pw_equal: include the password field in the comparison
This fixes a potential race condition where if the user runs chpass(1)
and suspends it, chpass(1) will update the password hash after the
editor is resumed, even if the password has been changed in the
meantime.
From by Acts1631.
Add a storage process to snmpd, which lives in /var/db/snmpd, and use it to
store SNNMP engine information.
Previously snmpEngineBoots was hardcoded to 0, and snmpEngineTime was set
to CLOCK_REALTIME. Having snmpEngineBoots set to 0 is against the
specifications, and snmpEngineTime is a 32 bit integer and thus would
overflow in 2038. With the storage process we start snmpEngineBoots at 1,
and increment it by 1 on every restart as per RFC3414, and snmpEngineTime
is set to the amount of seconds the engine has been up using
CLOCK_MONOTONIC.
feedback and OK jmatthew@
rpki-client: rename crldp to dps in cert_crldp()
In a later commit I want to use crldp for something else. The one CRL
distribution point is called dp, so call the stack of distribution points
dps.
ok job
make a AuthorizedPrincipalsCommand with no specified arguments do what
it is documented to do: supply the target username as a default argument.
Anthropic ANT-2026-YX19N77E
when updating known_hosts files for UpdateHostKeys, bail out if the
unable to write to the first known_hosts file in the list.
Avoids a situation where a host key could be fully removed from all
known_hosts files.
Anthropic ANT-2026-YH3JNW7S
when uploading/crossloading, prefer to use LSETSTAT as it makes it more
difficult for a local attacker on the destination play tricks where
they replace paths around the time where the client is restoring
permissions on things.
Also skip setting permissions entirely when its not necessary to do so.
Anthropic ANT-2026-Y4XK22QX
nul-delemit the concatenation of user/hosts/port/etc that is hashed
to generate the %C token. This avoids ambiguiuties like 10.0.0.1 port 2222,
10.0.0.12 port 222 and 10.0.0.122 port 22 all hashing to the same value.
Anthropic ANT-2026-WLVAFTWQ
when StrictHostkeyChecking=no and an changed/revoked host key was permitted
by the user anyway, ssh(1) turns off a bunch of more risk options including
various forwardings. Unfortunately we had previously neglected to turn them
off over the mux channel.
Anthropic ANT-2026-VFW3JCKW
relayd: refactor config_getrelayfd
Based on a GCC16 warning (Although it wasnt a useful warning, it did show that
something was ugly here). Unknown fd types and imsgs without an fd are now
treated as errors instead of being silently ignored.
OK and tweak tb, OK kirill
more completely close mux fds when the owning process goes away.
Avoid case where the server could still write stderr data while in
the DRAIN state if it never sent a CLOSE
Anthropic ANT-2026-T8GUCMJY
be more careful when killing a ProxyCommand (including implicit ProxyJump
ones); observe if it already has exited via the main ssh.c SIGCHLD handler
and wrap the kill in sigprocmask() to avoid races.
Prevents SIGHUP from being delivered to an unrelated process if the proxy
command's PID is recycled.
Antropic ANT-2026-ODQD8QBH
Correctly error on a algorithm allowlist that removes all algorithms, e.g.
`PubkeyAcceptedAlgorithms -*` rather than defaulting back to the full list
Anthropic ANT-2026-O2RQ9GNA
set a glob(3) error callback when globbing Include files to allow
discrimination between missing files/directories and failure to open
a file or directory.
Avoids possible (though unlikely) situation where a local attacker could
cause an Include'd file from being processed by doing tricks like hitting
fd limits at the right time.
Anthropic ANT-2026-NF7CR4JX
be more liberal in accepting tab-separated @revoked markers in known_hosts
These shouldn't be ignored if the user picked the wrong whitespace...
Anthropic ANT-2026-LIFVTX5L
make `ssh-keygen -H` (hash a known_hosts file) also strip comments from
the output. The intention is to obscure the hostnames and so including
comments, especially ones that come from ssh-keyscan, totally defeats
the purpose
Anthropic ANT-2026-KI130WJG
