=================================================================== RCS file: /cvsrepo/anoncvs/cvs/www/71.html,v retrieving revision 1.51 retrieving revision 1.52 diff -u -r1.51 -r1.52 --- www/71.html 2022/04/15 05:40:51 1.51 +++ www/71.html 2022/04/15 05:59:09 1.52 @@ -1241,17 +1241,18 @@ prefer RSA/SHA2 for hostkey proofs of RSA keys, but missed some cases. This will use RSA/SHA2 signatures for RSA keys if the client proposed these algorithms in initial KEX. -
  • All: convert all uses of select(2)/pselect(2) to poll(2)/ppoll(2). +
  • All: convert all uses of + select(2)/ + pselect(2) to + poll(2)/ + ppoll(2). This includes the mainloops in ssh(1), ssh-agent(1), ssh-agent(1) and sftp-server(8), as well as the sshd(8) - listen loop and all - other FD read/writability checks. On platforms with missing or - broken poll(2)/ppoll(2) syscalls a select(2)-based compat shim is - available. + listen loop and all other FD read/writability checks.
  • ssh-keygen(1): the "-Y find-principals" command was verifying key validity when using ca certs but not with simple key lifetimes @@ -1315,8 +1316,9 @@
  • ssh(1), sshd(8): - upstream: fix poll(2) spin when a channel's output - fd closes without data in the channel buffer. + fix + poll(2) spin when a + channel's output fd closes without data in the channel buffer.
  • sshd(8): pack pollfd array in server listen/accept loop. Could cause the server to hang/spin when MaxStartups > RLIMIT_NOFILE