diff options
| author | Ed Maste <emaste@FreeBSD.org> | 2026-05-12 20:24:10 +0000 |
|---|---|---|
| committer | Ed Maste <emaste@FreeBSD.org> | 2026-05-12 20:24:10 +0000 |
| commit | 644b4646c7acab87dc20d4e5dd53d2d9da152989 (patch) | |
| tree | 5c1df5530ccb0c91e7b49f87325931817ca0e19d /secure | |
| parent | beab4a237a45aea809e81802b9e1e9ff30f3d929 (diff) | |
| parent | 6409980cbba7323bd1c86249ed16f8bea9fa5490 (diff) | |
OpenSSH: Update to 10.1p1
Full release notes are available at
https://www.openssh.com/txt/release-10.1
Selected highlights from the release notes:
Potentially-incompatible changes
* ssh(1): add a warning when the connection negotiates a non-post
quantum key agreement algorithm.
* ssh(1), sshd(8): major changes to handling of DSCP marking/IPQoS
* ssh(1), sshd(8): deprecate support for IPv4 type-of-service (ToS)
keywords in the IPQoS configuration directive.
* ssh-add(1): when adding certificates to an agent, set the expiry
to the certificate expiry time plus a short (5 min) grace period.
* ssh-agent(1), sshd(8): move agent listener sockets from /tmp to
under ~/.ssh/agent for both ssh-agent(1) and forwarded sockets
in sshd(8).
Security
* ssh(1): disallow control characters in usernames passed via the
commandline or expanded using %-sequences from the configuration
file, and disallow \0 characters in ssh:// URIs.
New features
* ssh(1), sshd(8): add SIGINFO handlers to log active channel and
session information.
Sponsored by: The FreeBSD Foundation
Diffstat (limited to 'secure')
| -rw-r--r-- | secure/lib/libssh/Makefile | 4 | ||||
| -rw-r--r-- | secure/ssh.mk | 2 |
2 files changed, 3 insertions, 3 deletions
diff --git a/secure/lib/libssh/Makefile b/secure/lib/libssh/Makefile index 35883d4a9d42..4fc0082ba747 100644 --- a/secure/lib/libssh/Makefile +++ b/secure/lib/libssh/Makefile @@ -26,7 +26,7 @@ SRCS= ${LIBOPENSSH_SRCS} \ log.c match.c moduli.c nchan.c packet.c \ readpass.c ttymodes.c xmalloc.c addr.c addrmatch.c \ atomicio.c dispatch.c mac.c misc.c utf8.c \ - monitor_fdpass.c rijndael.c ssh-dss.c ssh-ecdsa.c ssh-ecdsa-sk.c \ + monitor_fdpass.c rijndael.c ssh-ecdsa.c ssh-ecdsa-sk.c \ ssh-ed25519-sk.c ssh-rsa.c dh.c \ msg.c dns.c entropy.c umac.c umac128.c \ ssh-pkcs11.c smult_curve25519_ref.c \ @@ -37,7 +37,7 @@ SRCS= ${LIBOPENSSH_SRCS} \ kexgexc.c kexgexs.c \ kexsntrup761x25519.c kexmlkem768x25519.c sntrup761.c kexgen.c \ sftp-realpath.c platform-pledge.c platform-tracing.c platform-misc.c \ - sshbuf-io.c + sshbuf-io.c misc-agent.c # Add ${SKSRCS} to avoid linking problems. SRCS+= ${SKSRCS} diff --git a/secure/ssh.mk b/secure/ssh.mk index 97dd089d98e8..816081df219e 100644 --- a/secure/ssh.mk +++ b/secure/ssh.mk @@ -7,7 +7,7 @@ SSHDIR= ${SRCTOP}/crypto/openssh SFTP_CLIENT_SRCS=sftp-common.c sftp-client.c sftp-glob.c SKSRCS= ssh-sk-client.c -CFLAGS+= -I${SSHDIR} -include ssh_namespace.h +CFLAGS+= -I${SSHDIR} -I${SSHDIR}/openbsd-compat/include -include ssh_namespace.h .if ${MK_KERBEROS_SUPPORT} != "no" CFLAGS+= -include krb5_config.h |