[openssh-commits] [openssh] branch master updated (1b470b90 -> f9648090)

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

djm pushed a change to branch master
in repository openssh.

      from  1b470b90  Fix cygwin conditional steps.
       new  ff89b1be  upstream: Strictly enforce the maximum allowed SSH2 banner size in
       new  5453333b  upstream: remove incorrect check that can break enrolling a
       new  f9648090  upstream: attemp FIDO key signing without PIN and use the error

The 3 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Detailed log of new commits:

commit f96480906893ed93665df8cdf9065865c51c1475
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Aug 19 06:07:47 2022 +0000

    upstream: attemp FIDO key signing without PIN and use the error
    
    code returned to fall back only if necessary. Avoids PIN prompts for FIDO
    tokens that don't require them; part of GHPR#302
    
    OpenBSD-Commit-ID: 4f752aaf9f2e7c28bcaaf3d4f8fc290131bd038e

commit 5453333b5d28e313284cb9aae82899704103f98d
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Aug 19 05:53:28 2022 +0000

    upstream: remove incorrect check that can break enrolling a
    
    resident key (introduced in r1.40)
    
    OpenBSD-Commit-ID: 4cab364d518470e29e624af3d3f9ffa9c92b6f01

commit ff89b1bed80721295555bd083b173247a9c0484e
Author: dtucker at openbsd.org <dtucker at openbsd.org>
Date:   Fri Aug 19 04:02:46 2022 +0000

    upstream: Strictly enforce the maximum allowed SSH2 banner size in
    
    ssh-keyscan and prevent a one-byte buffer overflow.  Patch from Qualys, ok
    djm@
    
    OpenBSD-Commit-ID: 6ae664f9f4db6e8a0589425f74cd0bbf3aeef4e4

Summary of changes:
 sk-usbhid.c   |  6 +-----
 ssh-keyscan.c | 16 +++++++++++++++-
 sshconnect2.c | 42 ++++++++++++++++++++----------------------
 3 files changed, 36 insertions(+), 28 deletions(-)

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.