dropbear: CHANGES annotate

annotate CHANGES @ 994:5c5ade336926

Prefer stronger algorithms in algorithm negotiation. Prefer diffie-hellman-group14-sha1 (2048 bit) over diffie-hellman-group1-sha1 (1024 bit). Due to meet-in-the-middle attacks the effective key length of three key 3DES is 112 bits. AES is stronger and faster then 3DES. Prefer to delay the start of compression until after authentication has completed. This avoids exposing compression code to attacks from unauthenticated users. (github pull request #9)

author	Fedor Brunner <fedor.brunner@azet.sk>
date	Fri, 23 Jan 2015 23:00:25 +0800
parents	735511a4c761
children	d63b569a7c86

rev	line source
979 735511a4c761 changelog, version number bump Matt Johnston <matt@ucc.asn.au> parents: 965 diff changeset	1 2014.66 - Thursday 23 October 2014
735511a4c761 changelog, version number bump Matt Johnston <matt@ucc.asn.au> parents: 965 diff changeset	2
735511a4c761 changelog, version number bump Matt Johnston <matt@ucc.asn.au> parents: 965 diff changeset	3 - Use the same keepalive handling behaviour as OpenSSH. This will work better
735511a4c761 changelog, version number bump Matt Johnston <matt@ucc.asn.au> parents: 965 diff changeset	4 with some SSH implementations that have different behaviour with unknown
735511a4c761 changelog, version number bump Matt Johnston <matt@ucc.asn.au> parents: 965 diff changeset	5 message types.
735511a4c761 changelog, version number bump Matt Johnston <matt@ucc.asn.au> parents: 965 diff changeset	6
735511a4c761 changelog, version number bump Matt Johnston <matt@ucc.asn.au> parents: 965 diff changeset	7 - Don't reply with SSH_MSG_UNIMPLEMENTED when we receive a reply to our own
735511a4c761 changelog, version number bump Matt Johnston <matt@ucc.asn.au> parents: 965 diff changeset	8 keepalive message
735511a4c761 changelog, version number bump Matt Johnston <matt@ucc.asn.au> parents: 965 diff changeset	9
735511a4c761 changelog, version number bump Matt Johnston <matt@ucc.asn.au> parents: 965 diff changeset	10 - Set $SSH_CLIENT to keep bash happy, patch from Ryan Cleere
735511a4c761 changelog, version number bump Matt Johnston <matt@ucc.asn.au> parents: 965 diff changeset	11
735511a4c761 changelog, version number bump Matt Johnston <matt@ucc.asn.au> parents: 965 diff changeset	12 - Fix wtmp which broke since 2013.62, patch from Whoopie
735511a4c761 changelog, version number bump Matt Johnston <matt@ucc.asn.au> parents: 965 diff changeset	13
965 e9579816f20e 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 947 diff changeset	14 2014.65 - Friday 8 August 2014
e9579816f20e 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 947 diff changeset	15
e9579816f20e 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 947 diff changeset	16 - Fix 2014.64 regression, server session hang on exit with scp (and probably
e9579816f20e 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 947 diff changeset	17 others), thanks to NiLuJe for tracking it down
e9579816f20e 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 947 diff changeset	18
e9579816f20e 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 947 diff changeset	19 - Fix 2014.64 regression, clock_gettime() error handling which broke on older
e9579816f20e 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 947 diff changeset	20 Linux kernels, reported by NiLuJe
e9579816f20e 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 947 diff changeset	21
e9579816f20e 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 947 diff changeset	22 - Fix 2014.64 regression, writev() could occassionally fail with EAGAIN which
e9579816f20e 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 947 diff changeset	23 wasn't caught
e9579816f20e 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 947 diff changeset	24
e9579816f20e 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 947 diff changeset	25 - Avoid error message when trying to set QoS on proxycommand or multihop pipes
e9579816f20e 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 947 diff changeset	26
e9579816f20e 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 947 diff changeset	27 - Use /usr/bin/xauth, thanks to Mike Frysinger
e9579816f20e 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 947 diff changeset	28
e9579816f20e 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 947 diff changeset	29 - Don't exit the client if the local user entry can't be found, thanks to iquaba
e9579816f20e 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 947 diff changeset	30
947 e4453b367db7 Version 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 942 diff changeset	31 2014.64 - Sunday 27 July 2014
942 8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	32
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	33 - Fix compiling with ECDSA and DSS disabled
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	34
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	35 - Don't exit abruptly if too many outgoing packets are queued for writev(). Patch
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	36 thanks to Ronny Meeus
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	37
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	38 - The -K keepalive option now behaves more like OpenSSH's "ServerAliveInterval".
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	39 If no response is received after 3 keepalives then the session is terminated. This
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	40 will close connections faster than waiting for a TCP timeout.
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	41
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	42 - Rework TCP priority setting. New settings are
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	43 if (connecting \|\| ptys \|\| x11) tos = LOWDELAY
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	44 else if (tcp_forwards) tos = 0
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	45 else tos = BULK
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	46 Thanks to Catalin Patulea for the suggestion.
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	47
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	48 - Improve handling of many concurrent new TCP forwarded connections, should now
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	49 be able to handle as many as MAX_CHANNELS. Thanks to Eduardo Silva for reporting
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	50 and investigating it.
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	51
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	52 - Make sure that exit messages from the client are printed, regression in 2013.57
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	53
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	54 - Use monotonic clock where available, timeouts won't be affected by system time
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	55 changes
8664fea5072f changes for 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 905 diff changeset	56
947 e4453b367db7 Version 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 942 diff changeset	57 - Add -V for version
e4453b367db7 Version 2014.64 Matt Johnston <matt@ucc.asn.au> parents: 942 diff changeset	58
900 49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	59 2014.63 - Wednesday 19 February 2014
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	60
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	61 - Fix ~. to terminate a client interactive session after waking a laptop
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	62 from sleep.
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	63
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	64 - Changed port separator syntax again, now using host^port. This is because
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	65 IPv6 link-local addresses use %. Reported by Gui Iribarren
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	66
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	67 - Avoid constantly relinking dropbearmulti target, fix "make install"
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	68 for multi target, thanks to Mike Frysinger
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	69
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	70 - Avoid getting stuck in a loop writing huge key files, reported by Bruno
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	71 Thomsen
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	72
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	73 - Don't link dropbearkey or dropbearconvert to libz or libutil,
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	74 thanks to Nicolas Boos
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	75
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	76 - Fix linking -lcrypt on systems without /usr/lib, thanks to Nicolas Boos
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	77
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	78 - Avoid crash on exit due to cleaned up keys before last packets are sent,
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	79 debugged by Ronald Wahl
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	80
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	81 - Fix a race condition in rekeying where Dropbear would exit if it received a
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	82 still-in-flight packet after initiating rekeying. Reported by Oliver Metz.
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	83 This is a longstanding bug but is triggered more easily since 2013.57
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	84
905 f98618496f82 Fix typo in Catalin's name Matt Johnston <matt@ucc.asn.au> parents: 900 diff changeset	85 - Fix README for ecdsa keys, from Catalin Patulea
900 49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	86
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	87 - Ensure that generated RSA keys are always exactly the length
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	88 requested. Previously Dropbear always generated N+16 or N+15 bit keys.
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	89 Thanks to Unit 193
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	90
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	91 - Fix DROPBEAR_CLI_IMMEDIATE_AUTH mode which saves a network round trip if the
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	92 first public key succeeds. Still not enabled by default, needs more
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	93 compatibility testing with other implementations.
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	94
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	95 - Fix for port 0 forwarding in the client and port forwarding with Apache MINA SSHD. Thanks to
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	96
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	97 - Fix for bad system linux/pkt-sched.h header file with older Linux
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	98 kernels, from Steve Dover
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	99
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	100 - Fix signal handlers so that errno is saved, thanks to Erik Ahlén for a patch
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	101 and Mark Wickham for independently spotting the same problem.
49ed526daedc CHANGES for 2014.63 Matt Johnston <matt@ucc.asn.au> parents: 878 diff changeset	102
878 3d1d7d151c0c 2013.62 Matt Johnston <matt@ucc.asn.au> parents: 861 diff changeset	103 2013.62 - Tuesday 3 December 2013
3d1d7d151c0c 2013.62 Matt Johnston <matt@ucc.asn.au> parents: 861 diff changeset	104
3d1d7d151c0c 2013.62 Matt Johnston <matt@ucc.asn.au> parents: 861 diff changeset	105 - Disable "interactive" QoS connection options when a connection doesn't
3d1d7d151c0c 2013.62 Matt Johnston <matt@ucc.asn.au> parents: 861 diff changeset	106 have a PTY (eg scp, rsync). Thanks to Catalin Patulea for the patch.
3d1d7d151c0c 2013.62 Matt Johnston <matt@ucc.asn.au> parents: 861 diff changeset	107
3d1d7d151c0c 2013.62 Matt Johnston <matt@ucc.asn.au> parents: 861 diff changeset	108 - Log when a hostkey is generated with -R, fix some bugs in handling server
3d1d7d151c0c 2013.62 Matt Johnston <matt@ucc.asn.au> parents: 861 diff changeset	109 hostkey commandline options
3d1d7d151c0c 2013.62 Matt Johnston <matt@ucc.asn.au> parents: 861 diff changeset	110
3d1d7d151c0c 2013.62 Matt Johnston <matt@ucc.asn.au> parents: 861 diff changeset	111 - Fix crash in Dropbearconvert and 521 bit key, reported by NiLuJe
3d1d7d151c0c 2013.62 Matt Johnston <matt@ucc.asn.au> parents: 861 diff changeset	112
3d1d7d151c0c 2013.62 Matt Johnston <matt@ucc.asn.au> parents: 861 diff changeset	113 - Update config.guess and config.sub again
3d1d7d151c0c 2013.62 Matt Johnston <matt@ucc.asn.au> parents: 861 diff changeset	114
861 e894dbc015ba 2013.61test Matt Johnston <matt@ucc.asn.au> parents: 830 diff changeset	115 2013.61test - Thursday 14 November 2013
e894dbc015ba 2013.61test Matt Johnston <matt@ucc.asn.au> parents: 830 diff changeset	116
e894dbc015ba 2013.61test Matt Johnston <matt@ucc.asn.au> parents: 830 diff changeset	117 - ECC (elliptic curve) support. Supports ECDSA hostkeys (requires new keys to
e894dbc015ba 2013.61test Matt Johnston <matt@ucc.asn.au> parents: 830 diff changeset	118 be generated) and ECDH for setting up encryption keys (no intervention
e894dbc015ba 2013.61test Matt Johnston <matt@ucc.asn.au> parents: 830 diff changeset	119 required). This is significantly faster.
e894dbc015ba 2013.61test Matt Johnston <matt@ucc.asn.au> parents: 830 diff changeset	120
e894dbc015ba 2013.61test Matt Johnston <matt@ucc.asn.au> parents: 830 diff changeset	121 - [email protected] support for setting up encryption keys. This is
e894dbc015ba 2013.61test Matt Johnston <matt@ucc.asn.au> parents: 830 diff changeset	122 another elliptic curve mode with less potential of NSA interference in
e894dbc015ba 2013.61test Matt Johnston <matt@ucc.asn.au> parents: 830 diff changeset	123 algorithm parameters. curve25519-donna code thanks to Adam Langley
e894dbc015ba 2013.61test Matt Johnston <matt@ucc.asn.au> parents: 830 diff changeset	124
e894dbc015ba 2013.61test Matt Johnston <matt@ucc.asn.au> parents: 830 diff changeset	125 - -R option to automatically generate hostkeys. This is recommended for
e894dbc015ba 2013.61test Matt Johnston <matt@ucc.asn.au> parents: 830 diff changeset	126 embedded platforms since it allows the system random number device
e894dbc015ba 2013.61test Matt Johnston <matt@ucc.asn.au> parents: 830 diff changeset	127 /dev/urandom a longer startup time to generate a secure seed before the
e894dbc015ba 2013.61test Matt Johnston <matt@ucc.asn.au> parents: 830 diff changeset	128 hostkey is required.
e894dbc015ba 2013.61test Matt Johnston <matt@ucc.asn.au> parents: 830 diff changeset	129
e894dbc015ba 2013.61test Matt Johnston <matt@ucc.asn.au> parents: 830 diff changeset	130 - Compile fixes for old vendor compilers like Tru64 from Daniel Richard G.
e894dbc015ba 2013.61test Matt Johnston <matt@ucc.asn.au> parents: 830 diff changeset	131
878 3d1d7d151c0c 2013.62 Matt Johnston <matt@ucc.asn.au> parents: 861 diff changeset	132 - Make authorized_keys handling more robust, don't exit encountering
3d1d7d151c0c 2013.62 Matt Johnston <matt@ucc.asn.au> parents: 861 diff changeset	133 malformed lines. Thanks to Lorin Hochstein and Mark Stillwell
3d1d7d151c0c 2013.62 Matt Johnston <matt@ucc.asn.au> parents: 861 diff changeset	134
830 b9f0058860f1 - 2013.60, update CHANGES Matt Johnston <matt@ucc.asn.au> parents: 822 diff changeset	135 2013.60 - Wednesday 16 October 2013
b9f0058860f1 - 2013.60, update CHANGES Matt Johnston <matt@ucc.asn.au> parents: 822 diff changeset	136
b9f0058860f1 - 2013.60, update CHANGES Matt Johnston <matt@ucc.asn.au> parents: 822 diff changeset	137 - Fix "make install" so that it doesn't always install to /bin and /sbin
b9f0058860f1 - 2013.60, update CHANGES Matt Johnston <matt@ucc.asn.au> parents: 822 diff changeset	138
b9f0058860f1 - 2013.60, update CHANGES Matt Johnston <matt@ucc.asn.au> parents: 822 diff changeset	139 - Fix "make install MULTI=1", installing manpages failed
b9f0058860f1 - 2013.60, update CHANGES Matt Johnston <matt@ucc.asn.au> parents: 822 diff changeset	140
b9f0058860f1 - 2013.60, update CHANGES Matt Johnston <matt@ucc.asn.au> parents: 822 diff changeset	141 - Fix "make install" when scp is included since it has no manpage
b9f0058860f1 - 2013.60, update CHANGES Matt Johnston <matt@ucc.asn.au> parents: 822 diff changeset	142
b9f0058860f1 - 2013.60, update CHANGES Matt Johnston <matt@ucc.asn.au> parents: 822 diff changeset	143 - Make --disable-bundled-libtom work
b9f0058860f1 - 2013.60, update CHANGES Matt Johnston <matt@ucc.asn.au> parents: 822 diff changeset	144
822 32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	145 2013.59 - Friday 4 October 2013
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	146
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	147 - Fix crash from -J command
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	148 Thanks to Lluís Batlle i Rossell and Arnaud Mouiche for patches
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	149
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	150 - Avoid reading too much from /proc/net/rt_cache since that causes
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	151 system slowness.
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	152
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	153 - Improve EOF handling for half-closed connections
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	154 Thanks to Catalin Patulea
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	155
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	156 - Send a banner message to report PAM error messages intended for the user
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	157 Patch from Martin Donnelly
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	158
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	159 - Limit the size of decompressed payloads, avoids memory exhaustion denial
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	160 of service
830 b9f0058860f1 - 2013.60, update CHANGES Matt Johnston <matt@ucc.asn.au> parents: 822 diff changeset	161 Thanks to Logan Lamb for reporting and investigating it. CVE-2013-4421
822 32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	162
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	163 - Avoid disclosing existence of valid users through inconsistent delays
830 b9f0058860f1 - 2013.60, update CHANGES Matt Johnston <matt@ucc.asn.au> parents: 822 diff changeset	164 Thanks to Logan Lamb for reporting. CVE-2013-4434
822 32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	165
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	166 - Update config.guess and config.sub for newer architectures
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	167
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	168 - Avoid segfault in server for locked accounts
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	169
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	170 - "make install" now installs manpages
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	171 dropbearkey.8 has been renamed to dropbearkey.1
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	172 manpage added for dropbearconvert
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	173
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	174 - Get rid of one second delay when running non-interactive commands
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	175
32862e8283e7 Version 2013.59 Matt Johnston <matt@ucc.asn.au> parents: 789 diff changeset	176
786 e76614145aea 2013.58 Matt Johnston <matt@ucc.asn.au> parents: 776 diff changeset	177 2013.58 - Thursday 18 April 2013
e76614145aea 2013.58 Matt Johnston <matt@ucc.asn.au> parents: 776 diff changeset	178
e76614145aea 2013.58 Matt Johnston <matt@ucc.asn.au> parents: 776 diff changeset	179 - Fix building with Zlib disabled, thanks to Hans Harder and cuma@freetz
e76614145aea 2013.58 Matt Johnston <matt@ucc.asn.au> parents: 776 diff changeset	180
e76614145aea 2013.58 Matt Johnston <matt@ucc.asn.au> parents: 776 diff changeset	181 - Use % as a separator for ports, fixes scp in multihop mode, from Hans Harder
e76614145aea 2013.58 Matt Johnston <matt@ucc.asn.au> parents: 776 diff changeset	182
e76614145aea 2013.58 Matt Johnston <matt@ucc.asn.au> parents: 776 diff changeset	183 - Reject logins for other users when running as non-root, from Hans Harder
e76614145aea 2013.58 Matt Johnston <matt@ucc.asn.au> parents: 776 diff changeset	184
e76614145aea 2013.58 Matt Johnston <matt@ucc.asn.au> parents: 776 diff changeset	185 - Disable client immediate authentication request by default, it prevents
e76614145aea 2013.58 Matt Johnston <matt@ucc.asn.au> parents: 776 diff changeset	186 passwordless logins from working
e76614145aea 2013.58 Matt Johnston <matt@ucc.asn.au> parents: 776 diff changeset	187
776 f7c8b786e595 changelog updates for 2013.57 Matt Johnston <matt@ucc.asn.au> parents: 775 diff changeset	188 2013.57 - Monday 15 April 2013
775 2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	189
776 f7c8b786e595 changelog updates for 2013.57 Matt Johnston <matt@ucc.asn.au> parents: 775 diff changeset	190 - Decreased connection setup time particularly with high latency connections,
f7c8b786e595 changelog updates for 2013.57 Matt Johnston <matt@ucc.asn.au> parents: 775 diff changeset	191 the number of round trips has been reduced for both client and server.
775 2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	192 CPU time hasn't been changed.
2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	193
776 f7c8b786e595 changelog updates for 2013.57 Matt Johnston <matt@ucc.asn.au> parents: 775 diff changeset	194 - Client will send an initial key exchange guess to save a round trip.
f7c8b786e595 changelog updates for 2013.57 Matt Johnston <matt@ucc.asn.au> parents: 775 diff changeset	195 Dropbear implements an extension [email protected] to allow the first
f7c8b786e595 changelog updates for 2013.57 Matt Johnston <matt@ucc.asn.au> parents: 775 diff changeset	196 packet guess to succeed in wider circumstances than the standard behaviour.
f7c8b786e595 changelog updates for 2013.57 Matt Johnston <matt@ucc.asn.au> parents: 775 diff changeset	197 When communicating with other implementations the standard behaviour is used.
775 2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	198
2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	199 - Client side: when public key or password authentication with
776 f7c8b786e595 changelog updates for 2013.57 Matt Johnston <matt@ucc.asn.au> parents: 775 diff changeset	200 $DROPBEAR_PASSWORD is used an initial authentication request will
775 2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	201 be sent immediately rather than querying the list of available methods.
2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	202 This behaviour is enabled by CLI_IMMEDIATE_AUTH option (on by default),
2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	203 please let the Dropbear author know if it causes any interoperability
2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	204 problems.
2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	205
2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	206 - Implement client escape characters ~. (terminate session) and
2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	207 ~^Z (background session)
2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	208
776 f7c8b786e595 changelog updates for 2013.57 Matt Johnston <matt@ucc.asn.au> parents: 775 diff changeset	209 - Server will more reliably clean up utmp when connection is closed, reported by
789 ea04e3eb03e2 Save with utf8 encoding Matt Johnston <matt@ucc.asn.au> parents: 786 diff changeset	210 Mattias Walström
775 2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	211
2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	212 - Don't crash if /dev/urandom isn't writable (RHEL5), thanks to Scott Case
2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	213
2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	214 - Add "-y -y" client option to skip host key checking, thanks to Hans Harder
2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	215
2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	216 - scp didn't work properly on systems using vfork(), thanks to Frank Van Uffelen
2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	217
776 f7c8b786e595 changelog updates for 2013.57 Matt Johnston <matt@ucc.asn.au> parents: 775 diff changeset	218 - Added IUTF8 terminal mode support (Linux and Mac OS). Not standardised yet
f7c8b786e595 changelog updates for 2013.57 Matt Johnston <matt@ucc.asn.au> parents: 775 diff changeset	219 though probably will be soon
775 2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	220
2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	221 - Some verbose DROPBEAR_TRACE output is now hidden unless $DROPBEAR_TRACE2
776 f7c8b786e595 changelog updates for 2013.57 Matt Johnston <matt@ucc.asn.au> parents: 775 diff changeset	222 enviroment variable is set
f7c8b786e595 changelog updates for 2013.57 Matt Johnston <matt@ucc.asn.au> parents: 775 diff changeset	223
f7c8b786e595 changelog updates for 2013.57 Matt Johnston <matt@ucc.asn.au> parents: 775 diff changeset	224 - Fix using asymmetric MAC algorithms (broke in )
f7c8b786e595 changelog updates for 2013.57 Matt Johnston <matt@ucc.asn.au> parents: 775 diff changeset	225
f7c8b786e595 changelog updates for 2013.57 Matt Johnston <matt@ucc.asn.au> parents: 775 diff changeset	226 - Renamed configure.in to configure.ac to quieten autoconf, from Mike Frysinger
775 2f1c199b6e4b requirenext fixup for firstkexfollows Matt Johnston <matt@ucc.asn.au> parents: 719 diff changeset	227
719 1b8b2b9d6e94 Forgot date in CHANGES Matt Johnston <matt@ucc.asn.au> parents: 718 diff changeset	228 2013.56 - Thursday 21 March 2013
718 9644f50434f1 2013.56 changelog Matt Johnston <matt@ucc.asn.au> parents: 708 diff changeset	229
691 e698d1a9f428 Some changes since 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 662 diff changeset	230 - Allow specifying cipher (-c) and MAC (-m) lists for dbclient
e698d1a9f428 Some changes since 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 662 diff changeset	231
718 9644f50434f1 2013.56 changelog Matt Johnston <matt@ucc.asn.au> parents: 708 diff changeset	232 - Allow using 'none' cipher or MAC (off by default, use options.h). Encryption
9644f50434f1 2013.56 changelog Matt Johnston <matt@ucc.asn.au> parents: 708 diff changeset	233 is used during authentication then disabled, similar to OpenSSH HPN mode
691 e698d1a9f428 Some changes since 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 662 diff changeset	234
e698d1a9f428 Some changes since 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 662 diff changeset	235 - Allow a user in immediately if the account has a blank password and blank
e698d1a9f428 Some changes since 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 662 diff changeset	236 passwords are enabled
e698d1a9f428 Some changes since 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 662 diff changeset	237
e698d1a9f428 Some changes since 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 662 diff changeset	238 - Include a few extra sources of entropy from /proc on Linux, hash private keys
718 9644f50434f1 2013.56 changelog Matt Johnston <matt@ucc.asn.au> parents: 708 diff changeset	239 as well. Dropbear will also write gathered entropy back into /dev/urandom
691 e698d1a9f428 Some changes since 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 662 diff changeset	240
718 9644f50434f1 2013.56 changelog Matt Johnston <matt@ucc.asn.au> parents: 708 diff changeset	241 - Added hmac-sha2-256 and hmac-sha2-512 support (off by default, use options.h)
691 e698d1a9f428 Some changes since 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 662 diff changeset	242
718 9644f50434f1 2013.56 changelog Matt Johnston <matt@ucc.asn.au> parents: 708 diff changeset	243 - Don't sent bad address "localhost" for -R forward connections,
9644f50434f1 2013.56 changelog Matt Johnston <matt@ucc.asn.au> parents: 708 diff changeset	244 reported by Denis Bider
691 e698d1a9f428 Some changes since 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 662 diff changeset	245
e698d1a9f428 Some changes since 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 662 diff changeset	246 - Add "-B" runtime option to allow blank passwords
e698d1a9f428 Some changes since 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 662 diff changeset	247
708 b207d5183bb7 document a few more changes Matt Johnston <matt@ucc.asn.au> parents: 691 diff changeset	248 - Allow using IPv6 bracket notation for addresses in server "-p" option, from Ben Jencks
b207d5183bb7 document a few more changes Matt Johnston <matt@ucc.asn.au> parents: 691 diff changeset	249
789 ea04e3eb03e2 Save with utf8 encoding Matt Johnston <matt@ucc.asn.au> parents: 786 diff changeset	250 - A few improvements for Android from Reimar Döffinger
708 b207d5183bb7 document a few more changes Matt Johnston <matt@ucc.asn.au> parents: 691 diff changeset	251
b207d5183bb7 document a few more changes Matt Johnston <matt@ucc.asn.au> parents: 691 diff changeset	252 - Fix memory leak for TCP forwarded connections to hosts that timed out,
789 ea04e3eb03e2 Save with utf8 encoding Matt Johnston <matt@ucc.asn.au> parents: 786 diff changeset	253 reported by Norbert Benczúr. Appears to be a very long-standing bug.
708 b207d5183bb7 document a few more changes Matt Johnston <matt@ucc.asn.au> parents: 691 diff changeset	254
718 9644f50434f1 2013.56 changelog Matt Johnston <matt@ucc.asn.au> parents: 708 diff changeset	255 - Fix "make clean" for out of tree builds
9644f50434f1 2013.56 changelog Matt Johnston <matt@ucc.asn.au> parents: 708 diff changeset	256
9644f50434f1 2013.56 changelog Matt Johnston <matt@ucc.asn.au> parents: 708 diff changeset	257 - Fix compilation when ENABLE_{SVR,CLI}_AGENTFWD are unset
9644f50434f1 2013.56 changelog Matt Johnston <matt@ucc.asn.au> parents: 708 diff changeset	258
661 c015af8a71cf 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 636 diff changeset	259 2012.55 - Wednesday 22 February 2012
c015af8a71cf 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 636 diff changeset	260
662 d354464b2aa6 - Improve CHANGES description Matt Johnston <matt@ucc.asn.au> parents: 661 diff changeset	261 - Security: Fix use-after-free bug that could be triggered if command="..."
d354464b2aa6 - Improve CHANGES description Matt Johnston <matt@ucc.asn.au> parents: 661 diff changeset	262 authorized_keys restrictions are used. Could allow arbitrary code execution
d354464b2aa6 - Improve CHANGES description Matt Johnston <matt@ucc.asn.au> parents: 661 diff changeset	263 or bypass of the command="..." restriction to an authenticated user.
d354464b2aa6 - Improve CHANGES description Matt Johnston <matt@ucc.asn.au> parents: 661 diff changeset	264 This bug affects releases 0.52 onwards. Ref CVE-2012-0920.
d354464b2aa6 - Improve CHANGES description Matt Johnston <matt@ucc.asn.au> parents: 661 diff changeset	265 Thanks to Danny Fullerton of Mantor Organization for reporting
d354464b2aa6 - Improve CHANGES description Matt Johnston <matt@ucc.asn.au> parents: 661 diff changeset	266 the bug.
661 c015af8a71cf 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 636 diff changeset	267
c015af8a71cf 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 636 diff changeset	268 - Compile fix, only apply IPV6 socket options if they are available in headers
c015af8a71cf 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 636 diff changeset	269 Thanks to Gustavo Zacarias for the patch
c015af8a71cf 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 636 diff changeset	270
662 d354464b2aa6 - Improve CHANGES description Matt Johnston <matt@ucc.asn.au> parents: 661 diff changeset	271 - Overwrite session key memory on exit
661 c015af8a71cf 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 636 diff changeset	272
c015af8a71cf 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 636 diff changeset	273 - Fix minor memory leak in unusual PAM authentication configurations.
c015af8a71cf 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 636 diff changeset	274 Thanks to Stathis Voukelatos
c015af8a71cf 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 636 diff changeset	275
c015af8a71cf 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 636 diff changeset	276 - Other small code cleanups
c015af8a71cf 2012.55 Matt Johnston <matt@ucc.asn.au> parents: 636 diff changeset	277
636 3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	278 2011.54 - Tuesday 8 November 2011
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	279
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	280 - Building statically works again, broke in 0.53 and 0.53.1
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	281
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	282 - Fix crash when forwarding with -R
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	283
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	284 - Fixed various leaks found by Klocwork analysis software, thanks to them for
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	285 running it
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	286
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	287 - Set IPTOS_LOWDELAY for IPv6, thanks to Dave Taht
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	288
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	289 - Bind to sockets with IPV6_V6ONLY so that it works properly on systems
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	290 regardless of the system-wide setting
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	291
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	292 - Added ALLOW_BLANK_PASSWORD option. Dropbear also now allows public key logins
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	293 to accounts with a blank password. Thanks to Rob Landley
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	294
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	295 - Fixed case where "-K 1" keepalive for dbclient would cause a SSH_MSG_IGNORE
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	296 packet to be sent
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	297
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	298 - Avoid some memory allocations in big number maths routines, improves
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	299 performance slightly
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	300
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	301 - Fix symlink target for installdropbearmulti with DESTDIR set, thanks to
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	302 Scottie Shore
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	303
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	304 - When requesting server allocated remote ports (-R 0:host:port) print a
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	305 message informing what the port is, thanks to Ali Onur Uyar.
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	306
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	307 - New version numbering scheme.
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	308
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	309 Source repository has now migrated to Mercurial at
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	310 https://secure.ucc.asn.au/hg/dropbear/graph/default
3f12086c2ef2 Changelog and version bump for 2011.54 Matt Johnston <matt@ucc.asn.au> parents: 607 diff changeset	311
607 aa2f51a6b81d Update changelog for 0.53.1 Matt Johnston <matt@ucc.asn.au> parents: 601 diff changeset	312 0.53.1 - Wednesday 2 March 2011
601 2cd89d627adb Updates changelog. Mention diffie-hellman-group14-sha1 in 0.53 Matt Johnston <matt@ucc.asn.au> parents: 598 diff changeset	313
2cd89d627adb Updates changelog. Mention diffie-hellman-group14-sha1 in 0.53 Matt Johnston <matt@ucc.asn.au> parents: 598 diff changeset	314 - -lcrypt needs to be before object files for static linking
2cd89d627adb Updates changelog. Mention diffie-hellman-group14-sha1 in 0.53 Matt Johnston <matt@ucc.asn.au> parents: 598 diff changeset	315
607 aa2f51a6b81d Update changelog for 0.53.1 Matt Johnston <matt@ucc.asn.au> parents: 601 diff changeset	316 - Compile fix when both client and agent forwarding are disabled
aa2f51a6b81d Update changelog for 0.53.1 Matt Johnston <matt@ucc.asn.au> parents: 601 diff changeset	317
aa2f51a6b81d Update changelog for 0.53.1 Matt Johnston <matt@ucc.asn.au> parents: 601 diff changeset	318 - Fix DROPBEAR_PRNGD_SOCKET mode
aa2f51a6b81d Update changelog for 0.53.1 Matt Johnston <matt@ucc.asn.au> parents: 601 diff changeset	319
aa2f51a6b81d Update changelog for 0.53.1 Matt Johnston <matt@ucc.asn.au> parents: 601 diff changeset	320 - Don't allow setting zlib memLevel since it seems buggy
aa2f51a6b81d Update changelog for 0.53.1 Matt Johnston <matt@ucc.asn.au> parents: 601 diff changeset	321
598 7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	322 0.53 - Thurs 24 February 2011
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	323
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	324 - Various performance/memory use improvements
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	325
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	326 - Client agent forwarding now works, using OpenSSH's ssh-agent
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	327
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	328 - Improve robustness of client multihop mode
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	329
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	330 - Fix a prime generation bug in bundled libtommath. This is unlikely to have
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	331 generated any bad keys in the wild.
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	332 See
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	333 https://bugzilla.redhat.com/show_bug.cgi?id=615088
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	334 http://bugs.gentoo.org/show_bug.cgi?id=328383
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	335 http://bugs.gentoo.org/show_bug.cgi?id=328409
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	336
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	337 - Attempt to build against system libtomcrypt/libtommath if available. This
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	338 can be disabled with ./configure --enable-bundled-libtom
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	339
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	340 - Make -K (keepalive) and -I (idle timeout) work together sensibly in the client.
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	341 The idle timeout is no longer reset by SSH_MSG_IGNORE packets.
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	342
601 2cd89d627adb Updates changelog. Mention diffie-hellman-group14-sha1 in 0.53 Matt Johnston <matt@ucc.asn.au> parents: 598 diff changeset	343 - Add diffie-hellman-group14-sha1 key exchange method
2cd89d627adb Updates changelog. Mention diffie-hellman-group14-sha1 in 0.53 Matt Johnston <matt@ucc.asn.au> parents: 598 diff changeset	344
598 7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	345 - Compile fix if ENABLE_CLI_PROXYCMD is disabled
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	346
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	347 - /usr/bin/X11/xauth is now the default path
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	348
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	349 - Client remote forward (-L/-R) arguments now accept a listen address
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	350
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	351 - In uClinux avoid trashing the parent process when a session exits
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	352
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	353 - Blowfish is now disabled by default since it has large memory usage
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	354
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	355 - Add option to change zlib windowbits/memlevel. Use less memory by default
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	356
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	357 - DROPBEAR_SMALL_CODE is now disabled by default
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	358
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	359 - SSH_ORIGINAL_COMMAND environment variable is set by the server when an
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	360 authorized_keys command is specified.
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	361
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	362 - Set SSH_TTY and SSH_CONNECTION environment variables in the server
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	363
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	364 - Client banner is now printed to standard error rather than standard output
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	365
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	366 - Capitalisation in many log messages has been made consistent. This may affect
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	367 scripts that parse logfiles.
7ec26a5b92e7 Changelog for 0.53, bump version Matt Johnston <matt@ucc.asn.au> parents: 518 diff changeset	368
518 ce104c8b0be1 - Add a date for the release Matt Johnston <matt@ucc.asn.au> parents: 515 diff changeset	369 0.52 - Wed 12 November 2008
510 b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	370
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	371 - Add "netcat-alike" option (-B) to dbclient, allowing Dropbear to tunnel
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	372 standard input/output to a TCP port-forwarded remote host.
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	373
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	374 - Add "proxy command" support to dbclient, to allow using a spawned process for
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	375 IO rather than a direct TCP connection. eg
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	376 dbclient remotehost
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	377 is equivalent to
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	378 dbclient -J 'nc remotehost 22' remotehost
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	379 (the hostname is still provided purely for looking up saved host keys)
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	380
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	381 - Combine netcat-alike and proxy support to allow "multihop" connections, with
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	382 comma-separated host syntax. Allows running
515 fe30d2a2d626 - Document idle_timeout Matt Johnston <matt@ucc.asn.au> parents: 513 diff changeset	383
510 b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	384 dbclient user1@host1,user2@host2,user3@host3
515 fe30d2a2d626 - Document idle_timeout Matt Johnston <matt@ucc.asn.au> parents: 513 diff changeset	385
510 b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	386 to end up at host3 via the other two, using SSH TCP forwarding. It's a bit
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	387 like onion-routing. All connections are established from the local machine.
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	388 The comma-separated syntax can also be used for scp/rsync, eg
515 fe30d2a2d626 - Document idle_timeout Matt Johnston <matt@ucc.asn.au> parents: 513 diff changeset	389
513 a3748e54273c Idle timeout patch from Farrell Aultman. Needs testing, unsure if server Matt Johnston <matt@ucc.asn.au> parents: 510 diff changeset	390 rsync -a -e dbclient m@gateway,m2@host,martello:/home/matt/ ~/backup/
515 fe30d2a2d626 - Document idle_timeout Matt Johnston <matt@ucc.asn.au> parents: 513 diff changeset	391
510 b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	392 to bounce through a few hosts.
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	393
515 fe30d2a2d626 - Document idle_timeout Matt Johnston <matt@ucc.asn.au> parents: 513 diff changeset	394 - Add -I "idle timeout" option (contributed by Farrell Aultman)
fe30d2a2d626 - Document idle_timeout Matt Johnston <matt@ucc.asn.au> parents: 513 diff changeset	395
510 b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	396 - Allow restrictions on authorized_keys logins such as restricting commands
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	397 to be run etc. This is a subset of those allowed by OpenSSH, doesn't
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	398 yet allow restricting source host.
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	399
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	400 - Use vfork() for scp on uClinux
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	401
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	402 - Default to PATH=/usr/bin:/bin for shells.
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	403
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	404 - Report errors if -R forwarding fails
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	405
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	406 - Add counter mode cipher support, which avoids some security problems with the
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	407 standard CBC mode.
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	408
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	409 - Support [email protected] delayed compression for client/server. It can be
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	410 required for the Dropbear server with the '-Z' option. This is useful for
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	411 security as it avoids exposing the server to attacks on zlib by
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	412 unauthenticated remote users, though requires client side support.
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	413
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	414 - options.h has been split into options.h (user-changable) and sysoptions.h
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	415 (less commonly changed)
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	416
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	417 - Support "dbclient -s sftp" to specify a subsystem
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	418
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	419 - Fix a bug in replies to channel requests that could be triggered by recent
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	420 versions of PuTTY
b85507ade010 - Update manuals, include section on authorized_keys Matt Johnston <matt@ucc.asn.au> parents: 471 diff changeset	421
471 ece7677359d6 0.51 Matt Johnston <matt@ucc.asn.au> parents: 468 diff changeset	422 0.51 - Thu 27 March 2008
468 706e234212d0 Mention 0.51-test2 changes Matt Johnston <matt@ucc.asn.au> parents: 457 diff changeset	423
706e234212d0 Mention 0.51-test2 changes Matt Johnston <matt@ucc.asn.au> parents: 457 diff changeset	424 - Make a copy of password fields rather erroneously relying on getwpnam()
706e234212d0 Mention 0.51-test2 changes Matt Johnston <matt@ucc.asn.au> parents: 457 diff changeset	425 to be safe to call multiple times
706e234212d0 Mention 0.51-test2 changes Matt Johnston <matt@ucc.asn.au> parents: 457 diff changeset	426
706e234212d0 Mention 0.51-test2 changes Matt Johnston <matt@ucc.asn.au> parents: 457 diff changeset	427 - If $SSH_ASKPASS_ALWAYS environment variable is set (and $SSH_ASKPASS is
706e234212d0 Mention 0.51-test2 changes Matt Johnston <matt@ucc.asn.au> parents: 457 diff changeset	428 as well) always use that program, ignoring isatty() and $DISPLAY
706e234212d0 Mention 0.51-test2 changes Matt Johnston <matt@ucc.asn.au> parents: 457 diff changeset	429
706e234212d0 Mention 0.51-test2 changes Matt Johnston <matt@ucc.asn.au> parents: 457 diff changeset	430 - Wait until a process exits before the server closes a connection, so
471 ece7677359d6 0.51 Matt Johnston <matt@ucc.asn.au> parents: 468 diff changeset	431 that an exit code can be sent. This fixes problems with exit codes not
ece7677359d6 0.51 Matt Johnston <matt@ucc.asn.au> parents: 468 diff changeset	432 being returned, which could cause scp to fail.
468 706e234212d0 Mention 0.51-test2 changes Matt Johnston <matt@ucc.asn.au> parents: 457 diff changeset	433
455 319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	434 0.50 - Wed 8 August 2007
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	435
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	436 - Add DROPBEAR_PASSWORD environment variable to specify a dbclient password
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	437
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	438 - Use /dev/urandom by default, since that's what everyone does anyway
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	439
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	440 - Correct vfork() use for uClinux in scp
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	441 (thanks to Alex Landau)
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	442
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	443 - Exit with an exit code of 1 if dropbear can't bind to any ports
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	444 (thanks to Nicolai Ehemann)
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	445
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	446 - Improve network performance and add a -W <receive_window> argument for
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	447 adjusting the tradeoff between network performance and memory consumption.
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	448
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	449 - Fix a problem where reply packets could be sent during key exchange,
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	450 in violation of the SSH spec. This could manifest itself with connections
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	451 being terminated after 8 hours with new TCP-forward connections being
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	452 established.
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	453
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	454 - Add -K <keepalive_time> argument, ensuring that data is transmitted
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	455 over the connection at least every N seconds.
319262c94d24 Prepare for 0.50 release Matt Johnston <matt@ucc.asn.au> parents: 437 diff changeset	456
457 e430a26064ee Make dropbearkey only generate 1024 bit keys Matt Johnston <matt@ucc.asn.au> parents: 455 diff changeset	457 - dropbearkey will no longer generate DSS keys of sizes other than 1024
e430a26064ee Make dropbearkey only generate 1024 bit keys Matt Johnston <matt@ucc.asn.au> parents: 455 diff changeset	458 bits, as required by the DSS specification. (Other sizes are still
e430a26064ee Make dropbearkey only generate 1024 bit keys Matt Johnston <matt@ucc.asn.au> parents: 455 diff changeset	459 accepted for use to provide backwards compatibility).
e430a26064ee Make dropbearkey only generate 1024 bit keys Matt Johnston <matt@ucc.asn.au> parents: 455 diff changeset	460
437 7319d229799a 0.49 probably done Matt Johnston <matt@ucc.asn.au> parents: 430 diff changeset	461 0.49 - Fri 23 February 2007
7319d229799a 0.49 probably done Matt Johnston <matt@ucc.asn.au> parents: 430 diff changeset	462
7319d229799a 0.49 probably done Matt Johnston <matt@ucc.asn.au> parents: 430 diff changeset	463 - Security: dbclient previously would prompt to confirm a
7319d229799a 0.49 probably done Matt Johnston <matt@ucc.asn.au> parents: 430 diff changeset	464 mismatching hostkey but wouldn't warn loudly. It will now
830 b9f0058860f1 - 2013.60, update CHANGES Matt Johnston <matt@ucc.asn.au> parents: 822 diff changeset	465 exit upon a mismatch. CVE-2007-1099
337 bfa09e369e0e 0.49 is close to done. Matt Johnston <matt@ucc.asn.au> parents: 295 diff changeset	466
bfa09e369e0e 0.49 is close to done. Matt Johnston <matt@ucc.asn.au> parents: 295 diff changeset	467 - Compile fixes, make sure that all variable definitions are at the start
bfa09e369e0e 0.49 is close to done. Matt Johnston <matt@ucc.asn.au> parents: 295 diff changeset	468 of a scope.
bfa09e369e0e 0.49 is close to done. Matt Johnston <matt@ucc.asn.au> parents: 295 diff changeset	469
430 67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	470 - Added -P pidfile argument to the server (from Swen Schillig)
337 bfa09e369e0e 0.49 is close to done. Matt Johnston <matt@ucc.asn.au> parents: 295 diff changeset	471
bfa09e369e0e 0.49 is close to done. Matt Johnston <matt@ucc.asn.au> parents: 295 diff changeset	472 - Add -N dbclient option for "no command"
bfa09e369e0e 0.49 is close to done. Matt Johnston <matt@ucc.asn.au> parents: 295 diff changeset	473
bfa09e369e0e 0.49 is close to done. Matt Johnston <matt@ucc.asn.au> parents: 295 diff changeset	474 - Add -f dbclient option for "background after auth"
bfa09e369e0e 0.49 is close to done. Matt Johnston <matt@ucc.asn.au> parents: 295 diff changeset	475
437 7319d229799a 0.49 probably done Matt Johnston <matt@ucc.asn.au> parents: 430 diff changeset	476 - Add ability to limit binding to particular addresses, use
7319d229799a 0.49 probably done Matt Johnston <matt@ucc.asn.au> parents: 430 diff changeset	477 -p [address:]port, patch from Max-Gerd Retzlaff.
7319d229799a 0.49 probably done Matt Johnston <matt@ucc.asn.au> parents: 430 diff changeset	478
430 67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	479 - Try to finally fix ss_family compilation problems (for old
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	480 glibc systems)
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	481
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	482 - Fix finding relative-path server hostkeys when running daemonized
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	483
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	484 - Use $HOME in preference to that from /etc/passwd, so that
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	485 dbclient can still work on broken systems.
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	486
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	487 - Fix various issues found by Klocwork defect analysis, mostly memory leaks
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	488 and error-handling. Thanks to Klocwork for their service.
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	489
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	490 - Improve building in a separate directory
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	491
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	492 - Add compile-time LOG_COMMANDS option to log user commands
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	493
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	494 - Add '-y' flag to dbclient to unconditionally accept host keys,
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	495 patch from Luciano Miguel Ferreira Rocha
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	496
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	497 - Return immediately for "sleep 10 & echo foo", rather than waiting
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	498 for the sleep to return (pointed out by Rob Landley).
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	499
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	500 - Avoid hanging after exit in certain cases (such as scp)
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	501
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	502 - Various minor fixes, in particular various leaks reported by
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	503 Erik Hovland
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	504
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	505 - Disable core dumps on startup
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	506
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	507 - Don't erase over every single buffer, since it was a bottleneck.
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	508 On systems where it really matters, encrypted swap should be utilised.
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	509
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	510 - Read /dev/[u]random only once at startup to conserve kernel entropy
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	511
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	512 - Upgrade to LibTomCrypt 1.16 and LibTomMath 0.40
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	513
67689b7ceaf0 Changes for 0.49test1 Matt Johnston <matt@ucc.asn.au> parents: 337 diff changeset	514 - Upgrade config.status and config.guess
337 bfa09e369e0e 0.49 is close to done. Matt Johnston <matt@ucc.asn.au> parents: 295 diff changeset	515
295 03f65e461915 0.48.1 Matt Johnston <matt@ucc.asn.au> parents: 291 diff changeset	516 0.48.1 - Sat 11 March 2006
03f65e461915 0.48.1 Matt Johnston <matt@ucc.asn.au> parents: 291 diff changeset	517
03f65e461915 0.48.1 Matt Johnston <matt@ucc.asn.au> parents: 291 diff changeset	518 - Compile fix for scp
03f65e461915 0.48.1 Matt Johnston <matt@ucc.asn.au> parents: 291 diff changeset	519
291 55a99934db87 0.48 bump Matt Johnston <matt@ucc.asn.au> parents: 290 diff changeset	520 0.48 - Thurs 9 March 2006
290 94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	521
94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	522 - Check that the circular buffer is properly empty before
94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	523 closing a channel, which could cause truncated transfers
94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	524 (thanks to Tomas Vanek for helping track it down)
94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	525
94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	526 - Implement per-IP pre-authentication connection limits
830 b9f0058860f1 - 2013.60, update CHANGES Matt Johnston <matt@ucc.asn.au> parents: 822 diff changeset	527 (after some poking from Pablo Fernandez) CVE-2006-1206
290 94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	528
94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	529 - Exit gracefully if trying to connect to as SSH v1 server
94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	530 (reported by Rushi Lala)
94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	531
94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	532 - Only read /dev/random once at startup when in non-inetd mode
94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	533
94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	534 - Allow ctrl-c to close a dbclient password prompt (may
94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	535 still have to press enter on some platforms)
94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	536
94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	537 - Merged in uClinux patch for inetd mode
94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	538
94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	539 - Updated to scp from OpenSSH 4.3p2 - fixes a security issue
94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	540 where use of system() could cause users to execute arbitrary
94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	541 code through malformed filenames, ref CVE-2006-0225
94ee16f5b8a8 0.48 progress Matt Johnston <matt@ucc.asn.au> parents: 265 diff changeset	542
265 9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	543 0.47 - Thurs Dec 8 2005
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	544
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	545 - SECURITY: fix for buffer allocation error in server code, could potentially
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	546 allow authenticated users to gain elevated privileges. All multi-user systems
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	547 running the server should upgrade (or apply the patch available on the
830 b9f0058860f1 - 2013.60, update CHANGES Matt Johnston <matt@ucc.asn.au> parents: 822 diff changeset	548 Dropbear webpage). CVE-2005-4178
265 9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	549
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	550 - Fix channel handling code so that redirecting to /dev/null doesn't use
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	551 100% CPU.
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	552
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	553 - Turn on zlib compression for dbclient.
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	554
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	555 - Set "low delay" TOS bit, can significantly improve interactivity
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	556 over some links.
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	557
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	558 - Added client keyboard-interactive mode support, allows operation with
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	559 newer OpenSSH servers in default config.
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	560
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	561 - Log when pubkey auth fails because of bad ~/.ssh/authorized_keys permissions
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	562
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	563 - Improve logging of assertions
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	564
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	565 - Added aes-256 cipher and sha1-96 hmac.
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	566
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	567 - Fix twofish so that it actually works.
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	568
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	569 - Improve PAM prompt comparison.
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	570
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	571 - Added -g (dbclient) and -a (dropbear server) options to allow
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	572 connections to listening forwarded ports from remote machines.
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	573
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	574 - Various other minor fixes
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	575
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	576 - Compile fixes for glibc 2.1 (ss_family vs __ss_family) and NetBSD
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	577 (netinet/in_systm.h needs to be included).
9b9664204b97 * Update changelogs for 0.47 release Matt Johnston <matt@ucc.asn.au> parents: 224 diff changeset	578
223 f3ef0d29ab65 * 0.46 CHANGES done Matt Johnston <matt@ucc.asn.au> parents: 220 diff changeset	579 0.46 - Sat July 9 2005
193 ca6a7c7a925c Preparing for 0.46 Matt Johnston <matt@ucc.asn.au> parents: 176 diff changeset	580
ca6a7c7a925c Preparing for 0.46 Matt Johnston <matt@ucc.asn.au> parents: 176 diff changeset	581 - Fix long-standing bug which caused connections to be closed if an ssh-agent
ca6a7c7a925c Preparing for 0.46 Matt Johnston <matt@ucc.asn.au> parents: 176 diff changeset	582 socket was no longer available
ca6a7c7a925c Preparing for 0.46 Matt Johnston <matt@ucc.asn.au> parents: 176 diff changeset	583
220 9089929fb2b7 * preparing for 0.46 release Matt Johnston <matt@ucc.asn.au> parents: 193 diff changeset	584 - Print a warning if we seem to be blocking on /dev/random
193 ca6a7c7a925c Preparing for 0.46 Matt Johnston <matt@ucc.asn.au> parents: 176 diff changeset	585 (suggested by Paul Fox)
ca6a7c7a925c Preparing for 0.46 Matt Johnston <matt@ucc.asn.au> parents: 176 diff changeset	586
220 9089929fb2b7 * preparing for 0.46 release Matt Johnston <matt@ucc.asn.au> parents: 193 diff changeset	587 - Fixed a memory leak in DSS code (thanks to Boris Berezovsky for the patch)
193 ca6a7c7a925c Preparing for 0.46 Matt Johnston <matt@ucc.asn.au> parents: 176 diff changeset	588
ca6a7c7a925c Preparing for 0.46 Matt Johnston <matt@ucc.asn.au> parents: 176 diff changeset	589 - dbclient -L no longer segfaults, allocate correct buffer size (thanks
220 9089929fb2b7 * preparing for 0.46 release Matt Johnston <matt@ucc.asn.au> parents: 193 diff changeset	590 to David Cook for reporting it, and Christopher Faylor for independently
9089929fb2b7 * preparing for 0.46 release Matt Johnston <matt@ucc.asn.au> parents: 193 diff changeset	591 sending in a patch)
193 ca6a7c7a925c Preparing for 0.46 Matt Johnston <matt@ucc.asn.au> parents: 176 diff changeset	592
223 f3ef0d29ab65 * 0.46 CHANGES done Matt Johnston <matt@ucc.asn.au> parents: 220 diff changeset	593 - Added RSA blinding to signing code (suggested by Dan Kaminsky)
193 ca6a7c7a925c Preparing for 0.46 Matt Johnston <matt@ucc.asn.au> parents: 176 diff changeset	594
220 9089929fb2b7 * preparing for 0.46 release Matt Johnston <matt@ucc.asn.au> parents: 193 diff changeset	595 - Rearranged bignum reading/random generation code
193 ca6a7c7a925c Preparing for 0.46 Matt Johnston <matt@ucc.asn.au> parents: 176 diff changeset	596
ca6a7c7a925c Preparing for 0.46 Matt Johnston <matt@ucc.asn.au> parents: 176 diff changeset	597 - Reset the non-blocking status on stderr and stdout as well as stdin,
ca6a7c7a925c Preparing for 0.46 Matt Johnston <matt@ucc.asn.au> parents: 176 diff changeset	598 fixes a problem where the shell running dbclient will exit (thanks to
ca6a7c7a925c Preparing for 0.46 Matt Johnston <matt@ucc.asn.au> parents: 176 diff changeset	599 Brent Roman for reporting it)
ca6a7c7a925c Preparing for 0.46 Matt Johnston <matt@ucc.asn.au> parents: 176 diff changeset	600
223 f3ef0d29ab65 * 0.46 CHANGES done Matt Johnston <matt@ucc.asn.au> parents: 220 diff changeset	601 - Fix so that all file descriptors are closed so the child shell doesn't
220 9089929fb2b7 * preparing for 0.46 release Matt Johnston <matt@ucc.asn.au> parents: 193 diff changeset	602 inherit descriptors (thanks to Linden May for the patch)
9089929fb2b7 * preparing for 0.46 release Matt Johnston <matt@ucc.asn.au> parents: 193 diff changeset	603
223 f3ef0d29ab65 * 0.46 CHANGES done Matt Johnston <matt@ucc.asn.au> parents: 220 diff changeset	604 - Change signkey.c to avoid gcc 4 generating incorrect code
220 9089929fb2b7 * preparing for 0.46 release Matt Johnston <matt@ucc.asn.au> parents: 193 diff changeset	605
224 1dbd2473482f * ... and a bit more for the CHANGES Matt Johnston <matt@ucc.asn.au> parents: 223 diff changeset	606 - After both sides of a file descriptor have been shutdown(), close()
1dbd2473482f * ... and a bit more for the CHANGES Matt Johnston <matt@ucc.asn.au> parents: 223 diff changeset	607 it to avoid leaking descriptors (thanks to Ari Hyttinen for a patch)
1dbd2473482f * ... and a bit more for the CHANGES Matt Johnston <matt@ucc.asn.au> parents: 223 diff changeset	608
220 9089929fb2b7 * preparing for 0.46 release Matt Johnston <matt@ucc.asn.au> parents: 193 diff changeset	609 - Update to LibTomCrypt 1.05 and LibTomMath 0.35
9089929fb2b7 * preparing for 0.46 release Matt Johnston <matt@ucc.asn.au> parents: 193 diff changeset	610
176 bc69564ef57b changes for 0.45 Matt Johnston <matt@ucc.asn.au> parents: 170 diff changeset	611 0.45 - Mon March 7 2005
bc69564ef57b changes for 0.45 Matt Johnston <matt@ucc.asn.au> parents: 170 diff changeset	612
bc69564ef57b changes for 0.45 Matt Johnston <matt@ucc.asn.au> parents: 170 diff changeset	613 - Makefile no longer appends 'static' to statically linked binaries
bc69564ef57b changes for 0.45 Matt Johnston <matt@ucc.asn.au> parents: 170 diff changeset	614
bc69564ef57b changes for 0.45 Matt Johnston <matt@ucc.asn.au> parents: 170 diff changeset	615 - Add optional SSH_ASKPASS support to the client
bc69564ef57b changes for 0.45 Matt Johnston <matt@ucc.asn.au> parents: 170 diff changeset	616
bc69564ef57b changes for 0.45 Matt Johnston <matt@ucc.asn.au> parents: 170 diff changeset	617 - Respect HOST_LOOKUP option
bc69564ef57b changes for 0.45 Matt Johnston <matt@ucc.asn.au> parents: 170 diff changeset	618
bc69564ef57b changes for 0.45 Matt Johnston <matt@ucc.asn.au> parents: 170 diff changeset	619 - Fix accidentally removed "return;" statement which was removed in 0.44
bc69564ef57b changes for 0.45 Matt Johnston <matt@ucc.asn.au> parents: 170 diff changeset	620 (causing clients which sent an empty terminal-modes string to fail to
bc69564ef57b changes for 0.45 Matt Johnston <matt@ucc.asn.au> parents: 170 diff changeset	621 connect - including pssh, ssh.com, danger hiptop). (patches
bc69564ef57b changes for 0.45 Matt Johnston <matt@ucc.asn.au> parents: 170 diff changeset	622 independently from Paul Fox, David Horwitt and Sven-Ola Tuecke)
bc69564ef57b changes for 0.45 Matt Johnston <matt@ucc.asn.au> parents: 170 diff changeset	623
170 a62cb364f615 Read "y/n" response for fingerprints from /dev/tty directly so that dbclient Matt Johnston <matt@ucc.asn.au> parents: 161 diff changeset	624 - Read "y/n" response for fingerprints from /dev/tty directly so that dbclient
a62cb364f615 Read "y/n" response for fingerprints from /dev/tty directly so that dbclient Matt Johnston <matt@ucc.asn.au> parents: 161 diff changeset	625 will work with scp.
a62cb364f615 Read "y/n" response for fingerprints from /dev/tty directly so that dbclient Matt Johnston <matt@ucc.asn.au> parents: 161 diff changeset	626
161 b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	627 0.44 - Mon Jan 3 2005
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	628
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	629 - SECURITY: Fix for PAM auth so that usernames are logged and conversation
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	630 function responses are allocated correctly - all 0.44test4 users with PAM
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	631 compiled in (not default) are advised to upgrade.
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	632
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	633 - Fix calls to getnameinfo() for compatibility with Solaris
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	634
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	635 - Pristine compilation works (run 'configure' from a fresh dir and make it
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	636 there)
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	637
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	638 - Fixes for compiling with most options disabled.
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	639
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	640 - Upgraded to LibTomCrypt 0.99 and LibTomMath 0.32
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	641
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	642 - Make sure that zeroing out of values in LTM and LTC won't get optimised away
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	643
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	644 - Removed unused functions from loginrec.c
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	645
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	646 - /dev/random is now the default entropy source rather than /dev/urandom
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	647
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	648 - Logging of IPs in auth success/failure messages for improved greppability
134 6b306ad5f5b5 -i works with scp now. Matt Johnston <matt@ucc.asn.au> parents: 124 diff changeset	649
6b306ad5f5b5 -i works with scp now. Matt Johnston <matt@ucc.asn.au> parents: 124 diff changeset	650 - Fix dbclient so that "scp -i keyfile" works. (It can handle "-ikeyfile
6b306ad5f5b5 -i works with scp now. Matt Johnston <matt@ucc.asn.au> parents: 124 diff changeset	651 properly)
6b306ad5f5b5 -i works with scp now. Matt Johnston <matt@ucc.asn.au> parents: 124 diff changeset	652
6b306ad5f5b5 -i works with scp now. Matt Johnston <matt@ucc.asn.au> parents: 124 diff changeset	653 - Avoid a race in server shell-handling code which prevents the exit-code
161 b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	654 from being returned to the client in some circumstances.
134 6b306ad5f5b5 -i works with scp now. Matt Johnston <matt@ucc.asn.au> parents: 124 diff changeset	655
6b306ad5f5b5 -i works with scp now. Matt Johnston <matt@ucc.asn.au> parents: 124 diff changeset	656 - Makefile modified so that install target works correctly (doesn't try
6b306ad5f5b5 -i works with scp now. Matt Johnston <matt@ucc.asn.au> parents: 124 diff changeset	657 to install "all" binary) - patch from Juergen Daubert
6b306ad5f5b5 -i works with scp now. Matt Johnston <matt@ucc.asn.au> parents: 124 diff changeset	658
161 b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	659 - Various minor fixes and compile warnings.
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	660
b9d3f725e00b 0.44 release changes Matt Johnston <matt@ucc.asn.au> parents: 134 diff changeset	661 0.44test4 - Tue Sept 14 2004 21:15:54 +0800
124 8c08fd2b7f5b 0.44test4 probably Matt Johnston <matt@ucc.asn.au> parents: 111 diff changeset	662
8c08fd2b7f5b 0.44test4 probably Matt Johnston <matt@ucc.asn.au> parents: 111 diff changeset	663 - Fix inetd mode so it actually loads the hostkeys (oops)
8c08fd2b7f5b 0.44test4 probably Matt Johnston <matt@ucc.asn.au> parents: 111 diff changeset	664
8c08fd2b7f5b 0.44test4 probably Matt Johnston <matt@ucc.asn.au> parents: 111 diff changeset	665 - Changed DROPBEAR_DEFPORT properly everywhere
8c08fd2b7f5b 0.44test4 probably Matt Johnston <matt@ucc.asn.au> parents: 111 diff changeset	666
8c08fd2b7f5b 0.44test4 probably Matt Johnston <matt@ucc.asn.au> parents: 111 diff changeset	667 - Fix a small memory leak in the auth code
8c08fd2b7f5b 0.44test4 probably Matt Johnston <matt@ucc.asn.au> parents: 111 diff changeset	668
8c08fd2b7f5b 0.44test4 probably Matt Johnston <matt@ucc.asn.au> parents: 111 diff changeset	669 - WCOREDUMP is only used on systems which support it (ie not cygwin or AIX)
8c08fd2b7f5b 0.44test4 probably Matt Johnston <matt@ucc.asn.au> parents: 111 diff changeset	670
8c08fd2b7f5b 0.44test4 probably Matt Johnston <matt@ucc.asn.au> parents: 111 diff changeset	671 - Check (and fail for) cases when we can't negotiate algorithms with the
8c08fd2b7f5b 0.44test4 probably Matt Johnston <matt@ucc.asn.au> parents: 111 diff changeset	672 remote side successfully (rather than bombing out ungracefully)
8c08fd2b7f5b 0.44test4 probably Matt Johnston <matt@ucc.asn.au> parents: 111 diff changeset	673
8c08fd2b7f5b 0.44test4 probably Matt Johnston <matt@ucc.asn.au> parents: 111 diff changeset	674 - Handle authorized_keys files without a terminating newline
8c08fd2b7f5b 0.44test4 probably Matt Johnston <matt@ucc.asn.au> parents: 111 diff changeset	675
8c08fd2b7f5b 0.44test4 probably Matt Johnston <matt@ucc.asn.au> parents: 111 diff changeset	676 - Fiddle the channel receive window size for possibly better performance
8c08fd2b7f5b 0.44test4 probably Matt Johnston <matt@ucc.asn.au> parents: 111 diff changeset	677
8c08fd2b7f5b 0.44test4 probably Matt Johnston <matt@ucc.asn.au> parents: 111 diff changeset	678 - Added in the PAM authentication code (finally! thanks to Martin Carlsson)
8c08fd2b7f5b 0.44test4 probably Matt Johnston <matt@ucc.asn.au> parents: 111 diff changeset	679
111 88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	680 0.44test3 - Fri Aug 27 22:20:54 +0800
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	681
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	682 - Fixed a bunch of warnings.
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	683
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	684 - scp works correctly when passed a username (fix for the dbclient program
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	685 itself as well, "-lmatt" works as well as "-l matt").
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	686
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	687 - Remove unrequired debian files
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	688
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	689 - Exit with the remote process's return code for dbclient
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	690
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	691 - Display stderr messages from the server in the client
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	692
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	693 - Add circular buffering to the channel code. This should dramatically reduce
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	694 the amount of backtraffic sent in response to traffic incoming to the
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	695 Dropbear end - improves high-latency performance (ie dialup).
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	696
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	697 - Various other related channel-handling fixups.
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	698
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	699 - Allow leading lines in the banner when connecting to servers
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	700
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	701 - Fixed printing out errors onto the network socket with stderr (for inetd
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	702 mode when using xinetd)
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	703
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	704 - Remove obselete documentation
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	705
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	706 - Fix a null-pointer exception when trying to free non-existant listeners
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	707 at cleanup.
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	708
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	709 - DEBUG_TRACE now only works if you add "-v" to the program commandline
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	710
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	711 - Don't leave stdin non-blocking on exit - this caused the parent shell
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	712 of dbclient to close when dbclient exited, for some shells in BusyBox
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	713
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	714 - Server connections no longer timeout after 5 minutes
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	715
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	716 - Fixed stupid DSS hostkey typo (server couldn't load host keys)
88e0a1ad951a merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 90 diff changeset	717
90 c2ac796b130e merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 78 diff changeset	718 0.44test2 - Tues Aug 17 2004 17:43:54 +0800
c2ac796b130e merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 78 diff changeset	719
c2ac796b130e merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 78 diff changeset	720 - Fix up dropbearmulti targets in the Makefile - symlinks are now created
c2ac796b130e merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 78 diff changeset	721
c2ac796b130e merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 78 diff changeset	722 - Compile fake-rfc2553 even with dropbearconvert/dropbearkey - this
c2ac796b130e merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 78 diff changeset	723 allows them to work on platforms without a native getaddrinfo()
c2ac796b130e merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 78 diff changeset	724
c2ac796b130e merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 78 diff changeset	725 - Create ~/.ssh/known_hosts properly if it doesn't exist
c2ac796b130e merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 78 diff changeset	726
c2ac796b130e merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 78 diff changeset	727 - Fix basename() function prototype
c2ac796b130e merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 78 diff changeset	728
c2ac796b130e merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 78 diff changeset	729 - Backport some local changes (more #ifdefs for termcodes.c, a fix for missing
c2ac796b130e merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 78 diff changeset	730 defines on AIX).
c2ac796b130e merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 78 diff changeset	731
c2ac796b130e merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 78 diff changeset	732 - Let dbclient be run as "ssh"
c2ac796b130e merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 78 diff changeset	733
c2ac796b130e merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 78 diff changeset	734 - Initialise mp_ints by default
c2ac796b130e merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 78 diff changeset	735
c2ac796b130e merge of 00b67a11e33c3ed390556805ed6d1078528bee70 Matt Johnston <matt@ucc.asn.au> parents: 78 diff changeset	736 0.44test1 - Sun Aug 16 2005 17:43:54 +0800
78 677843bfa734 Added changelog entry Matt Johnston <matt@ucc.asn.au> parents: 69 diff changeset	737
677843bfa734 Added changelog entry Matt Johnston <matt@ucc.asn.au> parents: 69 diff changeset	738 - TESTING RELEASE - this is the first public release of the client codebase,
677843bfa734 Added changelog entry Matt Johnston <matt@ucc.asn.au> parents: 69 diff changeset	739 so there are sure to be bugs to be found. In addition, if you're just using
677843bfa734 Added changelog entry Matt Johnston <matt@ucc.asn.au> parents: 69 diff changeset	740 the server portion, the final binary size probably will increase - I'll
677843bfa734 Added changelog entry Matt Johnston <matt@ucc.asn.au> parents: 69 diff changeset	741 be trying to get it back down in future releases.
677843bfa734 Added changelog entry Matt Johnston <matt@ucc.asn.au> parents: 69 diff changeset	742
677843bfa734 Added changelog entry Matt Johnston <matt@ucc.asn.au> parents: 69 diff changeset	743 - Dropbear client added - lots of changes to the server code as well to
677843bfa734 Added changelog entry Matt Johnston <matt@ucc.asn.au> parents: 69 diff changeset	744 generalise things
677843bfa734 Added changelog entry Matt Johnston <matt@ucc.asn.au> parents: 69 diff changeset	745
677843bfa734 Added changelog entry Matt Johnston <matt@ucc.asn.au> parents: 69 diff changeset	746 - IPv6 support added for client, server, and forwarding
677843bfa734 Added changelog entry Matt Johnston <matt@ucc.asn.au> parents: 69 diff changeset	747
677843bfa734 Added changelog entry Matt Johnston <matt@ucc.asn.au> parents: 69 diff changeset	748 - New makefile with more generic support for multiple-program binaries
677843bfa734 Added changelog entry Matt Johnston <matt@ucc.asn.au> parents: 69 diff changeset	749
69 59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	750 0.43 - Fri Jul 16 2004 17:44:54 +0800
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	751
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	752 - SECURITY: Don't try to free() uninitialised variables in DSS verification
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	753 code. Thanks to Arne Bernin for pointing out this bug. This is possibly
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	754 exploitable, all users with DSS and pubkey-auth compiled in are advised to
830 b9f0058860f1 - 2013.60, update CHANGES Matt Johnston <matt@ucc.asn.au> parents: 822 diff changeset	755 upgrade. CVE-2004-2486
69 59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	756
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	757 - Clean up agent forwarding socket files correctly, patch from Gerrit Pape.
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	758
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	759 - Don't go into an infinite loop when portforwarding to servers which don't
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	760 send any initial data/banner. Patch from Nikola Vladov
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	761
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	762 - Fix for network vs. host byte order in logging remote TCP ports, also
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	763 from Gerrit Pape.
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	764
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	765 - Initialise many pointers to NULL, for general safety. Also checked cleanup
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	766 code for mp_ints (related to security issues above).
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	767
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	768 0.42 - Wed Jun 16 2004 12:44:54 +0800
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	769
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	770 - Updated to Gerrit Pape's official Debian subdirectory
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	771
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	772 - Fixed bad check when opening /dev/urandom - thanks to Danny Sung.
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	773
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	774 - Added -i inetd mode flag, and associated options in options.h . Dropbear
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	775 can be compiled with either normal mode, inetd, or both modes. Thanks
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	776 to Gerrit Pape for basic patch and motivation.
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	777
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	778 - Use <dirent.h> rather than <sys/dir.h> for POSIX compliance. Thanks to Bill
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	779 Sommerfield.
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	780
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	781 - Fixed a TCP forwarding (client-local, -L style) bug which caused the whole
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	782 session to close if the TCP connection failed. Thanks to Andrew Braund for
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	783 reporting it and helping track it down.
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	784
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	785 - Re-enable sigpipe for child processes. Thanks to Gerrit Pape for some
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	786 suggestions, and BSD manpages for a clearer explanation of the behaviour.
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	787
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	788 - Added manpages, thanks to Gerrit Pape.
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	789
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	790 - Changed license text for LibTomCrypt and LibTomMath.
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	791
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	792 - Added strip-static target
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	793
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	794 - Fixed a bug in agent-forwarding cleanup handler - would segfault
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	795 (dereferencing a null pointer) if agent forwarding had failed.
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	796
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	797 - Fix behaviour of authorized_keys parsing, so larger (>1024 bit) DSA keys will
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	798 work. Thanks to Dr. Markus Waldeck for the report.
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	799
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	800 - Fixed local port forwarding code so that the "-j" option will make forwarding
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	801 attempts fail more gracefully.
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	802
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	803 - Allow repeated requests in a single session if previous ones fail - this fixes PuTTY and some other SCP clients, which try SFTP, then fall-back to SCP if it
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	804 isn't available. Thanks to Stirling Westrup for the report.
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	805
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	806 - Updated to LibTomCrypt 0.96 and LibTomMath 0.30. The AES code now uses
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	807 smaller non-precomputed tables if DROPBEAR_SMALL_CODE is defined in
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	808 options.h, leading to a significant reduction in the binary size.
59d16db56e9f Simple text changes Matt Johnston <matt@ucc.asn.au> parents: 4 diff changeset	809
4 fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	810 0.41 - Mon Jan 19 2004 22:40:19 +0800
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	811
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	812 - Fix in configure so that cross-compiling works, thanks to numerous people for
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	813 reporting and testing
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	814
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	815 - Terminal mode parsing now handles empty terminal mode strings (sent by
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	816 Windows ssh.com clients), thanks to Ricardo Derbes for the report
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	817
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	818 - Handling is improved for users with no shell specified in /etc/passwd,
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	819 thanks again to Ricardo Derbes
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	820
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	821 - Fix for compiling with --disable-syslog, thanks to gordonfh
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	822
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	823 - Various minor fixes allow scp to work with irix, thanks to Paul Marinceu for
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	824 fixing it up
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	825
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	826 - Use <stropts.h> not <sys/stropts.h>, since the former seems more common
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	827
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	828 0.40 - Tue Jan 13 2004 21:05:19 +0800
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	829
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	830 - Remote TCP forwarding (-R) style implemented
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	831
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	832 - Local and remote TCP forwarding can each be disabled at runtime (-k and -j
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	833 switches)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	834
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	835 - Fix for problems detecting openpty() with uClibc - many thanks to various
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	836 people for reporting and testing fixes, including (in random order) Cristian
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	837 Ionescu-Idbohrn, James Ewing, Steve Dover, Thomas Lundquist and Frederic
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	838 Lavernhe
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	839
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	840 - Improved portability for IRIX, thanks to Paul Marinceu
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	841
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	842 - AIX and HPUX portability fixes, thanks to Darren Tucker for patches
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	843
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	844 - prngd should now work correctly, thanks to Darren Tucker for the patch
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	845
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	846 - scp compilation on systems without strlcpy() is fixed, thanks to Peter
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	847 Jannesen and David Muse for reporting it (independently and simultaneously :)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	848
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	849 - Merged in new LibTomCrypt 0.92 and LibTomMath 0.28
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	850
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	851 0.39 - Tue Dec 16 2003 15:19:19 +0800
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	852
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	853 - Better checking of key lengths and parameters for DSS and RSA auth
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	854
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	855 - Print fingerprint of keys used for pubkey auth
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	856
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	857 - More consistent logging of usernames and IPs
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	858
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	859 - Added option to disable password auth (or just for root) at runtime
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	860
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	861 - Avoid including bignum functions which don't give much speed benefit but
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	862 take up binary size
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	863
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	864 - Added a stripped down version of OpenSSH's scp binary
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	865
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	866 - Added additional supporting functions for Irix, thanks to Paul Marinceu
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	867
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	868 - Don't check for unused libraries in configure script
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	869
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	870 - Removed trailing comma in algorithm lists (thanks to Mihnea Stoenescu)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	871
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	872 - Fixed up channel close handling, always send close packet in response
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	873 (also thanks to Mihnea Stoenescu)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	874
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	875 - Various makefile improvements for cross-compiling, thanks to Friedrich
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	876 Lobenstock and Mihnea Stoenescu
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	877
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	878 - Use daemon() function if available (or our own copy) rather than separate
789 ea04e3eb03e2 Save with utf8 encoding Matt Johnston <matt@ucc.asn.au> parents: 786 diff changeset	879 code (thanks to Frédéric Lavernhe for the report and debugging, and Bernard
4 fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	880 Blackham for his suggestion on what to look at)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	881
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	882 - Fixed up support for first_kex_packet_follows, required to talk to ssh.com
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	883 clients. Thanks to Marian Stagarescu for the bug report.
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	884
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	885 - Avoid using MAXPATHLEN, pointer from Ian Morris
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	886
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	887 - Improved input sanity checking
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	888
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	889 0.38 - Sat Oct 11 2003 16:28:13 +0800
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	890
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	891 - Default hostkey path changed to /etc/dropbear/dropbear_{rsa,dss}_host_key
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	892 rather than /etc/dropbear_{rsa,dss}_host_key
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	893
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	894 - Added SMALL and MULTI text files which have info on compiling for multiple
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	895 binaries or small binaries
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	896
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	897 - Allow for commandline definition of some options.h settings
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	898 (without warnings)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	899
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	900 - Be more careful handling EINTR
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	901
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	902 - More fixes for channel closing
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	903
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	904 - Added multi-binary support
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	905
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	906 - Improved logging of IPs, now get logged in all cases
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	907
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	908 - Don't chew cpu when waiting for version identification string, also
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	909 make sure that we kick off people if they don't auth within 5 minutes.
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	910
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	911 - Various small fixes, warnings etc
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	912
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	913 - Display MOTD if requested - suggested by
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	914 Trent Lloyd <lathiat at sixlabs.org> and
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	915 Zach White <zwhite at darkstar.frop.org>
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	916
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	917 - sftp support works (relies on OpenSSH sftp binary or similar)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	918
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	919 - Added --disable-shadow option (requested by the floppyfw guys)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	920
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	921 0.37 - Wed Sept 24 2003 19:42:12 +0800
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	922
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	923 - Various portability fixes, fixes for Solaris 9, Tru64 5.1, Mac OS X 10.2,
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	924 AIX, BSDs
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	925
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	926 - Updated LibTomMath to 0.27 and LibTomCrypt to 0.90
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	927
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	928 - Renamed util.{c,h} to dbutil.{c,h} to avoid conflicts with system util.h
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	929
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	930 - Added some small changes so it'll work with AIX (plus Linux Affinity).
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	931 Thanks to Shig for them.
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	932
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	933 - Improved the closing messages, so a clean exit is "Exited normally"
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	934
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	935 - Added some more robust integer/size checking in buffer.c as a backstop for
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	936 integer overflows
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	937
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	938 - X11 forwarding fixed for OSX, path for xauth changed to /usr/X11R6/bin/xauth
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	939
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	940 - Channel code handles closing more nicely, doesn't sit waiting for an extra
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	941 keystroke on BSD/OSX platforms, and data is flushed fully before closing
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	942 child processes (thanks to
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	943 Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn at axis.com> for
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	944 pointing that out).
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	945
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	946 - Changed "DISABLE_TCPFWD" to "ENABLE_TCPFWD" (and for x11/auth) so
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	947 "disable DISABLE_TCPWD" isn't so confusing.
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	948
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	949 - Fix authorized_keys handling (don't crash on too-long keys, and
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	950 use fgetc not getc to avoid strange macro-related issues), thanks to
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	951 Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn at axis.com>
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	952 and Steve Rodgers <hwstar at cox.net> for reporting and testing.
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	953
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	954 - Fixes to the README with regard to uClibc systems, thanks to
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	955 Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn at axis.com>,
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	956 as well as general improvements to documentation (split README/INSTALL)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	957
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	958 - Fixed up some compilation problems with dropbearconvert/dropbearkey if
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	959 DSS or RSA were disabled, reported by Patrik Karlsson <patrik at cqure.net>
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	960
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	961 - Fix double-free bug for hostkeys, reported by
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	962 Vincent Sanders <vince at kyllikki.org>
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	963
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	964 - Fix up missing \ns from dropbearconvert help message,
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	965 thanks to Mordy Ovits <movits at bloomberg.com> for the patch
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	966
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	967 0.36 - Tue August 19 2003 12:16:23 +0800
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	968
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	969 - Fix uninitialised temporary variable in DSS signing code
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	970 (thanks to Matthew Franz <mdfranz at io.com> for reporting, and the authors
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	971 of Valgrind for making it easy to track down)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	972 - Fix remote version-string parsing error
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	973 (thanks to Bernard Blackham <bernard at blackham.com.au> for noticing)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	974 - Improved host-algorithm-matching algorithm in algo.c
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	975 - Decreased MAX_STRING_LEN to a more realistic value
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	976 - Fix incorrect version (0.34) in this CHANGES file for the previous release.
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	977
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	978 0.35 - Sun August 17 2003 05:37:47 +0800
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	979
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	980 - Fix for remotely exploitable format string buffer overflow.
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	981 (thanks to Joel Eriksson <je at bitnux.com>)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	982
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	983 0.34 - Fri August 15 2003 15:10:00 +0800
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	984
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	985 - Made syslog optional, both at compile time and as a compile option
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	986 (suggested by Laurent Bercot <ska at skarnet.org>)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	987 - Fixup for bad base64 parsing in authorized_keys
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	988 (noticed by Davyd Madeley <davyd at zdlcomputing.com>)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	989 - Added initial tcp forwarding code, only -L (local) at this stage
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	990 - Improved "make install" with DESTDIR and changing ownership seperately,
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	991 don't check for setpgrp on Linux for crosscompiling.
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	992 (from Erik Andersen <andersen at codepoet.org>)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	993 - More commenting, fix minor compile warnings, make return values more
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	994 consistent etc
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	995 - Various signedness fixes
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	996 - Can listen on multiple ports
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	997 - added option to disable openpty with configure script,
789 ea04e3eb03e2 Save with utf8 encoding Matt Johnston <matt@ucc.asn.au> parents: 786 diff changeset	998 (from K.-P. Kirchdörfer <kapeka at epost.de>)
4 fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	999 - Various cleanups to bignum code
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1000 (thanks to Tom St Denis <tomstdenis at iahu.ca>)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1001 - Fix compile error when disabling RSA
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1002 (from Marc Kleine-Budde <kleine-budde at gmx.de>)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1003 - Other cleanups, splitting large functions for packet and kex handling etc
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1004
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1005 0.33 - Sun June 22 2003 22:24:12 +0800
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1006
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1007 - Fixed some invalid assertions in the channel code, fixing the server dying
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1008 when forwarding X11 connections.
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1009 - Add dropbearconvert to convert to/from OpenSSH host keys and Dropbear keys
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1010 - RSA keys now keep p and q parameters for compatibility -- old Dropbear keys
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1011 still work, but can't be converted to OpenSSH etc.
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1012 - Debian packaging directory added, thanks to
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1013 Grahame (grahame at angrygoats.net)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1014 - 'install' target added to the makefile
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1015 - general tidying, improve consistency of functions etc
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1016 - If RSA or DSS hostkeys don't exist, that algorithm won't be used.
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1017 - Improved RSA and DSS key generation, more efficient and fixed some minor bugs
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1018 (thanks to Tom St Denis for the advice)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1019 - Merged new versions of LibTomCrypt (0.86) and LibTomMath (0.21)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1020
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1021 0.32 - Sat May 24 2003 12:44:11 +0800
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1022
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1023 - Don't compile unused code from libtomcrypt (test vectors etc)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1024 - Updated to libtommath 0.17 and libtomcrypt 0.83. New libtommath results
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1025 in smaller binary size, due to not linking unrequired code
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1026 - X11 forwarding added
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1027 - Agent forwarding added (for OpenSSH.com ssh client/agent)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1028 - Fix incorrect buffer freeing when banners are used
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1029 - Hostname resolution works
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1030 - Various minor bugfixes/code size improvements etc
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1031
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1032 0.31 - Fri May 9 2003 17:57:16 +0800
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1033
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1034 - Improved syslog messages - IP logging etc
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1035 - Strip control characters from log messages (specified username currently)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1036 - Login recording (utmp/wtmp) support, so last/w/who work - taken from OpenSSH
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1037 - Shell is started as a proper login shell, so /etc/profile etc is sourced
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1038 - Ptys work on Solaris (2.8 x86 tested) now
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1039 - Fixed bug in specifying the rsa hostkey
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1040 - Fixed bug in compression code, could trigger if compression resulted in
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1041 larger output than input (uncommon but possible).
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1042
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1043 0.30 - Thu Apr 17 2003 18:46:15 +0800
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1044
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1045 - SECURITY: buffer.c had bad checking for buffer increment length - fixed
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1046 - channel code now closes properly on EOF - scp processes don't hang around
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1047 - syslog support added - improved auth/login/failure messages
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1048 - general code tidying, made return codes more consistent
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1049 - Makefile fixed for dependencies and makes libtomcrypt as well
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1050 - Implemented sending SSH_MSG_UNIMPLEMENTED :)
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1051
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1052 0.29 - Wed Apr 9 2003
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1053
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1054 - Fixed a stupid bug in 0.28 release, 'newstr = strdup(oldstr)',
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1055 not 'newstr=oldstr'
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1056
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1057 0.28 - Sun Apr 6 2003
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1058
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1059 - Initial public release
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1060
fe6bca95afa7 Makefile.in contains updated files required Matt Johnston <matt@ucc.asn.au> parents: diff changeset	1061 Development was started in October 2002

Mercurial > dropbear

annotate CHANGES @ 994:5c5ade336926