CVSROOT: /cvs Module name: src Changes by: dtuc...@cvs.openbsd.org 2010/03/07 04:57:13
Modified files:
usr.bin/ssh : auth-options.c auth-rhosts.c monitor.c
monitor_wrap.c session.c sshd.c
Log message:
Hold authentication debug messages until after successful authentication.
Fixes an info leak of environment variables specified in authorized_keys,
reported by Jacob Appelbaum. ok djm@
