- dtucker@cvs.openbsd.org 2010/03/07 11:57:13
commit5400b08807fcc345c90f7c031d049f5886324751
authordtucker <dtucker>
Sun, 7 Mar 2010 12:05:17 +0000 (7 12:05 +0000)
committerdtucker <dtucker>
Sun, 7 Mar 2010 12:05:17 +0000 (7 12:05 +0000)
tree3fc4d5387db7fa7c2b54a974cd530c8ae1b4b954
parentf4f7251e84400c3b47f68a1a4bcb44dd8921a044
   - dtucker@cvs.openbsd.org 2010/03/07 11:57:13
     [auth-rhosts.c monitor.c monitor_wrap.c session.c auth-options.c sshd.c]
     Hold authentication debug messages until after successful authentication.
     Fixes an info leak of environment variables specified in authorized_keys,
     reported by Jacob Appelbaum.  ok djm@
ChangeLog
auth-options.c
auth-rhosts.c
monitor.c
monitor_wrap.c
session.c
sshd.c