All pull requests

Pull requests

• ssh: allocate name lists in one piece when unmarshaling

  #377·thevilledev opened Oct 9, 2026·

  ·
  1

  8

• ssh: add PreAuthUserCallback

  #376·armenr opened Sep 25, 2026·

  ·
  1

• ssh: ignore malformed USERAUTH_BANNER messages

  #375·shuaiZend opened Sep 22, 2026·

  ·
  1

  3

• ssh: reject certificates with an empty principal

  #374·XZ-Legendary-56 opened Sep 18, 2026·

  ·
  1

  4

• Yahweh

  #373·almhsnm369-ui opened Aug 31, 2026·

  ·
  1

• Create SECURITY.md

  #372·almhsnm369-ui opened Aug 31, 2026·

  ·
  3

• Create main.yml

  #371·almhsnm369-ui opened Aug 31, 2026·

  ·
  1

• Create SECURITY.md for security policy

  #370·almhsnm369-ui opened Aug 31, 2026·

  ·
  1

• blake2b, blake2s: limit blocks processed at once in assembly

  #368·AskAlexSharov opened Aug 17, 2026·

  ·
  4

• ssh: reject source-address critical option on host certificates

  #367·waterWang opened Aug 13, 2026·

  ·
  1

  1

• ocsp: match full CertID when issuer is provided

  #366·bg0d-droid opened Aug 5, 2026·

  ·
  3

• x/crypto/ssh: validate DSA parameters in ParseDSAPrivateKey

  #365·kingljl opened Jul 16, 2026·

  ·
  1

  12

• ssh: sanitize the banner displayed by BannerDisplayStderr

  #363·CaptainTed1 opened Jul 11, 2026·

  ·
  1

  2

• ssh/knownhosts: fix wildcard matching off-by-one

  #360·mayank-dev-15 opened Jul 4, 2026·

  ·
  1

• Add Go fuzz tests for OSS-Fuzz integration

  #358·canolgun opened Jun 11, 2026·

  ·
  7

• ssh: enforce source-address critical option for all auth methods

  #354·al4an444 opened Jun 6, 2026·

  ·
  4

• ssh: detect PartialSuccessError wrapped in BannerError

  #353·XananasX7 opened Jun 3, 2026·

  ·
  8

• ssh: use errors.As for PartialSuccessError unwrapping

  #352·XananasX7 opened Jun 3, 2026·

  ·
  8

• ssh/agent: bound RSA modulus and DSA parameters in key parsers

  #347·tonghuaroot opened May 29, 2026·

  ·
  1

  1

• ssh: use errors.As for error checks

  #344·janwytze opened Apr 8, 2026·

  ·
  4

• x/crypto/acme/autocert: add support for ACME profiles and LetsEncrypt public ip certificates

  #336·cthayer opened Feb 2, 2026·

  ·
  7

• ssh/agent: support smartcard extensions

  #332·Foxboron opened Nov 24, 2025·

  ·
  5

• WIP: Bugfix 76345 acme client sending jwk to kid expected endpoints

  #329·fangpenlin opened Nov 18, 2025·

  ·
  1

• x/crypto: increasing the default BCrypt cost

  #326·n-bruno opened Oct 10, 2025·

  ·
  5

• ssh/server: handle repeated SSH authentication service requests

  #322·9init opened Aug 23, 2025·

  ·
  1

  7