[openssh-commits] [openssh] branch master updated (193c6d8d -> 2a822f29)

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

djm pushed a change to branch master
in repository openssh.

      from  193c6d8d  Zero out LIBFIDO2 when SK support not usable.
       new  64668613  upstream: Don't leak the strings allocated by order_hostkeyalgs()
       new  2369a281  upstream: Roll back previous KEX changes as they aren't safe until
       new  2a822f29  upstream: allow arguments to sftp -D option, e.g. sftp -D

The 3 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.


Detailed log of new commits:

commit 2a822f29300b2de7335fbff65f0b187a0c582304
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Mon Jun 27 21:41:55 2022 +0000

    upstream: allow arguments to sftp -D option, e.g. sftp -D
    
    "/usr/libexec/sftp-server -el debug3"
    
    ok markus@
    
    OpenBSD-Commit-ID: 5a002b9f3a7aef2731fc0ffa9c921cf15f38ecce

commit 2369a2810187e08f2af5d58b343956062fb96ee8
Author: dtucker at openbsd.org <dtucker at openbsd.org>
Date:   Fri Jun 24 10:45:06 2022 +0000

    upstream: Roll back previous KEX changes as they aren't safe until
    
    compat_pkalg_proposal and friends always allocate their returned strings.
    Reported by Qualys.
    
    OpenBSD-Commit-ID: 1c7a88a0d5033f42f88ab9bec58ef1cf72c81ad0

commit 646686136c34c2dbf6a01296dfaa9ebee029386d
Author: dtucker at openbsd.org <dtucker at openbsd.org>
Date:   Fri Jun 24 04:37:00 2022 +0000

    upstream: Don't leak the strings allocated by order_hostkeyalgs()
    
    and list_hostkey_types() that are passed to compat_pkalg_proposal(). Part of
    github PR#324 from ZoltanFridrich, ok djm@
    
    OpenBSD-Commit-ID: b2f6e5f60f2bba293b831654328a8a0035ef4a1b

Summary of changes:
 sftp.1        | 10 ++++++----
 sftp.c        | 16 +++++++++-------
 sshconnect2.c |  2 +-
 sshd.c        |  2 +-
 4 files changed, 17 insertions(+), 13 deletions(-)

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.