CVSROOT: /cvs Module name: src Changes by: [email protected] 2026/11/10 17:19:56
Modified files:
usr.bin/ssh : auth2-chall.c
Log message:
limit the number of keyboard-interactive devices accepted to 100,
avoiding a small CPU DoS in sshd-auth (mitigted by MaxStartups and
PerSourcePenalties).
Reported by Lei Li (æç£) and Zhongke Guyuan (ä¸ç§åºæº)
ok markus@
