[openssh-commits] [openssh] branch master updated (10ccf611 -> 05f2b141)

git+noreply at mindrot.org git+noreply at mindrot.org
Wed Aug 28 22:10:01 AEST 2024


This is an automated email from the git hooks/post-receive script.

djm pushed a change to branch master
in repository openssh.

    from 10ccf611 upstream: As defined in the RFC, the SSH protocol has negotiable
     new 16eaf9d4 upstream: fix test: -F is the argument to specify a non-default
     new 05f2b141 Don't skip audit before exitting cleanup_exit

The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Detailed log of new commits:

commit 05f2b141cfcc60c7cdedf9450d2b9d390c19eaad
Author: Antonio Larrosa <alarrosa at suse.com>
Date:   Fri Aug 23 12:21:06 2024 +0200

    Don't skip audit before exitting cleanup_exit
    
    This fixes an issue where the SSH_CONNECTION_ABANDON event is not
    audited because cleanup_exit overrides the regular _exit too soon and
    as a result, failed auth attempts are not logged correctly.
    
    The problem was introduced in 81c1099d22b81ebfd20a334ce986c4f753b0db29
    where the code from upstream was merged before the audit_event call when
    it should have been merged right before the _exit call in order to honor
    the comment that just mentions an override of the exit value.

commit 16eaf9d401e70996f89f3f417738a8db421aa959
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Wed Aug 28 12:08:26 2024 +0000

    upstream: fix test: -F is the argument to specify a non-default
    
    ssh_config, not -f (this is sadly not a new bug)
    
    OpenBSD-Regress-ID: 45a7bda4cf33f2cea218507d8b6a55cddbcfb322

Summary of changes:
 regress/rekey.sh | 6 +++---
 sshd-session.c   | 6 +++---
 2 files changed, 6 insertions(+), 6 deletions(-)

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.


More information about the openssh-commits mailing list