received. Otherwise an unauthenticated peer can repeat the KEXINIT and cause
allocation of up to 128MB -- until the connection is closed. Reported by
shilei-c at 360.cn

ec165c392c

Signed-off-by: Peter Wagner <tripolar@gmx.at>

see: https://anongit.mindrot.org/openssh.git/commit/?id=28652bca29046f62c7045e933e6b931de1d16737

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off by: Rosen Penev <rosenp@gmail.com>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Reapply 99c6c3d830

Signed-off-by: Oliver Middleton <olliemail27@gmail.com>

Signed-off-by: Stijn Tintel <stijn@linux-ipv6.be>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

As discussed in #543, we can announce the SFTP service via Avahi
when sftp-server is installed.

Signed-off-by: Michael Heimpold <mhei@heimpold.de>

Signed-off-by: Ian Leonard <antonlacon@gmail.com>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

Signed-off-by: Peter Wagner <tripolar@gmx.at>

recent changes in trunk allow us to specify the userid inside the openwrt makefile.
the info is stored int he meta data of the IPK contorl file and users are generated
by the new generic postinst trigger.

Signed-off-by: John Crispin <blogic@openwrt.org>

Remove broken mirrors, prefer HTTP over FTP.

openssh-sftp-server is actually a tiny binary that has nearly no dependencies:
$ mips-openwrt-linux-objdump -x sftp-server | grep NEEDED
  NEEDED               libgcc_s.so.1
  NEEDED               libc.so.0

Stripping its DEPENDS allows building a system with SFTP support, without
pulling in OpenSSL.

Signed-off-by: Peter Wagner <tripolar@gmx.at>