[openssh-commits] [openssh] branch master updated (58fca12 -> 52763dd)

Mon Jan 30 12:04:17 AEDT 2017

This is an automated email from the git hooks/post-receive script.

djm pushed a change to branch master
in repository openssh.

      from  58fca12   Remove LOGIN_PROGRAM.
       new  5104586   upstream commit
       new  0999533   upstream commit
       new  f89b928   upstream commit
       new  13bd2e2   upstream commit
       new  5e820e9   upstream commit
       new  b64077f   upstream commit
       new  a1187bd   upstream commit
       new  4ba1546   upstream commit
       new  9390b00   upstream commit
       new  dbaf599   upstream commit
       new  e5c7ec6   upstream commit
       new  01cfaa2   upstream commit
       new  3e032a9   upstream commit
       new  326e2fa   upstream commit
       new  4833d01   upstream commit
       new  381a261   upstream commit
       new  52763dd   upstream commit

The 17 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "adds" were already present in the repository and have only
been added to this reference.

Detailed log of new commits:

commit 52763dd3fe0a4678dafdf7aeb32286e514130afc
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Mon Jan 30 01:03:00 2017 +0000

    upstream commit

    revise keys/principals command hang fix (bz#2655) to
    consume entire output, avoiding sending SIGPIPE to subprocesses early; ok
    dtucker@

    Upstream-ID: 7cb04b31a61f8c78c4e48ceededcd2fd5c4ee1bc

commit 381a2615a154a82c4c53b787f4a564ef894fe9ac
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Mon Jan 30 00:38:50 2017 +0000

    upstream commit

    small cleanup post SSHv1 removal:

    remove SSHv1-isms in commented examples

    reorder token table to group deprecated and compile-time conditional tokens
    better

    fix config dumping code for some compile-time conditional options that
    weren't being correctly skipped (SSHv1 and PKCS#11)

    Upstream-ID: f2e96b3cb3158d857c5a91ad2e15925df3060105

commit 4833d01591b7eb049489d9558b65f5553387ed43
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Mon Jan 30 00:34:01 2017 +0000

    upstream commit

    some explicit NULL tests when dumping configured
    forwardings; from Karsten Weiss

    Upstream-ID: 40957b8dea69672b0e50df6b4a91a94e3e37f72d

commit 326e2fae9f2e3e067b5651365eba86b35ee5a6b2
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Mon Jan 30 00:32:28 2017 +0000

    upstream commit

    misplaced braces in test; from Karsten Weiss

    Upstream-ID: f7b794074d3aae8e35b69a91d211c599c94afaae

commit 3e032a95e46bfaea9f9e857678ac8fa5f63997fb
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Mon Jan 30 00:32:03 2017 +0000

    upstream commit

    don't dereference authctxt before testing != NULL, it
    causes compilers to make assumptions; from Karsten Weiss

    Upstream-ID: 794243aad1e976ebc717885b7a97a25e00c031b2

commit 01cfaa2b1cfb84f3cdd32d1bf82b120a8d30e057
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Jan 6 02:51:16 2017 +0000

    upstream commit

    use correct ssh-add program; bz#2654, from Colin Watson

    Upstream-Regress-ID: 7042a36e1bdaec6562f6e57e9d047efe9c7a6030

commit e5c7ec67cdc42ae2584085e0fc5cc5ee91133cf5
Author: dtucker at openbsd.org <dtucker at openbsd.org>
Date:   Fri Jan 6 02:26:10 2017 +0000

    upstream commit

    Account for timeouts in the integrity tests as failures.

    If the first test in a series for a given MAC happens to modify the low
    bytes of a packet length, then ssh will time out and this will be
    interpreted as a test failure.  Patch from cjwatson at debian.org via
    bz#2658.

    Upstream-Regress-ID: e7467613b0badedaa300bc6fc7495ec2f44e2fb9

commit dbaf599b61bd6e0f8469363a8c8e7f633b334018
Author: dtucker at openbsd.org <dtucker at openbsd.org>
Date:   Fri Jan 6 02:09:25 2017 +0000

    upstream commit

    Make forwarding test less racy by using unix domain
    sockets instead of TCP ports where possible.  Patch from cjwatson at
    debian.org via bz#2659.

    Upstream-Regress-ID: 4756375aac5916ef9d25452a1c1d5fa9e90299a9

commit 9390b0031ebd6eb5488d3bc4d4333c528dffc0a6
Author: dtucker at openbsd.org <dtucker at openbsd.org>
Date:   Sun Jan 29 21:35:23 2017 +0000

    upstream commit

    Fix typo in ~C error message for bad port forward
    cancellation. bz#2672, from Brad Marshall via Colin Watson and Ubuntu's
    bugtracker.

    Upstream-ID: 0d4a7e5ead6cc59c9a44b4c1e5435ab3aada09af

commit 4ba15462ca38883b8a61a1eccc093c79462d5414
Author: guenther at openbsd.org <guenther at openbsd.org>
Date:   Sat Jan 21 11:32:04 2017 +0000

    upstream commit

    The POSIX APIs that that sockaddrs all ignore the s*_len
    field in the incoming socket, so userspace doesn't need to set it unless it
    has its own reasons for tracking the size along with the sockaddr.

    ok phessler@ deraadt@ florian@

    Upstream-ID: ca6e49e2f22f2b9e81d6d924b90ecd7e422e7437

commit a1187bd3ef3e4940af849ca953a1b849dae78445
Author: jmc at openbsd.org <jmc at openbsd.org>
Date:   Fri Jan 6 16:28:12 2017 +0000

    upstream commit

    keep the tokens list sorted;

    Upstream-ID: b96239dae4fb3aa94146bb381afabcc7740a1638

commit b64077f9767634715402014f509e58decf1e140d
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Jan 6 09:27:52 2017 +0000

    upstream commit

    fix previous

    Upstream-ID: c107d6a69bc22325d79fbf78a2a62e04bcac6895

commit 5e820e9ea2e949aeb93071fe31c80b0c42f2b2de
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Jan 6 03:53:58 2017 +0000

    upstream commit

    show a useful error message when included config files
    can't be opened; bz#2653, ok dtucker@

    Upstream-ID: f598b73b5dfe497344cec9efc9386b4e5a3cb95b

commit 13bd2e2d622d01dc85d22b94520a5b243d006049
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Jan 6 03:45:41 2017 +0000

    upstream commit

    sshd_config is documented to set
    GSSAPIStrictAcceptorCheck=yes by default, so actually make it do this.
    bz#2637 ok dtucker

    Upstream-ID: 99ef8ac51f17f0f7aec166cb2e34228d4d72a665

commit f89b928534c9e77f608806a217d39a2960cc7fd0
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Fri Jan 6 03:41:58 2017 +0000

    upstream commit

    Avoid confusing error message when attempting to use
    ssh-keyscan built without SSH protocol v.1 to scan for v.1 keys; bz#2583

    Upstream-ID: 5d214abd3a21337d67c6dcc5aa6f313298d0d165

commit 0999533014784579aa6f01c2d3a06e3e8804b680
Author: dtucker at openbsd.org <dtucker at openbsd.org>
Date:   Fri Jan 6 02:34:54 2017 +0000

    upstream commit

    Re-add '%k' token for AuthorizedKeysCommand which was
    lost during the re-org in rev 1.235.  bz#2656, from jboning at gmail.com.

    Upstream-ID: 2884e203c02764d7b3fe7472710d9c24bdc73e38

commit 51045869fa084cdd016fdd721ea760417c0a3bf3
Author: djm at openbsd.org <djm at openbsd.org>
Date:   Wed Jan 4 05:37:40 2017 +0000

    upstream commit

    unbreak Unix domain socket forwarding for root; ok
    markus@

    Upstream-ID: 6649c76eb7a3fa15409373295ca71badf56920a2

Summary of changes:
 auth2-pubkey.c              | 17 ++++++---
 clientloop.c                |  4 +--
 mux.c                       |  7 ++--
 readconf.c                  | 85 ++++++++++++++++++++++++++++-----------------
 regress/agent-getpeereid.sh |  8 ++---
 regress/forwarding.sh       | 34 ++++++++++--------
 regress/integrity.sh        |  5 ++-
 servconf.c                  |  4 +--
 serverloop.c                | 21 ++++++-----
 ssh-keyscan.c               |  8 +++--
 sshconnect2.c               |  8 ++---
 sshd_config.5               |  8 ++---
 12 files changed, 125 insertions(+), 84 deletions(-)

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.