CVSROOT: /cvs Module name: src Changes by: d...@cvs.openbsd.org 2022/10/24 16:43:37
Modified files:
usr.bin/ssh : ssh.c sshconnect.c
Log message:
Be more paranoid with host/domain names coming from the resolver:
don't follow CNAMEs with invalid characters when canonicalising
and never write a name with bad characters to a known_hosts file.
reported by David Leadbeater, ok deraadt@
