April 2026 Archives by date

• Messages sorted by: [ thread ] [ subject ] [ author ]
• More info on this list...

Starting: Wed Apr 1 10:18:08 AEDT 2026
Ending: Thu Apr 30 19:13:11 AEST 2026
Messages: 187

• [Bug 3940] New: [Patch] Add ScpProtocol ssh_config directive for legacy SCP fallback   bugzilla-daemon at mindrot.org
• [Bug 3941] New: MaxStartups: conversion from single int into new format crashes sshd   bugzilla-daemon at mindrot.org
• [Bug 3880] Tracking bug for openssh-10.3   bugzilla-daemon at mindrot.org
• [Bug 3941] MaxStartups: conversion from single int into new format crashes sshd   bugzilla-daemon at mindrot.org
• [Bug 3880] Tracking bug for openssh-10.3   bugzilla-daemon at mindrot.org
• [Bug 3876] Tracking bug for OpenSSH 10.2   bugzilla-daemon at mindrot.org
• [Bug 3808] Tracking bug for OpenSSH 10.1   bugzilla-daemon at mindrot.org
• [Bug 3733] "forced command options do not match" after key error   bugzilla-daemon at mindrot.org
• [Bug 3173] spurious message about pubkey being invalid format   bugzilla-daemon at mindrot.org
• [Bug 3713] Multiple compression option is not updated   bugzilla-daemon at mindrot.org
• [Bug 3751] ssh fails to parse ProxyCommand option with a string that ends in a backslash   bugzilla-daemon at mindrot.org
• [Bug 3208] ssh-keygen man page: sha1 fingerprint with "-E sha1" is supported   bugzilla-daemon at mindrot.org
• [Bug 3671] Improve PuTTY version detection   bugzilla-daemon at mindrot.org
• [Bug 3721] Man page has incorrect default value for PasswordAuthentication   bugzilla-daemon at mindrot.org
• [Bug 2303] ssh (and perhaps even sshd) should allow to specify the minimum DH group sizes for DH GEX   bugzilla-daemon at mindrot.org
• [Bug 3551] Which patches fixes the problem of adding smartcard keys to ssh-agent?   bugzilla-daemon at mindrot.org
• [Bug 3855] sshd-auth sandbox limitations   bugzilla-daemon at mindrot.org
• [Bug 3861] The build option --enable-dsa-keys no longer works.   bugzilla-daemon at mindrot.org
• [Bug 3663] KEX host signature length wrong since strict kex introduced   bugzilla-daemon at mindrot.org
• [Bug 3819] safe_path may pass overlapping source and destination pointers on some systems   bugzilla-daemon at mindrot.org
• [Bug 3693] Is SFTP local command execution implemented based on an RFC protocol?   bugzilla-daemon at mindrot.org
• [Bug 1338] Idletimeout for both client and server   bugzilla-daemon at mindrot.org
• [Bug 3417] Crash of sshd with exit code 6 SIGABRT   bugzilla-daemon at mindrot.org
• [Bug 3743] ControlPersist forces ForkAfterAuthentication even when not wanted   bugzilla-daemon at mindrot.org
• [Bug 3891] Urgent   bugzilla-daemon at mindrot.org
• [Bug 3645] -fzero-call-used-regs=used detection seems to fail on Linux ppc64el   bugzilla-daemon at mindrot.org
• [Bug 3647] Correct the catalogue number of PROTOCOL   bugzilla-daemon at mindrot.org
• [Bug 3732] An integer underflow may occur due to arithmetic operation (unsigned subtraction) between values '0' and '67108864', where the first value comes from the expression 'h4 + b' and the second value comes from the expression '(1 << 26)'   bugzilla-daemon at mindrot.org
• [Bug 3883] /etc/profile is always executed   bugzilla-daemon at mindrot.org
• [Bug 3172] Idle connections not closed automatically   bugzilla-daemon at mindrot.org
• [Bug 3524] Rekey interval timeout not working when no package is being transfered   bugzilla-daemon at mindrot.org
• [Bug 3680] Wrong destination in case of dropbear server   bugzilla-daemon at mindrot.org
• [Bug 3728] Erroneous Message printed to console - ! debug1: fd 0 clearing O_NONBLOCK   bugzilla-daemon at mindrot.org
• [Bug 3942] New: Tracking bug for openssh-10.3   bugzilla-daemon at mindrot.org
• [Bug 3385] prints CR from comment which leads to unreliable output   bugzilla-daemon at mindrot.org
• [Bug 3666] sshd crash   bugzilla-daemon at mindrot.org
• [Bug 3717] Stricter sshd absolute path requirement breaks xinetd   bugzilla-daemon at mindrot.org
• [Bug 3737] ssh forwarding tests fail on Linux   bugzilla-daemon at mindrot.org
• [Bug 3869] Loading "only" an ssh certificate in ssh-agent with ssh-add unnecessarily loads the private key and always exits with an error even when successful   bugzilla-daemon at mindrot.org
• [Bug 3877] Regression when trying to free CA keys in ssh-keygen   bugzilla-daemon at mindrot.org
• [Bug 1357] SOCKS proxy attempts fail to some servers due to DNS timeouts   bugzilla-daemon at mindrot.org
• [Bug 3875] SSH client behavior breaks non-interactive sudo/stdio handling used by Ansible (automation times out waiting for privilege escalation)   bugzilla-daemon at mindrot.org
• [Bug 3516] ssh-keygen when creating sk fido keys does not create sufficient data for attestation verification.   bugzilla-daemon at mindrot.org
• [Bug 3729] the new sshd does not work under the supervision of inetd   bugzilla-daemon at mindrot.org
• [Bug 3735] The ngroups variable may be set to a negative value when calling sysconf(_SC_NGROUPS_MAX)   bugzilla-daemon at mindrot.org
• [Bug 3925] scp may modify permissions of target directory   bugzilla-daemon at mindrot.org
• [Bug 3830] SSHD won't start   bugzilla-daemon at mindrot.org
• [Bug 1948] ssh -f doesn't terminate when muxing connections.   bugzilla-daemon at mindrot.org
• [Bug 2793] DH Group Exchange Incorrect Fallback   bugzilla-daemon at mindrot.org
• [Bug 2465] openssh portable does not check if arc4random_buf is declared in the system headers?   bugzilla-daemon at mindrot.org
• [Bug 2917] keepalive packets are sent twice each interval if connection is interrupted   bugzilla-daemon at mindrot.org
• [Bug 2957] servconf.c: parse_multistate: does not allow override?   bugzilla-daemon at mindrot.org
• [Bug 2975] CVE-2018-15919   bugzilla-daemon at mindrot.org
• [Bug 3017] ExitOnForwardFailure=yes doesn't work for local forwards (-L)   bugzilla-daemon at mindrot.org
• [Bug 3067] Fails to unlink ControlMaster socket early enough, confuses other clients   bugzilla-daemon at mindrot.org
• [Bug 2984] scp -3 authentication fails when providing key passphrases for two remote hosts   bugzilla-daemon at mindrot.org
• [Bug 3021] Openssh/sftp question related to timezone difference with "ls -l"   bugzilla-daemon at mindrot.org
• [Bug 3075] Causes terminal corruption by disabling XON/XOFF unconditionally   bugzilla-daemon at mindrot.org
• [Bug 3080] Document IdentityFile=none and clarify interaction of defaults with IdentitiesOnly   bugzilla-daemon at mindrot.org
• [Bug 3114] Remote command execution although -N specified with ControlMaster=yes, ControlPersist=yes and non-existent ControlPath   bugzilla-daemon at mindrot.org
• [Bug 3211] DDoS attack by using ssh-keyscan   bugzilla-daemon at mindrot.org
• [Bug 3231] Deadlock/hang while using tunnel-device with high rates   bugzilla-daemon at mindrot.org
• [Bug 3069] sftp issues with [ or ] in path name   bugzilla-daemon at mindrot.org
• [Bug 3348] Not possible to disable rsa-sha2-512 in sshd   bugzilla-daemon at mindrot.org
• [Bug 3435] mux process command lines contains many 0x0   bugzilla-daemon at mindrot.org
• [Bug 3247] SendEnv exclusion doesn't work as documented   bugzilla-daemon at mindrot.org
• [Bug 3381] RekeyLimit mechanism does not work if it is defined at the end of the file   bugzilla-daemon at mindrot.org
• [Bug 3333] Both Local Port forwarding and Remote port forwarding at openSSH working is not a right case, if SSH Client is on Remote port forwarding   bugzilla-daemon at mindrot.org
• [Bug 3366] SSH should skip sk-* keys that don't match the connected security key   bugzilla-daemon at mindrot.org
• [Bug 3379] Config parser only allows SetEnv once   bugzilla-daemon at mindrot.org
• [Bug 3445] ssh -D leaks file descriptors until new connections fail   bugzilla-daemon at mindrot.org
• [Bug 3527] ssh-copy-id broken for dropbear   bugzilla-daemon at mindrot.org
• [Bug 3574] sshd ignores AuthorizedPrincipalsCommand if AuthorizedKeysCommand is also set   bugzilla-daemon at mindrot.org
• [Bug 3575] wrong usage message: "-Q protocol_feature" is an invalid query type   bugzilla-daemon at mindrot.org
• [Bug 3512] net-misc/openssh-9.1_p1: stopped accepting connections after upgrade to sys-libs/glibc-2.36 (fatal: ssh_sandbox_violation: unexpected system call)   bugzilla-daemon at mindrot.org
• [Bug 3539] sshbuf memory leak in recv_rexec_state()   bugzilla-daemon at mindrot.org
• [Bug 3558] Spelling "yes" as "Yes" in sshd_config has a fatal result   bugzilla-daemon at mindrot.org
• [Bug 3455] Options from ssh_config missing in ssh manpage   bugzilla-daemon at mindrot.org
• [Bug 3545] Output from ssh-keygen -e, which should always be a public-key, is not accepted by ssh-keygen -l   bugzilla-daemon at mindrot.org
• [Bug 3555] ForwardAgent doesn't work under Match canonical   bugzilla-daemon at mindrot.org
• [Bug 3576] The sftp-server does not provide the feature of changing expired passwords, which is provided by the sshd.   bugzilla-daemon at mindrot.org
• [Bug 3606] no-touch-required option refused by server   bugzilla-daemon at mindrot.org
• [Bug 3604] Building OpenSSH fails with zlib1.3 installed   bugzilla-daemon at mindrot.org
• [Bug 3608] ssh version is different with sshd version   bugzilla-daemon at mindrot.org
• [Bug 3577] CASignatureAlgorithms supports -cert algorithms when used alongside with other options   bugzilla-daemon at mindrot.org
• [Bug 3587] Would OpenSSH consider adding a switch to hide the specific OpenSSH version number?   bugzilla-daemon at mindrot.org
• [Bug 3590] Why is the service name in the USERAUTH REQUEST message "ssh-connect" instead of "ssh-userauth"?   bugzilla-daemon at mindrot.org
• [Bug 3580] ssh-keygen -l: "no comment" never appears again after the first comment   bugzilla-daemon at mindrot.org
• [Bug 3589] ControlMaster auto, persist and -f fail.   bugzilla-daemon at mindrot.org
• [Bug 3598] Dead lock of sshd and Defunct of sshd   bugzilla-daemon at mindrot.org
• [Bug 3611] scp -r does not handle sym links to directories correctly   bugzilla-daemon at mindrot.org
• [Bug 3623] potentially uninitialized local pointers in fill_default_options() in readconf.c   bugzilla-daemon at mindrot.org
• [Bug 3624] potentially uninitialized local pointers in assemble_algorithms() in servconf.c   bugzilla-daemon at mindrot.org
• [Bug 3626] potentially uninitialized local pointer in sshkey_ecdsa_key_to_nid() in sshkey.c   bugzilla-daemon at mindrot.org
• [Bug 3646] The configure file in the ssh directory is missing   bugzilla-daemon at mindrot.org
• [Bug 3655] Default ObscureKeystrokeTiming makes X forwarding really slow   bugzilla-daemon at mindrot.org
• [Bug 3610] Using ControlPath and the -J option   bugzilla-daemon at mindrot.org
• [Bug 3616] SSHD Server Not Working After 9.4p1 Upgrade   bugzilla-daemon at mindrot.org
• [Bug 3625] potentially uninitialized local pointer in send_handle() in sftp-server.c   bugzilla-daemon at mindrot.org
• [Bug 3659] Certificates are ignored when listing revoked items in a (binary) revocation list   bugzilla-daemon at mindrot.org
• [Bug 3711] How do you defend against the D (HE) ater attack?   bugzilla-daemon at mindrot.org
• [Bug 3723] sshd failed to close session when client specifies no remote command   bugzilla-daemon at mindrot.org
• [Bug 3694] Which patch fixes the CanonicalizeHostname vulnerability?   bugzilla-daemon at mindrot.org
• [Bug 3701] KexAlgorithms documentation is unclear as to default vs. supported distinction   bugzilla-daemon at mindrot.org
• [Bug 3719] receiving errors when attempting to compile openssh 9.8   bugzilla-daemon at mindrot.org
• [Bug 3709] PerSourceMaxStartups no longer works as advertised   bugzilla-daemon at mindrot.org
• [Bug 3714] sftp fails in one direction   bugzilla-daemon at mindrot.org
• [Bug 3730] Integer overflow when adding 6000 and display_number   bugzilla-daemon at mindrot.org
• [Bug 3668] OpenSSL version header not found   bugzilla-daemon at mindrot.org
• [Bug 3690] sshd: root [priv] process sleeping leads to unprivileged child proc zombie   bugzilla-daemon at mindrot.org
• [Bug 3738] References to autoreconf   bugzilla-daemon at mindrot.org
• [Bug 3739] Match parsing requires space before '='   bugzilla-daemon at mindrot.org
• [Bug 3752] ssh agent with host constraints fails creating a signature   bugzilla-daemon at mindrot.org
• [Bug 3756] ssh connection breaks after openssl is upgraded   bugzilla-daemon at mindrot.org
• [Bug 3745] sshd does not read sshd-auth in the libexecdir directory   bugzilla-daemon at mindrot.org
• [Bug 3754] Everything   bugzilla-daemon at mindrot.org
• [Bug 3755] ssh connection breaks after openssl is upgraded   bugzilla-daemon at mindrot.org
• [Bug 3760] SSH blocks terminal scroll   bugzilla-daemon at mindrot.org
• [Bug 3731] Integer overflow when adding 6000 and display_number   bugzilla-daemon at mindrot.org
• [Bug 3747] ssh with ldap user account slow every time, local accounts unaffected   bugzilla-daemon at mindrot.org
• [Bug 3773] sshd-session rexec prevents live login after package uninstall   bugzilla-daemon at mindrot.org
• [Bug 3800] OpenSSH 9.9p2 Minor Version Detection Issue in Qualys/Tenable for CVE-2025-26465 & CVE-2025-26466   bugzilla-daemon at mindrot.org
• [Bug 3810] Remove progressmeter object from libssh   bugzilla-daemon at mindrot.org
• [Bug 3777] error: kex_exchange_identification: Connection closed by remote host   bugzilla-daemon at mindrot.org
• [Bug 3780] connecting using KexAlgorithms list fails without spaces   bugzilla-daemon at mindrot.org
• [Bug 3793] Colon in identity file name causes 'load pubkey invalid format'   bugzilla-daemon at mindrot.org
• [Bug 3761] ssh-keygen fails for security keys without attestation   bugzilla-daemon at mindrot.org
• [Bug 3794] libcrux_mlkem768_sha3.h: undefined reference to htole64 and le64toh when compiling since 9.9p2   bugzilla-daemon at mindrot.org
• [Bug 3818] Release Notes title references "10p2", but the actual portable release appears to be "10p1"   bugzilla-daemon at mindrot.org
• [Bug 3841] Configuration parser is broken   bugzilla-daemon at mindrot.org
• [Bug 3846] Connect failure with large sshd_config   bugzilla-daemon at mindrot.org
• [Bug 3820] Around 5 second delay when starting an X11 application   bugzilla-daemon at mindrot.org
• [Bug 3821] Memory leak in agent_cleanup_stale   bugzilla-daemon at mindrot.org
• [Bug 3850] concurrent runs of ssh corrupts the known_hosts file   bugzilla-daemon at mindrot.org
• [Bug 3859] Multiple occurences of MaxStartups are not processed in the order specified   bugzilla-daemon at mindrot.org
• [Bug 3842] Match !final triggers re-parsing round   bugzilla-daemon at mindrot.org
• [Bug 3852] Release tarballs contain spurious man pages like ssh_config.0   bugzilla-daemon at mindrot.org
• [Bug 3900] Misleading verbose output for local-to-local or standard remote-to-remote copies   bugzilla-daemon at mindrot.org
• [Bug 3924] IPQoS keyword leads to use the last value instead of first one set   bugzilla-daemon at mindrot.org
• [Bug 3939] Interactive SSH sessions freeze after a short period   bugzilla-daemon at mindrot.org
• [Bug 3871] scp traversing outside of destination dir when copying .. or ../..   bugzilla-daemon at mindrot.org
• [Bug 3879] ssh: pkcs11 key enumeration fails with "pin required"   bugzilla-daemon at mindrot.org
• [Bug 3903] process_extended_get_users_groups_by_id counts groups wrong   bugzilla-daemon at mindrot.org
• [Bug 3885] Website is down   bugzilla-daemon at mindrot.org
• [Bug 3886] ssh <server> bash -c "cd /opt && pwd" outputs home directory   bugzilla-daemon at mindrot.org
• [Bug 3890] SSH with a control path and -tt hangs waiting for user input.   bugzilla-daemon at mindrot.org
• [Bug 3906] Misusing 'Match Host' in server config causes a crash at deferred connection time   bugzilla-daemon at mindrot.org
• [Bug 3173] spurious message about pubkey being invalid format   bugzilla-daemon at mindrot.org
• [Bug 3943] New: function fill_default_options has broken error handling   bugzilla-daemon at mindrot.org
• [Bug 3943] function fill_default_options has broken error handling   bugzilla-daemon at mindrot.org
• [Bug 3938] FIDO2 verify-required keys fail to sign on non-biometric tokens ("option uv is unknown")   bugzilla-daemon at mindrot.org
• [Bug 3944] New: Allow specifying identity by key thumbprint   bugzilla-daemon at mindrot.org
• [Bug 3944] Allow specifying identity by key thumbprint   bugzilla-daemon at mindrot.org
• [Bug 3938] FIDO2 verify-required keys fail to sign on non-biometric tokens ("option uv is unknown")   bugzilla-daemon at mindrot.org
• [Bug 3944] Allow specifying identity by key thumbprint   bugzilla-daemon at mindrot.org
• [Bug 3945] New: scp shows estimated remaning time for a file transfer but incorrectly says "ETA"   bugzilla-daemon at mindrot.org
• [Bug 3945] scp shows estimated remaning time for a file transfer but incorrectly says "ETA"   bugzilla-daemon at mindrot.org
• [Bug 3946] New: When establishing an SSH connection, according to the latest rules, is it necessary to perform validity checks on all usernames, regardless of their source?   bugzilla-daemon at mindrot.org
• [Bug 2876] PAM_TEXT_INFO and PAM_ERROR_MSG conversation not honoured during PAM authentication   bugzilla-daemon at mindrot.org
• [Bug 3947] New: servconf.c: unchecked strdup() in Include GLOB_NOMATCH path can cache a NULL selector and later crash in strcmp()   bugzilla-daemon at mindrot.org
• [Bug 3948] New: servconf.c: unchecked strdup() in Include glob-match path can pass NULL filename to load_server_config()   bugzilla-daemon at mindrot.org
• [Bug 3949] New: authfd.c: unchecked calloc() in ssh_agent_query_extensions() can return success with *exts == NULL   bugzilla-daemon at mindrot.org
• [Bug 3949] authfd.c: unchecked calloc() in ssh_agent_query_extensions() can return success with *exts == NULL   bugzilla-daemon at mindrot.org
• [Bug 3950] New: principals= keyopt auth bypass via comma-split in match_principals_option (≤10.2p1, silently fixed fd1c7e1, no CVE)   bugzilla-daemon at mindrot.org
• [Bug 3950] principals= keyopt auth bypass via comma-split in match_principals_option (≤10.2p1, silently fixed fd1c7e1, no CVE)   bugzilla-daemon at mindrot.org
• [Bug 3951] New: For some keys, "ssh-add -l" shows the pathname instead of the comment   bugzilla-daemon at mindrot.org
• [Bug 3951] For some keys, "ssh-add -l" shows the pathname instead of the comment   bugzilla-daemon at mindrot.org
• [Bug 3952] New: openssh-10.3_p1 fails to build with openssl-4.0.0   bugzilla-daemon at mindrot.org
• [Bug 3952] openssh-10.3_p1 fails to build with openssl-4.0.0   bugzilla-daemon at mindrot.org
• [Bug 3952] openssh-10.3_p1 fails to build with openssl-4.0.0   bugzilla-daemon at mindrot.org
• [Bug 3952] openssh-10.3_p1 fails to build with openssl-4.0.0   bugzilla-daemon at mindrot.org
• [Bug 3953] New: SFTP ls -n displays username/groupname instead of numeric UID/GID after users-groups-by-id extension   bugzilla-daemon at mindrot.org
• [Bug 3953] SFTP ls -n displays username/groupname instead of numeric UID/GID after users-groups-by-id extension   bugzilla-daemon at mindrot.org
• [Bug 3952] openssh-10.3_p1 fails to build with openssl-4.0.0   bugzilla-daemon at mindrot.org
• [Bug 3952] openssh-10.3_p1 fails to build with openssl-4.0.0   bugzilla-daemon at mindrot.org
• [Bug 3942] Tracking bug for openssh-10.3   bugzilla-daemon at mindrot.org
• [Bug 3952] openssh-10.3_p1 fails to build with openssl-4.0.0   bugzilla-daemon at mindrot.org
• [Bug 3942] Tracking bug for openssh-10.4   bugzilla-daemon at mindrot.org
• [Bug 3954] New: scp -t . has FORTIFY: umask: called with invalid mask 7077 Aborted on Android   bugzilla-daemon at mindrot.org
• [Bug 3955] New: SSH fails on IPA-joined systems when logging in with an alternative UPN suffix   bugzilla-daemon at mindrot.org
• [Bug 3955] SSH fails on IPA-joined systems when logging in with an alternative UPN suffix   bugzilla-daemon at mindrot.org
• [Bug 3955] SSH fails on IPA-joined systems when logging in with an alternative UPN suffix   bugzilla-daemon at mindrot.org
• [Bug 3954] scp -t . has FORTIFY: umask: called with invalid mask 7077 Aborted on Android   bugzilla-daemon at mindrot.org
• [Bug 3123] PermitOpen does not allow wildcards for hosts despite what docs say   bugzilla-daemon at mindrot.org
• [Bug 3954] scp -t . has FORTIFY: umask: called with invalid mask 7077 Aborted on Android   bugzilla-daemon at mindrot.org
• [Bug 3954] scp -t . has FORTIFY: umask: called with invalid mask 7077 Aborted on Android   bugzilla-daemon at mindrot.org
• [Bug 3956] New: Unnecessary display of "Permanently added '1.2.3.4' (ECDSA) to the list of known hosts   bugzilla-daemon at mindrot.org

Last message date: Thu Apr 30 19:13:11 AEST 2026
Archived on: Thu Apr 30 19:13:14 AEST 2026

• Messages sorted by: [ thread ] [ subject ] [ author ]
• More info on this list...