28042938174

Committed 23 Jun 2026 05:02PM UTC coverage: 92.464% (-0.6%) from 93.027%

Build # 28042938174

Build Type

push

github

Committed by

web-flow

Commit Message

It is possible for a client to say that it wishes to use the "sk-ssh-ed25519@openssh.com" algorithm for SSH user publickey authentication, but to _actually_ provide an "ssh-ed25519" public key.

The issue is that, when verifying the type of the public key provided by the client, we do not enforce that the provided key algorith matches the expected public key algorithm.

Thanks to Fabian Wahle of Hap Security for reporting this issue.

Coverage Stats

48661 of 52627 relevant lines covered (92.46%)

234.31 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

50.0

/usr/include/stdlib.h

Source Not Available

The file "/usr/include/stdlib.h" isn't available on github. Either it's been removed, or the repo root directory needs to be updated.

proftpd / proftpd / 28042938174

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source Not Available

Source File
Press 'n' to go to next uncovered line, 'b' for previous