000
3826     Upstream-Regress-ID: 111efe20a0fb692fa1a987f6e823310f9b25abf6
3830 Date:   Mon May 30 12:05:56 2016 +0000
3835      do not access a NULL pointer in snmprintf(), and do not free() the pointer
3838      rather than -1 and NULL.
3840     Besides, free(dst) is pointless after failure (not a bug).
3845     Upstream-Regress-ID: b164f20923812c9bac69856dbc1385eb1522cba4
3849 Date:   Thu May 26 19:14:25 2016 +0000
3855     Upstream-Regress-ID: c923d05a20e84e4ef152cbec947fdc4ce6eabbe3
3859 Date:   Tue May 3 15:30:46 2016 +0000
3865     Upstream-Regress-ID: 8fdf2fc4eb595ccd80c443f474d639f851145417
3869 Date:   Tue May 3 14:41:04 2016 +0000
3875     Upstream-Regress-ID: 8d5572b27ea810394eeda432d8b4e9e1064a7c38
3879 Date:   Tue May 3 13:48:33 2016 +0000
3885     Upstream-Regress-ID: 7521ff150dc7f20511d1c2c48fd3318e5850a96d
3889 Date:   Fri Jun 3 06:44:12 2016 +0000
3895     Upstream-ID: 92979f1a0b63e041a0e5b08c9ed0ba9b683a3698
3899 Date:   Fri Jun 3 04:09:38 2016 +0000
3904      overridden when using ssh -W (but still default to yes in that case).
3907     Upstream-ID: 4b20c419e93ca11a861c81c284090cfabc8c54d4
3911 Date:   Fri Jun 3 03:14:41 2016 +0000
3915     Move the host and port used by ssh -W into the Options
3918     Upstream-ID: 151bce5ecab2fbedf0d836250a27968d30389382
3922 Date:   Wed Jun 1 04:19:49 2016 +0000
3929     Upstream-ID: 750627e8117084215412bff00a25b1586ab17ece
3933 Date:   Tue May 31 23:46:14 2016 +0000
3937     Ensure that the client's proposed DH-GEX max value is at
3940     Upstream-ID: b4b84fa04aab2de7e79a6fee4a6e1c189c0fe775
3944 Date:   Mon Jun 6 11:36:13 2016 +1000
3950 Date:   Mon Jun 6 11:33:43 2016 +1000
3952     Fix utf->utf8 typo.
3956 Date:   Mon May 30 18:34:41 2016 +0000
3968     Upstream-ID: aaae57989431e5239c101f8310f74ccc83aeb93e
3972 Date:   Mon May 30 12:57:21 2016 +0000
3985     Upstream-ID: 30ebcc0c097c4571b16f0a78b44969f170db0cff
3989 Date:   Mon May 30 12:05:56 2016 +0000
3994      do not access a NULL pointer in snmprintf(), and do not free() the pointer
3997      rather than -1 and NULL.
3999     Besides, free(dst) is pointless after failure (not a bug).
4004     Upstream-ID: b7bcd2e82fc168a8eff94e41f5db336ed986fed0
4008 Date:   Wed May 25 23:48:45 2016 +0000
4013      the terminal, for ASCII and UTF-8, escape bytes not forming characters and
4014      bytes forming non-printable characters with vis(3) VIS_OCTAL. For other
4023     state-dependent locales because many places in the code print
4031     Upstream-ID: e66afbc94ee396ddcaffd433b9a3b80f387647e0
4035 Date:   Tue May 24 04:43:45 2016 +0000
4042     Upstream-ID: aa814b694efe9e5af8a26e4c80a05526ae6d6605
4046 Date:   Tue May 24 02:31:57 2016 +0000
4052     Upstream-ID: 4faacdde136c24a961e24538de373660f869dbc0
4056 Date:   Mon May 23 23:30:50 2016 +0000
4060     prefer agent-hosted keys to keys from PKCS#11; ok markus
4062     Upstream-ID: 7417f7653d58d6306d9f8c08d0263d050e2fd8f4
4066 Date:   Mon May 23 00:17:27 2016 +0000
4072     Upstream-ID: bf968da7cfcea2a41902832e7d548356a4e2af34
4076 Date:   Fri Jun 3 16:03:44 2016 +1000
4084 Date:   Tue May 31 11:13:22 2016 -0700
4091 Date:   Tue May 31 16:45:28 2016 +1000
4097 Date:   Mon May 30 19:35:28 2016 +1000
4099     Add missing ssh-host-config --name option
4105 Date:   Fri May 20 10:01:58 2016 +1000
4113 Date:   Fri May 20 09:56:53 2016 +1000
4121 Date:   Thu May 19 07:45:32 2016 +0000
4127     Upstream-ID: b32d0cb372bbe918ca2de56906901eae225a59b0
4131 Date:   Wed May 4 14:32:26 2016 +0000
4137     Upstream-ID: 4ba9034b00a4cf1beae627f0728da897802df88a
4141 Date:   Wed May 4 14:29:58 2016 +0000
4147     Upstream-ID: 20c508480d8db3eef18942c0fc39b1fcf25652ac
4151 Date:   Wed May 4 14:22:33 2016 +0000
4158     Upstream-ID: c2f97502efc761a41b18c17ddf460e138ca7994e
4162 Date:   Tue May 10 09:51:06 2016 +1000
4172 Date:   Wed May 4 14:04:40 2016 +0000
4178     Upstream-ID: 789c6ad4928b5fa557369b88c3a6a34926082c05
4182 Date:   Wed May 4 14:00:09 2016 +0000
4189     Upstream-ID: 8a4404c8307a5ef9e07ee2169fc6d8106b527587
4193 Date:   Wed May 4 12:21:53 2016 +0000
4200     Upstream-ID: 3e6a15eb89ea0fd406f108826b7dc7dec4fbfac1
4204 Date:   Wed May 4 12:16:39 2016 +0000
4210     Upstream-ID: cc4d0cd32cb6b55a2ef98975d2f7ae857d0dc578
4214 Date:   Tue May 3 18:38:12 2016 +0000
4220     Upstream-ID: 1fbd5b7ab16d2d9834ec79c3cedd4738fa42a168
4224 Date:   Tue May 3 15:57:39 2016 +0000
4231     Upstream-ID: 940bc69ec0249ab428d24ccd0722ce35cb932ee2
4235 Date:   Tue May 3 15:25:06 2016 +0000
4242     Upstream-ID: 14a6d970b3b45c8e94272e3c661e9a0b2a0ee7cb
4246 Date:   Tue May 3 14:54:08 2016 +0000
4253     Upstream-ID: cb40d0235dc153c478c1aad3bc60b195422a54fb
4257 Date:   Tue May 3 13:10:24 2016 +0000
4261     clarify ordering of subkeys; pointed out by ietf-ssh AT
4264     Upstream-ID: 05ebe9f949449a555ebce8e0aad7c8c9acaf8463
4268 Date:   Tue May 3 12:15:49 2016 +0000
4273      different sed behaviours for -portable.
4275     Upstream-Regress-ID: 0f6eb673162df229eda9a134a0f10da16151552d
4279 Date:   Tue May 3 10:27:59 2016 +0000
4283     correct some typos and remove a long-stale XXX note.
4291     Upstream-ID: 7b535ab7dba3340b7d8210ede6791fdaefdf839a
4295 Date:   Tue May 3 10:24:27 2016 +0000
4302     Upstream-ID: 8caac2d8e8cfd2fca6dc304877346e0a064b014b
4306 Date:   Tue May 3 09:03:49 2016 +0000
4310     Implement IUTF8 as per draft-sgtatham-secsh-iutf8-00.  Patch
4313     Upstream-ID: 58268ebdf37d9d467f78216c681705a5e10c58e8
4317 Date:   Mon May 2 14:10:58 2016 +0000
4323     Upstream-ID: bc69932638a291770955bd05ca55a32660a613ab
4327 Date:   Mon May 2 09:52:00 2016 +0000
4333     Upstream-Regress-ID: a0cd1a92dc824067076a5fcef83c18df9b0bf2c6
4337 Date:   Mon May 2 10:26:04 2016 +0000
4342      draft-ietf-curdle-ssh-kex-sha2-03
4344     diffie-hellman-group14-sha256 (2K group)
4345     diffie-hellman-group16-sha512 (4K group)
4346     diffie-hellman-group18-sha512 (8K group)
4351     Upstream-ID: ac00406ada4f0dfec41585ca0839f039545bc46f
4355 Date:   Mon May 2 09:36:42 2016 +0000
4362     Upstream-ID: b45be2f2ce8cacd794dc5730edaabc90e5eb434a
4366 Date:   Mon May 2 08:49:03 2016 +0000
4370     fix signed/unsigned errors reported by clang-3.7; add
4374     Upstream-ID: 71f926d9bb3f1efed51319a6daf37e93d57c8820
4378 Date:   Fri Apr 29 08:07:53 2016 +0000
4382     close ControlPersist background process stderr when not
4385     Upstream-ID: 4fb726f0fdcb155ad419913cea10dc4afd409d24
4389 Date:   Thu Apr 28 14:30:21 2016 +0000
4395     Upstream-ID: 313a385bd7b69a82f8e28ecbaf5789c774457b15
4399 Date:   Wed Apr 27 13:53:48 2016 +0000
4405     Upstream-ID: 13e7327fe85f6c63f3f7f069e0fdc8c351515d11
4409 Date:   Thu Apr 21 06:08:02 2016 +0000
4415     Upstream-ID: dc4816678704aa5cbda3a702e0fa2033ff04581d
4419 Date:   Sun Apr 17 14:34:46 2016 +0000
4425     Upstream-ID: 46c1bab91c164078edbccd5f7d06b9058edd814f
4429 Date:   Fri Apr 15 02:57:10 2016 +0000
4435     Upstream-Regress-ID: 1063595f7f40f8489a1b7a27230b9e8acccea34f
4439 Date:   Fri Apr 15 02:55:53 2016 +0000
4445     Upstream-Regress-ID: 29ef1b267fa56daa60a1463396635e7d53afb587
4449 Date:   Fri Apr 15 00:48:01 2016 +0000
4455     Upstream-Regress-ID: cb782f4f1ab3e079efbc335c6b64942f790766ed
4459 Date:   Fri Apr 15 00:31:10 2016 +0000
4465     Upstream-Regress-ID: 46a38c8101f635461c506d1aac2d96af80f97f1e
4469 Date:   Thu Apr 14 23:57:17 2016 +0000
4473     unbreak test for recent ssh de-duplicated forwarding
4476     Upstream-Regress-ID: 6b2b115d99acd7cff13986e6739ea214cf2a3da3
4480 Date:   Thu Apr 14 23:21:42 2016 +0000
4486     Upstream-Regress-ID: 8cd10952ce7898655ee58945904f2a0a3bdf7682
4490 Date:   Fri Apr 15 00:30:19 2016 +0000
4496     Upstream-ID: ae3b76e2e343322b9f74acde6f1e1c5f027d5fff
4500 Date:   Wed Apr 13 10:39:57 2016 +1000
4504     If PAM is configured to read user-specified environment variables
4509     CVE-2015-8325, found by Shayan Sadigh, via Colin Watson
4513 Date:   Sat Apr 9 12:39:30 2016 +0000
4520     Upstream-ID: 92038726ef4a338169c35dacc9c5a07fcc7fa761
4524 Date:   Fri Apr 8 21:14:13 2016 +1000
4535 Date:   Fri Apr 8 08:19:17 2016 +0000
4541     Upstream-ID: 5beffd4e001515da12851b974e2323ae4aa313b6
4545 Date:   Fri Apr 8 06:35:54 2016 +0000
4550      every direct-streamlocal@openssh.com channel open, in contravention of our
4560     Upstream-ID: 34cd326a4d236ca6e39084c4ff796bd97ab833e7
4564 Date:   Wed Apr 6 06:42:17 2016 +0000
4573     Upstream-ID: 40a51d68b6300f1cc61deecdb7d4847b8b7b0de1
4577 Date:   Sat Apr 2 14:37:42 2016 +0000
4589     Upstream-ID: f16811ffa19a1c5f4ef383c5f0fecb843c84e218
4593 Date:   Mon Apr 4 11:09:21 2016 +1000
4599 Date:   Mon Apr 4 11:07:59 2016 +1000
4601     Fix configure-time warnings for openssl test.
4605 Date:   Fri Apr 1 02:34:10 2016 +0000
4611     Upstream-ID: 40ae2203d07cb14e0a89e1a0d4c6120ee8fd8c3a
4615 Date:   Thu Mar 31 05:24:06 2016 +0000
4623     Upstream-ID: 0d4f8c70e2fa7431a83b95f8ca81033147ba8713
4627 Date:   Thu Mar 17 17:19:43 2016 +0000
4632      not known_hosts; bz#2554 reported by jjelen AT redhat.com
4634     Upstream-ID: c1c1bb895dde46095fc6d81d8653703928437591
4638 Date:   Tue Mar 15 09:24:43 2016 +1100
4648 Date:   Tue Mar 15 04:30:21 2016 +1100
4654 Date:   Mon Mar 14 16:20:54 2016 +0000
4659      ssh-agent: when attempting pubkey auth with a certificate, if no separate
4664     Upstream-ID: f939cd76d68e6a9a3d1711b5a943d6ed1e623966
4668 Date:   Thu Mar 10 11:47:57 2016 +0000
4675     Upstream-ID: 18ad8d0d74cbd2ea3306a16595a306ee356aa261
4679 Date:   Mon Mar 14 16:04:23 2016 +1100
4681     Pass supported malloc options to connect-privsep.
4684     option portion of the connect-privsep test.
4688 Date:   Mon Mar 14 09:30:58 2016 +1100
4696 Date:   Mon Mar 14 09:24:03 2016 +1100
4706 Date:   Fri Mar 11 14:47:41 2016 +1100
4714 Date:   Wed Mar 9 13:14:18 2016 +1100
4720 Date:   Wed Mar 9 12:46:50 2016 +1100
4729 Date:   Tue Mar 8 14:12:58 2016 -0800
4731     make a regress-binaries target
4738 Date:   Tue Mar 8 14:03:54 2016 -0800
4740     unbreak kexfuzz for -Werror without __bounded__
4744 Date:   Tue Mar 8 14:01:29 2016 -0800
4750 Date:   Tue Mar 8 11:58:43 2016 +1100
4755     same change to some portable-specific code.
4759 Date:   Mon Mar 7 19:02:43 2016 +0000
4769     Upstream-ID: 5f2e4df88d4803fc8ec59ec53629105e23ce625e
4773 Date:   Fri Mar 4 15:11:55 2016 +1100
4779 Date:   Fri Mar 4 02:48:06 2016 +0000
4787     Upstream-Regress-ID: 345d0a9589c381e7d640a4ead06cfaadf4db1363
4791 Date:   Fri Mar 4 02:30:36 2016 +0000
4797     Upstream-Regress-ID: 3df5242d30551b12b828aa9ba4a4cec0846be8d1
4801 Date:   Thu Mar 3 00:46:53 2016 +0000
4810     Upstream-Regress-ID: 24f36912740a634d509a3144ebc8eb7c09b9c684
4814 Date:   Fri Mar 4 03:35:44 2016 +0000
4818     fix ClientAliveInterval when a time-based RekeyLimit is
4819      set; previously keepalive packets were not being sent. bz#2252 report and
4822     Upstream-ID: d48f9deadd35fdacdd5106b41bb07630ddd4aa81
4826 Date:   Wed Mar 2 22:43:52 2016 +0000
4833     Upstream-ID: 99f1cf15c9a8f161086b814d414d862795ae153d
4837 Date:   Wed Mar 2 22:42:40 2016 +0000
4842      storing sub-second timestamps.  Pointed out by mmcc@, ok deraadt@ markus@
4844     Upstream-ID: 38fd83a3d83dbf81c8ff7b5d1302382fe54970ab
4848 Date:   Mon Feb 29 20:22:36 2016 +0000
4854     Upstream-ID: 0590313bbb013ff6692298c98f7e0be349d124bd
4858 Date:   Sun Feb 28 22:27:00 2016 +0000
4869     Upstream-ID: 9ad8a07e1a12684e1b329f9bd88941b249d4b2ad
4873 Date:   Tue Mar 1 15:24:20 2016 +1100
4881 Date:   Fri Feb 26 14:40:04 2016 +1100
4887 Date:   Wed Feb 24 10:44:25 2016 +1100
4891     When DISABLE_LASTLOG is set, do not try to include PrintLastLog in the
4896 Date:   Tue Feb 23 20:17:23 2016 +1100
4902 Date:   Tue Feb 23 20:16:53 2016 +1100
4908 Date:   Tue Feb 23 09:14:34 2016 +0000
4912     openssh-7.2
4914     Upstream-ID: 9db776b26014147fc907ece8460ef2bcb0f11e78
4918 Date:   Tue Feb 23 16:12:13 2016 +1100
4923     for certain files and directories. This adds a regress/check-perm
4933 Date:   Tue Feb 23 12:56:59 2016 +1100
4940       image not found [preauth]
4947 Date:   Tue Feb 23 01:34:14 2016 +0000
4954     Upstream-ID: 58b2e46e63ed6912ed1ee780bd3bd8560f9a5899
4958 Date:   Sat Feb 20 23:06:23 2016 +0000
4966     Upstream-ID: e168daf9d27d7e392e3c9923826bd8e87b2b3a10
4970 Date:   Sat Feb 20 23:02:39 2016 +0000
4979     Upstream-ID: 6ce99466312e4ae7708017c3665e3edb976f70cf
4983 Date:   Sat Feb 20 23:01:46 2016 +0000
4991     Upstream-ID: 0d94aa06a4b889bf57a7f631c45ba36d24c13e0c
4995 Date:   Fri Feb 19 09:05:39 2016 +1100
4999     Not all systems with Solaris privs have priv_basicset so factor that
5000     out and provide backward compatibility code.  Similarly, not all have
5007 Date:   Wed Feb 17 22:20:14 2016 +0000
5013     Upstream-ID: 43f0d57928cc077c949af0bfa71ef574dcb58243
5017 Date:   Wed Feb 17 08:57:34 2016 +0000
5021     rsa-sha2-512,rsa-sha2-256 cannot be selected explicitly
5025     Upstream-ID: c6e8820eb8e610ac21551832c0c89684a9a51bb7
5029 Date:   Wed Feb 17 07:38:19 2016 +0000
5039     Upstream-ID: eb474f8c36fb6a532dc05c282f7965e38dcfa129
5043 Date:   Wed Feb 17 05:29:04 2016 +0000
5047     make sandboxed privilege separation the default, not just
5050     Upstream-ID: 5221ef3b927d2df044e9aa3f5db74ae91743f69b
5054 Date:   Tue Feb 16 07:47:54 2016 +0000
5060     Upstream-ID: b1e4c36b0c2e12e338e5b66e2978f2ac953b95eb
5064 Date:   Tue Feb 16 05:11:04 2016 +0000
5068     Replace list of ciphers and MACs adjacent to -1/-2 flag
5069      descriptions in ssh(1) with a strong recommendation not to use protocol 1.
5075     Upstream-ID: 961f99e5437d50e636feca023978950a232ead5e
5079 Date:   Tue Feb 16 03:37:48 2016 +0000
5089     Upstream-ID: e72d2ac080e02774376325136e532cb24c2e617c
5093 Date:   Wed Feb 17 02:24:17 2016 +0000
5099     Upstream-Regress-ID: b22d72edfde78c403aaec2b9c9753ef633cc0529
5103 Date:   Wed Feb 17 13:37:09 2016 +1100
5108     it has the wrong number of args and it's not usable in non-variadic
5114 Date:   Wed Feb 17 09:48:15 2016 +1100
5122 Date:   Tue Feb 16 10:45:02 2016 +1100
5128 Date:   Mon Feb 15 23:32:37 2016 +0000
5135     Upstream-ID: ccd742cd25952240ebd23d7d4d6b605862584d08
5139 Date:   Mon Feb 15 09:47:49 2016 +0000
5143     Add a function to enable security-related malloc_options.
5146     Upstream-ID: 43a95523b832b7f3b943d2908662191110c380ed
5150 Date:   Tue Feb 16 10:34:39 2016 +1100
5152     sync ssh-copy-id with upstream 783ef08b0a75
5156 Date:   Fri Feb 12 00:20:30 2016 +0000
5163     Upstream-ID: 044a764fee526f2c4a9d530bd10695422d01fc54
5167 Date:   Thu Feb 11 02:56:32 2016 +0000
5174     Upstream-ID: d7fd1b6c1ed848d866236bcb1d7049d2bb9b2ff6
5178 Date:   Thu Feb 11 02:21:34 2016 +0000
5182     fix regression in openssh-6.8 sftp client: existing
5186     Upstream-ID: 3306be469f41f26758e3d447987ac6d662623e18
5190 Date:   Tue Feb 9 05:30:04 2016 +0000
5194     turn off more old crypto in the client: hmac-md5, ripemd,
5197     Upstream-ID: 96aa11c2c082be45267a690c12f1d2aae6acd46e
5201 Date:   Mon Feb 8 23:40:12 2016 +0000
5205     don't attempt to percent_expand() already-canonicalised
5209     Upstream-ID: f24569cffa1a7cbde5f08dc739a72f4d78aa5c6a
5213 Date:   Mon Feb 8 10:57:07 2016 +0000
5228     Upstream-ID: a441227fd64f9739850ca97b4cf794202860fcd8
5232 Date:   Fri Feb 5 13:28:19 2016 +0000
5237      not an error. This fixes a problem where the mux master would sporadically
5240     Upstream-ID: 3c2dadc21fac6ef64665688aac8a75fffd57ae53
5244 Date:   Fri Feb 5 04:31:21 2016 +0000
5251     Upstream-ID: 11b068d83c2865343aeb46acf1e9eec00f829b6b
5255 Date:   Fri Feb 5 03:07:06 2016 +0000
5259     mention internal DH-GEX fallback groups; bz#2302
5261     Upstream-ID: e7b395fcca3122cd825515f45a2e41c9a157e09e
5265 Date:   Fri Feb 5 02:37:56 2016 +0000
5271     Upstream-ID: e2c0d74ee185cd1a3e9d4ca1f1b939b745b354da
5275 Date:   Wed Jan 27 17:45:56 2016 +1100
5284 Date:   Thu Feb 4 23:43:48 2016 +0000
5291     Upstream-ID: 7b9f6712cef01865ad29070262d366cf13587c9c
5295 Date:   Mon Feb 1 21:18:17 2016 +0000
5300      forwarding" message when DISPLAY is not set.  This could also result in a
5303     Upstream-ID: 20ee0cfbda678a247264c20ed75362042b90b412
5307 Date:   Fri Jan 29 05:18:15 2016 +0000
5314     Upstream-Regress-ID: 548390350c62747b6234f522a99c319eee401328
5318 Date:   Fri Jan 29 23:04:46 2016 +0000
5324     Upstream-ID: 13d1f9c8b65a5109756bcfd3b74df949d53615be
5328 Date:   Fri Jan 29 05:46:01 2016 +0000
5332     include packet type of non-data packets in debug3 output;
5335     Upstream-ID: 034eaf639acc96459b9c5ce782db9fcd8bd02d41
5339 Date:   Fri Jan 29 03:31:03 2016 +0000
5343     Revert "account for packets buffered but not yet
5347     Upstream-ID: 7e03f636cb45ab60db18850236ccf19079182a19
5351 Date:   Fri Jan 29 02:54:45 2016 +0000
5358     Upstream-ID: 13bea82be566b9704821b1ea05bf7804335c7979
5362 Date:   Fri Jan 29 02:42:46 2016 +0000
5366     Account for packets buffered but not yet processed when
5367      computing whether or not it is time to perform rekeying.  bz#2521, based
5370     Upstream-ID: 67e268b547f990ed220f3cb70a5624d9bda12b8c
5374 Date:   Wed Jan 27 06:44:58 2016 +0000
5381     Upstream-ID: 8ca558c01f184e596b45e4fc8885534b2c864722
5385 Date:   Wed Jan 27 00:53:12 2016 +0000
5391     Upstream-ID: 478ccd4e897e0af8486b294aa63aa3f90ab78d64
5395 Date:   Sat Jan 23 05:31:35 2016 +0000
5405     Upstream-ID: bc9975b2095339811c3b954694d7d15ea5c58f66
5409 Date:   Wed Jan 20 09:22:39 2016 +0000
5416     Upstream-ID: 6ed0c33b836d9de0a664cd091e86523ecaa2fb3b
5420 Date:   Thu Jan 14 22:56:56 2016 +0000
5427     Upstream-ID: 4ec0f12b9d8fa202293c9effa115464185aa071d
5431 Date:   Thu Jan 14 16:17:39 2016 +0000
5437     Upstream-ID: 2cab8f4b197bc95776fb1c8dc2859dad0c64dc56
5441 Date:   Thu Jan 14 14:34:34 2016 +0000
5445     Disable experimental client-side roaming support.  Server
5449     Upstream-ID: 2328004b58f431a554d4c1bf67f5407eae3389df
5453 Date:   Thu Jan 14 11:08:19 2016 +1100
5459 Date:   Thu Jan 14 11:04:04 2016 +1100
5461     openssh-7.1p2
5465 Date:   Fri Jan 15 01:30:36 2016 +1100
5471 Date:   Wed Jan 13 23:04:47 2016 +0000
5479     Upstream-ID: f76195bd2064615a63ef9674a0e4096b0713f938
5483 Date:   Tue Jan 12 23:42:54 2016 +0000
5490     Upstream-ID: 0ece37069fd66bc6e4f55eb1321f93df372b65bf
5494 Date:   Fri Jan 8 14:24:56 2016 +1100
5496     Support Illumos/Solaris fine-grained privileges
5498     Includes a pre-auth privsep sandbox and several pledge()
5505 Date:   Thu Dec 31 00:33:52 2015 +0000
5514     Upstream-ID: e705e97ad3ccce84291eaa651708dd1b9692576b
5518 Date:   Wed Dec 30 23:46:14 2015 +0000
5524     Upstream-ID: f3eef4389d53ed6c0d5c77dcdcca3060c745da97
5528 Date:   Sat Dec 26 20:51:35 2015 +0000
5537     Upstream-ID: fc40092568cd195719ddf1a00aa0742340d616cf
5541 Date:   Sat Dec 26 07:46:03 2015 +0000
5546      "ask" or "autoask", the process will use ssh-askpass for asking confirmation.
5552     Upstream-ID: 38a58b30ae3eef85051c74d3c247216ec0735f80
5556 Date:   Sun Dec 13 22:42:23 2015 +0000
5563     Upstream-ID: decc88ec4fc7515594fdb42b04aa03189a44184b
5567 Date:   Fri Dec 11 17:41:37 2015 +0000
5571     Add "id" to ssh-agent pledge for subprocess support.
5573     Found the hard way by Jan Johansson when using ssh-agent with X.  Also,
5578     Upstream-ID: 914255f6850e5e7fa830a2de6c38605333b584db
5582 Date:   Fri Dec 11 04:21:11 2015 +0000
5586     Remove NULL-checks before sshbuf_free().
5590     Upstream-ID: 5ebed00ed5f9f03b119a345085e8774565466917
5594 Date:   Fri Dec 11 03:24:25 2015 +0000
5601     Upstream-ID: 9300dc354015f7a7368d94a8ff4a4266a69d237e
5605 Date:   Fri Dec 11 03:20:09 2015 +0000
5612     Upstream-ID: 8b8e7b02a448cf5e5635979df2d83028f58868a7
5616 Date:   Fri Dec 11 03:19:09 2015 +0000
5624     Upstream-ID: 1b60586b484b55a947d99a0b32bd25e0ced56fae
5628 Date:   Fri Dec 11 02:31:47 2015 +0000
5632     Remove NULL-checks before sshkey_free().
5636     Upstream-ID: 3e35afe8a25e021216696b5d6cde7f5d2e5e3f52
5640 Date:   Fri Dec 11 02:29:03 2015 +0000
5645      debug mode when output may otherwise not be flushed.  Patch from dustin at
5646      null-ptr.net.
5648     Upstream-ID: b0c6b4cd2cdb01d7e9eefbffdc522e35b5bc4acc
5652 Date:   Tue Dec 15 15:23:49 2015 +1100
5656      - remove configure --with-rsh, because this option isn't supported anymore
5657      - replace last occurrence of BuildPreReq by BuildRequires
5658      - update grep statement to query the krb5 include directory
5664 Date:   Tue Dec 15 15:10:32 2015 +1100
5666     Allow --without-ssl-engine with --without-openssl
5672 Date:   Tue Dec 15 14:27:09 2015 +1100
5680 Date:   Tue Dec 15 13:59:12 2015 +1100
5689 Date:   Fri Dec 11 02:20:28 2015 +0000
5695     Upstream-ID: 7454a0affeab772398052954c79300aa82077093
5699 Date:   Fri Dec 11 00:20:04 2015 +0000
5708     Upstream-ID: 56c955106cbddba86c3dd9bbf786ac0d1b361492
5712 Date:   Thu Dec 10 17:08:40 2015 +0000
5716     Remove NULL-checks before free().
5720     Upstream-ID: e3d3cb1ce900179906af36517b5eea0fb15e6ef8
5724 Date:   Thu Dec 10 07:01:35 2015 +0000
5730     Upstream-ID: ec364c5af32031f013001fd28d1bd3dfacfe9a72
5734 Date:   Mon Dec 7 20:04:09 2015 +0000
5738     stricter encoding type checks for ssh-rsa; ok djm@
5740     Upstream-ID: 8cca7c787599a5e8391e184d0b4f36fdc3665650
5744 Date:   Wed Dec 9 09:18:45 2015 +1100
5752 Date:   Mon Dec 7 02:20:46 2015 +0000
5756     basic unit tests for rsa-sha2-* signature types
5758     Upstream-Regress-ID: 7dc4b9db809d578ff104d591b4d86560c3598d3c
5762 Date:   Sat Dec 5 20:53:21 2015 +0000
5766     prefer rsa-sha2-512 over -256 for hostkeys, too; noticed
5769     Upstream-ID: 685f55f7ec566a8caca587750672723a0faf3ffe
5773 Date:   Fri Dec 4 21:51:06 2015 +0000
5777     Properly handle invalid %-format by calling fatal.
5781     Upstream-ID: 5692bce7d9f6eaa9c488cb93d3b55e758bef1eac
5785 Date:   Fri Dec 4 16:41:28 2015 +0000
5789     implement SHA2-{256,512} for RSASSA-PKCS1-v1_5 signatures
5790      (user and host auth) based on draft-rsa-dsa-sha2-256-03.txt and
5791      draft-ssh-ext-info-04.txt; with & ok djm@
5793     Upstream-ID: cf82ce532b2733e5c4b34bb7b7c94835632db309
5797 Date:   Fri Dec 4 00:24:55 2015 +0000
5801     clean up agent_fd handling; properly initialise it to -1
5806     Upstream-ID: ac9554323d5065745caf17b5e37cb0f0d4825707
5810 Date:   Thu Dec 3 17:00:18 2015 +0000
5814     pledges ssh client:   - mux client: which is used when
5818       - client loop: several levels of pledging depending of your used options
5822     Upstream-ID: 21676155a700e51f2ce911e33538e92a2cd1d94b
5826 Date:   Wed Dec 2 08:30:50 2015 +0000
5830     Add "cpath" to the ssh-agent pledge so the cleanup
5835     Upstream-ID: 9e632991d48241d56db645602d381253a3d8c29d
5839 Date:   Wed Dec 2 08:00:58 2015 +0000
5843     ssh-agent pledge needs proc for askpass; spotted by todd@
5845     Upstream-ID: 349aa261b29cc0e7de47ef56167769c432630b2a
5849 Date:   Tue Dec 1 23:29:24 2015 +0000
5853     basic pledge() for ssh-agent, more refinement needed
5855     Upstream-ID: 5b5b03c88162fce549e45e1b6dd833f20bbb5e13
5859 Date:   Mon Nov 30 10:53:25 2015 +1100
5869 Date:   Mon Nov 30 10:37:03 2015 +1100
5877 Date:   Mon Nov 30 09:45:29 2015 +1100
5883 Date:   Sun Nov 29 22:18:37 2015 +0000
5889     Upstream-ID: 3e00f6ccfe2b9a7a2d1dbba5409586180801488f
5893 Date:   Sat Nov 28 06:50:52 2015 +0000
5897     do not leak temp file if there is no known_hosts file
5900     Upstream-ID: c820497fd5574844c782e79405c55860f170e426
5904 Date:   Mon Nov 30 07:23:53 2015 +1100
5912 Date:   Sat Nov 28 06:41:03 2015 +0000
5916     don't include port number in tcpip-forward replies for
5920     Upstream-ID: 77efad818addb61ec638b5a2362f1554e21a970a
5924 Date:   Fri Nov 27 00:49:31 2015 +0000
5929      except for the -p option (which sadly has insane semantics...) ok semarie
5932     Upstream-ID: 8854bbd58279abe00f6c33f8094bdc02c8c65059
5936 Date:   Fri Nov 20 23:04:01 2015 +0000
5944     Upstream-ID: 5fc477cf2f119b2d44aa9c683af16cb00bb3744b
5948 Date:   Fri Nov 20 01:45:29 2015 +0000
5952     add cast to make -Werror clean
5954     Upstream-ID: 288db4f8f810bd475be01320c198250a04ff064d
5958 Date:   Fri Nov 20 12:35:41 2015 +1100
5966 Date:   Thu Nov 19 08:23:27 2015 +0000
5974     Upstream-ID: 32b5134c608270583a90b93a07b3feb3cbd5f7d5
5978 Date:   Thu Nov 19 01:12:32 2015 +0000
5984     Upstream-ID: 31fe0ad7c4d08e87f1d69c79372f5e3c5cd79051
5988 Date:   Thu Nov 19 01:09:38 2015 +0000
5994     Upstream-ID: 39354cdd8a2b32b308fd03f98645f877f540f00d
5998 Date:   Thu Nov 19 01:08:55 2015 +0000
6005     Upstream-ID: f05f7c78fab20d02ff1d5ceeda533ef52e8fe523
6009 Date:   Wed Nov 18 08:37:28 2015 +0000
6013     fix "ssh-keygen -l" of private key, broken in support for
6016     Upstream-ID: 6b3132d2c62d03d0bad6f2bcd7e2d8b7dab5cd9d
6020 Date:   Mon Nov 16 23:47:52 2015 +0000
6027     Upstream-ID: 33837d767a0cf1db1489b96055f9e330bc0bab6d
6031 Date:   Mon Nov 16 22:53:07 2015 +0000
6035     Allow fingerprinting from standard input "ssh-keygen -lf
6036      -"
6043     Upstream-ID: 903f8b4502929d6ccf53509e4e07eae084574b77
6047 Date:   Mon Nov 16 22:51:05 2015 +0000
6055     Upstream-ID: c8a6d0d56c42f3faab38460dc917ca0d1705d383
6059 Date:   Mon Nov 16 22:50:01 2015 +0000
6066     Upstream-ID: f371e78e8f4fab366cf69a42bdecedaed5d1b089
6070 Date:   Mon Nov 16 06:13:04 2015 +0000
6080     Upstream-ID: 013534c308187284756c3141f11d2c0f33c47213
6084 Date:   Mon Nov 16 00:30:02 2015 +0000
6089      includes all current and future key restrictions (no-*-forwarding, etc). Also
6090      add permissive versions of the existing restrictions, e.g. "no-pty" -> "pty".
6092      maximally-restricted, regardless of any permissions we might implement in the
6097     restrict,pty,command="nethack" ssh-ed25519 AAAAC3NzaC1lZDI1...
6101     Upstream-ID: 04ceb9d448e46e67e13887a7ae5ea45b4f1719d0
6105 Date:   Sun Nov 15 23:58:04 2015 +0000
6109     correct section number for ssh-agent;
6111     Upstream-ID: 44be72fd8bcc167635c49b357b1beea8d5674bd6
6115 Date:   Sun Nov 15 23:54:15 2015 +0000
6119     do not confuse mandoc by presenting "Dd";
6121     Upstream-ID: 1470fce171c47b60bbc7ecd0fc717a442c2cfe65
6125 Date:   Sun Nov 15 22:26:49 2015 +0000
6131      private key that is used during authentication will be added to ssh-agent if
6138     Upstream-ID: a680db2248e8064ec55f8be72d539458c987d5f4
6142 Date:   Fri Nov 13 04:39:35 2015 +0000
6149     Upstream-ID: 2b3abdff344d53c8d505f45c83a7b12e84935786
6153 Date:   Fri Nov 13 04:38:06 2015 +0000
6161     Upstream-ID: 7ef478d6592bc7db5c7376fc33b4443e63dccfa5
6165 Date:   Fri Nov 13 04:34:15 2015 +0000
6170      reading from standard input (using "-f -") for "ssh-keygen -L"; ok dtucker@
6172     Upstream-ID: ecbadeeef3926e5be6281689b7250a32a80e88db
6176 Date:   Fri Nov 13 02:57:46 2015 +0000
6183     Upstream-ID: e4d03f39d254db4c0cc54101921bb89fbda19879
6187 Date:   Wed Nov 11 04:56:39 2015 +0000
6194     Upstream-ID: 9a1889e19647615ededbbabab89064843ba92d3e
6198 Date:   Wed Nov 11 01:48:01 2015 +0000
6202     remove prototypes for long-gone s/key support; ok
6205     Upstream-ID: db5bed3c57118af986490ab23d399df807359a79
6209 Date:   Sat Nov 14 18:44:49 2015 +1100
6218 Date:   Tue Nov 10 11:14:47 2015 +1100
6226 Date:   Sun Nov 8 23:24:03 2015 +0000
6230     -c before -H, in SYNOPSIS and usage();
6232     Upstream-ID: 25e8c58a69e1f37fcd54ac2cd1699370acb5e404
6236 Date:   Sun Nov 8 22:30:20 2015 +0000
6240     Add "ssh-keyscan -c ..." flag to allow fetching
6243     Upstream-ID: 0947e2177dba92339eced9e49d3c5bf7dda69f82
6247 Date:   Sun Nov 8 22:08:38 2015 +0000
6253     Upstream-ID: 39ba08548acde4c54f2d4520c202c2a863a3c730
6257 Date:   Sun Nov 8 21:59:11 2015 +0000
6264     Upstream-ID: a3e3a85434ebfa0690d4879091959591f30efc62
6268 Date:   Fri Nov 6 00:31:41 2015 +0000
6277     Upstream-ID: 8b46bc94cf1ca7c8c1a75b1c958b2bb38d7579c8
6281 Date:   Thu Nov 5 09:48:05 2015 +0000
6285     "commandline" -> "command line", since there are so few
6291     Upstream-ID: 78459d59bff74223f8139d9001ccd56fc4310659
6295 Date:   Thu Oct 29 20:57:34 2015 +1100
6305 Date:   Thu Oct 29 08:05:17 2015 +0000
6312     Upstream-Regress-ID: 246c37ed64a2e5704d4c158ccdca1ff700e10647
6316 Date:   Mon Oct 26 02:50:58 2015 +0000
6320     Fix typo certopt->certopts in shell variable.  This would
6324     Upstream-Regress-ID: 6ea03bcd39443a83c89e2c5606392ceb9585836a
6328 Date:   Thu Oct 29 08:05:01 2015 +0000
6335     Upstream-ID: 853662c4036730b966aab77684390c47b9738c69
6339 Date:   Tue Oct 27 08:54:52 2015 +0000
6344      for -portable; ok dtucker@
6346     Upstream-ID: 5902bf0ea0371f39f1300698dc3b8e4105fc0fc5
6350 Date:   Tue Oct 27 01:44:45 2015 +0000
6357     Upstream-ID: dfc48b417c320b97c36ff351d303c142f2186288
6361 Date:   Tue Oct 27 00:49:53 2015 +0000
6365     avoid de-const warning & shrink; ok dtucker@
6367     Upstream-ID: 69a85ef94832378952a22c172009cbf52aaa11db
6371 Date:   Sun Oct 25 23:42:00 2015 +0000
6375     Expand tildes in filenames passed to -i before checking
6376      whether or not the identity file exists.  This means that if the shell
6380     Upstream-ID: db1757178a14ac519e9a3e1a2dbd21113cb3bfc6
6384 Date:   Sun Oct 25 23:14:03 2015 +0000
6388     Do not prepend "exec" to the shell command run by "Match
6393     Upstream-ID: a1ead25ae336bfa15fb58d8c6b5589f85b4c33a3
6397 Date:   Thu Oct 29 10:48:23 2015 +1100
6408 Date:   Fri Oct 23 02:22:01 2015 +0000
6414     Upstream-Regress-ID: 0004f0ea93428969fe75bcfff0d521c553977794
6418 Date:   Sat Oct 24 22:56:19 2015 +0000
6425     Upstream-ID: 5321dabfaeceba343da3c8a8b5754c6f4a0a307b
6429 Date:   Sat Oct 24 22:52:22 2015 +0000
6433     skip "Could not chdir to home directory" message when
6438     Upstream-ID: 86783c1953da426dff5b03b03ce46e699d9e5431
6442 Date:   Sat Oct 24 08:34:09 2015 +0000
6447      tun-forwarding. Adapted from portable (using separate devices for this is the
6450     Upstream-ID: 90facf4c59ce73d6741db1bc926e578ef465cd39
6454 Date:   Wed Oct 21 11:33:03 2015 +0000
6460     Upstream-ID: dd2f402b0a0029b755df029fc7f0679e1365ce35
6464 Date:   Tue Oct 20 23:24:25 2015 +0000
6472     Upstream-ID: 21616cfea27eda65a06e772cc887530b9a1a27f8
6476 Date:   Tue Oct 20 03:36:35 2015 +0000
6480     Replace a function-local allocation with stack memory.
6484     Upstream-ID: c09fbbab637053a2ab9f33ca142b4e20a4c5a17e
6488 Date:   Thu Oct 22 09:35:24 2015 +1100
6490     turn off PrintLastLog when --disable-lastlog
6496 Date:   Fri Oct 16 22:32:22 2015 +0000
6501      diffie-hellman-group-exchange to 2048 bits; ok markus@
6503     Upstream-ID: 06dce7a24c17b999a0f5fadfe95de1ed6a1a9b6a
6507 Date:   Fri Oct 16 18:40:49 2015 +0000
6512      hostname canonicalisation - treat them as already canonical and remove the
6515     Upstream-ID: f7619652e074ac3febe8363f19622aa4853b679a
6519 Date:   Fri Oct 16 17:07:24 2015 +0000
6523     0 -> NULL when comparing with a char*.
6527     Upstream-ID: a928e9c21c0a9020727d99738ff64027c1272300
6531 Date:   Thu Oct 15 23:51:40 2015 +0000
6538     Upstream-ID: 78cd55420a0eef68c4095bdfddd1af84afe5f95c
6542 Date:   Thu Oct 15 23:08:23 2015 +0000
6549     Upstream-ID: 0111245b1641d387977a9b38da15916820a5fd1f
6553 Date:   Fri Oct 16 10:53:14 2015 +1100
6561 Date:   Thu Oct 15 15:48:28 2015 -0700
6567 Date:   Wed Oct 14 09:22:15 2015 -0700
6573 Date:   Wed Oct 14 08:28:19 2015 +1100
6578 …date: 2015/10/13 20:55:37;  author: millert;  state: Exp;  lines: +2 -2;  commitid: X39sl5ay1czgFI…
6580     the truncation check immediately following it was not updated to
6581     match.  Not an issue in practice since the buffers are the same
6586 Date:   Wed Oct 14 08:27:51 2015 +1100
6591 …date: 2015/01/16 16:48:51;  author: deraadt;  state: Exp;  lines: +3 -3;  commitid: 0DYulI8hhujBHM…
6597 Date:   Wed Oct 14 08:27:08 2015 +1100
6602 … date: 2014/10/19 03:56:28;  author: doug;  state: Exp;  lines: +9 -9;  commitid: U6QxmtbXrGoc02S5;
6607 Date:   Wed Oct 14 08:26:24 2015 +1100
6612 …date: 2014/10/18 20:43:52;  author: doug;  state: Exp;  lines: +10 -10;  commitid: I74hI1tVZtsspKE…
6622 Date:   Wed Oct 14 08:25:55 2015 +1100
6627     date: 2013/04/05 12:59:54;  author: kurt;  state: Exp;  lines: +3 -1;
6628     - Add comments regarding copies of these files also in libexec/ld.so
6633 Date:   Wed Oct 14 08:25:32 2015 +1100
6638     date: 2012/09/13 15:39:05;  author: deraadt;  state: Exp;  lines: +2 -2;
6645 Date:   Wed Oct 14 08:25:09 2015 +1100
6650     date: 2011/07/24 21:03:00;  author: miod;  state: Exp;  lines: +35 -13;
6652     is NULL, and third-party software is starting to rely upon this.
6653     Adapted from FreeBSD via Jona Joachim (jaj ; hcl-club , .lu), with minor
6658 Date:   Tue Oct 13 16:15:21 2015 +0000
6665     Upstream-ID: ba4f52f54268a421a2a5f98bb375403f4cb044b8
6669 Date:   Tue Oct 13 00:21:27 2015 +0000
6676     Upstream-ID: c260d9e5ec73628d9ff4b067fbb060eff5a7d298
6680 Date:   Fri Oct 9 01:37:08 2015 +0000
6686     Upstream-ID: 17e654fc27ceaf523c60f4ffd9ec7ae4e7efc7f2
6690 Date:   Thu Oct 8 04:30:48 2015 +1100
6698 Date:   Wed Oct 7 15:59:12 2015 +0000
6702     include PubkeyAcceptedKeyTypes in ssh -G config dump
6704     Upstream-ID: 6c097ce6ffebf6fe393fb7988b5d152a5d6b36bb
6708 Date:   Wed Oct 7 14:45:30 2015 +0000
6716     Upstream-ID: bff136c38bcae89df82e044d2f42de21e1ad914f
6720 Date:   Wed Oct 7 00:54:06 2015 +0000
6725      what we need; makes it possible to use tun/tap networking as non- root user
6726      if device permissions and interface flags are pre-established; based on patch
6729     Upstream-ID: 89099ac4634cd477b066865acf54cb230780fd21
6733 Date:   Mon Oct 5 18:33:05 2015 -0700
6739 Date:   Tue Oct 6 01:20:59 2015 +0000
6746     Upstream-Regress-ID: 5c0d818da511e33e0abf6a92a31bd7163b7ad988
6750 Date:   Thu Sep 24 07:15:39 2015 +0000
6754     fix command-line option to match what was actually
6757     Upstream-Regress-ID: 3e8c24a2044e8afd37e7ce17b69002ca817ac699
6761 Date:   Thu Sep 24 06:16:53 2015 +0000
6768     Upstream-Regress-ID: e7a6e980cbe0f8081ba2e83de40d06c17be8bd25
6772 Date:   Mon Oct 5 17:11:21 2015 +0000
6776     some more bzero->explicit_bzero, from Michael McConville
6778     Upstream-ID: 17f19545685c33327db2efdc357c1c9225ff00d0
6782 Date:   Fri Oct 2 15:52:55 2015 +0000
6788     Upstream-ID: 72150f2d54b94de14ebef1ea054ef974281bf834
6792 Date:   Fri Oct 2 01:39:52 2015 +0000
6798     Upstream-ID: 4ca24e47895e72f5daaa02f3e3d3e5ca2d820fa3
6802 Date:   Fri Oct 2 01:39:26 2015 +0000
6806     re-order system calls in order of risk, ok i'll be
6809     Upstream-ID: 42a1e6d251fd8be13c8262bee026059ae6328813
6813 Date:   Fri Sep 25 18:19:54 2015 +0000
6819     Upstream-ID: 0e5a7852c28c05fc193419cc7e50e64c1c535af0
6823 Date:   Thu Sep 24 06:15:11 2015 +0000
6830     Upstream-ID: 58648ec53c510b41c1f46d8fe293aadc87229ab8
6834 Date:   Tue Sep 22 08:33:23 2015 +0000
6840     Upstream-ID: 424402c0d8863a11b51749bacd7f8d932083b709
6844 Date:   Mon Sep 21 04:31:00 2015 +0000
6851     Upstream-ID: f7afd41810f8540f524284f1be6b970859f94fe3
6855 Date:   Fri Sep 11 04:55:01 2015 +0000
6862     Upstream-Regress-ID: be2b925df89360dff36f972951fa0fa793769038
6866 Date:   Fri Sep 11 03:44:21 2015 +0000
6873     Upstream-Regress-ID: 188cb7d9031cdbac3a0fa58b428b8fa2b2482bba
6877 Date:   Sun Sep 13 14:39:16 2015 +0000
6881     - Fix error message: passphrase needs to be at least 5
6882      characters, not 4. - Remove unused function argument. - Remove two
6887     Upstream-ID: 13010c05bfa8b523da1c0dc19e81dd180662bc30
6891 Date:   Sun Sep 13 13:48:19 2015 +0000
6900     Upstream-ID: dc737c620a5a8d282cc4f66e3b9b624e9abefbec
6904 Date:   Fri Sep 11 08:50:04 2015 +0000
6913     Upstream-ID: 2e3337db046c3fe70c7369ee31515ac73ec00f50
6917 Date:   Fri Sep 11 06:55:46 2015 +0000
6921     sync -Q in usage() to SYNOPSIS; since it's drastically
6925     Upstream-ID: 86e2c65c3989a0777a6258a77e589b9f6f354abd
6929 Date:   Fri Sep 11 06:51:39 2015 +0000
6935     Upstream-ID: f29b3cfcfd9aa31fa140c393e7bd48c1c74139d6
6939 Date:   Fri Sep 11 05:27:02 2015 +0000
6945     Upstream-ID: 9e85aefaecfb6aaf34c7cfd0700cd21783a35675
6949 Date:   Fri Sep 11 03:47:28 2015 +0000
6957     Upstream-ID: 2ba8d303e555a84e2f2165ab4b324b41e80ab925
6961 Date:   Fri Sep 11 03:42:32 2015 +0000
6965     mention -Q key-plain and -Q key-cert; bz#2455 pointed out
6968     Upstream-ID: c8f1f8169332e4fa73ac96b0043e3b84e01d4896
6972 Date:   Mon Sep 14 16:24:21 2015 +1000
6974     Use ssh-keygen -A when generating host keys.
6976     Use ssh-keygen -A instead of per-keytype invocations when generating host
6977     keys.  Add tests when doing host-key-force since we can't use ssh-keygen -A
6982 Date:   Fri Sep 11 13:29:22 2015 +1000
6984     Correct default value for --with-ssh1.
6986     bz#2457, from konto-mindrot.org at walimnieto.com.
6990 Date:   Fri Sep 11 03:13:36 2015 +0000
6997     Upstream-ID: 78ab87f069080f0cc3bc353bb04eddd9e8ad3704
7001 Date:   Wed Sep 9 00:52:44 2015 +0000
7009     Upstream-ID: b6e794b0c7fc4f9f329509263c8668d35f83ea55
7013 Date:   Fri Sep 4 08:21:47 2015 +0000
7020     Upstream-ID: 5b84d0401e27fe1614c10997010cc55933adb48e
7024 Date:   Fri Sep 11 13:11:02 2015 +1000
7032 Date:   Thu Sep 10 10:57:41 2015 +1000
7038 Date:   Fri Sep 4 06:40:45 2015 +0000
7042     full stop belongs outside the brackets, not inside;
7044     Upstream-ID: 99d098287767799ac33d2442a05b5053fa5a551a
7048 Date:   Fri Sep 4 04:56:09 2015 +0000
7055     Upstream-ID: 52a1a3e0748db66518e7598352c427145692a6a0
7059 Date:   Fri Sep 4 04:55:24 2015 +0000
7065     Upstream-ID: 92fb2798617ad9561370897f4ab60adef2ff4c0e
7069 Date:   Fri Sep 4 04:47:50 2015 +0000
7076     Upstream-ID: a126209b5a6d9cb3117ac7ab5bc63d284538bfc2
7080 Date:   Fri Sep 4 04:44:08 2015 +0000
7087     Upstream-ID: 26b368fa2cff481f47f37e01b8da1ae5b57b1adc
7091 Date:   Fri Sep 4 03:57:38 2015 +0000
7095     remove extra newline in nethack-mode hostkey; from
7098     Upstream-ID: 4f56368b1cc47baeea0531912186f66007fd5b92
7102 Date:   Fri Sep 4 04:23:10 2015 +0000
7108     Upstream-Regress-ID: a4e64e8931e40d23874b047074444eff919cdfe6
7112 Date:   Wed Sep 2 07:51:12 2015 +0000
7121     Upstream-ID: 5fc35c9fc0319cc6fca243632662d2f06b5fd840
7125 Date:   Thu Sep 3 09:11:22 2015 +1000
7131 Date:   Fri Aug 21 23:57:48 2015 +0000
7140     Upstream-ID: 8db921b3f92a4565271b1c1fbce6e7f508e1a2cb
7144 Date:   Fri Aug 21 23:53:08 2015 +0000
7148     Fix printing (ssh -G ...) of HostKeyAlgorithms=+...
7151     Upstream-ID: 19ad20c41bd5971e006289b6f9af829dd46c1293
7155 Date:   Fri Aug 21 23:52:30 2015 +0000
7163     Upstream-ID: 70ca1deea39d758ba36d36428ae832e28566f78d
7167 Date:   Fri Aug 21 23:29:31 2015 +0000
7174     Upstream-ID: 899b021be43b913fad3eca1aef44efe710c53e29
7178 Date:   Fri Aug 21 15:45:02 2015 +1000
7184 Date:   Fri Aug 21 14:49:03 2015 +1000
7186     we don't use Github for issues/pull-requests
7190 Date:   Fri Aug 21 14:43:55 2015 +1000
7196 Date:   Fri Aug 21 13:47:10 2015 +1000
7202 Date:   Fri Aug 21 03:45:26 2015 +0000
7206     openssh-7.1
7208     Upstream-ID: ff7b1ef4b06caddfb45e08ba998128c88be3d73f
7212 Date:   Fri Aug 21 03:42:19 2015 +0000
7219     Upstream-ID: 260dd6a904c1bb7e43267e394b1c9cf70bdd5ea5
7223 Date:   Thu Aug 20 22:32:42 2015 +0000
7227     Do not cast result of malloc/calloc/realloc* if stdlib.h
7230     Upstream-ID: 5e50ded78cadf3841556649a16cc4b1cb6c58667
7234 Date:   Thu Aug 20 19:20:06 2015 +0000
7241     Upstream-ID: 9e037ea3b15577b238604c5533e082a3947f13cb
7245 Date:   Wed Aug 19 23:21:42 2015 +0000
7252     Upstream-ID: 24001d1ac115fa3260fbdc329a4b9aeb283c5389
7256 Date:   Wed Aug 19 23:19:01 2015 +0000
7260     fix double-free() in error path of DSA key generation
7263     Upstream-ID: 4735d8f888b10599a935fa1b374787089116713c
7267 Date:   Wed Aug 19 23:18:26 2015 +0000
7274     Upstream-ID: 519552b050618501a06b7b023de5cb104e2c5663
7278 Date:   Wed Aug 19 23:17:51 2015 +0000
7285     Upstream-ID: 14a0c4e7d891f5a8dabc4b89d4f6b7c0d5a20109
7289 Date:   Fri Aug 14 15:32:41 2015 +0000
7298     Upstream-ID: 35174a19b5237ea36aa3798f042bf5933b772c67
7302 Date:   Thu Aug 6 14:53:21 2015 +0000
7306     add prohibit-password as a synonymn for without-password,
7307      since the without-password is causing too many questions.  Harden it to ban
7311     Upstream-ID: d53317d7b28942153e6236d3fd6e12ceb482db7a
7315 Date:   Tue Aug 11 13:53:41 2015 +1000
7321 Date:   Tue Aug 11 13:53:09 2015 +1000
7327 Date:   Tue Aug 11 13:34:12 2015 +1000
7331     Avoids use-after-free in monitor when privsep child is compromised.
7336 Date:   Tue Aug 11 13:33:24 2015 +1000
7344 Date:   Mon Jul 27 12:14:25 2015 +1000
7350 Date:   Mon Aug 10 11:13:44 2015 +1000
7352     let principals-command.sh work for noexec /var/run
7356 Date:   Thu Aug 6 11:43:42 2015 +1000
7358     work around echo -n / sed behaviour in tests
7362 Date:   Wed Aug 5 05:27:33 2015 +0000
7368     Upstream-Regress-ID: 5a72c83431b96224d583c573ca281cd3a3ebfdae
7372 Date:   Tue Aug 4 05:23:06 2015 +0000
7379     Upstream-ID: d0bd60dde9e8c3cd7030007680371894c1499822
7383 Date:   Sun Aug 2 09:56:42 2015 +0000
7389     Upstream-ID: c63afdef537f57f28ae84145c5a8e29e9250221f
7393 Date:   Fri Jul 31 15:38:09 2015 +0000
7401     Upstream-ID: 5cf3e26ed702888de84e2dc9d0054ccf4d9125b4
7405 Date:   Thu Jul 30 23:09:15 2015 +0000
7412     Upstream-ID: 40ff076d2878b916fbfd8e4f45dbe5bec019e550
7416 Date:   Thu Jul 30 19:23:02 2015 +0000
7420     change default: PermitRootLogin without-password matching
7423     Upstream-ID: 0e2a6c4441daf5498b47a61767382bead5eb8ea6
7427 Date:   Thu Jul 30 12:31:39 2015 +1000
7429     downgrade OOM adjustment logging: verbose -> debug
7433 Date:   Thu Jul 30 00:01:34 2015 +0000
7443     Upstream-ID: 0f901137298fc17095d5756ff1561a7028e8882a
7447 Date:   Wed Jul 29 08:34:54 2015 +0000
7454     Upstream-ID: 22c0dc6bc61930513065d92e11f0753adc4c6e6e
7458 Date:   Wed Jul 29 04:43:06 2015 +0000
7465     Upstream-ID: bbb8caabf5c01790bb845f5ce135565248d7c796
7469 Date:   Tue Jul 28 23:20:42 2015 +0000
7476     Upstream-ID: c9eadde28ecec056c73d09ee10ba4570dfba7e84
7480 Date:   Mon Jul 27 16:29:23 2015 +0000
7489     Upstream-ID: 523922e4d1ba7a091e3824e77a8a3c818ee97413
7493 Date:   Mon Jul 20 18:44:12 2015 +0000
7497     Move .Pp before .Bl, not after to quiet mandoc -Tlint.
7500     Upstream-ID: 59fadbf8407cec4e6931e50c53cfa0214a848e23
7504 Date:   Mon Jul 20 18:42:35 2015 +0000
7510     Upstream-ID: 7a321a170181a54f6450deabaccb6ef60cf3f0b7
7514 Date:   Mon Jul 20 15:39:52 2015 +0000
7521     Upstream-ID: 85e28874726897e3f26ae50dfa2e8d2de683805d
7525 Date:   Mon Jul 20 11:19:51 2015 +1000
7527     make realpath.c compile -Wsign-compare clean
7531 Date:   Mon Jul 20 00:30:01 2015 +0000
7539     Upstream-ID: 0812705d5f2dfa59aab01f2764ee800b1741c4e1
7543 Date:   Sat Jul 18 08:02:17 2015 +0000
7550     Upstream-ID: 2f7c94744eb0342f8ee8bf97b2351d4e00116485
7554 Date:   Sat Jul 18 08:00:21 2015 +0000
7561     Upstream-ID: 744c1e7796e237ad32992d0d02148e8a18f27d29
7565 Date:   Sat Jul 18 07:57:14 2015 +0000
7569     only query each keyboard-interactive device once per
7572     Upstream-ID: d73fafba6e86030436ff673656ec1f33d9ffeda1
7576 Date:   Fri Jul 17 03:34:27 2015 +0000
7580     remove -u flag to diff (only used for error output) to make
7581      things easier for -portable
7583     Upstream-Regress-ID: a5d6777d2909540d87afec3039d9bb2414ade548
7587 Date:   Fri Jul 17 03:09:19 2015 +0000
7591     direct-streamlocal@openssh.com Unix domain foward
7592      messages do not contain a "reserved for future use" field and in fact,
7596     Upstream-ID: 3d51a19e64f72f764682f1b08f35a8aa810a43ac
7600 Date:   Fri Jul 17 03:04:27 2015 +0000
7607     Upstream-ID: 943080fe3864715c423bdeb7c920bb30c4eee861
7611 Date:   Fri Jul 17 12:52:34 2015 +1000
7615     On some platforms the native realpath doesn't work with non-existent
7620     In addition, when compiling with -DFORTIFY_SOURCE, glibc redefines
7628 Date:   Fri Jul 17 02:47:45 2015 +0000
7635     Upstream-ID: 6004d720345b8e481c405e8ad05ce2271726e451
7639 Date:   Wed Jul 15 08:00:11 2015 +0000
7643     fix NULL-deref when SSH1 reenabled
7645     Upstream-ID: f22fd805288c92b3e9646782d15b48894b2d5295
7649 Date:   Wed Jul 15 07:19:50 2015 +0000
7656     Upstream-Regress-ID: 7ccf437305dd63ff0b48dd50c5fd0f4d4230c10a
7660 Date:   Fri Jul 10 06:23:25 2015 +0000
7667     Upstream-Regress-ID: 0ff2a3ff5ac1ce5f92321d27aa07b98656efcc5c
7671 Date:   Tue Jul 7 14:54:16 2015 +0000
7677     Upstream-Regress-ID: 3495ecb082b9a7c048a2d7c5c845d3bf181d25a4
7681 Date:   Tue Jul 7 14:53:30 2015 +0000
7687     Upstream-Regress-ID: a4b30afd174ce82b96df14eb49fb0b81398ffd0e
7691 Date:   Fri Jul 3 04:39:23 2015 +0000
7698     Upstream-Regress-ID: c57321e69b3cd4a3b3396dfcc43f0803d047da12
7702 Date:   Wed Jul 1 23:11:18 2015 +0000
7708     Upstream-Regress-ID: f8812b16668ba78e6a698646b2a652b90b653397
7712 Date:   Mon Jun 15 06:38:50 2015 +0000
7718     Upstream-Regress-ID: 6c4f763a2f0cc6893bf33983919e9030ae638333
7722 Date:   Mon Jul 13 04:57:14 2015 +0000
7726     Add "PuTTY_Local:" to the clients to which we do not
7727      offer DH-GEX. This was the string that was used for development versions
7728      prior to September 2014 and they don't do RFC4419 DH-GEX, but unfortunately
7732     Upstream-ID: be34d41e18b966832fe09ca243d275b81882e1d5
7736 Date:   Fri Jul 10 06:21:53 2015 +0000
7744     Upstream-ID: 8450a9e6d83f80c9bfed864ff061dfc9323cec21
7748 Date:   Thu Jul 9 09:49:46 2015 +0000
7752     re-enable ed25519-certs if compiled w/o openssl; ok djm
7754     Upstream-ID: e10c90808b001fd2c7a93778418e9b318f5c4c49
7758 Date:   Wed Jul 8 20:24:02 2015 +0000
7764     Upstream-ID: fb13c9f7c0bba2545f3eb0a0e69cb0030819f52b
7768 Date:   Wed Jul 8 19:09:25 2015 +0000
7774     Upstream-ID: 50e6a18ee92221d23ad173a96d5b6c42207cf9a7
7778 Date:   Wed Jul 8 19:04:21 2015 +0000
7784     Upstream-ID: afb532355b7fa7135a60d944ca1e644d1d63cb58
7788 Date:   Wed Jul 8 19:01:15 2015 +0000
7794     Upstream-ID: 174fa7faa9b9643cba06164b5e498591356fbced
7798 Date:   Fri Jul 3 04:05:54 2015 +0000
7805     Upstream-ID: 9d8826cafe96aab4ae8e2f6fd22800874b7ffef1
7809 Date:   Fri Jul 3 03:56:25 2015 +0000
7816     Upstream-ID: feae52b209d7782ad742df04a4260e9fe41741db
7820 Date:   Fri Jul 3 03:49:45 2015 +0000
7827     Upstream-ID: 7ea3d31271366ba264f06e34a3539bf1ac30f0ba
7831 Date:   Fri Jul 3 03:47:00 2015 +0000
7835     turn off 1024 bit diffie-hellman-group1-sha1 key
7839     Upstream-ID: f59b88f449210ab7acf7d9d88f20f1daee97a4fa
7843 Date:   Fri Jul 3 03:43:18 2015 +0000
7850     Upstream-ID: b5b9bb5f9202d09e88f912989d74928601b6636f
7854 Date:   Wed Jul 1 23:10:47 2015 +0000
7858     Compile-time disable SSH v.1 again
7860     Upstream-ID: 1d4b513a3a06232f02650b73bad25100d1b800af
7864 Date:   Wed Jul 1 02:39:06 2015 +0000
7870     Upstream-ID: 2bd23976305d0512e9f84d054e1fc23cd70b89f2
7874 Date:   Wed Jul 1 02:32:17 2015 +0000
7878     twiddle; (this commit marks the openssh-6.9 release)
7880     Upstream-ID: 78500582819f61dd8adee36ec5cc9b9ac9351234
7884 Date:   Wed Jul 1 02:26:31 2015 +0000
7891     Upstream-ID: bf0fddadc1b46a0334e26c080038313b4b6dea21
7895 Date:   Wed Jul 1 01:56:13 2015 +0000
7901     Upstream-ID: 7bdedd5cead99c57ed5571f3b6b7840922d5f728
7905 Date:   Wed Jul 1 01:55:13 2015 +0000
7909     openssh-6.9
7911     Upstream-ID: 6cfe8e1904812531080e6ab6e752d7001b5b2d45
7915 Date:   Wed Jul 1 01:55:00 2015 +0000
7922     Upstream-ID: cad8513527066e65dd7a1c16363d6903e8cefa24
7926 Date:   Wed Jul 1 11:49:12 2015 +1000
7932 Date:   Wed Jul 1 10:49:37 2015 +1000
7934     s/--with-ssh1/--without-ssh1/
7938 Date:   Tue Jun 30 05:25:07 2015 +0000
7945     Upstream-ID: ead397a9aceb3bf74ebfa5fcaf259d72e569f351
7949 Date:   Tue Jun 30 05:23:25 2015 +0000
7957     Upstream-ID: be54059d11bf64e0d85061f7257f53067842e2ab
7961 Date:   Tue Jun 30 16:05:40 2015 +1000
7963     skip IPv6-related portions on hosts without IPv6
7969 Date:   Mon Jun 29 22:35:12 2015 +0000
7977     Upstream-ID: d0da1117c16d4c223954995d35b0f47c8f684cd8
7981 Date:   Fri Jun 26 05:13:20 2015 +0000
7985     Fix \-escaping bug that caused forward path parsing to skip
7990     Upstream-ID: 7b879dc446335677cbe4cb549495636a0535f3bd
7994 Date:   Thu Jun 25 09:51:39 2015 +1000
8002 Date:   Wed Jun 24 23:47:23 2015 +0000
8008     Upstream-ID: 5f7347f40f0ca6abdaca2edb3bd62f4776518933
8012 Date:   Wed Jun 24 01:49:19 2015 +0000
8022     Upstream-ID: 895b5ac560a10befc6b82afa778641315725fd01
8026 Date:   Wed Jun 24 01:49:19 2015 +0000
8036     Upstream-ID: 895b5ac560a10befc6b82afa778641315725fd01
8040 Date:   Mon Jun 22 23:42:16 2015 +0000
8048     Upstream-ID: eb74b8e506714d0f649bd5c300f762a527af04a3
8052 Date:   Mon Jun 22 12:29:57 2015 +0000
8060     Upstream-ID: 2fff85e11d7a9a387ef7fddf41fbfaf566708ab1
8064 Date:   Thu Jun 18 15:07:56 2015 +1000
8070 Date:   Mon Jun 15 18:44:22 2015 +0000
8075      AuthorizedPrincipalsFile is not (or is set to "none"), authentication will
8079      same logic to determine if pw->pw_name should be passed, as is used to
8084     Upstream-ID: 43b42302ec846b0ea68aceb40677245391b9409d
8088 Date:   Mon Jun 15 18:42:19 2015 +0000
8094      sshkey_cert * and dereferencing key->cert in the caller.
8100     Upstream-ID: 533f99b844b21b47342b32b62e198dfffcf8651c
8104 Date:   Wed Jun 17 14:36:54 2015 +1000
8106     trivial optimisation for seccomp-bpf
8114 Date:   Wed Jun 17 10:50:51 2015 +1000
8116     aarch64 support for seccomp-bpf sandbox
8123 Date:   Mon Jun 15 01:32:50 2015 +0000
8129     Upstream-ID: e61bb93dbe0349625807b0810bc213a6822121fa
8133 Date:   Tue Jun 9 22:41:13 2015 -0700
8139 Date:   Fri Jun 5 15:13:13 2015 +0000
8143     For "ssh -L 12345:/tmp/sock" don't fail with "No forward host
8144      name." (we have a path, not a host name).  Based on a diff from Jared
8147     Upstream-ID: 2846b0a8c7de037e33657f95afbd282837fc213f
8151 Date:   Fri Jun 5 03:44:14 2015 +0000
8157     Upstream-ID: 45e620d99f6bc301e5949d34a54027374991c88b
8161 Date:   Fri Jun 5 14:51:40 2015 +1000
8171 Date:   Wed Jun 3 21:43:13 2015 -0700
8177 Date:   Wed Jun 3 21:41:11 2015 -0700
8183 Date:   Thu Jun 4 14:10:55 2015 +1000
8189 Date:   Tue Jun 2 09:10:40 2015 +0000
8196     Upstream-ID: fd44b68440fd0dc29abf9f2d3f703d74a2396cb7
8200 Date:   Tue Jun 2 20:15:26 2015 +1000
8208 Date:   Fri May 29 18:27:21 2015 +1000
8214 Date:   Fri May 29 18:03:15 2015 +1000
8220 Date:   Fri May 29 17:08:28 2015 +1000
8222     re-enable SSH protocol 1 at compile time
8226 Date:   Fri May 29 03:05:13 2015 +0000
8232     Upstream-Regress-ID: bca88217b70bce2fe52b23b8e06bdeb82d98c715
8236 Date:   Thu May 28 07:37:31 2015 +0000
8240     wrap all moduli-related code in #ifdef WITH_OPENSSL.
8243     Upstream-ID: d80cfc8be3e6ec65b3fac9e87c4466533b31b7cf
8247 Date:   Thu May 28 05:41:29 2015 +0000
8255     Upstream-ID: a9e97567be49f25daf286721450968251ff78397
8259 Date:   Thu May 28 05:09:45 2015 +0000
8263     Fix typo (keywork->keyword)
8265     Upstream-ID: 8aacd0f4089c0a244cf43417f4f9045dfaeab534
8269 Date:   Thu May 28 04:50:53 2015 +0000
8275     Upstream-ID: cbcc606e0b748520c74a210d8f3cc9718d3148cf
8279 Date:   Thu May 28 04:40:13 2015 +0000
8283     make ssh-keygen default to ed25519 keys when compiled
8286     Upstream-ID: 85a471fa6d3fa57a7b8e882d22cfbfc1d84cdc71
8290 Date:   Wed May 27 23:51:10 2015 +0000
8295      diffie-hellman-group-exchange-sha1 over diffie-hellman-group14-sha1.  ok djm@
8297     Upstream-ID: 552c08d47347c3ee1a9a57d88441ab50abe17058
8301 Date:   Wed May 27 23:39:18 2015 +0000
8309     Upstream-ID: b635215746a25a829d117673d5e5a76d4baee7f4
8313 Date:   Thu May 28 10:03:40 2015 +1000
8321 Date:   Wed May 27 05:15:02 2015 +0000
8326      bz#2240, based on patch from Dirk-Willem van Gulik; feedback and ok dtucker@
8328     Upstream-ID: 504568992b55a8fc984375242b1bd505ced61b0d
8332 Date:   Tue May 26 23:23:40 2015 +0000
8336     Cap DH-GEX group size at 4kbits for Cisco implementations.
8340     Upstream-ID: 54b863a19713446b7431f9d06ad0532b4fcfef8d
8344 Date:   Sun May 24 23:39:16 2015 +0000
8351     Upstream-ID: 9b19b4e2e0b54d6fefa0dfac707c51cf4bae3081
8355 Date:   Sat May 23 14:28:37 2015 +0000
8361     Upstream-ID: bc1da0f205494944918533d8780fde65dff6c598
8365 Date:   Fri May 22 05:28:45 2015 +0000
8369     mention ssh-keygen -E for comparing legacy MD5
8372     Upstream-ID: 079a3669549041dbf10dbc072d9563f0dc3b2859
8376 Date:   Fri May 22 04:45:52 2015 +0000
8380     Reorder EscapeChar option parsing to avoid a single-byte
8381      out- of-bounds read. bz#2396 from Jaak Ristioja; ok dtucker@
8383     Upstream-ID: 1dc6b5b63d1c8d9a88619da0b27ade461d79b060
8387 Date:   Fri May 22 03:50:02 2015 +0000
8393      (kerberos/GSSAPI is not compiled by default on OpenBSD)
8395     Upstream-ID: 15ddf1c6f7fd9d98eea9962f480079ae3637285d
8399 Date:   Fri May 22 17:49:46 2015 +1000
8407 Date:   Fri May 22 12:47:24 2015 +1000
8413 Date:   Thu May 21 12:01:19 2015 +0000
8417     Support "ssh-keygen -lF hostname" to find search known_hosts
8418      and print key hashes. Already advertised by ssh-keygen(1), but not delivered
8421     Upstream-ID: 459e0e2bf39825e41b0811c336db2d56a1c23387
8425 Date:   Thu May 21 17:55:15 2015 +1000
8431 Date:   Thu May 21 06:44:25 2015 +0000
8437     Upstream-Regress-ID: c658fbf1ab6b6011dc83b73402322e396f1e1219
8441 Date:   Thu May 21 06:40:02 2015 +0000
8447     Upstream-Regress-ID: bbd65c13c6b3be9a442ec115800bff9625898f12
8451 Date:   Thu May 21 06:43:30 2015 +0000
8461     Upstream-ID: aa1bdac7b16fc6d2fa3524ef08f04c7258d247f6
8465 Date:   Thu May 21 06:38:35 2015 +0000
8474     Upstream-ID: b080387a14aa67dddd8ece67c00f268d626541f7
8478 Date:   Thu May 21 04:55:51 2015 +0000
8485     Upstream-ID: 54fc38f5832e9b91028900819bda46c3959a0c1a
8489 Date:   Mon May 18 15:06:05 2015 +0000
8494      enough. openssh-portable may want the #ifdef's but not base. discussed with
8497     Upstream-ID: 0506a4334de108e3fb6c66f8d6e0f9c112866926
8501 Date:   Fri May 15 05:44:21 2015 +0000
8506      text and do constant-time comparisons of it. Should prevent leaking any
8511     Upstream-ID: c599fcc325aa1cc65496b25220b622d22208c85f
8515 Date:   Tue May 5 19:10:58 2015 +1000
8519        - tedu@cvs.openbsd.org 2015/01/12 03:20:04
8526 Date:   Tue May 5 19:10:23 2015 +1000
8530        - deraadt@cvs.openbsd.org 2015/01/08 00:30:07
8536 Date:   Tue May 5 19:09:46 2015 +1000
8540        - djm@cvs.openbsd.org 2014/12/30 01:41:43
8546 Date:   Mon May 4 06:10:48 2015 +0000
8553     Prompted by hanno AT hboeck.de pointing an out-of-bound read
8561 Date:   Fri May 1 07:10:01 2015 +0000
8574 Date:   Fri May 1 07:08:08 2015 +0000
8584 Date:   Fri May 1 04:17:51 2015 +0000
8593 Date:   Fri May 1 04:03:20 2015 +0000
8603 Date:   Fri May 1 04:01:58 2015 +0000
8607     reduce stderr spam when using ssh -S /path/mux -O forward
8608      -R 0:... ok dtucker@
8612 Date:   Fri May 1 03:23:51 2015 +0000
8622 Date:   Fri May 1 03:20:54 2015 +0000
8627      option conditional on PermitUserEnv - always parse it, but only use the
8635 Date:   Mon May 4 06:10:48 2015 +0000
8642     Prompted by hanno AT hboeck.de pointing an out-of-bound read
8650 Date:   Thu Apr 23 05:01:19 2015 +0000
8655      parser.  Right now, all it does is run the output of sshd -T back through
8660 Date:   Wed Apr 22 01:38:36 2015 +0000
8668 Date:   Fri May 1 07:11:47 2015 +0000
8677 Date:   Fri May 8 07:29:00 2015 +0000
8683     Upstream-Regress-ID: 6b708a3e709d5b7fd37890f874bafdff1f597519
8687 Date:   Fri May 8 07:26:13 2015 +0000
8693     Upstream-Regress-ID: 9c48911643d5b05173b36a012041bed4080b8554
8697 Date:   Fri May 8 06:45:13 2015 +0000
8703     Upstream-ID: 64eaf872a3ba52ed41e494287e80d40aaba4b515
8707 Date:   Fri May 8 06:41:56 2015 +0000
8713     Upstream-ID: 57bcf67d666c6fc1ad798aee448fdc3f70f7ec2c
8717 Date:   Fri May 8 03:56:51 2015 +0000
8725 Date:   Mon May 4 01:47:53 2015 +0000
8729     Use diff w/out -u for better portability
8733 Date:   Fri May 8 03:25:07 2015 +0000
8738      ensure it's zeroed. Fixes post-auth crash with permitopen=none.  bz#2355, ok
8743 Date:   Fri May 8 03:17:49 2015 +0000
8747     don't choke on new-format private keys encrypted with an
8752 Date:   Wed May 6 05:45:17 2015 +0000
8756     Clarify pseudo-terminal request behaviour and use
8757      "pseudo-terminal" consistently.  bz#1716, ok jmc@ "I like it" deraadt@.
8761 Date:   Wed May 6 04:07:18 2015 +0000
8765     Blacklist DH-GEX for specific PuTTY versions known to
8766      send non-RFC4419 DH-GEX messages rather than all versions of PuTTY.
8767      According to Simon Tatham, 0.65 and newer versions will send RFC4419 DH-GEX
8772 Date:   Tue May 5 10:17:49 2015 +0000
8776     WinSCP doesn't implement RFC4419 DH-GEX so flag it so we
8781 Date:   Tue May 5 02:48:17 2015 +0000
8785     use the sizeof the struct not the sizeof a pointer to the
8794 Date:   Fri May 8 11:07:27 2015 +1000
8804 Date:   Thu Apr 30 09:18:11 2015 +1000
8806     xrealloc -> xreallocarray in portable code too.
8810 Date:   Wed Apr 29 03:48:56 2015 +0000
8819 Date:   Tue Apr 28 13:47:38 2015 +0000
8823     enviroment -> environment: apologies to darren for not
8828 Date:   Tue Apr 28 10:25:15 2015 +0000
8836 Date:   Tue Apr 28 10:17:58 2015 +0000
8840     Document that the TERM environment variable is not
8846 Date:   Mon Apr 27 21:42:48 2015 +0000
8855 Date:   Mon Apr 27 01:52:30 2015 +0000
8863 Date:   Mon Apr 27 00:37:53 2015 +0000
8872 Date:   Mon Apr 27 00:21:21 2015 +0000
8876     allow "sshd -f none" to skip reading the config file,
8877      much like "ssh -F none" does. ok dtucker
8881 Date:   Fri Apr 24 06:26:49 2015 +0000
8885     combine -Dd onto one line and update usage();
8889 Date:   Fri Apr 24 05:26:44 2015 +0000
8893     add ssh-agent -D to leave ssh-agent in foreground
8898 Date:   Fri Apr 24 01:36:24 2015 +0000
8902     2*len -> use xreallocarray() ok djm
8906 Date:   Fri Apr 24 01:36:00 2015 +0000
8915 Date:   Thu Apr 23 04:59:10 2015 +0000
8919     Two small fixes for sshd -T: ListenAddress'es are added
8926 Date:   Thu Apr 23 04:53:53 2015 +0000
8936 Date:   Wed Apr 22 01:24:01 2015 +0000
8940     unknown certificate extensions are non-fatal, so don't
8946 Date:   Tue Apr 21 07:01:00 2015 +0000
8957 Date:   Fri Apr 17 13:32:09 2015 +0000
8961     s/recommended/required/ that private keys be og-r this
8966 Date:   Fri Apr 17 13:25:52 2015 +0000
8975 Date:   Fri Apr 17 13:19:22 2015 +0000
8981      stderr and a few non-errors that were going to stderr instead of stdout
8986 Date:   Fri Apr 17 13:16:48 2015 +0000
8995 Date:   Fri Apr 17 04:32:31 2015 +0000
9004 Date:   Fri Apr 17 04:12:35 2015 +0000
9008     Add some missing options to sshd -T and fix the output
9014 Date:   Thu Apr 16 23:25:50 2015 +0000
9023 Date:   Wed Apr 15 23:23:25 2015 +0000
9032 Date:   Tue Apr 14 04:17:03 2015 +0000
9037      and Match it's not always obvious what it will be.  bz#2368, ok djm@
9041 Date:   Fri Apr 17 10:56:13 2015 +1000
9043     Format UsePAM setting when using sshd -T.
9049 Date:   Fri Apr 17 10:40:23 2015 +1000
9055 Date:   Fri Apr 17 09:39:58 2015 +1000
9057     Look for '${host}-ar' before 'ar'.
9059     This changes configure.ac to look for '${host}-ar' as set by
9061     Useful when cross-compiling when all your binutils are prefixed.
9068 Date:   Thu Apr 16 11:40:20 2015 +1000
9074 Date:   Wed Apr 15 15:59:49 2015 +1000
9080 Date:   Thu Apr 9 10:14:48 2015 +1000
9086 Date:   Mon Apr 13 02:04:08 2015 +0000
9090     deprecate ancient, pre-RFC4419 and undocumented
9096 Date:   Fri Apr 10 05:16:50 2015 +0000
9101      (hostkeys-00@openssh.com) to current versions of Tera Term as they can't
9107 Date:   Fri Apr 10 00:08:55 2015 +0000
9111     include port number if a non-default one has been
9116 Date:   Tue Apr 7 23:00:42 2015 +0000
9125 Date:   Sun Apr 5 15:43:43 2015 +0000
9129     Do not use int for sig_atomic_t; spotted by
9134 Date:   Tue Apr 7 10:48:04 2015 +1000
9136     Use do{}while(0) for no-op functions.
9142 Date:   Tue Apr 7 10:47:15 2015 +1000
9148 Date:   Tue Apr 7 09:10:00 2015 +1000
9156 Date:   Fri Apr 3 22:17:27 2015 +0000
9165 Date:   Tue Mar 31 22:59:01 2015 +0000
9175 Date:   Tue Mar 24 20:19:15 2015 +0000
9179     use ${SSH} for -Q instead of installed ssh
9183 Date:   Mon Mar 16 22:46:14 2015 +0000
9191 Date:   Tue Mar 31 22:57:06 2015 +0000
9204 Date:   Tue Mar 31 22:55:50 2015 +0000
9212 Date:   Tue Mar 31 22:55:24 2015 +0000
9221 Date:   Tue Mar 31 11:06:49 2015 +0000
9233 Date:   Mon Mar 30 18:28:37 2015 +0000
9237     ssh-askpass(1) is the default, overridden by SSH_ASKPASS;
9242 Date:   Mon Mar 30 00:00:29 2015 +0000
9252 Date:   Thu Mar 26 19:32:19 2015 +0000
9256     sigp and lenp are not optional in ssh_agent_sign(); ok
9261 Date:   Thu Mar 26 12:32:38 2015 +0000
9270 Date:   Thu Mar 26 07:00:04 2015 +0000
9274     ban all-zero curve25519 keys as recommended by latest
9279 Date:   Thu Mar 26 06:59:28 2015 +0000
9284      diffie-hellman-group1-sha1 key exchange to complete for chacha20-poly1305 was
9289 Date:   Wed Mar 25 19:29:58 2015 +0000
9293     ignore v1 errors on ssh-add -D; only try v2 keys on
9294      -l/-L (unless WITH_SSH1) ok djm@
9298 Date:   Wed Mar 25 19:21:48 2015 +0000
9306 Date:   Tue Mar 24 20:10:08 2015 +0000
9315 Date:   Tue Mar 24 20:09:11 2015 +0000
9324 Date:   Tue Mar 24 20:03:44 2015 +0000
9328     correct fmt-string for size_t as noted by Nicholas
9333 Date:   Tue Mar 24 09:17:21 2015 +0000
9337     promote chacha20-poly1305@openssh.com to be the default
9342 Date:   Tue Mar 24 01:29:19 2015 +0000
9346     Compile-time disable SSH protocol 1. You can turn it
9352 Date:   Tue Mar 24 01:11:12 2015 +0000
9356     fix double-negative error message "ssh1 is not
9361 Date:   Mon Mar 23 06:06:38 2015 +0000
9365     for ssh-keygen -A, don't try (and fail) to generate ssh
9371 Date:   Wed Mar 18 01:44:21 2015 +0000
9380 Date:   Mon Mar 16 11:09:52 2015 +0000
9385      use since we only need encrypt for AES-CTR)
9389 Date:   Wed Mar 11 00:48:39 2015 +0000