[ 15:42 bdrewery  ]

• 394608 security/openssh-portable/Makefile
• 394608 security/openssh-portable/distinfo
• 394608 security/openssh-portable/files/extra-patch-hpn
• 394608 security/openssh-portable/files/patch-auth2-chall.c
• 394608 security/openssh-portable/files/patch-servconf.c

- Update to OpenSSH 7.0p1
- Update X509 patch to 8.5

Changes: http://www.openssh.com/txt/release-7.0

[ 18:47 bdrewery  ]

• 393004 security/openssh-portable/Makefile
• 393004 security/openssh-portable/files/patch-auth2-chall.c

Add upstream fix to address CVE-2015-5600 for MaxAuthTries bypass.

Security:	5b74a5bc-348f-11e5-ba05-c80aa9043978

[ 18:13 dinoex  ]

• 1.79 security/openssh-portable/Makefile
• 1.21 security/openssh-portable/distinfo
• 1.6 security/openssh-portable/files/auth2-pam-freebsd.c
• 1.4 security/openssh-portable/files/patch-Makefile.in
• 1.2 security/openssh-portable/files/patch-auth-chall.c
• 1.2 security/openssh-portable/files/patch-auth-pam.c
• 1.2 security/openssh-portable/files/patch-auth-pam.h
• 1.6 security/openssh-portable/files/patch-auth.c
• 1.3 security/openssh-portable/files/patch-auth1.c
• 1.4 security/openssh-portable/files/patch-auth2-chall.c

- update to 3.7.1p2
more regressions tests successfull

[ 18:29 dinoex  ]

• 1.50 security/openssh-portable/Makefile
• 1.1 security/openssh-portable/files/auth2-pam-freebsd.c
• 1.4 security/openssh-portable/files/batch.patch
• 1.1 security/openssh-portable/files/patch-Makefile.in
• 1.3 security/openssh-portable/files/patch-auth2-chall.c
• 1.1 security/openssh-portable/files/patch-monitor.c
• 1.1 security/openssh-portable/files/patch-monitor.h
• 1.1 security/openssh-portable/files/patch-monitor_wrap.c
• 1.1 security/openssh-portable/files/patch-monitor_wrap.h
• 1.2 security/openssh-portable/files/patch-sshd_config

'PermitRootLogin no' is the new default for the OpenSSH port.
This now matches the PermitRootLogin configuration of OpenSSH in
the base system.  Please be aware of this when upgrading your
OpenSSH port, and if truly necessary, re-enable remote root login
by readjusting this option in your sshd_config.

Users are encouraged to create single-purpose users with ssh keys
and very narrowly defined sudo privileges instead of using root
for automated tasks.

- PKGNAMESUFFIX for GSSAPI set.
- Merged some patches from current to improve PAM.
- Fix BATCH=yes for bento.

[ 18:53 dinoex  ]

• 1.2 security/openssh-portable/files/patch-auth2-chall.c

nuke obsolete file

[ 15:21 dinoex  ]

• 1.45 security/openssh-portable/Makefile
• 1.1 security/openssh-portable/files/patch-auth2-chall.c
• 1.12 security/openssh-portable/pkg-plist
• 1.102 security/openssh/Makefile
• 1.2 security/openssh/files/patch-auth2-chall.c

Security FIX, Please update to this Version.

Options for both:
USE_OPENSSL_BASE=yes
        uses an older opensssl in the base system.

Options for portable:
OPENSSH_OVERWRITE_BASE=yes
        includes USE_OPENSSL_BASE=yes
        installls in the paths of the base system