[Bug 3946] When establishing an SSH connection, according to the latest rules, is it necessary to perform validity checks on all usernames, regardless of their source?
bugzilla-daemon at mindrot.org
bugzilla-daemon at mindrot.org
Tue Sep 15 15:07:15 AEST 2026
https://bugzilla.mindrot.org/show_bug.cgi?id=3946
Damien Miller <djm at mindrot.org> changed:
What |Removed |Added
----------------------------------------------------------------------------
Status|NEW |RESOLVED
Resolution|--- |WORKSFORME
--- Comment #2 from Damien Miller <djm at mindrot.org> ---
As mentioned, usernames in the config file may contain arbitrary
characters
--
You are receiving this mail because:
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
More information about the openssh-bugs
mailing list