CVSROOT: /cvs Module name: src Changes by: d...@cvs.openbsd.org 2021/12/19 15:13:55
Modified files:
usr.bin/ssh : ssh-agent.c
Log message:
Use hostkey parsed from hostbound userauth request
Require host-bound userauth requests for forwarded SSH connections.
The hostkey parsed from the host-bound userauth request is now checked
against the most recently bound session ID / hostkey on the agent socket
and the signature refused if they do not match.
ok markus@
