=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/71.html,v retrieving revision 1.51 retrieving revision 1.52 diff -c -r1.51 -r1.52 *** www/71.html 2022/04/15 05:40:51 1.51 --- www/71.html 2022/04/15 05:59:09 1.52 *************** *** 1241,1257 **** prefer RSA/SHA2 for hostkey proofs of RSA keys, but missed some cases. This will use RSA/SHA2 signatures for RSA keys if the client proposed these algorithms in initial KEX. !
  • All: convert all uses of select(2)/pselect(2) to poll(2)/ppoll(2). This includes the mainloops in ssh(1), ssh-agent(1), ssh-agent(1) and sftp-server(8), as well as the sshd(8) ! listen loop and all ! other FD read/writability checks. On platforms with missing or ! broken poll(2)/ppoll(2) syscalls a select(2)-based compat shim is ! available.
  • ssh-keygen(1): the "-Y find-principals" command was verifying key validity when using ca certs but not with simple key lifetimes --- 1241,1258 ---- prefer RSA/SHA2 for hostkey proofs of RSA keys, but missed some cases. This will use RSA/SHA2 signatures for RSA keys if the client proposed these algorithms in initial KEX. !
  • All: convert all uses of ! select(2)/ ! pselect(2) to ! poll(2)/ ! ppoll(2). This includes the mainloops in ssh(1), ssh-agent(1), ssh-agent(1) and sftp-server(8), as well as the sshd(8) ! listen loop and all other FD read/writability checks.
  • ssh-keygen(1): the "-Y find-principals" command was verifying key validity when using ca certs but not with simple key lifetimes *************** *** 1315,1322 ****
  • ssh(1), sshd(8): ! upstream: fix poll(2) spin when a channel's output ! fd closes without data in the channel buffer.
  • sshd(8): pack pollfd array in server listen/accept loop. Could cause the server to hang/spin when MaxStartups > RLIMIT_NOFILE --- 1316,1324 ----
  • ssh(1), sshd(8): ! fix ! poll(2) spin when a ! channel's output fd closes without data in the channel buffer.
  • sshd(8): pack pollfd array in server listen/accept loop. Could cause the server to hang/spin when MaxStartups > RLIMIT_NOFILE