[openssh-commits] [openssh] branch master updated (d7950aca8 -> 832a77000)

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

djm pushed a change to branch master
in repository openssh.

    from d7950aca8 upstream: In ssh(1), don't try to match certificates held in an
     new 409dc952a upstream: Make it clear that DenyUsers/DenyGroups overrides
     new 832a77000 upstream: Implement "query" extension from

The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Detailed log of new commits:

commit 832a77000abe61f61bddb9e595f45c7131c0269d
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Tue Jan 27 06:48:29 2026 +0000

    upstream: Implement "query" extension from
    
    draft-ietf-sshm-ssh-agent
    
    feedback jsg@, tb@; ok tb@
    
    OpenBSD-Commit-ID: adb2b79473ff86ba781ed5ab2735c1437b590f07

commit 409dc952ab88b5232e809e34fd55662c6f75ad81
Author: millert at openbsd.org <millert at openbsd.org>
Date:   Thu Jan 22 15:30:07 2026 +0000

    upstream: Make it clear that DenyUsers/DenyGroups overrides
    
    AllowUsers/AllowGroups. Previously we specified the order in which the
    directives are processed but it was ambiguous as to what happened if both
    matched. OK djm@
    
    OpenBSD-Commit-ID: 6ae0ab52ff796b78486b92a45cd7ec9310e20f4e

Summary of changes:
 authfd.h      |  4 +++-
 ssh-agent.c   | 26 ++++++++++++++++++++++++--
 sshd_config.5 | 28 ++++++++++++++--------------
 3 files changed, 41 insertions(+), 17 deletions(-)

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.