Mercurial > dropbear
annotate CHANGES @ 1250:2bb4c662d1c2
more hard tab
| author | Francois Perrad <francois.perrad@gadz.org> |
|---|---|
| date | Fri, 01 Jan 2016 15:02:09 +0100 |
| parents | e49a204effe3 |
| children | 32cdbbe4b67e |
| rev | line source |
|---|---|
| 1200 | 1 2015.71 - 3 December 2015 |
|
1198
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
2 |
| 1199 | 3 - Fix "bad buf_incrpos" when data is transferred, broke in 2015.69 |
|
1198
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
4 |
| 1203 | 5 - Fix crash on exit when -p address:port is used, broke in 2015.68, thanks to |
| 6 Frank Stollenwerk for reporting and investigation | |
|
1198
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
7 |
|
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
8 - Fix building with only ENABLE_CLI_REMOTETCPFWD given, patch from Konstantin Tokarev |
|
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
9 |
|
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
10 - Fix bad configure script test which didn't work with dash shell, patch from Juergen Daubert, |
|
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
11 broke in 2015.70 |
|
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
12 |
|
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
13 - Fix server race condition that could cause sessions to hang on exit, |
|
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
14 https://github.com/robotframework/SSHLibrary/issues/128 |
|
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
15 |
| 1188 | 16 2015.70 - 26 November 2015 |
| 1187 | 17 |
| 18 - Fix server password authentication on Linux, broke in 2015.69 | |
| 19 | |
| 1178 | 20 2015.69 - 25 November 2015 |
| 21 | |
| 22 - Fix crash when forwarded TCP connections fail to connect (bug introduced in 2015.68) | |
| 23 | |
| 24 - Avoid hang on session close when multiple sessions are started, affects Qt Creator | |
| 25 Patch from Andrzej Szombierski | |
| 26 | |
| 27 - Reduce per-channel memory consumption in common case, increase default | |
| 28 channel limit from 100 to 1000 which should improve SOCKS forwarding for modern | |
| 29 webpages | |
| 30 | |
| 31 - Handle multiple command line arguments in a single flag, thanks to Guilhem Moulin | |
| 32 | |
| 33 - Manpage improvements from Guilhem Moulin | |
| 34 | |
| 35 - Build fixes for Android from Mike Frysinger | |
| 36 | |
| 37 - Don't display the MOTD when an explicit command is run from Guilhem Moulin | |
| 38 | |
| 39 - Check curve25519 shared secret isn't zero | |
| 40 | |
|
1147
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
41 2015.68 - Saturday 8 August 2015 |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
42 |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
43 - Reduce local data copying for improved efficiency. Measured 30% |
| 1125 | 44 increase in throughput for connections to localhost |
|
1063
9a5677293671
changes (also testing hg bookmarks)
Matt Johnston <matt@ucc.asn.au>
parents:
1004
diff
changeset
|
45 |
|
1147
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
46 - Forwarded TCP ports connect asynchronously and try all available addresses |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
47 (IPv4, IPv6, round robin DNS) |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
48 |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
49 - Fix all compile warnings, many patches from Gaël Portay |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
50 Note that configure with -Werror may not be successful on some platforms (OS X) |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
51 and some configuration options may still result in unused variable |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
52 warnings. |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
53 |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
54 - Use TCP Fast Open on Linux if available. Saves a round trip at connection |
| 1064 | 55 to hosts that have previously been connected. |
| 56 Needs a recent Linux kernel and possibly "sysctl -w net.ipv4.tcp_fastopen=3" | |
| 1125 | 57 Client side is disabled by default pending further compatibility testing |
| 58 with networks and systems. | |
| 1064 | 59 |
|
1147
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
60 - Increase maximum command length to 9000 bytes |
| 1064 | 61 |
| 62 - Free memory before exiting, patch from Thorsten Horstmann. Useful for | |
| 63 Dropbear ports to embedded systems and for checking memory leaks | |
|
1147
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
64 with valgrind. Only partially implemented for dbclient. |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
65 This is disabled by default, enable with DROPBEAR_CLEANUP in sysoptions.h |
| 1064 | 66 |
|
1147
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
67 - DROPBEAR_DEFAULT_CLI_AUTHKEY setting now always prepends home directory unless |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
68 there is a leading slash (~ isn't treated specially) |
| 1125 | 69 |
| 1064 | 70 - Fix small ECC memory leaks |
| 71 | |
| 1125 | 72 - Tighten validation of Diffie-Hellman parameters, from Florent Daigniere of |
|
1141
63ac2261e1b0
couple more changelog items
Matt Johnston <matt@ucc.asn.au>
parents:
1125
diff
changeset
|
73 Matta Consulting. Odds of bad values are around 2**-512 -- improbable. |
| 1125 | 74 |
| 75 - Twofish-ctr cipher is supported though disabled by default | |
| 76 | |
|
1141
63ac2261e1b0
couple more changelog items
Matt Johnston <matt@ucc.asn.au>
parents:
1125
diff
changeset
|
77 - Fix pre-authentication timeout when waiting for client SSH-2.0 banner, thanks |
|
63ac2261e1b0
couple more changelog items
Matt Johnston <matt@ucc.asn.au>
parents:
1125
diff
changeset
|
78 to CL Ouyang |
|
63ac2261e1b0
couple more changelog items
Matt Johnston <matt@ucc.asn.au>
parents:
1125
diff
changeset
|
79 |
|
1147
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
80 - Fix null pointer crash with restrictions in authorized_keys without a command, patch from |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
81 Guilhem Moulin |
|
1141
63ac2261e1b0
couple more changelog items
Matt Johnston <matt@ucc.asn.au>
parents:
1125
diff
changeset
|
82 |
|
1147
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
83 - Ensure authentication timeout is handled while reading the initial banner, |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
84 thanks to CL Ouyang for finding it. |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
85 |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
86 - Fix null pointer crash when handling bad ECC keys. Found by afl-fuzz |
| 1125 | 87 |
| 1004 | 88 2015.67 - Wednesday 28 January 2015 |
| 89 | |
| 90 - Call fsync() after generating private keys to ensure they aren't lost if a | |
| 91 reboot occurs. Thanks to Peter Korsgaard | |
| 92 | |
| 93 - Disable non-delayed zlib compression by default on the server. Can be | |
| 94 enabled if required for old clients with DROPBEAR_SERVER_DELAY_ZLIB | |
| 95 | |
| 96 - Default client key path ~/.ssh/id_dropbear | |
| 97 | |
| 98 - Prefer stronger algorithms by default, from Fedor Brunner. | |
| 99 AES256 over 3DES | |
| 100 Diffie-hellman group14 over group1 | |
| 101 | |
| 102 - Add option to disable CBC ciphers. | |
| 103 | |
| 104 - Disable twofish in default options.h | |
| 105 | |
| 106 - Enable sha2 HMAC algorithms by default, the code was already required | |
| 107 for ECC key exchange. sha1 is the first preference still for performance. | |
| 108 | |
| 109 - Fix installing dropbear.8 in a separate build directory, from Like Ma | |
| 110 | |
| 111 - Allow configure to succeed if libtomcrypt/libtommath are missing, from Elan Ruusamäe | |
| 112 | |
| 113 - Don't crash if ssh-agent provides an unknown type of key. From Catalin Patulea | |
| 114 | |
| 115 - Minor bug fixes, a few issues found by Coverity scan | |
| 116 | |
|
979
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
117 2014.66 - Thursday 23 October 2014 |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
118 |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
119 - Use the same keepalive handling behaviour as OpenSSH. This will work better |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
120 with some SSH implementations that have different behaviour with unknown |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
121 message types. |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
122 |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
123 - Don't reply with SSH_MSG_UNIMPLEMENTED when we receive a reply to our own |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
124 keepalive message |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
125 |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
126 - Set $SSH_CLIENT to keep bash happy, patch from Ryan Cleere |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
127 |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
128 - Fix wtmp which broke since 2013.62, patch from Whoopie |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
129 |
| 965 | 130 2014.65 - Friday 8 August 2014 |
| 131 | |
| 132 - Fix 2014.64 regression, server session hang on exit with scp (and probably | |
| 133 others), thanks to NiLuJe for tracking it down | |
| 134 | |
| 135 - Fix 2014.64 regression, clock_gettime() error handling which broke on older | |
| 136 Linux kernels, reported by NiLuJe | |
| 137 | |
| 138 - Fix 2014.64 regression, writev() could occassionally fail with EAGAIN which | |
| 139 wasn't caught | |
| 140 | |
| 141 - Avoid error message when trying to set QoS on proxycommand or multihop pipes | |
| 142 | |
| 143 - Use /usr/bin/xauth, thanks to Mike Frysinger | |
| 144 | |
| 145 - Don't exit the client if the local user entry can't be found, thanks to iquaba | |
| 146 | |
| 947 | 147 2014.64 - Sunday 27 July 2014 |
| 942 | 148 |
| 149 - Fix compiling with ECDSA and DSS disabled | |
| 150 | |
| 151 - Don't exit abruptly if too many outgoing packets are queued for writev(). Patch | |
| 152 thanks to Ronny Meeus | |
| 153 | |
| 154 - The -K keepalive option now behaves more like OpenSSH's "ServerAliveInterval". | |
| 155 If no response is received after 3 keepalives then the session is terminated. This | |
| 156 will close connections faster than waiting for a TCP timeout. | |
| 157 | |
| 158 - Rework TCP priority setting. New settings are | |
| 159 if (connecting || ptys || x11) tos = LOWDELAY | |
| 160 else if (tcp_forwards) tos = 0 | |
| 161 else tos = BULK | |
| 162 Thanks to Catalin Patulea for the suggestion. | |
| 163 | |
| 164 - Improve handling of many concurrent new TCP forwarded connections, should now | |
| 165 be able to handle as many as MAX_CHANNELS. Thanks to Eduardo Silva for reporting | |
| 166 and investigating it. | |
| 167 | |
| 168 - Make sure that exit messages from the client are printed, regression in 2013.57 | |
| 169 | |
| 170 - Use monotonic clock where available, timeouts won't be affected by system time | |
| 171 changes | |
| 172 | |
| 947 | 173 - Add -V for version |
| 174 | |
| 900 | 175 2014.63 - Wednesday 19 February 2014 |
| 176 | |
| 177 - Fix ~. to terminate a client interactive session after waking a laptop | |
| 178 from sleep. | |
| 179 | |
| 180 - Changed port separator syntax again, now using host^port. This is because | |
| 181 IPv6 link-local addresses use %. Reported by Gui Iribarren | |
|
49ed526daedc
CHANGES for 2014.63
Matt Johnston <matt@ucc.asn.au> |