src/crypto/openssh/sshbuf-getput-basic.c, branch releng/12.2

Fix portability issues with the Capsicum patch committed in r339216:

2018-10-09T19:27:42+00:00

- Wrap access to pw_change and pw_expire in the appropriate #ifdefs.
- Wrap calls to login_cap(3) API in appropriate #ifdefs.
- Add wrapper for transferring time_t, which is still only 32 bits wide
  on FreeBSD i386.
- Use a temporary variable to deserialize size_t.

Approved by:	re (gjb)

sshd: address capsicum issues

2018-10-06T21:32:55+00:00

* Add a wrapper to proxy login_getpwclass(3) as it is not allowed in
  capability mode.
* Cache timezone data via caph_cache_tzdata() as we cannot access the
  timezone file.
* Reverse resolve hostname before entering capability mode.

PR:		231172
Submitted by:	naito.yuichiro@gmail.com
Reviewed by:	cem, des
Approved by:	re (rgrimes)
MFC after:	3 weeks
Differential Revision:	https://reviews.freebsd.org/D17128

Upgrade to OpenSSH 7.6p1. This will be followed shortly by 7.7p1.

2018-05-08T23:13:11+00:00

This completely removes client-side support for the SSH 1 protocol,
which was already disabled in 12 but is still enabled in 11.  For that
reason, we will not be able to merge 7.6p1 or newer back to 11.

Upgrade to OpenSSH 7.3p1.

2017-03-02T00:11:32+00:00

Upgrade to OpenSSH 7.2p2.

2016-03-11T00:15:29+00:00

Upgrade to OpenSSH 6.8p1.

2016-01-19T18:28:23+00:00

Upgrade to OpenSSH 6.7p1, retaining libwrap support (which has been removed

2016-01-19T16:18:26+00:00

upstream) and a number of security fixes which we had already backported.

MFC after:	1 week