{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":522798335,"defaultBranch":"android10-c2f2-release","name":"platform.external.openssh","ownerLogin":"msft-mirror-aosp","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2022-08-09T04:13:42.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/110863370?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1725497897.0","currentOid":""},"activityList":{"items":[{"before":"ef2d7f2d3e1b4c9ae71bacf963e76a92ab8be543","after":"3f02368e8e9121847727c46b280efc280e5eb615","ref":"refs/heads/upstream-master","pushedAt":"2024-09-26T00:46:43.000Z","pushType":"push","commitsCount":11,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"upstream: fix regression introduced when I switched the \"Match\"\n\ncriteria tokeniser to a more shell-like one. Apparently the old tokeniser\n(accidentally?) allowed \"Match criteria=argument\" as well as the \"Match\ncriteria argument\" syntax that we tested for.\n\nPeople were using this syntax so this adds back support for\n\"Match criteria=argument\"\n\nbz3739 ok dtucker\n\nOpenBSD-Commit-ID: d1eebedb8c902002b75b75debfe1eeea1801f58a","shortMessageHtmlLink":"upstream: fix regression introduced when I switched the \"Match\""}},{"before":"c21c3a2419bbc1c59cb1a16ea356e703e99a90d9","after":"ef2d7f2d3e1b4c9ae71bacf963e76a92ab8be543","ref":"refs/heads/upstream-master","pushedAt":"2024-09-19T00:46:29.000Z","pushType":"push","commitsCount":18,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"include openbsd-compat/base64.c license in LICENSE","shortMessageHtmlLink":"include openbsd-compat/base64.c license in LICENSE"}},{"before":"13cc78d016b67a74a67f1c97c7c348084cd9212c","after":"c21c3a2419bbc1c59cb1a16ea356e703e99a90d9","ref":"refs/heads/upstream-master","pushedAt":"2024-09-12T00:56:15.000Z","pushType":"push","commitsCount":13,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"upstream: Relax absolute path requirement back to what it was prior to\n\nOpenSSH 9.8, which incorrectly required that sshd was started with an\nabsolute path in inetd mode. bz3717, patch from Colin Wilson\n\nOpenBSD-Commit-ID: 25c57f22764897242d942853f8cccc5e991ea058","shortMessageHtmlLink":"upstream: Relax absolute path requirement back to what it was prior to"}},{"before":"05f2b141cfcc60c7cdedf9450d2b9d390c19eaad","after":"13cc78d016b67a74a67f1c97c7c348084cd9212c","ref":"refs/heads/upstream-master","pushedAt":"2024-09-05T00:58:17.000Z","pushType":"push","commitsCount":8,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"upstream: be more strict in parsing key type names. Only allow\n\nshortnames (e.g \"rsa\") in user-interface code and require full SSH protocol\nnames (e.g. \"ssh-rsa\") everywhere else.\n\nPrompted by bz3725; ok markus@\n\nOpenBSD-Commit-ID: b3d8de9dac37992eab78adbf84fab2fe0d84b187","shortMessageHtmlLink":"upstream: be more strict in parsing key type names. Only allow"}},{"before":null,"after":"7146634235df2b4dbd659e048cedba763b2c68a9","ref":"refs/heads/android12-platform-s1-release","pushedAt":"2024-09-05T00:58:17.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"Snap for 7163567 from 393ead3e4a22c473a4d316e47f9bbda36f638188 to sc-release\n\nChange-Id: I700da70fb9f89ff8e2615dad0ec7e14fbd8750cd","shortMessageHtmlLink":"Snap for 7163567 from 393ead3 to sc-release"}},{"before":null,"after":"8a8a8164b9fc2fcf730289ba40851f6de2db3e8f","ref":"refs/heads/android12L-platform-s1-release","pushedAt":"2024-09-05T00:58:17.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"Snap for 7163567 from 393ead3e4a22c473a4d316e47f9bbda36f638188 to sc-v2-release\n\nChange-Id: Iab7af8afa88e68b5ef16e53fdb537bb804cbd98f","shortMessageHtmlLink":"Snap for 7163567 from 393ead3 to sc-v2-release"}},{"before":"ebc890b8b4ba08c84cd1066b7b94b2b11f6c4cb4","after":"05f2b141cfcc60c7cdedf9450d2b9d390c19eaad","ref":"refs/heads/upstream-master","pushedAt":"2024-08-29T01:13:30.000Z","pushType":"push","commitsCount":6,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"Don't skip audit before exitting cleanup_exit\n\nThis fixes an issue where the SSH_CONNECTION_ABANDON event is not\naudited because cleanup_exit overrides the regular _exit too soon and\nas a result, failed auth attempts are not logged correctly.\n\nThe problem was introduced in 81c1099d22b81ebfd20a334ce986c4f753b0db29\nwhere the code from upstream was merged before the audit_event call when\nit should have been merged right before the _exit call in order to honor\nthe comment that just mentions an override of the exit value.","shortMessageHtmlLink":"Don't skip audit before exitting cleanup_exit"}},{"before":"1ec0a64c5dc57b8a2053a93b5ef0d02ff8598e5c","after":"ebc890b8b4ba08c84cd1066b7b94b2b11f6c4cb4","ref":"refs/heads/upstream-master","pushedAt":"2024-08-22T00:41:10.000Z","pushType":"push","commitsCount":46,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"fix incorrect default for PasswordAuthentication\n\nmerge botch spotted by gsgleason","shortMessageHtmlLink":"fix incorrect default for PasswordAuthentication"}},{"before":"0bf6e5bb750b66b25c20a1c5a471f91850de3748","after":"1ec0a64c5dc57b8a2053a93b5ef0d02ff8598e5c","ref":"refs/heads/upstream-master","pushedAt":"2024-07-29T07:10:51.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"Explicitly install libssl-devel cygwin.\n\nShould fix CI tests for cygwin default config.","shortMessageHtmlLink":"Explicitly install libssl-devel cygwin."}},{"before":"c276672fc0e99f0c4389988d54a84c203ce325b6","after":"0bf6e5bb750b66b25c20a1c5a471f91850de3748","ref":"refs/heads/upstream-master","pushedAt":"2024-07-26T07:11:25.000Z","pushType":"push","commitsCount":5,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"upstream: reduce logingrace penalty.\n\nA single forgotton login that times out should be below the penalty\nthreshold.\n\nok deraadt/claudio\n\nOpenBSD-Commit-ID: cee1f7d17597c97bff8e5092af5d136fdb08f81d","shortMessageHtmlLink":"upstream: reduce logingrace penalty."}},{"before":"7717b9e9155209916cc6b4b4b54f4e8fa578e889","after":"c276672fc0e99f0c4389988d54a84c203ce325b6","ref":"refs/heads/upstream-master","pushedAt":"2024-07-20T07:11:17.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"Class-imposed login restrictions\n\nIf the following functions are available,\nadd an additional check if users are allowed to login imposed by login class.\n\n* auth_hostok(3)\n* auth_timeok(3)\n\nThese functions are implemented on FreeBSD.","shortMessageHtmlLink":"Class-imposed login restrictions"}},{"before":"f2b78bb8f149d6b4d1f62c21aa1f06995dccf4ce","after":"7717b9e9155209916cc6b4b4b54f4e8fa578e889","ref":"refs/heads/upstream-master","pushedAt":"2024-07-11T00:41:11.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"upstream: correct keyword; from Yatao Su via GHPR509\n\nOpenBSD-Commit-ID: 81c778c76dea7ef407603caa157eb0c381c52ad2","shortMessageHtmlLink":"upstream: correct keyword; from Yatao Su via GHPR509"}},{"before":"30c8c81da2169e78357d08dbb0ddd823b60e93bc","after":"f2b78bb8f149d6b4d1f62c21aa1f06995dccf4ce","ref":"refs/heads/upstream-master","pushedAt":"2024-07-08T07:10:30.000Z","pushType":"push","commitsCount":3,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"upstream: don't need return at end of void function\n\nOpenBSD-Commit-ID: 42d322d37f13aa075ae7b1ad9eef591e20b89717","shortMessageHtmlLink":"upstream: don't need return at end of void function"}},{"before":"ee6b9e661633fcefd29dba0c811cecbc4d027f6f","after":"30c8c81da2169e78357d08dbb0ddd823b60e93bc","ref":"refs/heads/upstream-master","pushedAt":"2024-07-05T07:10:54.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"Add 9.8 branch to ci-status page.","shortMessageHtmlLink":"Add 9.8 branch to ci-status page."}},{"before":"fa41f6592ff1b6ead4a652ac75af31eabb05b912","after":"ee6b9e661633fcefd29dba0c811cecbc4d027f6f","ref":"refs/heads/upstream-master","pushedAt":"2024-07-03T22:38:07.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"Fix detection of setres*id on GNU/Hurd\n\nLike Linux, proper _SOURCE macros need to be set to get declarations of\nvarious standard functions, notably setres*id. Now that Debian is using\n-Werror=implicit-function-declaration this is really required. While at\nit, define other _SOURCE macros like on GNU/Linux, since GNU/Hurd uses\nthe same glibc.","shortMessageHtmlLink":"Fix detection of setres*id on GNU/Hurd"}},{"before":"94b9d37100f6fa536aaa1d1a0e4926fe44fbf04d","after":"fa41f6592ff1b6ead4a652ac75af31eabb05b912","ref":"refs/heads/upstream-master","pushedAt":"2024-07-02T07:16:31.000Z","pushType":"push","commitsCount":5,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"version numbers","shortMessageHtmlLink":"version numbers"}},{"before":"603193e32aef5db7d60c58066d5de89806e79312","after":"94b9d37100f6fa536aaa1d1a0e4926fe44fbf04d","ref":"refs/heads/upstream-master","pushedAt":"2024-06-28T07:11:12.000Z","pushType":"push","commitsCount":7,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"upstream: retire unused API\n\nOpenBSD-Commit-ID: 3e30d7b0615e2707f6bbe70f61b1c2f72f78161b","shortMessageHtmlLink":"upstream: retire unused API"}},{"before":"e9b6471c59b21e5d9ef1b3832d4bf727338add85","after":"603193e32aef5db7d60c58066d5de89806e79312","ref":"refs/heads/upstream-master","pushedAt":"2024-06-20T09:19:51.000Z","pushType":"push","commitsCount":3,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"Rerun upstream tests on .sh file changes too.","shortMessageHtmlLink":"Rerun upstream tests on .sh file changes too."}},{"before":"df1c72a55edbebac14363b57de66ac6a147ecc67","after":"e9b6471c59b21e5d9ef1b3832d4bf727338add85","ref":"refs/heads/upstream-master","pushedAt":"2024-06-20T07:47:53.000Z","pushType":"push","commitsCount":10,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"upstream: stricter check for overfull tables in penalty record path\n\nOpenBSD-Commit-ID: 7df01e648a0723418c554e64a9f2b6d38db060a6","shortMessageHtmlLink":"upstream: stricter check for overfull tables in penalty record path"}},{"before":"de1c2e70e5a5dc3c8d2fe04b24cc93d8ef6930e7","after":"df1c72a55edbebac14363b57de66ac6a147ecc67","ref":"refs/heads/upstream-master","pushedAt":"2024-06-19T07:12:25.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"PAMServiceName may appear in a Match block","shortMessageHtmlLink":"PAMServiceName may appear in a Match block"}},{"before":"761438012710169445acc179e3870c53c862bda0","after":"de1c2e70e5a5dc3c8d2fe04b24cc93d8ef6930e7","ref":"refs/heads/upstream-master","pushedAt":"2024-06-18T23:01:14.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"upstream: Re-enable ssh-dss tests\n\n... if ssh is compiled with DSA support\n\nOpenBSD-Regress-ID: bbfaf8c17f2b50a2d46ac35cb97af99b990c990d","shortMessageHtmlLink":"upstream: Re-enable ssh-dss tests"}},{"before":"1c207f456ace38987deda047758d13fbf857f948","after":"761438012710169445acc179e3870c53c862bda0","ref":"refs/heads/upstream-master","pushedAt":"2024-06-18T07:44:25.000Z","pushType":"push","commitsCount":5,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"missed a bit of DSA in the fuzzer","shortMessageHtmlLink":"missed a bit of DSA in the fuzzer"}},{"before":"45562a95ea11d328c22d97bf39401cd29684fb1f","after":"1c207f456ace38987deda047758d13fbf857f948","ref":"refs/heads/upstream-master","pushedAt":"2024-06-17T07:17:51.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"minix doesn't have loopback, so skip penalty tests\n\npointed out by dtucker@","shortMessageHtmlLink":"minix doesn't have loopback, so skip penalty tests"}},{"before":"8d0f7eb147ef72d18acb16c0b18672d44941a8ca","after":"45562a95ea11d328c22d97bf39401cd29684fb1f","ref":"refs/heads/upstream-master","pushedAt":"2024-06-16T09:20:07.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"upstream: penalty test is still a bit racy\n\nOpenBSD-Regress-ID: 90c9ac224db454637baf1ebee5857e007321e824","shortMessageHtmlLink":"upstream: penalty test is still a bit racy"}},{"before":"dd7807bbe80a93ffb4616f2bd5cf83ad5a5595fb","after":"8d0f7eb147ef72d18acb16c0b18672d44941a8ca","ref":"refs/heads/upstream-master","pushedAt":"2024-06-15T07:43:11.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"upstream: crank up penalty timeouts so this should work on even the\n\nslowest of test builders\n\nOpenBSD-Regress-ID: 70bda39c83e3fc9d0f3c1fad4542ed33e173d468","shortMessageHtmlLink":"upstream: crank up penalty timeouts so this should work on even the"}},{"before":"a8fbe2f7d0d96d299ee8e69769e3b51067978748","after":"dd7807bbe80a93ffb4616f2bd5cf83ad5a5595fb","ref":"refs/heads/upstream-master","pushedAt":"2024-06-14T07:44:16.000Z","pushType":"push","commitsCount":9,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"upstream: clarify KEXAlgorithms supported vs available. Inspired by\n\nbz3701 from Colin Watson.\n\nOpenBSD-Commit-ID: e698e69bea19bd52971d253f2b1094490c4701f7","shortMessageHtmlLink":"upstream: clarify KEXAlgorithms supported vs available. Inspired by"}},{"before":"cfe243cd9fde148ed060637876e27bb55ac78be9","after":"a8fbe2f7d0d96d299ee8e69769e3b51067978748","ref":"refs/heads/upstream-master","pushedAt":"2024-06-13T07:41:53.000Z","pushType":"push","commitsCount":8,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"sshd: don't use argv[0] as PAM service name\n\nsshd would implicitly use argv[0] as the PAM service name to\nallow people to select different PAM service names by making\ndifferently-named copies/links to the sshd binary.\n\nSplitting sshd into sshd/sshd-session broke this, as the process\nthat starts PAM is always sshd-session and the user has no control\nover this.\n\nHardcode \"sshd\" as the default PAM service name unless/until we\nfigure out a better way. Should unbreak OSX integration tests.","shortMessageHtmlLink":"sshd: don't use argv[0] as PAM service name"}},{"before":"0e0c69761a4c33ccd4a256560f522784a753d1a8","after":"cfe243cd9fde148ed060637876e27bb55ac78be9","ref":"refs/heads/upstream-master","pushedAt":"2024-06-11T07:14:57.000Z","pushType":"push","commitsCount":12,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"upstream: reap preauth net child if it hangs up during privsep message\n\nsend, not just message receive\n\nOpenBSD-Commit-ID: 02a093f4ab4f8f83f0cd1ea2bb35b9ca420448f0","shortMessageHtmlLink":"upstream: reap preauth net child if it hangs up during privsep message"}},{"before":"cc80d51d034bcb24fd0f2564a4bdf1612000a2a2","after":"0e0c69761a4c33ccd4a256560f522784a753d1a8","ref":"refs/heads/upstream-master","pushedAt":"2024-06-07T07:17:57.000Z","pushType":"push","commitsCount":10,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"upstream: enable PerSourcePenalties by default.\n\nok markus\n\nNB. if you run a sshd that accepts connections from behind large NAT\nblocks, proxies or anything else that aggregates many possible users\nbehind few IP addresses, then this change may cause legitimate traffic\nto be denied.\n\nPlease read the PerSourcePenalties, PerSourcePenaltyExemptList and\nPerSourceNetBlockSize options in sshd_config(5) for how to tune your\nsshd(8) for your specific circumstances.\n\nOpenBSD-Commit-ID: 24a0e5c23d37e5a63e16d2c6da3920a51078f6ce","shortMessageHtmlLink":"upstream: enable PerSourcePenalties by default."}},{"before":"8785491123d4d722b310c20f383570be758f8263","after":"cc80d51d034bcb24fd0f2564a4bdf1612000a2a2","ref":"refs/heads/upstream-master","pushedAt":"2024-06-05T07:15:52.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"jrguzman-ms","name":null,"path":"/jrguzman-ms","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/94872854?s=80&v=4"},"commit":{"message":"remove PRIVSEP macros for osx","shortMessageHtmlLink":"remove PRIVSEP macros for osx"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"startCursor":"Y3Vyc29yOnYyOpK7MjAyNC0wOS0yNlQwMDo0Njo0My4wMDAwMDBazwAAAATA6yEN","endCursor":"Y3Vyc29yOnYyOpK7MjAyNC0wNi0wNVQwNzoxNTo1Mi4wMDAwMDBazwAAAARcy1D3"}},"title":"Activity ยท msft-mirror-aosp/platform.external.openssh"}