CVS commit: [netbsd-7] src/crypto/external/bsd/openssh/dist

["Martin Husemann" <martin%netbsd.org@localhost>]

Module Name:    src
Committed By:   martin
Date:           Fri Mar 11 12:22:42 UTC 2016

Modified Files:
        src/crypto/external/bsd/openssh/dist [netbsd-7]: channels.c channels.h
            clientloop.c sshpty.c

Log Message:
Apply the following changes, requested by snj in #1138:

- Refuse ForwardX11Trusted=no connections attempted after
  ForwardX11Timeout expires.  (CVE-2015-5352)
- Fix TTY permissions to not be world-writable.  (CVE-2015-6565)


To generate a diff of this commit:
cvs rdiff -u -r1.11.4.1 -r1.11.4.2 \
    src/crypto/external/bsd/openssh/dist/channels.c
cvs rdiff -u -r1.8.4.1 -r1.8.4.2 \
    src/crypto/external/bsd/openssh/dist/channels.h
cvs rdiff -u -r1.10.4.1 -r1.10.4.2 \
    src/crypto/external/bsd/openssh/dist/clientloop.c
cvs rdiff -u -r1.2.26.1 -r1.2.26.2 \
    src/crypto/external/bsd/openssh/dist/sshpty.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.