Release of HPN-18.5.0 incorporating OpenSSH 9.8p1

This release brings HPN-SSH up to OpenSSH 9.8 which brings
along all of the changes in OpenSSH. This includes changes
to the hpnsshd server; specifically splitting the server into
relative barebones listener and a hpnsshd-session client that
handles the user interaction on the server side.

There are limited changes to HPN-SSH itself aside from a minor
change to the versioning to make it RFC compliant. Thanks to
Lupo Luchini for pointing this out.

.git_allowed_signers

@@ -1,4 +1,6 @@
 dtucker@dtucker.net ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIKecyjh9aNmD4rb8WblA8v91JjRb0Cd2JtkzqxcggGeG
+dtucker@dtucker.net sk-ecdsa-sha2-nistp256@openssh.com AAAAInNrLWVjZHNhLXNoYTItbmlzdHAyNTZAb3BlbnNzaC5jb20AAAAIbmlzdHAyNTYAAABBBDV81zWQ1+XVfWH5z4L4klDQ/z/6l2GLphfSTX/Rmq6kL5H8mkfzUlryxLlkN8cD9srtVJBAmwJWfJBNsCo958YAAAAEc3NoOg==
+
 djm@mindrot.org sk-ecdsa-sha2-nistp256@openssh.com AAAAInNrLWVjZHNhLXNoYTItbmlzdHAyNTZAb3BlbnNzaC5jb20AAAAIbmlzdHAyNTYAAABBBLnJo3ZVDENYZGXm5uO9lU7b0iDFq5gHpTu1MaHPWTEfPdvw+AjFQQ/q5YizuMJkXGsMdYmblJEJZYHpm9IS7ZkAAAAEc3NoOg==
 djm@mindrot.org sk-ecdsa-sha2-nistp256@openssh.com AAAAInNrLWVjZHNhLXNoYTItbmlzdHAyNTZAb3BlbnNzaC5jb20AAAAIbmlzdHAyNTYAAABBBJoAXBTQalfg+kC5wy1vE7HkIHtVnmV6AUuuIo9KQ1P+70juHwvsFKpsGaqQbrHJkTVgYDGVP02XHj8+Fb18yBIAAAAEc3NoOg==
 djm@mindrot.org sk-ecdsa-sha2-nistp256@openssh.com AAAAInNrLWVjZHNhLXNoYTItbmlzdHAyNTZAb3BlbnNzaC5jb20AAAAIbmlzdHAyNTYAAABBBH+z1I48s6ydOhP5SJmI02zVCLf0K15B+UMHgoTIKVfUIv5oDoVX7e9f+7QiRmTeEOdZfQydiaVqsfi7qPSve+0AAAAEc3NoOg==

.git_allowed_signers.asc

@@ -1,16 +1,16 @@
 -----BEGIN PGP SIGNATURE-----
 
-iQIzBAABCgAdFiEEcWi5g4FaXu9ZpK39Kj9BTnNgYLoFAmMMMiIACgkQKj9BTnNg
-YLpyGhAAhZ1RxmD62JnT0gnor1aD0inq1fGPRadaFvXH2OScPcxXMIZWx+otnyZ/
-H9s0bIti42dPHqurgh92KS2mDGVIW8Y8MvxFUr678+hdem1U7Xvjoo0uaveNhJhe
-GxuQDOvXKRmmfL2c6w3wnFChFA1o3K+JNshjCHhWz7u6+UmY0Q9yIxqbSi+vmEPP
-NfWPfGdu4h8r7q11UgTxRSUQkfZXMqpBtb367B9BLduGuKRFKEJNyi6WpjBrqy38
-BvEbAaL52KX8hEp3TKMjo38RbOK+veSoPV5zlLui0WlEwwasgljal3f4RkqCAJob
-hqpFJRogM5XNnA2e68TDTf3buJ3wRRjuK39/CusOJz5v4i6+VCdte+BET1Y4gD6y
-v8KV4pRyumcdbN3khFUkmaQsjo+fyQjWNrgOvv60J2xUWZdchn8lxHOxrfRVKnOi
-BD4bdks7tPQY/XsS5GNJIp21Ji9HGyBajjHo0BlesLodw7FEOf6YE18A3n9qzosR
-RliuP4Hs/Z4sCUuDTbpKtQiUVs40kBbkhEL8kS8FsXz3VO89hAWaUqNUYom8AkKv
-nfDjrZDBLXuVj1Mi8qNPXxqrB/1Cza2/W4U7SK4TlMFXfoXXWxxhefN5vIdMhAJB
-u9Mdz1pY9mowKbd0c0dR+3fauvjM133dzKuyeDHMqDa5JPyd59o=
-=kgnS
+iQIzBAABCgAdFiEEcWi5g4FaXu9ZpK39Kj9BTnNgYLoFAmYHnZ8ACgkQKj9BTnNg
+YLquuQ/6A8E6P2jcgn3wmbbCTXP7kmxoh3nmw/e6PC8CEua1512oT3GHOKVD5cGK
+cgYRObpWvjOjg7L1HRABftq7a9M2zfsGnY/WNe3/fbetfkyY8hG8c31vA1ePIOt2
+AjBLCWFblH0CtyH/MssoQ19JCLtXK/GmekB1Q0JzyOog7w/0r3CKuUnZ0juCYR1R
+4FBePl5l3nFSZEcFEdptGlNGeuolS5XBCqB9Y91TCzkVkH5eXUUW+shgjNhWCEhT
+pZvkxfhsmOEnwNofyPdgKVfDBVkHmvuC67EU395mJVN4c2NZ8pOztb9hOt3xr980
+q44I4kT2NpaApCx1dWIGhMy/37LJ8heI0W1B+ofTA5n34/RU8UXH3SCkj2AK6Ao5
+H2u8vbmuWKUCiECmrw35EeKGmtuK/bWJzx3KBP7fx5J9S3mWUgT4W4xlWNN9RWoU
+sSvH1ppie5ARINVaAWl5k44fk60ahTf80DbQBIOZBmQn7myZZka+yGcQbAiZZ1Gc
+0l8+Nf5Ao1ckmuyY5o8FyWdsyDeK3+MqjPn5Rr1CqbKCn2VnqrVWbI33Eyu8c96U
+bxVgU5H1BDhNjJC8UrT3LFPvJMO8p3a0IJ3eHydjk2jVOhOdBZmA0yoqUTrhPpXq
+ymIHESjDJR8TDe4TCfb46o9oEC3cdbDwgnzPqdg0n+0uIsJLYiU=
+=gl+l
 -----END PGP SIGNATURE-----

.github/ci-status.md

@@ -6,10 +6,6 @@ master :
 [![Fuzzing Status](https://oss-fuzz-build-logs.storage.googleapis.com/badges/openssh.svg)](https://bugs.chromium.org/p/oss-fuzz/issues/list?sort=-opened&can=1&q=proj:openssh)
 [![Coverity Status](https://scan.coverity.com/projects/21341/badge.svg)](https://scan.coverity.com/projects/openssh-portable)
 
-9.4 :
-[![C/C++ CI](https://github.com/openssh/openssh-portable/actions/workflows/c-cpp.yml/badge.svg?branch=V_9_4)](https://github.com/openssh/openssh-portable/actions/workflows/c-cpp.yml?query=branch:V_9_4)
-[![C/C++ CI self-hosted](https://github.com/openssh/openssh-portable-selfhosted/actions/workflows/selfhosted.yml/badge.svg?branch=V_9_4)](https://github.com/openssh/openssh-portable-selfhosted/actions/workflows/selfhosted.yml?query=branch:V_9_4)
-
-9.3 :
-[![C/C++ CI](https://github.com/openssh/openssh-portable/actions/workflows/c-cpp.yml/badge.svg?branch=V_9_3)](https://github.com/openssh/openssh-portable/actions/workflows/c-cpp.yml?query=branch:V_9_3)
-[![C/C++ CI self-hosted](https://github.com/openssh/openssh-portable-selfhosted/actions/workflows/selfhosted.yml/badge.svg?branch=V_9_3)](https://github.com/openssh/openssh-portable-selfhosted/actions/workflows/selfhosted.yml?query=branch:V_9_3)
+9.7 :
+[![C/C++ CI](https://github.com/openssh/openssh-portable/actions/workflows/c-cpp.yml/badge.svg?branch=V_9_7)](https://github.com/openssh/openssh-portable/actions/workflows/c-cpp.yml?query=branch:V_9_7)
+[![C/C++ CI self-hosted](https://github.com/openssh/openssh-portable-selfhosted/actions/workflows/selfhosted.yml/badge.svg?branch=V_9_7)](https://github.com/openssh/openssh-portable-selfhosted/actions/workflows/selfhosted.yml?query=branch:V_9_7)

.github/configs

@@ -210,6 +210,7 @@ case "$config" in
  # and hostbased (since valgrind won't let ssh exec keysign).
  # Slow ones are run separately to increase parallelism.
  SKIP_LTESTS="agent-timeout connection-timeout hostbased"
+ SKIP_LTESTS="$SKIP_LTESTS penalty-expire"
  SKIP_LTESTS="$SKIP_LTESTS ${tests2} ${tests3} ${tests4} ${tests5} ${tests6} ${tests7}"
  ;;
  valgrind-2)
@@ -297,7 +298,7 @@ case "${TARGET_HOST}" in
  hostkey-agent key-options keyscan knownhosts-command login-timeout
  reconfigure reexec rekey scp scp-uri scp3 sftp sftp-badcmds
  sftp-batch sftp-cmds sftp-glob sftp-perm sftp-uri stderr-data
- transfer"
+ transfer penalty penalty-expire"
  SKIP_LTESTS="$(echo $T)"
  TEST_TARGET=t-exec
  SUDO=""
@@ -321,6 +322,9 @@ case "${TARGET_HOST}" in
  # No sudo on Windows.
  SUDO=""
  ;;
+ windows*)
+ SUDO=""
+ ;;
 esac
 
 host=`./config.guess`

.github/run_test.sh

@@ -9,7 +9,7 @@ set -ex
 # If we want to test hostbased auth, set up the host for it.
 if [ ! -z "$SUDO" ] && [ ! -z "$TEST_SSH_HOSTBASED_AUTH" ]; then
  sshconf=/usr/local/etc/hpnssh
- $SUDO mkdir -p $sshconf
+ $SUDO mkdir -p "${sshconf}"
  hostname | $SUDO tee $sshconf/shosts.equiv >/dev/null
  echo "EnableSSHKeysign yes" | $SUDO tee $sshconf/ssh_config >/dev/null
  $SUDO cp -p /etc/ssh/ssh_host*key* $sshconf

.github/setup_ci.sh

@@ -14,7 +14,7 @@ case "$host" in
  echo Removing extended ACLs so umask works as expected.
  setfacl -b . regress
  PACKAGES="$PACKAGES,autoconf,automake,cygwin-devel,gcc-core"
- PACKAGES="$PACKAGES,make,openssl-devel,zlib-devel"
+ PACKAGES="$PACKAGES,make,openssl,libssl-devel,zlib-devel"
  ;;
 *-darwin*)
  PACKAGER=brew

.github/workflows/c-cpp.yml

@@ -3,13 +3,14 @@ name: C/C++ CI
 on:
  push:
  branches: [ master, pre-stage, release_candidates, dev_major, dev_minor ]
- paths: [ '**.c', '**.h', '**.m4', '**.sh', '.github/**', '**/Makefile.in', 'configure.ac' ]
+ paths: [ '**.c', '**.h', '**.m4', '**.sh', '**/Makefile.in', 'configure.ac', '.github/configs', '.github/workflows/c-cpp.yaml' ]
  pull_request:
  branches: [ master, release_candidates ]
- paths: [ '**.c', '**.h', '**.m4', '**.sh', '.github/**', '**/Makefile.in', 'configure.ac' ]
+ paths: [ '**.c', '**.h', '**.m4', '**.sh', '**/Makefile.in', 'configure.ac', '.github/configs', '.github/workflows/c-cpp.yaml' ]
 
 jobs:
  ci:
+ name: "${{ matrix.target }} ${{ matrix.config }}"
  if: github.repository != 'openssh/openssh-portable-selfhosted'
  strategy:
  fail-fast: false
@@ -18,42 +19,58 @@ jobs:
  target:
  - ubuntu-20.04
  - ubuntu-22.04
- - macos-11
+ - ubuntu-24.04
  - macos-12
  - macos-13
+ - macos-14
+ - windows-2019
+ - windows-2022
  config: [default]
  # Then we include any extra configs we want to test for specific VMs.
  include:
- - { target: ubuntu-20.04, config: valgrind-1 }
- - { target: ubuntu-20.04, config: valgrind-2 }
- - { target: ubuntu-20.04, config: valgrind-3 }
- - { target: ubuntu-20.04, config: valgrind-4 }
-# - { target: ubuntu-20.04, config: valgrind-5 }
- - { target: ubuntu-20.04, config: valgrind-6 }
- - { target: ubuntu-20.04, config: valgrind-7 }
+ - { target: windows-2019, config: cygwin-release }
+ - { target: windows-2022, config: cygwin-release }
+ - { target: ubuntu-22.04, config: valgrind-1 }
+ - { target: ubuntu-22.04, config: valgrind-2 }
+ - { target: ubuntu-22.04, config: valgrind-3 }
+ - { target: ubuntu-22.04, config: valgrind-4 }
+# - { target: ubuntu-22.04, config: valgrind-5 }
+ - { target: ubuntu-22.04, config: valgrind-6 }
+ - { target: ubuntu-22.04, config: valgrind-7 }
+ - { target: ubuntu-22.04, config: valgrind-unit }
 # binn.c no longer works with c89 so remove this test.
-# - { target: ubuntu-20.04, config: c89 }
+# - { target: ubuntu-22.04, config: c89 }
  - { target: ubuntu-20.04, config: clang-6.0 }
  - { target: ubuntu-20.04, config: clang-8 }
  - { target: ubuntu-20.04, config: clang-9 }
  - { target: ubuntu-20.04, config: clang-10 }
  - { target: ubuntu-20.04, config: clang-11 }
  - { target: ubuntu-20.04, config: clang-12-Werror }
+ - { target: ubuntu-20.04, config: clang-sanitize-address }
+ - { target: ubuntu-20.04, config: clang-sanitize-undefined }
+ - { target: ubuntu-20.04, config: gcc-sanitize-address }
+ - { target: ubuntu-20.04, config: gcc-sanitize-undefined }
  - { target: ubuntu-20.04, config: gcc-7 }
  - { target: ubuntu-20.04, config: gcc-8 }
  - { target: ubuntu-20.04, config: gcc-10 }
  - { target: ubuntu-22.04, config: gcc-11-Werror }
  - { target: ubuntu-22.04, config: gcc-12-Werror }
- - { target: ubuntu-20.04, config: pam }
- - { target: ubuntu-20.04, config: kitchensink }
+ - { target: ubuntu-22.04, config: pam }
+ - { target: ubuntu-22.04, config: kitchensink }
  - { target: ubuntu-22.04, config: hardenedmalloc }
  - { target: ubuntu-20.04, config: tcmalloc }
+ - { target: ubuntu-22.04, config: krb5 }
+ - { target: ubuntu-22.04, config: heimdal }
+ - { target: ubuntu-22.04, config: libedit }
+ - { target: ubuntu-22.04, config: sk }
+ - { target: ubuntu-22.04, config: selinux }
+ - { target: ubuntu-22.04, config: without-openssl }
 # musl doesn't work because it doesn't know about linux/tcp.h
 # - { target: ubuntu-20.04, config: musl }
  - { target: ubuntu-latest, config: libressl-master }
  - { target: ubuntu-latest, config: libressl-3.7.2 }
- - { target: ubuntu-latest, config: libressl-3.8.3 }
- - { target: ubuntu-latest, config: libressl-3.9.0 }
+ - { target: ubuntu-latest, config: libressl-3.8.4 }
+ - { target: ubuntu-latest, config: libressl-3.9.1 }
  - { target: ubuntu-latest, config: openssl-master }
  - { target: ubuntu-latest, config: openssl-noec }
  - { target: ubuntu-latest, config: openssl-1.1.1 }
@@ -64,9 +81,12 @@ jobs:
  - { target: ubuntu-latest, config: openssl-3.1.0 }
  - { target: ubuntu-latest, config: openssl-3.1.5 }
  - { target: ubuntu-latest, config: openssl-3.2.1 }
+ - { target: ubuntu-latest, config: openssl-3.3.0 }
  - { target: ubuntu-latest, config: openssl-1.1.1_stable }
  - { target: ubuntu-latest, config: openssl-3.0 } # stable branch
+ - { target: ubuntu-latest, config: openssl-3.1 } # stable branch
  - { target: ubuntu-latest, config: openssl-3.2 } # stable branch
+ - { target: ubuntu-latest, config: openssl-3.3 } # stable branch
  - { target: ubuntu-latest, config: putty-0.71 }
  - { target: ubuntu-latest, config: putty-0.72 }
  - { target: ubuntu-latest, config: putty-0.73 }
@@ -79,25 +99,19 @@ jobs:
  - { target: ubuntu-latest, config: putty-0.80 }
  - { target: ubuntu-latest, config: putty-snapshot }
  - { target: ubuntu-latest, config: zlib-develop }
- - { target: ubuntu-22.04, config: pam }
- - { target: ubuntu-22.04, config: krb5 }
- - { target: ubuntu-22.04, config: heimdal }
- - { target: ubuntu-22.04, config: libedit }
- - { target: ubuntu-22.04, config: sk }
- - { target: ubuntu-22.04, config: selinux }
- - { target: ubuntu-22.04, config: kitchensink }
- - { target: ubuntu-22.04, config: without-openssl }
- - { target: ubuntu-22.04, config: clang-sanitize-address }
- - { target: ubuntu-22.04, config: clang-sanitize-undefined }
- - { target: ubuntu-22.04, config: gcc-sanitize-address }
- - { target: ubuntu-22.04, config: gcc-sanitize-undefined }
 # we know pam doesn't work because we can't install a new pam file
 # for hpnssh via the CI test methods
-# - { target: macos-11, config: pam }
 # - { target: macos-12, config: pam }
 # - { target: macos-13, config: pam }
+# - { target: macos-14, config: pam }
  runs-on: ${{ matrix.target }}
  steps:
+ - name: set cygwin git params
+ if: ${{ startsWith(matrix.target, 'windows') }}
+ run: git config --global core.autocrlf input
+ - name: install cygwin
+ if: ${{ startsWith(matrix.target, 'windows') }}
+ uses: cygwin/cygwin-install-action@master
  - uses: actions/checkout@main
  - name: setup CI system
  run: sh ./.github/setup_ci.sh ${{ matrix.config }}

.github/workflows/cifuzz.yml

@@ -4,7 +4,7 @@ on:
  branches: [master, dev_minor, dev_major, release_candidates]
  paths: [ '**.c', '**.h', '**.m4', '**.sh', '.github/**', '**/Makefile.in', 'configure.ac' ]
  pull_request:
- paths: [ '**.c', '**.h', '**.m4', '**.sh', '.github/**', '**/Makefile.in', 'configure.ac' ]
+ paths: [ '**.c', '**.h', '**.m4', '**.sh', '**/Makefile.in', 'configure.ac', '.github/configs', '.github/workflows/cifuzz.yml' ]
 
 jobs:
  Fuzzing:

.github/workflows/selfhosted.yml

@@ -2,17 +2,25 @@ name: C/C++ CI self-hosted
 
 on:
  push:
- paths: [ '**.c', '**.h', '**.m4', '**.sh', '.github/**', '**/Makefile.in', 'configure.ac' ]
+ paths: [ '**.c', '**.h', '**.m4', '**.sh', '**/Makefile.in', 'configure.ac', '.github/configs', '.github/workflows/selfhosted.yml' ]
 
 jobs:
  selfhosted:
+ name: "${{ matrix.target }} ${{ matrix.config }}"
  if: github.repository == 'openssh/openssh-portable-selfhosted'
  runs-on: ${{ matrix.host }}
  timeout-minutes: 600
  env:
+ DEBUG_ACTIONS: false
  HOST: ${{ matrix.host }}
  TARGET_HOST: ${{ matrix.target }}
  TARGET_CONFIG: ${{ matrix.config }}
+ TARGET_DOMAIN: ${{ startsWith(matrix.host, 'libvirt') && format('{0}-{1}-{2}', matrix.target, matrix.config, github.run_id) || matrix.target }}
+ EPHEMERAL: ${{ startsWith(matrix.host, 'libvirt') }}
+ PERSISTENT: ${{ startsWith(matrix.host, 'persist') }}
+ REMOTE: ${{ startsWith(matrix.host, 'remote') }}
+ VM: ${{ startsWith(matrix.host, 'libvirt') || startsWith(matrix.host, 'persist') }}
+ SSHFS: ${{ startsWith(matrix.host, 'libvirt') || startsWith(matrix.host, 'persist') || startsWith(matrix.host, 'remote') }}
  strategy:
  fail-fast: false
  # We use a matrix in two parts: firstly all of the VMs are tested with the
@@ -74,34 +82,46 @@ jobs:
  - { target: nbsd8, config: pam, host: libvirt }
  - { target: nbsd9, config: pam, host: libvirt }
  - { target: nbsd10, config: pam, host: libvirt }
+ # ARM64 VMs
+ - { target: obsd-arm64, config: default, host: libvirt-arm64 }
  # VMs with persistent disks that have their own runner.
- - { target: win10, config: default, host: win10 }
- - { target: win10, config: cygwin-release, host: win10 }
- # Physical hosts, with either native runners or remote via ssh.
+ - { target: win10, config: default,  host: persist-win10 }
+ - { target: win10, config: cygwin-release, host: persist-win10 }
+ # Physical hosts with native runners.
  - { target: ARM, config: default, host: ARM }
  - { target: ARM64, config: default, host: ARM64 }
  - { target: ARM64, config: pam, host: ARM64 }
- - { target: debian-riscv64, config: default, host: debian-riscv64 }
- - { target: obsd-arm64, config: default, host: obsd-arm64 }
- - { target: openwrt-mips, config: default, host: openwrt-mips }
- - { target: openwrt-mipsel, config: default, host: openwrt-mipsel }
+ # Physical hosts with remote runners.
+ - { target: debian-riscv64, config: default, host: remote-debian-riscv64 }
+
+ - { target: openwrt-mips, config: default, host: remote-openwrt-mips }
+ - { target: openwrt-mipsel, config: default, host: remote-openwrt-mipsel }
  steps:
+ - name: unmount stale workspace
+ if: env.SSHFS == 'true'
+ run: fusermount -u ${GITHUB_WORKSPACE} || true
+ working-directory: ${{ runner.temp }}
  - name: shutdown VM if running
+ if: env.VM == 'true'
  run: vmshutdown
- working-directory: ${{ runner.temp }}
  - uses: actions/checkout@main
  - name: autoreconf
  run: autoreconf
  - name: startup VM
+ if: env.VM == 'true'
  run: vmstartup
  working-directory: ${{ runner.temp }}
+ - name: copy and mount workspace
+ if: env.SSHFS == 'true'
+ run: sshfs_mount
+ working-directory: ${{ runner.temp }}
  - name: configure
  run: vmrun ./.github/configure.sh ${{ matrix.config }}
- - name: save config
- uses: actions/upload-artifact@main
- with:
- name: ${{ matrix.target }}-${{ matrix.config }}-config
- path: config.h
+# - name: save config
+# uses: actions/upload-artifact@main
+# with:
+# name: ${{ matrix.target }}-${{ matrix.config }}-config
+# path: config.h
  - name: make clean
  run: vmrun make clean
  - name: make
@@ -120,7 +140,10 @@ jobs:
  regress/*.log
  regress/log/*
  regress/valgrind-out/
+ - name: unmount workspace
+ if: always() && env.SSHFS == 'true'
+ run: fusermount -u ${GITHUB_WORKSPACE} || true
+ working-directory: ${{ runner.temp }}
  - name: shutdown VM
- if: always()
+ if: always() && env.VM == 'true'
  run: vmshutdown
- working-directory: ${{ runner.temp }}

.gitignore

@@ -1,18 +1,14 @@
 Makefile
 buildpkg.sh
 config.h
-config.h.in
 config.h.in~
 config.log
 config.status
-configure
-aclocal.m4
 openbsd-compat/Makefile
 openbsd-compat/regress/Makefile
 openssh.xml
 opensshd.init
 survey.sh
-**/*.0
 **/*.o
 **/*.lo
 **/*.so
@@ -48,3 +44,13 @@ hpnssh-keysign
 hpnssh-pkcs11-helper
 hpnssh-sk-helper
 hpnsshd
+!regress/misc/fuzz-harness/Makefile
+!regress/unittests/sshsig/Makefile
+tags
+
+# Ignored on main branch
+config.h.in
+configure
+aclocal.m4
+ChangeLog
+**/*.0

.skipped-commit-ids

@@ -29,6 +29,14 @@ f9a0726d957cf10692a231996a1f34e7f9cdfeb0 moduli update
 1e0a2692b7e20b126dda60bf04999d1d30d959d8 sshd relinking makefile changes
 e1dc11143f83082e3154d6094f9136d0dc2637ad more relinking makefile tweaks
 5a636f6ca7f25bfe775df4952f7aac90a7fcbbee moduli update
+ef9341d5a50f0d33e3a6fbe995e92964bc7ef2d3 Makefile relinking changes
+2fe8d707ae35ba23c7916adcb818bb5b66837ba0 ssh-agent relink kit
+866cfcc1955aef8f3fc32da0b70c353a1b859f2e ssh-agent relink changes
+8b3820adb4da4e139c4b3cffbcc0bde9f08bf0c6 sshd-session relink kit
+6d2ded4cd91d4d727c2b26e099b91ea935bed504 relink kit
+fb39324748824cb0387e9d67c41d1bef945c54ea Makefile change
+5f378c38ad8976d507786dc4db9283a879ec8cd0 Makefile change
+112aacedd3b61cc5c34b1fa6d9fb759214179172 Makefile change
 
 Old upstream tree: