[openssh-commits] [openssh] branch master updated (7fe3b24c9 -> 78db1b7e9)
git+noreply at mindrot.org
git+noreply at mindrot.org
Tue Sep 15 15:38:04 AEST 2026
This is an automated email from the git hooks/post-receive script.
djm pushed a change to branch master
in repository openssh.
from 7fe3b24c9 set -Wno-error=discarded-qualifiers
new 8cae676a3 upstream: Remove scp '-s' flag from synopsis, the flag has been a
new f6ddc809d upstream: update fingerprint example from RSA to Ed25519 host key
new 0e1c435a8 upstream: Change three paragraphs in different parts of the manual
new 327fb6ce6 upstream: Use getexecpath(3); if it fails use argv[0] as before
new d991f23d4 upstream: Add '-p' to sftp mkdir/lmkdir to create directories as
new 7cc27ceb8 upstream: add a "hexdump" export mode that dumps the key blob in
new 4fc22252c upstream: don't attempt to set TCP_NODELAY on non-AF_INET[6]
new 7f671c49e upstream: mux proxy sockets also share in and out fds, so using
new 8abd726ee upstream: fix case for ssh -G option output; bz4005, reported by
new 78db1b7e9 allow madvise(..., MADV_DONTNEED_LOCKED)
The 10 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Detailed log of new commits:
commit 78db1b7e9f70c9ec827476dbae7fc8ca7d127815
Author: Damien Miller <djm at mindrot.org>
Date: Tue Sep 15 15:37:02 2026 +1000
allow madvise(..., MADV_DONTNEED_LOCKED)
allow MADV_DONTNEED_LOCKED in the seccomp sandbox; needed by GrapheneOS'
hardened allocator. bz4001
commit 8abd726ee36ddfabdbee50c325264d68d99ff21c
Author: djm at openbsd.org <djm at openbsd.org>
Date: Tue Sep 15 05:16:43 2026 +0000
upstream: fix case for ssh -G option output; bz4005, reported by
Khush Patel
OpenBSD-Commit-ID: 7ad9df4697b653c21253cea94bf95b87e7108717
commit 7f671c49eba7b1eacaf4ca35e9f4b65cef14fa8a
Author: djm at openbsd.org <djm at openbsd.org>
Date: Mon Sep 14 02:40:27 2026 +0000
upstream: mux proxy sockets also share in and out fds, so using
this as a heuristic to decide whether the connection is on an inet/inet6
socket is incorrect.
Fixes breakage in t-multiplex after recent pledge(2) changes where
the packet code would attempt to set TCP_NODELAY on a mux proxy
connection (which is AF_UNIX).
OpenBSD-Commit-ID: f6706e90d499ac0a22322df11935205f38c5ae85
commit 4fc22252c403d5a996a9921f3b7f9b2c5c972645
Author: djm at openbsd.org <djm at openbsd.org>
Date: Mon Sep 14 02:38:27 2026 +0000
upstream: don't attempt to set TCP_NODELAY on non-AF_INET[6]
sockets. Fixes some of the regress failures in t-multiplex after recent
pledge(2) strictification.
OpenBSD-Commit-ID: ff64648747176a3192c97df50d6a8fb66b926828
commit 7cc27ceb87d4707323ba682a6b03f1810971167f
Author: djm at openbsd.org <djm at openbsd.org>
Date: Tue Sep 8 02:55:58 2026 +0000
upstream: add a "hexdump" export mode that dumps the key blob in
hex format. Very useful when writing internet-drafts.
E.g. ssh-keygen -em hexdump -f /path/key
OpenBSD-Commit-ID: 922f997de2c691cf7ddf4067a5406d39b36b25ef
commit d991f23d451c0c862ba7d14144f4ea44e1fb2a88
Author: job at openbsd.org <job at openbsd.org>
Date: Mon Sep 7 20:24:22 2026 +0000
upstream: Add '-p' to sftp mkdir/lmkdir to create directories as
required
The -p option causes the mkdir and lmkdir commands to create any missing
intermediate directories. If '-p' is specified, it is not considered an
error if a directory already exists.
With / OK djm@
OpenBSD-Commit-ID: 72e4d4cf2e254959af5a0885e3f3a176846f4345
commit 327fb6ce6f91328f5910900be1c38120fc67ec9a
Author: deraadt at openbsd.org <deraadt at openbsd.org>
Date: Sun Sep 6 18:36:24 2026 +0000
upstream: Use getexecpath(3); if it fails use argv[0] as before
with the pre-existing code to validate it is an absolute path. Here's a bit
of history: sshd became the first fork+exec privsep daemon (I did some
arm-twisting). That privsep has recently turned into fork+exec different
binaries but the SIGHUP restart code still want to re-run the binary from the
original path. The rc startup sequence always passes an absolute path. sshd
was paranoid and validated it. That made hand-restarts of sshd without
absolute paths not work. getexecpath(3) improves the ergonomics. ok djm
OpenBSD-Commit-ID: b84759d60f689f94a4fb45f43a7436ce62e35487
commit 0e1c435a86ad6ab53abab7230ada73714c46dc43
Author: schwarze at openbsd.org <schwarze at openbsd.org>
Date: Sat Sep 5 01:51:33 2026 +0000
upstream: Change three paragraphs in different parts of the manual
page (-O control commands, -Q query options, and private key file names) into
tagged lists to make them more readable; no content change intended. OK
naddy@; general direction requested by deraadt at .
OpenBSD-Commit-ID: 63c5cb7ad90fa401f7e97ce8d4c7e0d6f40530ec
commit f6ddc809d886e40919bf09561336759bf662edfd
Author: naddy at openbsd.org <naddy at openbsd.org>
Date: Thu Sep 3 20:28:39 2026 +0000
upstream: update fingerprint example from RSA to Ed25519 host key
OpenBSD-Commit-ID: 272127bb56551ff1e6d18352627a77fad003ff27
commit 8cae676a35b11e7d42ab90bbfc9605be56519d1f
Author: job at openbsd.org <job at openbsd.org>
Date: Thu Sep 3 16:02:45 2026 +0000
upstream: Remove scp '-s' flag from synopsis, the flag has been a
no-op for some time now
OK djm@
OpenBSD-Commit-ID: c272de443c8fb72f470a5e1fa482d5dae5536e85
Summary of changes:
channels.c | 4 +-
configure.ac | 1 +
misc.c | 49 ++++++++++++-
misc.h | 3 +-
openbsd-compat/openbsd-compat.h | 5 ++
packet.c | 12 ++--
readconf.c | 4 +-
sandbox-seccomp-filter.c | 3 +
scp.1 | 6 +-
scp.c | 6 +-
sftp-client.c | 35 +++++++++-
sftp-client.h | 5 +-
sftp.1 | 22 ++++--
sftp.c | 49 +++++++++++--
ssh-keygen.c | 51 ++++++++++++--
ssh.1 | 148 ++++++++++++++++++++--------------------
sshd.c | 17 +++--
17 files changed, 308 insertions(+), 112 deletions(-)
--
To stop receiving notification emails like this one, please contact
djm at mindrot.org.
More information about the openssh-commits
mailing list