master
CVE-2026-59848 sftp: handle responses with unknown request IDs
mbedtls: Initial migration to PSA-Crypto API (v4)
options: add OpenSSH PubkeyAuthentication modes
Use SSH_CHANNEL_FREE where possible
CVE-2026-59849 tests: Reproducer for infinite loops with non-default configurations
tests: Implement more negative auth tests
tests: Provide minimal openssl configuration file
tests: Free dynamically allocated callbacks
misc: Fix possible NULL dereference
tests: Introduce torture_client_global_requests
Use ARRAY_SIZE systematically
channels: Add originator to ssh_channel_accept
kex: Allow MLKEM key exchanges in FIPS mode
CVE-2026-59851 tests: add gssapi authentication tests with user mismatching the principal
knownhosts: Return SSH_KNOWN_HOSTS_UNKNOWN with GSS KEX and no host key
Remove support for DSA Keys
knownhosts: restrict StrictHostKeyChecking off on key mismatches
Test Coverage for PING/Pong
feat: implement proxy jump using libssh
test: Tighten testing to make sure right user and key is used with proxyjumps
Fix semantics of strchr() for C23
tests: Allow to generate unencrypted PCAP files from testsuite
ttyopts: Adjust the default TTY modes to be sane
tests: Ensure the mode of the created file is ...
tests: Fix wording in comment to make sense
sftp_aio: Test sftp aio with libssh proxyjump
tests: Prefer assert_non_null() over assert_false()
Adding expand-path@openssh.com extension for client
tests: add tests for users-groups-by-id@openssh.com on client side
Add tests for sftp_hardlink
use internal-sftp for testing
Reproducer for out of bounds read of SFTP extensions
torture_sftp_limits.c: Change the test
fix: sftp_packet_read stuck in an infinite loop in blocking mode
Fix broken link to an issue
Add tests for sftp_recv_response_msg()
Implement tests for sftp_rename
tests: Describe reason for using internal-sftp
Add missing newline on eof