[openssh-commits] [openssh] branch master updated (59d691b8 -> 8241b9c0)

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

djm pushed a change to branch master
in repository openssh.

      from  59d691b8  better detection of broken -fzero-call-used-regs
      adds  1edb00c5  upstream: implement "strict key exchange" in ssh and sshd
      adds  a7ed931c  upstream: add "ext-info-in-auth at openssh.com" extension
      adds  881d9c6a  upstream: apply destination constraints to all p11 keys
      adds  4448a293  upstream: Make it possible to load certs from PKCS#11 tokens
      adds  0cb50eef  upstream: stricter handling of channel window limits
      adds  7ef3787c  upstream: ban user/hostnames with most shell metacharacters
      adds  6d51feab  upstream: ssh-agent: record failed session-bind attempts
      adds  cdddd664  upstream: openssh-9.6
      adds  2f512f86  upstream: regress test for constrained PKCS#11 keys
      adds  e48cdee8  upstream: regress test for agent PKCS#11-backed certificates
      adds  2f2c65cb  depend
      adds  8241b9c0  crank versions

No new revisions were added by this update.

Summary of changes:
 .depend                          |   3 +-
 PROTOCOL                         |  47 +++++-
 PROTOCOL.agent                   |  33 ++++-
 README                           |   2 +-
 auth2.c                          |   8 +-
 authfd.c                         |  40 ++++-
 authfd.h                         |   5 +-
 channels.c                       |  19 ++-
 channels.h                       |   3 +-
 contrib/redhat/openssh.spec      |   2 +-
 contrib/suse/openssh.spec        |   2 +-
 kex.c                            | 313 ++++++++++++++++++++++++++++++---------
 kex.h                            |   8 +-
 monitor_wrap.c                   |   4 +-
 packet.c                         | 103 +++++++------
 packet.h                         |   3 +-
 regress/Makefile                 |   6 +-
 regress/agent-pkcs11-cert.sh     |  92 ++++++++++++
 regress/agent-pkcs11-restrict.sh | 193 ++++++++++++++++++++++++
 ssh-add.1                        |  14 +-
 ssh-add.c                        |  92 ++++++++----
 ssh-agent.c                      | 241 ++++++++++++++++++++++++++----
 ssh-pkcs11-client.c              |  56 ++++++-
 ssh-pkcs11.h                     |   5 +-
 ssh.c                            |  41 ++++-
 sshconnect2.c                    |  60 +++++---
 sshd.c                           |   4 +-
 version.h                        |   4 +-
 28 files changed, 1166 insertions(+), 237 deletions(-)
 create mode 100644 regress/agent-pkcs11-cert.sh
 create mode 100644 regress/agent-pkcs11-restrict.sh

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.