commit cd70e1b8137023539df57b175b733341d8f4d776
author Darren Tucker <dtucker@zip.com.au> Sun Mar 07 23:05:17 2010 +1100
committer Darren Tucker <dtucker@zip.com.au> Sun Mar 07 23:05:17 2010 +1100
tree 03efa18fa906f725b07eee451fe96ec9117a3138
parent ac0c4c9c1d511839b2c86ebe5994298b524ceffd

   - dtucker@cvs.openbsd.org 2010/03/07 11:57:13
     [auth-rhosts.c monitor.c monitor_wrap.c session.c auth-options.c sshd.c]
     Hold authentication debug messages until after successful authentication.
     Fixes an info leak of environment variables specified in authorized_keys,
     reported by Jacob Appelbaum.  ok djm@

ChangeLog

diff --git a/ChangeLog b/ChangeLog
index f80d79a..9afd093 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -7,6 +7,12 @@
    by permanently_set_uid.
  - (dtucker) [session.c] Also initialize creds to NULL for handing to
     setpcred.
+ - (dtucker) OpenBSD CVS Sync
+   - dtucker@cvs.openbsd.org 2010/03/07 11:57:13
+     [auth-rhosts.c monitor.c monitor_wrap.c session.c auth-options.c sshd.c]
+     Hold authentication debug messages until after successful authentication.
+     Fixes an info leak of environment variables specified in authorized_keys,
+     reported by Jacob Appelbaum.  ok djm@
 
 20100305
  - OpenBSD CVS Sync