vendor/OPENSSH: upgrade from 8.8p1 top 9.1p1 vendor/OPENSSH
authorAntonio Huete Jimenez <tuxillo@quantumachine.net>
Sun, 27 Nov 2022 17:51:33 +0000 (18:51 +0100)
committerAntonio Huete Jimenez <tuxillo@quantumachine.net>
Sun, 27 Nov 2022 17:51:33 +0000 (18:51 +0100)
commitee11649955f6d79a768fb07c92b27e3ea6ebbd2a
tree95289e14e248d03ea247f98d56211cc02d7de1d1
parent50a69bb51183a7916e776f2c9f5fa64c999f1a2f
vendor/OPENSSH: upgrade from 8.8p1 top 9.1p1

Summary of notable changes:

 * sshd(8): fix an integer overflow in the user authentication path
 * ssh(1), sshd(8), ssh-add(1), ssh-agent(1): add a system for
   restricting forwarding and use of keys added to ssh-agent(1)
 * ssh(1): unbreak hostbased auth using RSA keys.
 * sshd(8): fix truncation in rhosts/shosts path construction.
 * ssh(1), sshd(8): use the hybrid Streamlined NTRU Prime + x25519 key
   exchange method by default ("sntrup761x25519-sha512@openssh.com").
   The NTRU algorithm is believed to resist attacks enabled by future
   quantum computers.
 * sftp(1): add a "cp" command to allow the sftp client to perform
   server-side file copies.
 * scp(1): fix a memory leak in argument processing.
 * ssh-keygen(1): double free() in error path of file hashing step in
   signing/verify code;
 * ssh-keyscan(1): fix a one-byte overflow in SSH- banner processing.
   Reported by Qualys
 * sftp-server(8): add a "users-groups-by-id@openssh.com" extension
   request that allows the client to obtain user/group names that
   correspond to a set of uids/gids.
 * sshd(8): improve logging of errors when opening authorized_keys
   files.

For a detailed list of changes, please check:
https://www.openssh.com/releasenotes.html
113 files changed:
crypto/openssh/LICENCE
crypto/openssh/PROTOCOL
crypto/openssh/PROTOCOL.agent
crypto/openssh/PROTOCOL.key
crypto/openssh/PROTOCOL.mux
crypto/openssh/README
crypto/openssh/addr.c
crypto/openssh/atomicio.c
crypto/openssh/auth-options.c
crypto/openssh/auth-rhosts.c
crypto/openssh/auth.c
crypto/openssh/auth.h
crypto/openssh/auth2-hostbased.c
crypto/openssh/auth2-kbdint.c
crypto/openssh/auth2-none.c
crypto/openssh/auth2-passwd.c
crypto/openssh/auth2-pubkey.c
crypto/openssh/auth2-pubkeyfile.c [new file with mode: 0644]
crypto/openssh/auth2.c
crypto/openssh/authfd.c
crypto/openssh/authfd.h
crypto/openssh/authfile.c
crypto/openssh/channels.c
crypto/openssh/channels.h
crypto/openssh/cipher.c
crypto/openssh/clientloop.c
crypto/openssh/compat.c
crypto/openssh/defines.h
crypto/openssh/dns.c
crypto/openssh/hostfile.c
crypto/openssh/includes.h
crypto/openssh/kex.c
crypto/openssh/kex.h
crypto/openssh/kexgen.c
crypto/openssh/kexgexc.c
crypto/openssh/kexgexs.c
crypto/openssh/kexsntrup761x25519.c
crypto/openssh/krl.c
crypto/openssh/loginrec.c
crypto/openssh/misc.c
crypto/openssh/misc.h
crypto/openssh/moduli
crypto/openssh/moduli.5
crypto/openssh/moduli.c
crypto/openssh/monitor.c
crypto/openssh/monitor_wrap.c
crypto/openssh/monitor_wrap.h
crypto/openssh/mux.c
crypto/openssh/myproposal.h
crypto/openssh/nchan.c
crypto/openssh/packet.c
crypto/openssh/packet.h
crypto/openssh/platform.c
crypto/openssh/platform.h
crypto/openssh/readconf.c
crypto/openssh/readconf.h
crypto/openssh/readpass.c
crypto/openssh/rijndael.h
crypto/openssh/scp.1
crypto/openssh/scp.c
crypto/openssh/servconf.c
crypto/openssh/servconf.h
crypto/openssh/serverloop.c
crypto/openssh/session.c
crypto/openssh/sftp-client.c
crypto/openssh/sftp-client.h
crypto/openssh/sftp-common.c
crypto/openssh/sftp-common.h
crypto/openssh/sftp-glob.c
crypto/openssh/sftp-server-main.c
crypto/openssh/sftp-server.c
crypto/openssh/sftp-usergroup.c [new file with mode: 0644]
crypto/openssh/sftp-usergroup.h [copied from crypto/openssh/platform.h with 50% similarity]
crypto/openssh/sftp.1
crypto/openssh/sftp.c
crypto/openssh/sk-api.h
crypto/openssh/ssh-add.1
crypto/openssh/ssh-add.c
crypto/openssh/ssh-agent.1
crypto/openssh/ssh-agent.c
crypto/openssh/ssh-ed25519.c
crypto/openssh/ssh-keygen.1
crypto/openssh/ssh-keygen.c
crypto/openssh/ssh-keyscan.1
crypto/openssh/ssh-keyscan.c
crypto/openssh/ssh-keysign.8
crypto/openssh/ssh-keysign.c
crypto/openssh/ssh-pkcs11-helper.8
crypto/openssh/ssh-pkcs11-helper.c
crypto/openssh/ssh-sk-client.c
crypto/openssh/ssh-sk.h
crypto/openssh/ssh.1
crypto/openssh/ssh.c
crypto/openssh/ssh_config.5
crypto/openssh/sshbuf-getput-basic.c
crypto/openssh/sshbuf-getput-crypto.c
crypto/openssh/sshbuf-misc.c
crypto/openssh/sshbuf.c
crypto/openssh/sshbuf.h
crypto/openssh/sshconnect.c
crypto/openssh/sshconnect2.c
crypto/openssh/sshd.8
crypto/openssh/sshd.c
crypto/openssh/sshd_config.5
crypto/openssh/sshkey.c
crypto/openssh/sshkey.h
crypto/openssh/sshlogin.c
crypto/openssh/sshsig.c
crypto/openssh/sshsig.h
crypto/openssh/umac.c
crypto/openssh/umac.h
crypto/openssh/version.h
crypto/openssh/xmalloc.c