[Midnightbsd-cvs] [MidnightBSD/src] 82d7d5: vendor import of OpenSSH 9.9p2

Lucas Holt noreply at github.com
Mon Mar 24 19:44:45 EDT 2025 

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: 82d7d5c8990173f0fdef407422c0dbce34d5cba4
      https://github.com/MidnightBSD/src/commit/82d7d5c8990173f0fdef407422c0dbce34d5cba4
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2025-03-24 (Mon, 24 Mar 2025)

  Changed paths:
    M .depend
    M .git_allowed_signers
    M .git_allowed_signers.asc
    M .github/ci-status.md
    M .github/configs
    M .github/run_test.sh
    M .github/setup_ci.sh
    M .github/workflows/c-cpp.yml
    M .github/workflows/cifuzz.yml
    M .github/workflows/selfhosted.yml
    M .github/workflows/upstream.yml
    M .gitignore
    M .skipped-commit-ids
    M ChangeLog
    M LICENCE
    M Makefile.in
    M PROTOCOL.agent
    M PROTOCOL.key
    M README
    M addr.c
    M auth-pam.c
    M auth-pam.h
    M auth-rhosts.c
    M auth.c
    M auth.h
    M auth2-gss.c
    M auth2-hostbased.c
    M auth2-kbdint.c
    A auth2-methods.c
    M auth2-none.c
    M auth2-passwd.c
    M auth2-pubkey.c
    M auth2.c
    M channels.c
    M channels.h
    M cipher.c
    M clientloop.c
    M clientloop.h
    A config.h.in
    A configure
    M configure.ac
    M contrib/redhat/openssh.spec
    M contrib/ssh-copy-id
    M contrib/ssh-copy-id.1
    M contrib/suse/openssh.spec
    M crypto_api.h
    M defines.h
    M ed25519.sh
    M gss-serv.c
    A kex-names.c
    M kex.c
    M kex.h
    M kexc25519.c
    M kexgen.c
    M kexgexs.c
    A kexmlkem768x25519.c
    M kexsntrup761x25519.c
    M krl.c
    A libcrux_mlkem768_sha3.h
    M log.c
    M log.h
    M loginrec.c
    M m4/openssh.m4
    M match.c
    M misc.c
    M misc.h
    A mlkem768.sh
    M moduli
    A moduli.0
    M monitor.c
    M monitor.h
    M monitor_wrap.c
    M monitor_wrap.h
    M msg.c
    M mux.c
    M myproposal.h
    M nchan.c
    M openbsd-compat/arc4random.h
    M openbsd-compat/getrrsetbyname.c
    M openbsd-compat/openssl-compat.c
    M openbsd-compat/openssl-compat.h
    M openbsd-compat/port-linux.c
    M openbsd-compat/port-linux.h
    M packet.c
    M packet.h
    M pathnames.h
    A platform-listen.c
    M platform.c
    M platform.h
    M readconf.c
    M readpass.c
    M regress/cfginclude.sh
    M regress/cfgmatchlisten.sh
    M regress/dropbear-ciphers.sh
    M regress/dropbear-kex.sh
    M regress/key-options.sh
    M regress/misc/fuzz-harness/Makefile
    M regress/misc/fuzz-harness/agent_fuzz_helper.c
    M regress/misc/fuzz-harness/kex_fuzz.cc
    A regress/misc/fuzz-harness/mkcorpus_sntrup761.c
    M regress/misc/fuzz-harness/sig_fuzz.cc
    A regress/misc/fuzz-harness/sntrup761_dec_fuzz.cc
    A regress/misc/fuzz-harness/sntrup761_enc_fuzz.cc
    A regress/misc/fuzz-harness/watch-sntrup761.sh
    M regress/multiplex.sh
    A regress/penalty-expire.sh
    A regress/penalty.sh
    M regress/percent.sh
    M regress/rekey.sh
    M regress/sftp-cmds.sh
    M regress/test-exec.sh
    M regress/unittests/kex/test_kex.c
    M regress/unittests/sshkey/common.c
    M regress/unittests/sshkey/test_file.c
    M regress/unittests/sshkey/test_sshkey.c
    M regress/unittests/test_helper/fuzz.c
    M regress/yes-head.sh
    A scp.0
    M scp.c
    M servconf.c
    M servconf.h
    M serverloop.c
    M session.c
    M sftp-client.c
    A sftp-server.0
    M sftp-server.c
    A sftp.0
    M sftp.c
    M sntrup761.c
    M sntrup761.sh
    M srclimit.c
    M srclimit.h
    A ssh-add.0
    M ssh-add.1
    M ssh-add.c
    A ssh-agent.0
    M ssh-agent.c
    M ssh-ecdsa-sk.c
    M ssh-ecdsa.c
    M ssh-gss.h
    A ssh-keygen.0
    M ssh-keygen.1
    M ssh-keygen.c
    A ssh-keyscan.0
    M ssh-keyscan.1
    M ssh-keyscan.c
    A ssh-keysign.0
    M ssh-keysign.8
    M ssh-keysign.c
    M ssh-pkcs11-client.c
    A ssh-pkcs11-helper.0
    M ssh-pkcs11-helper.c
    M ssh-pkcs11.c
    M ssh-rsa.c
    M ssh-sk-client.c
    A ssh-sk-helper.0
    M ssh-sk.c
    A ssh.0
    M ssh.1
    M ssh_api.c
    A ssh_config.0
    M ssh_config.5
    M sshbuf-getput-crypto.c
    M sshbuf.c
    M sshbuf.h
    M sshconnect.c
    M sshconnect.h
    M sshconnect2.c
    A sshd-session.c
    A sshd.0
    M sshd.8
    M sshd.c
    A sshd_config.0
    M sshd_config.5
    M sshkey.c
    M sshkey.h
    M sshsig.c
    M version.h

  Log Message:
  -----------
  vendor import of OpenSSH 9.9p2


  Commit: 1ad802372bec5c6793e760c38d38046e5c63739f
      https://github.com/MidnightBSD/src/commit/1ad802372bec5c6793e760c38d38046e5c63739f
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2025-03-24 (Mon, 24 Mar 2025)

  Changed paths:
    M crypto/openssh/.depend
    M crypto/openssh/.git_allowed_signers
    M crypto/openssh/.git_allowed_signers.asc
    M crypto/openssh/.gitignore
    M crypto/openssh/.skipped-commit-ids
    M crypto/openssh/ChangeLog
    M crypto/openssh/LICENCE
    M crypto/openssh/Makefile.in
    M crypto/openssh/PROTOCOL.agent
    M crypto/openssh/PROTOCOL.key
    M crypto/openssh/README
    M crypto/openssh/addr.c
    M crypto/openssh/auth-pam.c
    M crypto/openssh/auth-pam.h
    M crypto/openssh/auth-rhosts.c
    M crypto/openssh/auth.c
    M crypto/openssh/auth.h
    M crypto/openssh/auth2-gss.c
    M crypto/openssh/auth2-hostbased.c
    M crypto/openssh/auth2-kbdint.c
    A crypto/openssh/auth2-methods.c
    M crypto/openssh/auth2-none.c
    M crypto/openssh/auth2-passwd.c
    M crypto/openssh/auth2-pubkey.c
    M crypto/openssh/auth2.c
    M crypto/openssh/channels.c
    M crypto/openssh/channels.h
    M crypto/openssh/cipher.c
    M crypto/openssh/clientloop.c
    M crypto/openssh/clientloop.h
    A crypto/openssh/config.h.in
    A crypto/openssh/configure
    M crypto/openssh/configure.ac
    M crypto/openssh/contrib/redhat/openssh.spec
    M crypto/openssh/contrib/ssh-copy-id
    M crypto/openssh/contrib/ssh-copy-id.1
    M crypto/openssh/contrib/suse/openssh.spec
    M crypto/openssh/crypto_api.h
    M crypto/openssh/defines.h
    M crypto/openssh/ed25519.sh
    M crypto/openssh/gss-serv.c
    A crypto/openssh/kex-names.c
    M crypto/openssh/kex.c
    M crypto/openssh/kex.h
    M crypto/openssh/kexc25519.c
    M crypto/openssh/kexgen.c
    M crypto/openssh/kexgexs.c
    A crypto/openssh/kexmlkem768x25519.c
    M crypto/openssh/kexsntrup761x25519.c
    A crypto/openssh/libcrux_mlkem768_sha3.h
    M crypto/openssh/log.c
    M crypto/openssh/log.h
    M crypto/openssh/loginrec.c
    M crypto/openssh/m4/openssh.m4
    M crypto/openssh/match.c
    M crypto/openssh/misc.c
    M crypto/openssh/misc.h
    A crypto/openssh/mlkem768.sh
    M crypto/openssh/moduli
    A crypto/openssh/moduli.0
    M crypto/openssh/monitor.c
    M crypto/openssh/monitor.h
    M crypto/openssh/monitor_wrap.c
    M crypto/openssh/monitor_wrap.h
    M crypto/openssh/msg.c
    M crypto/openssh/mux.c
    M crypto/openssh/myproposal.h
    M crypto/openssh/nchan.c
    M crypto/openssh/openbsd-compat/arc4random.h
    M crypto/openssh/openbsd-compat/getrrsetbyname.c
    M crypto/openssh/openbsd-compat/openssl-compat.c
    M crypto/openssh/openbsd-compat/openssl-compat.h
    M crypto/openssh/openbsd-compat/port-linux.c
    M crypto/openssh/openbsd-compat/port-linux.h
    M crypto/openssh/packet.c
    M crypto/openssh/packet.h
    M crypto/openssh/pathnames.h
    A crypto/openssh/platform-listen.c
    M crypto/openssh/platform.c
    M crypto/openssh/platform.h
    M crypto/openssh/readconf.c
    M crypto/openssh/readpass.c
    M crypto/openssh/regress/cfginclude.sh
    M crypto/openssh/regress/cfgmatchlisten.sh
    M crypto/openssh/regress/dropbear-ciphers.sh
    M crypto/openssh/regress/dropbear-kex.sh
    M crypto/openssh/regress/key-options.sh
    M crypto/openssh/regress/misc/fuzz-harness/Makefile
    M crypto/openssh/regress/misc/fuzz-harness/agent_fuzz_helper.c
    M crypto/openssh/regress/misc/fuzz-harness/kex_fuzz.cc
    A crypto/openssh/regress/misc/fuzz-harness/mkcorpus_sntrup761.c
    M crypto/openssh/regress/misc/fuzz-harness/sig_fuzz.cc
    A crypto/openssh/regress/misc/fuzz-harness/sntrup761_dec_fuzz.cc
    A crypto/openssh/regress/misc/fuzz-harness/sntrup761_enc_fuzz.cc
    A crypto/openssh/regress/misc/fuzz-harness/watch-sntrup761.sh
    M crypto/openssh/regress/multiplex.sh
    A crypto/openssh/regress/penalty-expire.sh
    A crypto/openssh/regress/penalty.sh
    M crypto/openssh/regress/percent.sh
    M crypto/openssh/regress/rekey.sh
    M crypto/openssh/regress/sftp-cmds.sh
    M crypto/openssh/regress/test-exec.sh
    M crypto/openssh/regress/unittests/kex/test_kex.c
    M crypto/openssh/regress/unittests/sshkey/common.c
    M crypto/openssh/regress/unittests/sshkey/test_file.c
    M crypto/openssh/regress/unittests/sshkey/test_sshkey.c
    M crypto/openssh/regress/unittests/test_helper/fuzz.c
    M crypto/openssh/regress/yes-head.sh
    A crypto/openssh/scp.0
    M crypto/openssh/scp.c
    M crypto/openssh/servconf.c
    M crypto/openssh/servconf.h
    M crypto/openssh/serverloop.c
    M crypto/openssh/session.c
    M crypto/openssh/sftp-client.c
    A crypto/openssh/sftp-server.0
    M crypto/openssh/sftp-server.c
    A crypto/openssh/sftp.0
    M crypto/openssh/sftp.c
    M crypto/openssh/sntrup761.c
    M crypto/openssh/sntrup761.sh
    M crypto/openssh/srclimit.c
    M crypto/openssh/srclimit.h
    A crypto/openssh/ssh-add.0
    M crypto/openssh/ssh-add.1
    M crypto/openssh/ssh-add.c
    A crypto/openssh/ssh-agent.0
    M crypto/openssh/ssh-ecdsa-sk.c
    M crypto/openssh/ssh-ecdsa.c
    M crypto/openssh/ssh-gss.h
    A crypto/openssh/ssh-keygen.0
    M crypto/openssh/ssh-keygen.1
    M crypto/openssh/ssh-keygen.c
    A crypto/openssh/ssh-keyscan.0
    M crypto/openssh/ssh-keyscan.1
    M crypto/openssh/ssh-keyscan.c
    A crypto/openssh/ssh-keysign.0
    M crypto/openssh/ssh-keysign.8
    M crypto/openssh/ssh-keysign.c
    M crypto/openssh/ssh-pkcs11-client.c
    A crypto/openssh/ssh-pkcs11-helper.0
    M crypto/openssh/ssh-pkcs11-helper.c
    M crypto/openssh/ssh-pkcs11.c
    M crypto/openssh/ssh-rsa.c
    A crypto/openssh/ssh-sk-helper.0
    M crypto/openssh/ssh-sk.c
    A crypto/openssh/ssh.0
    M crypto/openssh/ssh.1
    M crypto/openssh/ssh_api.c
    A crypto/openssh/ssh_config.0
    M crypto/openssh/ssh_config.5
    M crypto/openssh/sshbuf-getput-crypto.c
    M crypto/openssh/sshbuf.c
    M crypto/openssh/sshbuf.h
    M crypto/openssh/sshconnect.c
    M crypto/openssh/sshconnect.h
    M crypto/openssh/sshconnect2.c
    A crypto/openssh/sshd-session.c
    A crypto/openssh/sshd.0
    M crypto/openssh/sshd.8
    M crypto/openssh/sshd.c
    A crypto/openssh/sshd_config.0
    M crypto/openssh/sshd_config.5
    M crypto/openssh/sshkey.c
    M crypto/openssh/sshkey.h
    M crypto/openssh/version.h

  Log Message:
  -----------
  OpenSSH 9.9p2

Merge commit '82d7d5c8990173f0fdef407422c0dbce34d5cba4'


  Commit: c58bea637656f4b536a394e8748c3f11345c6fb2
      https://github.com/MidnightBSD/src/commit/c58bea637656f4b536a394e8748c3f11345c6fb2
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2025-03-24 (Mon, 24 Mar 2025)

  Changed paths:
    M crypto/openssh/auth-pam.c
    M crypto/openssh/auth.c
    M crypto/openssh/blacklist.c
    M crypto/openssh/blacklist_client.h
    M crypto/openssh/config.h
    R crypto/openssh/config.h.in
    R crypto/openssh/configure
    R crypto/openssh/moduli.0
    R crypto/openssh/regress/misc/kexfuzz/Makefile
    R crypto/openssh/scp.0
    M crypto/openssh/servconf.c
    M crypto/openssh/servconf.h
    R crypto/openssh/sftp-server.0
    R crypto/openssh/sftp.0
    R crypto/openssh/ssh-add.0
    R crypto/openssh/ssh-agent.0
    R crypto/openssh/ssh-keygen.0
    R crypto/openssh/ssh-keyscan.0
    R crypto/openssh/ssh-keysign.0
    R crypto/openssh/ssh-pkcs11-helper.0
    R crypto/openssh/ssh-sk-helper.0
    R crypto/openssh/ssh.0
    M crypto/openssh/ssh_config
    R crypto/openssh/ssh_config.0
    M crypto/openssh/ssh_config.5
    M crypto/openssh/ssh_namespace.h
    M crypto/openssh/sshd-session.c
    R crypto/openssh/sshd.0
    M crypto/openssh/sshd.c
    M crypto/openssh/sshd_config
    R crypto/openssh/sshd_config.0
    M crypto/openssh/sshd_config.5
    M crypto/openssh/version.h

  Log Message:
  -----------
  syncup local changes again


  Commit: 8b3ca8ad322ae8e8ed4029de81d003b78cf6ad8d
      https://github.com/MidnightBSD/src/commit/8b3ca8ad322ae8e8ed4029de81d003b78cf6ad8d
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2025-03-24 (Mon, 24 Mar 2025)

  Changed paths:
    R secure/caroot/blacklisted/AddTrust_External_Root.pem
    R secure/caroot/blacklisted/AddTrust_Low-Value_Services_Root.pem
    R secure/caroot/blacklisted/Cybertrust_Global_Root.pem
    R secure/caroot/blacklisted/DST_Root_CA_X3.pem
    R secure/caroot/blacklisted/E-Tugra_Certification_Authority.pem
    A secure/caroot/blacklisted/Entrust_Root_Certification_Authority_-_G4.pem
    R secure/caroot/blacklisted/GeoTrust_Global_CA.pem
    R secure/caroot/blacklisted/GlobalSign_Root_CA_-_R2.pem
    R secure/caroot/blacklisted/Hongkong_Post_Root_CA_1.pem
    R secure/caroot/blacklisted/QuoVadis_Root_CA.pem
    A secure/caroot/blacklisted/SecureSign_RootCA11.pem
    A secure/caroot/blacklisted/Security_Communication_RootCA3.pem
    R secure/caroot/blacklisted/Security_Communication_Root_CA.pem
    R secure/caroot/blacklisted/Sonera_Class_2_Root_CA.pem
    R secure/caroot/blacklisted/Staat_der_Nederlanden_EV_Root_CA.pem
    R secure/caroot/blacklisted/Staat_der_Nederlanden_Root_CA_-_G2.pem
    A secure/caroot/blacklisted/SwissSign_Silver_CA_-_G2.pem
    R secure/caroot/blacklisted/Trustis_FPS_Root_CA.pem
    A secure/caroot/trusted/D-TRUST_BR_Root_CA_2_2023.pem
    A secure/caroot/trusted/D-TRUST_EV_Root_CA_2_2023.pem
    R secure/caroot/trusted/Entrust_Root_Certification_Authority_-_G4.pem
    A secure/caroot/trusted/FIRMAPROFESIONAL_CA_ROOT-A_WEB.pem
    R secure/caroot/trusted/SecureSign_RootCA11.pem
    A secure/caroot/trusted/SecureSign_Root_CA12.pem
    A secure/caroot/trusted/SecureSign_Root_CA14.pem
    A secure/caroot/trusted/SecureSign_Root_CA15.pem
    R secure/caroot/trusted/Security_Communication_RootCA3.pem
    R secure/caroot/trusted/SwissSign_Silver_CA_-_G2.pem
    A secure/caroot/trusted/TWCA_CYBER_Root_CA.pem
    M secure/lib/libssh/Makefile
    M secure/libexec/Makefile
    A secure/libexec/sshd-session/Makefile
    M secure/usr.sbin/sshd/Makefile

  Log Message:
  -----------
  Refresh ssh config.  update caroot certs


  Commit: a879f79d3d110fc8fc51f7d72a946154c9a18a04
      https://github.com/MidnightBSD/src/commit/a879f79d3d110fc8fc51f7d72a946154c9a18a04
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2025-03-24 (Mon, 24 Mar 2025)

  Changed paths:
    M UPDATING

  Log Message:
  -----------
  document


Compare: https://github.com/MidnightBSD/src/compare/ca451cabd025...a879f79d3d11

To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

More information about the Midnightbsd-cvs mailing list