New upstream release (8.3p1)

Also update GSSAPI key exchange patch from
https://github.com/openssh-gsskex/openssh-gsskex.

1 files changed, 3 insertions, 5 deletions

diff --git a/ssh-dss.c b/ssh-dss.c
index a23c383dc..fddc29cc9 100644
--- a/ssh-dss.c
+++ b/ssh-dss.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: ssh-dss.c,v 1.37 2018/02/07 02:06:51 jsing Exp $ */
+/* $OpenBSD: ssh-dss.c,v 1.39 2020/02/26 13:40:09 jsg Exp $ */
 /*
  * Copyright (c) 2000 Markus Friedl.  All rights reserved.
  *
@@ -200,10 +200,8 @@ ssh_dss_verify(const struct sshkey *key,
         BN_clear_free(sig_s);
         sshbuf_free(b);
         free(ktype);
-        if (sigblob != NULL) {
-                explicit_bzero(sigblob, len);
-                free(sigblob);
-        }
+        if (sigblob != NULL)
+                freezero(sigblob, len);
         return ret;
 }
 #endif /* WITH_OPENSSL */