Repository navigation

Port OpenSSH 10.6 to HPN-SSH - #166

Merged

rapier1 merged 126 commits into

masterfrom

dev_minor

Oct 8, 2026

Merged

Port OpenSSH 10.6 to HPN-SSH#166
rapier1 merged 126 commits into
masterfrom
dev_minor

Commits on Aug 11, 2026
- whitespace at eol
  djmdjm
  committed
  9f279dd
Commits on Aug 12, 2026
- Add 10.5 branch to test status display.
  daztucker
  committed
  0f69d9c
- Add NetBSD 11.0 test targets.
  daztucker
  committed
  effb576
- Update x11-ssh-askpass upstream location.
  daztucker
  committed
  54233bc
Commits on Aug 13, 2026
- Update NetBSD vmaction pin to pick up 11.0 release.
  daztucker
  committed
  5280556
Commits on Aug 15, 2026
- Add instructions for pin_actions.
  daztucker
  committed
  123dd1f
- upstream: Refer to id_mldsa44_ed25519.pub in the pubkey list. bz#3989.
  daztucker
  committed
  d68a940
- Require kSBXProfilePureComputation for OS X sandbox.
  daztucker
  committed
  d4b4c30
Commits on Aug 16, 2026
- Add newer OS X and Ubunty 26.04 test targets.
  daztucker
  committed
  9ee20dd
Commits on Aug 17, 2026
- Fix quoting in failed log output step.
  daztucker
  committed
  5e8b37c
- Install libcrypt-dev package.
  daztucker
  committed
  5c54946
- Update dependencies for Debian derivatives.
  daztucker
  committed
  ecbf552
Commits on Aug 18, 2026
- Make FIDO2 packages optional.
  daztucker
  committed
  c8ee95a
- Group command for Yubico PPA correctly.
  daztucker
  committed
  a76abf9
Commits on Aug 20, 2026
- special treatment for a more Turkic languages
  djmdjm
  committed
  83e4144
- Remove ubuntu-26.04-arm kitchensink test target.
  daztucker
  committed
  8559569
- Skip scp3 test on macosx 26 until debugged.
  daztucker
  committed
  a1466f8
Commits on Aug 21, 2026
- Move le32toh and friends to after platform flags.
  daztucker
  committed
  0ef0f5a
Commits on Sep 1, 2026
- allow PAMServiceName in Match (regressed in 10.4)
  djmdjm
  committed
  c66bef0
Commits on Sep 2, 2026
- upstream: Bump size of key comment buffers. Prevents warnings on
  
  daztucker
  authored and
  djmdjm
  committed
  1167529
- upstream: grammar; a -> an
  
  jonathangray
  authored and
  djmdjm
  committed
  a17337d
- upstream: IANA has allocated a non-vendor codepoint for
  djmdjm
  committed
  27eaaf0
- upstream: reenable ssh-mldsa44-ed25519 at a low priority position
  djmdjm
  committed
  8e96478
Commits on Sep 3, 2026
- seccomp sandbox: restrict mremap flags
  djmdjm
  committed
  769728b
- set -Wno-error=discarded-qualifiers
  djmdjm
  committed
  7fe3b24
Commits on Sep 15, 2026
- upstream: Remove scp '-s' flag from synopsis, the flag has been a
  
  job
  authored and
  djmdjm
  committed
  8cae676
- upstream: update fingerprint example from RSA to Ed25519 host key
  
  naddy@openbsd.org
  authored and
  djmdjm
  committed
  f6ddc80
- upstream: Change three paragraphs in different parts of the manual
  
  ischwarze
  authored and
  djmdjm
  committed
  0e1c435
- upstream: Use getexecpath(3); if it fails use argv[0] as before
  
  deraadt@openbsd.org
  authored and
  djmdjm
  committed
  327fb6c
- upstream: Add '-p' to sftp mkdir/lmkdir to create directories as
  
  job
  authored and
  djmdjm
  committed
  d991f23
- upstream: add a "hexdump" export mode that dumps the key blob in
  djmdjm
  committed
  7cc27ce
- upstream: don't attempt to set TCP_NODELAY on non-AF_INET[6]
  djmdjm
  committed
  4fc2225
- upstream: mux proxy sockets also share in and out fds, so using
  djmdjm
  committed
  7f671c4
- upstream: fix case for ssh -G option output; bz4005, reported by
  djmdjm
  committed
  8abd726
- allow madvise(..., MADV_DONTNEED_LOCKED)
  djmdjm
  committed
  78db1b7
- upstream: Fix ChannelTimeout specificity
  djmdjm
  committed
  02cf3c2
- upstream: disconnect_controlling_tty() is the only thing from sshpty.c
  djmdjm
  committed
  a7f490e
- upstream: g/c prototype
  djmdjm
  committed
  21abb62
- upstream: wrap line
  djmdjm
  committed
  6d55848
- sshd doesn't need sshpty.c any more
  djmdjm
  committed
  563087a
- upstream: warnings fixes (static vs missing prototype, sign conversion)
  djmdjm
  committed
  a92ec36
- Don't link sshd against libselinux
  
  cjwatson
  authored and
  djmdjm
  committed
  d916633
- upstream: the default KDF rounds for keys generated by ssh-keygen
  djmdjm
  committed
  9713aaa
- upstream: minor leak of fingerprint text when printing
  djmdjm
  committed
  2eff38e
- upstream: replace testing of vendor PQ signature algorithm
  djmdjm
  committed
  fb9aad7
- openpty: mark inputs const
  
  vapier
  authored and
  djmdjm
  committed
  b99b848
- upstream: sftp: don't crash when glob(3) results lack stat information
  djmdjm
  committed
  805388d
- upstream: Fix memory leak on an error path in mkdir_path
  
  job
  authored and
  djmdjm
  committed
  961cc92
- upstream: sk-usbhid: preserve UV requirement for resident keys
  djmdjm
  committed
  e1d1c95
- upstream: Correct handling of DST when converting dates
  djmdjm
  committed
  aef20df
- fix merge botch that put lines in wrong function
  djmdjm
  committed
  ae7373d
Commits on Sep 16, 2026
- upstream: Mask SIGTERM/SIGQUIT when processing a SIGHUP restart
  djmdjm
  committed
  0f90a84
- upstream: Extend TCPKeepAlive to support forwardings too
  djmdjm
  committed
  8895b5a
- upstream: Account pubkey checks separately to auth attempts
  djmdjm
  committed
  14843e7
- upstream: Allow specification of agent socket directories
  djmdjm
  committed
  cee6aed
- upstream: Add WarnWeakCrypto to sshd
  djmdjm
  committed
  813f670
- upstream: Check key and CA sig type during key parsing
  djmdjm
  committed
  65666f4
- upstream: Propagate authorized_keys "resrict" keyword
  djmdjm
  committed
  991f1f3
- upstream: Correctly handle some options that accept "none"
  djmdjm
  committed
  526fd27
- upstream: Reset GSSAPI client state before authentication
  djmdjm
  committed
  670510d
- upstream: Only store GSSAPI creds when authn succeeds
  djmdjm
  committed
  6f9cd19
- upstream: switch from SUPERCOP ed25519 to libsodium
  djmdjm
  committed
  eab9166
- upstream: missing part of previous commit: update script to
  djmdjm
  committed
  c5c4ca2
- upstream: adapt to libsodium ed25519 implementation
  djmdjm
  committed
  fc5bed4
- upstream: whitespace
  djmdjm
  committed
  bc15793
- sync readpassphrase(3) with OpenBSD libc
  djmdjm
  committed
  58db2ec
- unbreak readpassphrase.c sync
  djmdjm
  committed
  e3cb2b2
- upstream: correctly check sshauthopt->restricted merging
  djmdjm
  committed
  ded92bf
- upstream: Add missing semicolon after return. CID 913599, ok
  
  daztucker
  authored and
  djmdjm
  committed
  e158e00
- upstream: fix inverted logic that could cause a memleak; spotted en
  djmdjm
  committed
  56c1d08
- upstream: leaks on error paths; spotted by Coverity CID 913598
  djmdjm
  committed
  600eca5
- upstream: simpler
  djmdjm
  committed
  a30bafc
- upstream: bz3635 - ssh-add -P to skip PIN entry
  djmdjm
  committed
  3c11ea4
- upstream: masking signals requried sigaddset, not sigdelset; bz3981
  djmdjm
  committed
  43f59b8
- upstream: convert channel timeouts to use floating points, allows
  djmdjm
  committed
  a253258
- Also skip scp3 test on Darwin 26 and 27.
  daztucker
  committed
  d0078f8
- upstream: spelling; ok deraadt@
  
  jonathangray
  authored and
  daztucker
  committed
  efea9b3
- upstream: Use equality not assignment in ternary. CID 913600.
  daztucker
  committed
  92120fe
- upstream: Use >= instead of > for max comparison so that the
  daztucker
  committed
  a738c19
- Add fallback for mkdir_path() without openat().
  daztucker
  committed
  fb6d39e
Commits on Sep 17, 2026
- Remove leftover from testing.
  daztucker
  committed
  a6fd293
- upstream: draft-ietf-sshm-ssh-agent became RFC 9987 ok dtucker@
  
  jonathangray
  authored and
  daztucker
  committed
  3994b0b
- upstream: tweak 1.406: minor wording and markup OK djm@
  
  ischwarze
  authored and
  daztucker
  committed
  8359ec1
- upstream: an abbreviation ending in a dot at EOL requires escaping
  
  ischwarze
  authored and
  daztucker
  committed
  967d4d0
- upstream: Plug leak. CID 913600.
  daztucker
  committed
  bc41d06
Commits on Sep 20, 2026
- Don't deref NULL on STREAMS tty alloc failure.
  daztucker
  committed
  b836083
- upstream: use Nm instead of Xr to self
  
  jonathangray
  authored and
  daztucker
  committed
  62ed23d
- upstream: Better wording.
  daztucker
  committed
  eabf198
- Add FreeBSD 15 test targets.
  daztucker
  committed
  ffdb780
Commits on Sep 21, 2026
- Ignore build/install status of netcat in tests.
  daztucker
  committed
  a5094d4
Commits on Sep 22, 2026
- Remove the NetBSD BROKEN_READ_COMPARISON workaround.
  daztucker
  committed
  a765b86
- upstream: Include local and remote versions in ~I connection info.
  daztucker
  committed
  941d763
- upstream: avoid race between multiple processes attempting to
  
  djmdjm
  authored and
  daztucker
  committed
  2a72e97
- upstream: check ssh's handling of stale multiplexing sockets From Jens
  djmdjm
  committed
  ccc26c7
Commits on Sep 30, 2026
- upstream: Disable LZ77 dictionary coder to avoid a potential
  
  job
  authored and
  djmdjm
  committed
  1d5340f
- upstream: ssh-agent: fix socket cleanup for -a option (no pathspec)
  djmdjm
  committed
  d4ed84e
- upstream: ssh-agent: no unlink(2) on empty filename
  djmdjm
  committed
  ed67a24
- upstream: Check that compressed payloads don't inflate beyond the
  
  job
  authored and
  djmdjm
  committed
  e0f85d8
- upstream: backout
  djmdjm
  committed
  fc6ca48
- upstream: Disallow nul byte in received scp -O filename. Not
  
  daztucker
  authored and
  djmdjm
  committed
  e27b6cc
Commits on Oct 1, 2026
Commits on Oct 3, 2026
- upstream: make StreamLocalBindMask properly respect Host/Match
  djmdjm
  committed
  bc00e06
- upstream: make StreamLocalBindMask properly first-match-wins;
  djmdjm
  committed
  d1d37e2
- Pull older NetBSD sudo package from archive.
  daztucker
  committed
  e0f28ca
- Replace native ARM runner with remote runner.
  daztucker
  committed
  4f4bee9
- Remove NetBSD 9.0 test target.
  daztucker
  committed
  15289cc
Commits on Oct 5, 2026
- upstream: Further restrict the characters allowed in a command-line
  
  daztucker
  authored and
  djmdjm
  committed
  0c4c9a7
- Don't automatically enable FORTIFY_SOURCE.
  daztucker
  committed
  4b29da5
Commits on Oct 6, 2026
- disable features when post-auth sshd runs as root
  djmdjm
  committed
  b37c095
- remove the --disable-fd-passing configure option
  djmdjm
  committed
  ac6ad1a
- upstream: backout regress bits related to multiplexing change
  djmdjm
  committed
  630144f
- upstream: Add test for proxycommand percent expansions.
  
  daztucker
  authored and
  djmdjm
  committed
  1058092
- upstream: openssh-10.6
  djmdjm
  committed
  b27b24b
- update RPM spec files
  djmdjm
  committed
  ce43722
- .depend
  djmdjm
  committed
  fdda125
- autogenerated files for release
  djmdjm
  committed
  94374c4
- avoid ksh-ism in regress test
  djmdjm
  committed
  a8c72b8
- First pass at porting OpenSSH 10.6 to HPN-SSH
  rapier1
  committed
  a1deb1d
- Update ChangeLog
  rapier1
  committed
  7c20f34
- We changed PACKET_MAX_SIZE from a define to a global a while ago.
  rapier1
  committed
  41756f9
- scp-resume was checking sftp as well.
  rapier1
  committed
  e70846f

Commits

Commits on Aug 11, 2026

Commits on Aug 12, 2026

Commits on Aug 13, 2026

Commits on Aug 15, 2026

Commits on Aug 16, 2026

Commits on Aug 17, 2026

Commits on Aug 18, 2026

Commits on Aug 20, 2026

Commits on Aug 21, 2026

Commits on Sep 1, 2026

Commits on Sep 2, 2026

Commits on Sep 3, 2026

Commits on Sep 15, 2026

Commits on Sep 16, 2026

Commits on Sep 17, 2026

Commits on Sep 20, 2026

Commits on Sep 21, 2026

Commits on Sep 22, 2026

Commits on Sep 30, 2026

Commits on Oct 1, 2026

Commits on Oct 3, 2026

Commits on Oct 5, 2026

Commits on Oct 6, 2026