upstream commit

~-expand lcd paths
upstream commit

When dumping the server configuration (sshd -T), print
 correct KEX, MAC and cipher defaults. Spotted by Iain Morgan
upstream commit

djm how did you make a typo like that...
upstream commit

Free resources on error in mkstemp and fdopen

ok djm@
upstream commit

improve capitalization for the Ed25519 public-key
 signature system.

ok djm@
upstream commit

typo.
upstream commit

tighten permissions on pty when the "tty" group does
 not exist; pointed out by Corinna Vinschen; ok markus
upstream commit

mention permissions on tun(4) devices in PermitTunnel
 documentation; bz#2273
upstream commit

correct options in usage(); from mancha1 AT zoho.com
upstream commit

parse cert sections using nested buffers to reduce
 copies; ok markus
upstream commit

fix a few -Wpointer-sign warnings from clang
upstream commit

another -Wpointer-sign from clang
upstream commit

Tweak config reparsing with host canonicalisation

Make the second pass through the config files always run when
hostname canonicalisation is enabled.

Add a "Match canonical" criteria that allows ssh_config Match
blocks to trigger only in the second config pass.

Add a -G option to ssh that causes it to parse its configuration
and dump the result to stdout, similar to "sshd -T"

Allow ssh_config Port options set in the second config parse
phase to be applied (they were being ignored).

bz#2267 bz#2286; ok markus