update-plist: sync the two show-unknown implementations
Use fullstring rather than fullname so that directories are recognizable
in "Not found" warning. Wrap line like in the identical code on line 161.
from espie (whitespace tweak from me)
Fix multiple RFC 4462 (GSSAPIAuthentication) compliance problems
1) Remove an early failure return for GSSAPI authentication attempts
made for invalid accounts that yielded different behaviour for
valid vs invalid accounts.
2) Fix a situation where some GSSAPI requestes were not correctly
subjected to MaxAuthTries.
3) Fix a moderate pre-authentication resource DoS related to #2.
Add missing logging for error cases.
Report and fixes from Manfred Kaiser, milCERT AT
fix ownership and lifetime of several bits of client state that
need to persist for the life of the connection, especially the
cached hostkey that was being incorrectly freed early on some
paths, possibly allowing its use after free.
Reported by Zhenpeng (Leo) Lin from depthfirst.com
Fix cases in GSSAPI and keyboard-interactive authentication where
the minimum per-attempt delay was not being enforced.
Reported by Orange Cyberdefense Vulnerability Team
retire the cpp.sh script and install the cpp binary directly in /usr/bin
The cpp.sh wrapper script no longer serves any purpose:
* We no longer force the preprocessor into -traditional mode.
* Our compilers already define __GNUC__ for the preprocessor.
* The location of cpp is well known.
* Our compilers only use the standard include paths by default.
gcc4 testing by miod@
