Merge V10.1P1 - #871

Open

Tess Gauthier (tgauth) wants to merge 396 commits into

PowerShell:latestw_allfrom

tgauth:merge-v10.1P1

This pull request is big! We're only showing the most recent 250 commits

Commits on Jul 24, 2025

Remove DEBUG_ACTIONS variable.
Darren Tucker (daztucker)
committed
259c66a
upstream: Help OpenSSH's PKCS#11 support kick its meth habit.
Damien Miller (djmdjm)
committed
a8c0e5c
upstream: factor out encoding of a raw ed25519 signature into its
Damien Miller (djmdjm)
committed
1641ab8
upstream: less stale reference to PKCS#1 1.5 hash OIDs; feedback
Damien Miller (djmdjm)
committed
9f8ccc3
upstream: this should include stdlib.h explicitly
Damien Miller (djmdjm)
committed
bf33a73

Commits on Jul 25, 2025

remove vestigial stub
Damien Miller (djmdjm)
committed
2f52699
include ssh-pkcs11-client.o as common dep
Damien Miller (djmdjm)
committed
03e9e99
update clang-16 -> clang-19
Damien Miller (djmdjm)
committed
33b4f05
upstream: test code now needs to link ssh-pkcs11-client.c any time
Damien Miller (djmdjm)
committed
203f5ac
unbreak !EC builds
Damien Miller (djmdjm)
committed
eedab8d
upstream: Don't snprintf a NULL since not all platforms support it.
Darren Tucker (daztucker)
committed
ed1e370
another attempt at fixing !EC builds
Damien Miller (djmdjm)
committed
550d2a4

Commits on Jul 26, 2025

Commits on Jul 30, 2025

Commits on Jul 31, 2025

upstream: Plug leak in case where sigp is passed as NULL. Coverity CID
Darren Tucker (daztucker)
committed
284abbe

Commits on Aug 1, 2025

Replace fbsd64ppc VM with physical host.
Darren Tucker (daztucker)
committed
b1c4ced

Commits on Aug 2, 2025

Commits on Aug 5, 2025

upstream: Set default IPQoS for interactive sessions to Expedited

Job Snijders (job)
authored and
Damien Miller (djmdjm)
committed
65909fa
upstream: Deprecate support for IPv4 type-of-service (TOS) IPQoS

Job Snijders (job)
authored and
Damien Miller (djmdjm)
committed
ec3465f
upstream: a bunch of the protocol extensions we support now have RFCs
Damien Miller (djmdjm)
committed
6ebd472

Commits on Aug 6, 2025

upstream: Use the operating system default DSCP marking for

Job Snijders (job)
authored and
Damien Miller (djmdjm)
committed
2a31009
upstream: when refusing a certificate for user authentication, log
Damien Miller (djmdjm)
committed
9ffa981
upstream: Improve sentence. ok djm@

Darren Tucker (daztucker)
authored and
Damien Miller (djmdjm)
committed
60b909f
upstream: all state related to the ssh connection should live in
Damien Miller (djmdjm)
committed
2ebc638

Commits on Aug 11, 2025

upstream: ssh(1): add a warning when the connection negotiates a
Damien Miller (djmdjm)
committed
0e1b8aa

Commits on Aug 12, 2025

upstream: Handle localtime_r() failure by return "UNKNOWN-TIME"

deraadt@openbsd.org
authored and
Damien Miller (djmdjm)
committed
8b6c1f4
upstream: fix typo, ok markus dtucker

Stuart Henderson (sthen)
authored and
Damien Miller (djmdjm)
committed
ab5074d

Commits on Aug 14, 2025

Commits on Aug 18, 2025

handle futex_time64 properly in seccomp sandbox
Damien Miller (djmdjm)
committed
a00f5b0
allow some socket syscalls in seccomp sandbox
Damien Miller (djmdjm)
committed
3a03910
upstream: make -E a no-op in sshd-auth. Redirecting logging to a
Damien Miller (djmdjm)
committed
80b5ffd
upstream: add channel_report_open() to report (to logs) open
Damien Miller (djmdjm)
committed
9b61679
upstream: SIGINFO handler for ssh(1) to dump active
Damien Miller (djmdjm)
committed
f807a59
upstream: SIGINFO handler for sshd(8) to dump active
Damien Miller (djmdjm)
committed
dc51470
upstream: Make ssh(1) and sshd(8) set IP QoS (aka IP_TOS, IPV6_TCLASS)
Damien Miller (djmdjm)
committed
2892390
wrap SIGINFO in ifdef
Damien Miller (djmdjm)
committed
b7ee13f
depend
Damien Miller (djmdjm)
committed
0560222
upstream: missing set_log_handler() call in ssh-auth.c, exposed after
Damien Miller (djmdjm)
committed
c2c8bae
upstream: cast
Damien Miller (djmdjm)
committed
ae44cd7
check for setsockopt IP_TOS in OpenBSD pledge
Damien Miller (djmdjm)
committed
9184fa3
depend
Damien Miller (djmdjm)
committed
6c84609
Match version instead of groups in connect-bigconf
Damien Miller (djmdjm)
committed
5e9ca80
Fix pledge(2) special casing
Damien Miller (djmdjm)
committed
3ef1a87

Commits on Aug 29, 2025

upstream: Delete unused accessor function

Job Snijders (job)
authored and
Damien Miller (djmdjm)
committed
ceca966
upstream: ssh_config.5: say "post-quantum" instead of "post quantum

caspar@openbsd.org
authored and
Damien Miller (djmdjm)
committed
908e9d5
upstream: remove experimental support for XMSS keys;
Damien Miller (djmdjm)
committed
a9a3f02

Commits on Sep 1, 2025

upstream: Make MaxStartups and PerSourceNetBlockSize first-match-wins
Damien Miller (djmdjm)
committed
683d0ab

Commits on Sep 2, 2025

Commits on Sep 4, 2025

Commits on Sep 5, 2025

Fill in missing system header files.
Darren Tucker (daztucker)
committed
9b2c5a2
Create replacement poll.h if needed.
Darren Tucker (daztucker)
committed
d45b17d
Create replacement paths.h if needed.
Darren Tucker (daztucker)
committed
5f09983
Create replacement util.h if needed.
Darren Tucker (daztucker)
committed
53887d8
Create replacement ifaddrs.h if needed.
Darren Tucker (daztucker)
committed
82fed51
Create replacement sys/time.h if needed.
Darren Tucker (daztucker)
committed
59b8070
Create replacement sys/stat.h if needed.
Darren Tucker (daztucker)
committed
ea586ed
Create replacement time.h if needed.
Darren Tucker (daztucker)
committed
cd9ba06
Reformat replacement header check one per line.
Darren Tucker (daztucker)
committed
60334af
Create replacement sys/un.h if needed.
Darren Tucker (daztucker)
committed
65dcdb5
Create replacement libgen.h if needed.
Darren Tucker (daztucker)
committed
4911f26
Remove stray #endif left from previous.
Darren Tucker (daztucker)
committed
7d30526
Create replacement netgroup.h if needed.
Darren Tucker (daztucker)
committed
caa973d
Move sys/time.h include to match upstream.
Darren Tucker (daztucker)
committed
c729a83
Add /* WITH_OPENSSL */ comments.
Darren Tucker (daztucker)
committed
a60721c
Create replacement endian.h if needed.
Darren Tucker (daztucker)
committed
6aac2be
Create replacement nlist.h if needed.
Darren Tucker (daztucker)
committed
f93de82
upstream: Remove unused rmd160.h header. ripemd160 support was
Darren Tucker (daztucker)
committed
932e9f2
upstream: Order headers as per KNF. Also removes diff vs
Darren Tucker (daztucker)
committed
19d6a7a
upstream: Order headers as per KNF. Removes diff vs portable.
Darren Tucker (daztucker)
committed
441a8fa
Reorder includes to match upstream.
Darren Tucker (daztucker)
committed
b34c16b
Move ssh-pkcs11.h include to match upstream.
Darren Tucker (daztucker)
committed
22cfd2d
Sync includes with upstream.
Darren Tucker (daztucker)
committed
aed6a95
Resync header order with upstream.
Darren Tucker (daztucker)
committed
024b694
Resync header order with upstream.
Darren Tucker (daztucker)
committed
bb8ac05
upstream: Order headers as per KNF.
Darren Tucker (daztucker)
committed
e803222
upstream: Order headers as per KNF. Removes diff vs portable.
Darren Tucker (daztucker)
committed
0ac179c
upstream: Order includes as per KNF and add time.h. Removes diff
Darren Tucker (daztucker)
committed
ee32a36
Check for nlist function.
Darren Tucker (daztucker)
committed
3ca274e

Commits on Sep 6, 2025

Use SSH_TUN_COMPAT_AF on FreeBSD.

Maxim Khon (mkhon)
authored and
Darren Tucker (daztucker)
committed
67a8bf4

Commits on Sep 7, 2025

Accept OpenSSL 4.0.0-dev versions.
Darren Tucker (daztucker)
committed
54abadd

Commits on Sep 8, 2025

modified: regress/rekey.sh
Tim Rice
committed
3d8ae7f

Commits on Sep 11, 2025

upstream: Tabs->spaces. Removes diff vs portable.

Darren Tucker (daztucker)
authored and
Damien Miller (djmdjm)
committed
d16b1b4
upstream: remove unused 0-sized files; ok deraadt@

jonathangray
authored and
Damien Miller (djmdjm)
committed
e9dcccc
upstream: When adding certificates to an agent, set the expiry to
Damien Miller (djmdjm)
committed
0c719c6
upstream: need time.h for time(3)
Damien Miller (djmdjm)
committed
7a4738a
upstream: correct getopt() string
Damien Miller (djmdjm)
committed
c60153e
upstream: disable ssh-add autoexpiry of certificates when testing
Damien Miller (djmdjm)
committed
edc6017

Commits on Sep 15, 2025

Commits on Sep 16, 2025

Add VM test targets via vmaction on Github.
Darren Tucker (daztucker)
committed
7c32e09
Use relative URLs for status
Darren Tucker (daztucker)
committed
2202e5f

Commits on Sep 17, 2025

Move Gihub VMs to their own status line.
Darren Tucker (daztucker)
committed
fc70405
Whitespace.
Darren Tucker (daztucker)
committed
8099339

Commits on Sep 19, 2025

upstream: log at level INFO when PerSourcePenalties actually blocks
Damien Miller (djmdjm)
committed
bc32814

Commits on Sep 20, 2025

Commits on Sep 22, 2025

Commits on Sep 23, 2025

Commits on Sep 25, 2025

upstream: spelling; ok dtucker@

jonathangray
authored and
Damien Miller (djmdjm)
committed
d858847
upstream: remove prototype for removed ssh_packet_set_tos() ok

jonathangray
authored and
Damien Miller (djmdjm)
committed
ae62a16
upstream: remove unneeded externs ok djm@

jonathangray
authored and
Damien Miller (djmdjm)
committed
0af7e5b
upstream: consistently use NULL for null pointer constants found

jonathangray
authored and
Damien Miller (djmdjm)
committed
6f28a93
upstream: clarify intent and avoid (harmess, defined behaviour)
Damien Miller (djmdjm)
committed
b62aa85
upstream: fix leaks of config objects in
Damien Miller (djmdjm)
committed
d0c1e73
upstream: add some functions to free various structs, including
Damien Miller (djmdjm)
committed
4fddebe
upstream: wait for the unprivileged sshd-auth process to exit
Damien Miller (djmdjm)
committed
a071af0
upstream: fix some leaks; feedback/ok dtucker@
Damien Miller (djmdjm)
committed
a8a2702
upstream: fix some leaks in ssh-add; feedback/ok dtucker@
Damien Miller (djmdjm)
committed
a1a7df8
upstream: fix some one-off leaks in ssh-keygen; ok dtucker@
Damien Miller (djmdjm)
committed
846987d
upstream: fix some one-off leaks in ssh.c; ok dtucker@
Damien Miller (djmdjm)
committed
8235dc3
Add #ifdefs in pwfree to match those in pwcopy.
Darren Tucker (daztucker)
committed
1362f6c
Merge all putty tests into a single test.
Darren Tucker (daztucker)
committed
7ce3823
Update pledge() interface to match current OpenBSD.
Darren Tucker (daztucker)
committed
35f3e2a
Remove status bits from OpenSSL >=3 version check.
Darren Tucker (daztucker)
committed
e914e61
Replace hand-rolled modulo with arc4random_uniform.
Darren Tucker (daztucker)
committed
6c3c9f0
upstream: Check return codes of sshbuf functions.
Darren Tucker (daztucker)
committed
37d996b

Commits on Sep 26, 2025

Commits on Sep 27, 2025

Stop testing OpenBSD ubsan until fixed upstream.
Darren Tucker (daztucker)
committed
b06a150

Commits on Sep 29, 2025

upstream: avoid use-after-free in update_krl_from_file() found with

jonathangray
authored and
Damien Miller (djmdjm)
committed
b1c4bf5
upstream: kbd-interactive device names should be matched against
Damien Miller (djmdjm)
committed
bcd88de
upstream: avoid spurious error message when loading certificates
Damien Miller (djmdjm)
committed
fda31e1
upstream: Null out keys after freeing in tests in the case where we
Darren Tucker (daztucker)
committed
c82f4dd
upstream: Sort headers as per KNF. Removes diff vs portable.
Darren Tucker (daztucker)
committed
dfb991b
upstream: Include misc.h. Removes diff vs portable.
Darren Tucker (daztucker)
committed
2f71b44
upstream: Move ifdef to start of file. Removes diff vs portable.
Darren Tucker (daztucker)
committed
90f49a1
upstream: Add explicit check for array overflow.
Darren Tucker (daztucker)
committed
893a579
ensure struct passwd fields are non-NULL in pwcopy

zhangjun
authored and
Damien Miller (djmdjm)
committed
d343df4
Don't log audit messages with UNKNOWN hostname

Allison Karlitskaya (allisonkarlitskaya)
authored and
Damien Miller (djmdjm)
committed
e5055ef

Commits on Sep 30, 2025

Commits on Oct 1, 2025

Commits on Oct 2, 2025

Pass COMPATINCLUDES down to openbsd-compat too.
Darren Tucker (daztucker)
committed
b9f6a84
upstream: backout r1.243 (fix for fatal during tab-completion with

Damien Miller (djmdjm)
authored and
Darren Tucker (daztucker)
committed
6a239b0
upstream: Relax array check slightly. Prevents compiler warnings
Darren Tucker (daztucker)
committed
3957cc2

Commits on Oct 3, 2025

upstream: include openssl/bn.h explicitly in files where we use BN_*
Damien Miller (djmdjm)
committed
a9cbe10

Commits on Oct 6, 2025

upstream: stray newline
Damien Miller (djmdjm)
committed
ade92f5
upstream: typos: a ssh* -> an ssh*

naddy@openbsd.org
authored and
Damien Miller (djmdjm)
committed
a0e5446
upstream: If write() returned short, the subsequent write would restart

Darren Tucker (daztucker)
authored and
Damien Miller (djmdjm)
committed
b9a640a
upstream: openssh-10.1
Damien Miller (djmdjm)
committed
981bb32
sync ssh-copy-id to upstream version 527be673f4d
Damien Miller (djmdjm)
committed
2fd0945
update versions
Damien Miller (djmdjm)
committed
af95657
depend
Damien Miller (djmdjm)
committed
476bab6
autogenerated files for release
Damien Miller (djmdjm)
committed
1dfb2c1

Commits on Jan 9, 2026

add GitHub Copilot files
Tess Gauthier (tgauth)
committed
d41503a
update instructions to branch off of current branch instead of latestw_all
Tess Gauthier (tgauth)
committed
1053ed3
remove direct references to scripts for mcp tools
Tess Gauthier (tgauth)
committed
2955382
fix default log location in tool
Tess Gauthier (tgauth)
committed
36c4826
create tool for merge process prerequisites
Tess Gauthier (tgauth)
committed
2ffcb0e
replace more direct scripts references to mcp tool references
Tess Gauthier (tgauth)
committed
4984b21
update mcp server name
Tess Gauthier (tgauth)
committed
63ac1ac
fix merge prereq tool
Tess Gauthier (tgauth)
committed
644bbf5
update merge prereq tool
Tess Gauthier (tgauth)
committed
1d8b201
update instructions
Tess Gauthier (tgauth)
committed
aa02282
update instructions
Tess Gauthier (tgauth)
committed
2bbb98e

Commits on Jan 23, 2026

fix tool to parse build log for success/failure and update instructions
Tess Gauthier (tgauth)
committed
76775b2
add merge prompt file
Tess Gauthier (tgauth)
committed
e379310
update tools
Tess Gauthier (tgauth)
committed
5b55ec2
update instructions to build only after batch of commits with a CI run
Tess Gauthier (tgauth)
committed
950bb1b
update prereq tool to use start-job with git cmd
Tess Gauthier (tgauth)
committed
ead71d7
update build instructions with paths.targets info
Tess Gauthier (tgauth)
committed
071bfba
refine instructions
Tess Gauthier (tgauth)
committed
332176b
tweak instructions
Tess Gauthier (tgauth)
committed
0bb51cd
update tool
Tess Gauthier (tgauth)
committed
29ad116

Commits on Jan 30, 2026

fix bug in tool
Tess Gauthier (tgauth)
committed
a1072a6
update instructions
Tess Gauthier (tgauth)
committed
c19ad3f

Commits on Feb 20, 2026

Commits on Mar 6, 2026

Commits on Mar 9, 2026

Merge branch 'PowerShell:latestw_all' into latestw_all_copilot
Tess Gauthier (tgauth)
authored
7801561

Commits on Mar 17, 2026

add scratch branch instructions
Tess Gauthier (tgauth)
committed
5f24965

Commits on Apr 15, 2026

refine instructions
Tess Gauthier (tgauth)
committed
232775d

Commits on Apr 16, 2026

add tool to invoke E2E CI
Tess Gauthier (tgauth)
committed
f06d9c8

Commits on May 7, 2026

add vcpkg tools
Tess Gauthier (tgauth)
committed
aca3117

Commits on May 15, 2026

Commits on May 27, 2026

add mcp.json
Tess Gauthier (tgauth)
committed
7864920
Document Invoke-Git Log Range constraint
Tess Gauthier (tgauth)
committed
12747fd
update invoke-git instructions
Tess Gauthier (tgauth)
committed
da1fa70
Merge instructions: disable rerere, default to smoke test per batch
Tess Gauthier (tgauth)
committed
8979cb5
revert unnecessary change
Tess Gauthier (tgauth)
committed
93d58ee
revert unnecessary change
Tess Gauthier (tgauth)
committed
18ab9d5

Commits on Jun 29, 2026

Commits on Jul 31, 2026

refine merge agent/tools/instructions
Tess Gauthier (tgauth)
committed
23a90d9

Commits on Aug 3, 2026

add token for mcp input to prevent throttling
Tess Gauthier (tgauth)
authored
8286dbd

Commits on Aug 18, 2026

Merge upstream OpenSSH V_10_1_P1
Tess Gauthier (tgauth)
committed
2570ffc

Commits on Aug 20, 2026

Apply Windows build fixes for V_10_1_P1 merge
Tess Gauthier (tgauth)
committed
0a1ae0f