[openssh-commits] [openssh] branch master updated (552a5c786 -> 2ca6eef69)

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

djm pushed a change to branch master
in repository openssh.

    from 552a5c786 upstream: Check return values of fcntl(... O_CLOEXEC)
     new 443616ce9 upstream: repair ssh-keysign after pledge changes; spotted/tested
     new 2ca6eef69 upstream: clarify that Authorized(Keys|Principals)(File|Command)

The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.


Detailed log of new commits:

commit 2ca6eef69d7dbecfd67cede25ea6a9aa1074ba3e
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Mon Mar 23 01:33:46 2026 +0000

    upstream: clarify that Authorized(Keys|Principals)(File|Command)
    
    are only consulted for valid users.
    
    clarify that TOKENS are expanded without sanitisation or escaping
    and that it's the user's reponsibility to ensure their usage is
    safe.
    
    prompted by bz3936; feedback/ok deraadt@
    
    OpenBSD-Commit-ID: cd58abad1137346ba2dee55fa9ebb975f5fa7a06

commit 443616ce9070d370c97271347e91fcfd24b5df84
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Thu Mar 19 02:36:28 2026 +0000

    upstream: repair ssh-keysign after pledge changes; spotted/tested
    
    by naddy@ ok deraadt@
    
    OpenBSD-Commit-ID: fccc6c7994c8f45c4417efe490d23154d9caaa6d

Summary of changes:
 ssh-keysign.c |  8 ++++----
 ssh_config.5  | 13 ++++++++++---
 sshd_config.5 | 17 ++++++++++++++---
 3 files changed, 28 insertions(+), 10 deletions(-)

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.