Upgrade OpenSSH to 7.3p1.This is the last version of OpenSSH which does not break compatibilitymore than we can live with in a stable branch. Further commits willfollow to backport some bug fixes from newer versions.The sshd breakage in the previous attempt was due to an upstream bug(a 0 was changed to a 1 while refactoring send_rexec_state() in sshd.c)which only manifested itself when sshd was built with SSH 1 support.Approved by: re@
Revert OpenSSH 7.3p1; something went wrong between testing and committing.Approved by: re@
Upgrade OpenSSH to 7.3p1.This is the last version of OpenSSH which does not break compatibilitymore than we can live with in a stable branch. Further commits willfollow to backport some bug fixes from newer versions.Approved by: re@
MFH (r296633): upgrade to 7.2p2 (fixes xauth command injection bug)MFH (r296634): re-add aes-cbc to server-side default cipher listMFH (r296651, r296657): fix gcc build of pam_sshPR: 207679Security: CVE-2016-3115
MFH (r265214, r294333, r294407, r294467): misc prop fixesMFH (r285975, r287143): register mergeinfo for security fixesMFH (r294497, r294498, r295139): internal documentationMFH (r294328): upgrade to openssh 6.7p1, re-add libwrapMFH (r294332): upgrade to openssh 6.8p1MFH (r294367): update pam_ssh for api changesMFH (r294909): switch usedns back onMFH (r294336): upgrade to openssh 6.9p1MFH (r294495): re-enable dsa keysMFH (r294464): upgrade to openssh 7.0p1MFH (r294496): upgrade to openssh 7.1p2Approved by: re (gjb)Relnotes: yes
Upgrade to OpenSSH 6.7p1, retaining libwrap support (which has been removedupstream) and a number of security fixes which we had already backported.MFC after: 1 week
Vendor import of OpenSSH 6.7p1.