[openssh-commits] [openssh] branch master updated (955c4cf4 -> 1d89232a)

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

djm pushed a change to branch master
in repository openssh.

      from  955c4cf4  sync fnmatch.c with upstream to fix another typo
       new  c084a2d0  upstream: when downloading FIDO2 resident keys from a token, don't
       new  d081f017  upstream: spelling errors in comments; no code change from
       new  eef88418  upstream: Don't clear alarm timers in listening sshd. Previously
       new  5becbec0  upstream: use sshpkt_fatal() for kex_exchange_identification()
       new  1d89232a  upstream: improve error messages for some common PKCS#11 C_Login

The 5 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Detailed log of new commits:

commit 1d89232a4aa97fe935cd60b8d24d75c2f70d56c5
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Mar 13 04:16:27 2020 +0000

    upstream: improve error messages for some common PKCS#11 C_Login
    
    failure cases; based on patch from Jacob Hoffman-Andrews in bz3130; ok
    dtucker
    
    OpenBSD-Commit-ID: b8b849621b4a98e468942efd0a1c519c12ce089e

commit 5becbec023f2037394987f85ed7f74b9a28699e0
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Mar 13 04:01:56 2020 +0000

    upstream: use sshpkt_fatal() for kex_exchange_identification()
    
    errors. This ensures that the logged errors are consistent with other
    transport- layer errors and that the relevant IP addresses are logged. bz3129
    ok dtucker@
    
    OpenBSD-Commit-ID: 2c22891f0b9e1a6cd46771cedbb26ac96ec2e6ab

commit eef88418f9e5e51910af3c5b23b5606ebc17af55
Author: dtucker at openbsd.org <dtucker at openbsd.org>
Date:   Fri Mar 13 03:24:49 2020 +0000

    upstream: Don't clear alarm timers in listening sshd. Previously
    
    these timers were used for regenerating the SSH1 ephemeral host keys but
    those are now gone so there's no need to clear the timers either.  ok
    deraadt@
    
    OpenBSD-Commit-ID: 280d2b885e4a1ce404632e8cc38fcb17be7dafc0

commit d081f017c20a3564255873ed99fd7d024cac540f
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Mar 13 03:17:07 2020 +0000

    upstream: spelling errors in comments; no code change from
    
    OpenBSD-Commit-ID: 166ea64f6d84f7bac5636dbd38968592cb5eb924

commit c084a2d040f160bc2b83f13297e3e3ca3f5dbac6
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Mar 13 03:12:17 2020 +0000

    upstream: when downloading FIDO2 resident keys from a token, don't
    
    prompt for a PIN until the token has told us that it needs one. Avoids
    double-prompting on devices that implement on-device authentication (e.g. a
    touchscreen PIN pad on the Trezor Model T). ok dtucker@
    
    OpenBSD-Commit-ID: 38b78903dd4422d7d3204095a31692fb69130817

Summary of changes:
 PROTOCOL.mux |  4 ++--
 cipher.c     |  4 ++--
 configure.ac |  6 +++++-
 gss-serv.c   |  4 ++--
 kex.c        | 14 +++++++++++---
 monitor.c    |  4 ++--
 session.c    |  6 +++---
 ssh-keygen.c | 25 ++++++++++++++++---------
 ssh-pkcs11.c | 23 +++++++++++++++++++----
 sshbuf.h     |  4 ++--
 sshconnect.c |  7 ++++---
 sshd.c       | 17 ++++++-----------
 umac.c       |  4 ++--
 13 files changed, 76 insertions(+), 46 deletions(-)

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.