5 files changed, 10 insertions, 0 deletions

diff --git a/debian/changelog b/debian/changelog
index cb05066eb..98afc3a11 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -6,6 +6,8 @@ openssh (1:4.7p1-13) UNRELEASED; urgency=low
     server (LP: #232391). To override the blacklist check in ssh
     temporarily, use 'ssh -o UseBlacklistedKeys=yes'; there is no override
     for the blacklist check in ssh-add.
+  * Add cross-references to ssh-vulnkey(1) to ssh(1), ssh-add(1),
+    ssh-keygen(1), and sshd(8) (closes: #484451).
 
  -- Colin Watson <cjwatson@debian.org>  Fri, 30 May 2008 23:26:25 +0100
 
diff --git a/ssh-add.1 b/ssh-add.1
index 005041b68..829c85445 100644
--- a/ssh-add.1
+++ b/ssh-add.1
@@ -75,6 +75,10 @@ environment variable must contain the name of its socket for
 .Nm
 to work.
 .Pp
+Any keys recorded in the blacklist of known-compromised keys (see
+.Xr ssh-vulnkey 1 )
+will be refused.
+.Pp
 The options are as follows:
 .Bl -tag -width Ds
 .It Fl c
@@ -174,6 +178,7 @@ is unable to contact the authentication agent.
 .Xr ssh 1 ,
 .Xr ssh-agent 1 ,
 .Xr ssh-keygen 1 ,
+.Xr ssh-vulnkey 1 ,
 .Xr sshd 8
 .Sh AUTHORS
 OpenSSH is a derivative of the original and free
diff --git a/ssh-keygen.1 b/ssh-keygen.1
index 4e629de74..fc460b5ac 100644
--- a/ssh-keygen.1
+++ b/ssh-keygen.1
@@ -447,6 +447,7 @@ The file format is described in
 .Xr ssh 1 ,
 .Xr ssh-add 1 ,
 .Xr ssh-agent 1 ,
+.Xr ssh-vulnkey 1 ,
 .Xr moduli 5 ,
 .Xr sshd 8
 .Rs
diff --git a/ssh.1 b/ssh.1
index 8e666858c..8b5c46c74 100644
--- a/ssh.1
+++ b/ssh.1
@@ -1372,6 +1372,7 @@ manual page for more information.
 .Xr ssh-argv0 1 ,
 .Xr ssh-keygen 1 ,
 .Xr ssh-keyscan 1 ,
+.Xr ssh-vulnkey 1 ,
 .Xr tun 4 ,
 .Xr hosts.equiv 5 ,
 .Xr ssh_config 5 ,
diff --git a/sshd.8 b/sshd.8
index 42f1cf7c5..b53456f1a 100644
--- a/sshd.8
+++ b/sshd.8
@@ -837,6 +837,7 @@ The content of this file is not sensitive; it can be world-readable.
 .Xr ssh-agent 1 ,
 .Xr ssh-keygen 1 ,
 .Xr ssh-keyscan 1 ,
+.Xr ssh-vulnkey 1 ,
 .Xr chroot 2 ,
 .Xr hosts_access 5 ,
 .Xr login.conf 5 ,