Mercurial > dropbear
annotate CHANGES @ 1653:76189c9ffea2
External Public-Key Authentication API (#72)
* Implemented dynamic loading of an external plug-in shared library to delegate public key authentication
* Moved conditional compilation of the plugin infrastructure into the configure.ac script to be able to add -ldl to dropbear build only when the flag is enabled
* Added tags file to the ignore list
* Updated API to have the constructor to return function pointers in the pliugin instance. Added support for passing user name to the checkpubkey function. Added options to the session returned by the plugin and have dropbear to parse and process them
* Added -rdynamic to the linker flags when EPKA is enabled
* Changed the API to pass a previously created session to the checkPubKey function (created during preauth)
* Added documentation to the API
* Added parameter addrstring to plugin creation function
* Modified the API to retrieve the auth options. Instead of having them as field of the EPKASession struct, they are stored internally (plugin-dependent) in the plugin/session and retrieved through a pointer to a function (in the session)
* Changed option string to be a simple char * instead of unsigned char *
| author | fabriziobertocci <fabriziobertocci@gmail.com> |
|---|---|
| date | Wed, 15 May 2019 09:43:57 -0400 |
| parents | 009d52ae26d3 |
| children | 25b0ce1936c4 |
| rev | line source |
|---|---|
| 1650 | 1 2019.78 - 27 March 2019 |
| 2 | |
| 3 - Fix dbclient regression in 2019.77. After exiting the terminal would be left | |
| 4 in a bad state. Reported by Ryan Woodsmall | |
| 5 | |
| 1646 | 6 2019.77 - 23 March 2019 |
| 7 | |
| 8 - Fix server -R option with ECDSA - only advertise one key size which will be accepted. | |
| 9 Reported by Peter Krefting, 2018.76 regression. | |
| 10 | |
| 11 - Fix server regression in 2018.76 where multiple client -R forwards were all forwarded | |
| 12 to the first destination. Reported by Iddo Samet. | |
| 13 | |
| 14 - Make failure delay more consistent to avoid revealing valid usernames, set server password | |
| 15 limit of 100 characters. Problem reported by usd responsible disclosure team | |
| 16 | |
| 17 - Change handling of failed authentication to avoid disclosing valid usernames, | |
| 18 CVE-2018-15599. | |
| 19 | |
| 20 - Fix dbclient to reliably return the exit code from the remote server. | |
| 21 Reported by W. Mike Petullo | |
| 22 | |
| 23 - Fix export of 521-bit ECDSA keys, from Christian Hohnstädt | |
| 24 | |
| 25 - Add -o Port=xxx option to work with sshfs, from xcko | |
| 26 | |
| 27 - Merged fuzzing code, see FUZZER-NOTES.md | |
| 28 | |
| 29 - Add a DROPBEAR_SVR_MULTIUSER=0 compile option to run on | |
| 30 single-user Linux kernels (CONFIG_MULTIUSER disabled). From Patrick Stewart | |
| 31 | |
| 32 - Increase allowed username to 100 characters, reported by W. Mike Petullo | |
| 33 | |
| 34 - Update config.sub and config.guess, should now work with RISC-V | |
| 35 | |
| 36 - Cygwin compile fix from karel-m | |
| 37 | |
| 38 - Don't require GNU sed (accidentally in 2018.76), reported by Samuel Hsu | |
| 39 | |
| 40 - Fix for IRIX and writev(), reported by Kazuo Kuroi | |
| 41 | |
| 42 - Other fixes and cleanups from François Perrad, Andre McCurdy, Konstantin Demin, | |
| 43 Michael Jones, Pawel Rapkiewicz | |
| 44 | |
| 45 | |
| 1552 | 46 2018.76 - 27 February 2018 |
| 1520 | 47 |
| 1552 | 48 > > > Configuration/compatibility changes |
| 49 IMPORTANT | |
|
1565
2fd52c383163
mention localoptions.h being build directory, fix underscore in CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1552
diff
changeset
|
50 Custom configuration is now specified in localoptions.h rather than options.h |
|
1524
d35cf9a5e0b5
rename default_options.h.in in docs too
Matt Johnston <matt@ucc.asn.au>
parents:
1520
diff
changeset
|
51 Available options and defaults can be seen in default_options.h |
| 1520 | 52 |
| 53 To migrate your configuration, compare your customised options.h against the | |
| 54 upstream options.h from your relevant version. Any customised options should | |
|
1565
2fd52c383163
mention localoptions.h being build directory, fix underscore in CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1552
diff
changeset
|
55 be put in localoptions.h in the build directory. |
| 1520 | 56 |
| 57 - "configure --enable-static" should now be used instead of "make STATIC=1" | |
| 1552 | 58 This will avoid 'hardened build' flags that conflict with static binaries |
| 1520 | 59 |
| 1552 | 60 - Set 'hardened build' flags by default if supported by the compiler. |
| 61 These can be disabled with configure --disable-harden if needed. | |
| 1520 | 62 -Wl,-pie |
| 63 -Wl,-z,now -Wl,-z,relro | |
| 64 -fstack-protector-strong | |
| 65 -D_FORTIFY_SOURCE=2 | |
| 66 # spectre v2 mitigation | |
| 67 -mfunction-return=thunk | |
| 68 -mindirect-branch=thunk | |
| 69 | |
| 70 Spectre patch from Loganaden Velvindron | |
| 71 | |
| 1552 | 72 - "dropbear -r" option for hostkeys no longer attempts to load the default |
| 73 hostkey paths as well. If desired these can be specified manually. | |
| 74 Patch from CamVan Nguyen | |
| 75 | |
| 76 - group1-sha1 key exchange is disabled in the server by default since | |
| 77 the fixed 1024-bit group may be susceptible to attacks | |
| 78 | |
| 79 - twofish ciphers are now disabled in the default configuration | |
| 80 | |
| 81 - Default generated ECDSA key size is now 256 (rather than 521) | |
| 82 for better interoperability | |
| 83 | |
| 84 - Minimum RSA key length has been increased to 1024 bits | |
| 85 | |
| 86 > > > Other features and fixes | |
| 87 | |
| 1520 | 88 - Add runtime -T max_auth_tries option from Kevin Darbyshire-Bryant |
| 89 | |
| 90 - Add 'dbclient -J &fd' to allow dbclient to connect over an existing socket. | |
| 91 See dbclient manpage for a socat example. Patch from Harald Becker | |
| 92 | |
| 93 - Add "-c forced_command" option. Patch from Jeremy Kerr | |
| 94 | |
| 1552 | 95 - Restricted group -G option added with patch from stellarpower |
| 96 | |
| 1520 | 97 - Support server-chosen TCP forwarding ports, patch from houseofkodai |
| 98 | |
| 99 - Allow choosing outgoing address for dbclient with -b [bind_address][:bind_port] | |
| 100 Patch from houseofkodai | |
| 101 | |
| 1552 | 102 - Makefile will now rebuild object files when header files are modified |
| 103 | |
| 104 - Add group14-256 and group16 key exchange options | |
| 1520 | 105 |
| 1552 | 106 - curve25519-sha256 also supported without @libssh.org suffix |
| 107 | |
| 108 - Update bundled libtomcrypt to 1.18.1, libtommath to 1.0.1 | |
| 109 This fixes building with some recent versions of clang | |
| 1520 | 110 |
| 111 - Set PAM_RHOST which is needed by modules such as pam_abl | |
| 112 | |
| 1552 | 113 - Improvements to DSS and RSA public key validation, found by OSS-Fuzz. |
| 1520 | 114 |
| 115 - Don't exit when an authorized_keys file has malformed entries. Found by OSS-Fuzz | |
| 116 | |
| 117 - Fix null-pointer crash with malformed ECDSA or DSS keys. Found by OSS-Fuzz | |
| 118 | |
| 119 - Numerous code cleanups and small issues fixed by Francois Perrad | |
| 120 | |
| 121 - Test for pkt_sched.h rather than SO_PRIORITY which was problematic with some musl | |
| 122 platforms. Reported by Oliver Schneider and Andrew Bainbridge | |
| 123 | |
| 124 - Fix some platform portability problems, from Ben Gardner | |
| 125 | |
| 126 - Add EXEEXT filename suffix for building dropbearmulti, from William Foster | |
| 127 | |
| 128 - Support --enable-<option> properly for configure, from Stefan Hauser | |
| 129 | |
| 130 - configure have_openpty result can be cached, from Eric Bénard | |
| 131 | |
| 132 - handle platforms that return close() < -1 on failure, from Marco Wenzel | |
| 133 | |
| 134 - Build and configuration cleanups from Michael Witten | |
| 135 | |
| 136 - Fix libtomcrypt/libtommath linking order, from Andre McCurdy | |
| 137 | |
| 138 - Fix old Linux platforms that have SYS_clock_gettime but not CLOCK_MONOTONIC | |
| 139 | |
| 140 - Update curve25519-donna implementation to current version | |
| 141 | |
| 1337 | 142 2017.75 - 18 May 2017 |
| 143 | |
| 144 - Security: Fix double-free in server TCP listener cleanup | |
| 145 A double-free in the server could be triggered by an authenticated user if | |
| 146 dropbear is running with -a (Allow connections to forwarded ports from any host) | |
| 147 This could potentially allow arbitrary code execution as root by an authenticated user. | |
| 148 Affects versions 2013.56 to 2016.74. Thanks to Mark Shepard for reporting the crash. | |
| 1345 | 149 CVE-2017-9078 https://secure.ucc.asn.au/hg/dropbear/rev/c8114a48837c |
| 1337 | 150 |
| 151 - Security: Fix information disclosure with ~/.ssh/authorized_keys symlink. | |
| 152 Dropbear parsed authorized_keys as root, even if it were a symlink. The fix | |
| 153 is to switch to user permissions when opening authorized_keys | |
| 154 | |
| 155 A user could symlink their ~/.ssh/authorized_keys to a root-owned file they | |
| 156 couldn't normally read. If they managed to get that file to contain valid | |
| 157 authorized_keys with command= options it might be possible to read other | |
| 158 contents of that file. | |
| 159 This information disclosure is to an already authenticated user. | |
| 160 Thanks to Jann Horn of Google Project Zero for reporting this. | |
| 1345 | 161 CVE-2017-9079 https://secure.ucc.asn.au/hg/dropbear/rev/0d889b068123 |
| 1337 | 162 |
|
1339
c31276613181
fix changelog for atomic dropbearkey
Matt Johnston <matt@ucc.asn.au>
parents:
1337
diff
changeset
|
163 - Generate hostkeys with dropbearkey atomically and flush to disk with fsync |
| 1337 | 164 Thanks to Andrei Gherzan for a patch |
| 165 | |
| 166 - Fix out of tree builds with bundled libtom | |
| 167 Thanks to Henrik Nordström and Peter Krefting for patches. | |
| 168 | |
| 1311 | 169 2016.74 - 21 July 2016 |
| 170 | |
| 171 - Security: Message printout was vulnerable to format string injection. | |
| 172 | |
| 173 If specific usernames including "%" symbols can be created on a system | |
| 174 (validated by getpwnam()) then an attacker could run arbitrary code as root | |
| 175 when connecting to Dropbear server. | |
| 176 | |
| 177 A dbclient user who can control username or host arguments could potentially | |
| 178 run arbitrary code as the dbclient user. This could be a problem if scripts | |
| 179 or webpages pass untrusted input to the dbclient program. | |
| 1321 | 180 CVE-2016-7406 |
| 181 https://secure.ucc.asn.au/hg/dropbear/rev/b66a483f3dcb | |
| 1311 | 182 |
| 183 - Security: dropbearconvert import of OpenSSH keys could run arbitrary code as | |
| 184 the local dropbearconvert user when parsing malicious key files | |
| 1321 | 185 CVE-2016-7407 |
| 186 https://secure.ucc.asn.au/hg/dropbear/rev/34e6127ef02e | |
| 1311 | 187 |
| 188 - Security: dbclient could run arbitrary code as the local dbclient user if | |
| 189 particular -m or -c arguments are provided. This could be an issue where | |
| 190 dbclient is used in scripts. | |
| 1321 | 191 CVE-2016-7408 |
| 192 https://secure.ucc.asn.au/hg/dropbear/rev/eed9376a4ad6 | |
| 1311 | 193 |
| 194 - Security: dbclient or dropbear server could expose process memory to the | |
| 195 running user if compiled with DEBUG_TRACE and running with -v | |
| 1321 | 196 CVE-2016-7409 |
| 197 https://secure.ucc.asn.au/hg/dropbear/rev/6a14b1f6dc04 | |
| 1311 | 198 |
| 199 The security issues were reported by an anonymous researcher working with | |
| 200 Beyond Security's SecuriTeam Secure Disclosure www.beyondsecurity.com/ssd.html | |
| 201 | |
| 202 - Fix port forwarding failure when connecting to domains that have both | |
|
1313
0ed3d2bbf956
mention regression release
Matt Johnston <matt@ucc.asn.au>
parents:
1311
diff
changeset
|
203 IPv4 and IPv6 addresses. The bug was introduced in 2015.68 |
| 1311 | 204 |
| 205 - Fix 100% CPU use while waiting for rekey to complete. Thanks to Zhang Hui P | |
| 206 for the patch | |
| 207 | |
| 208 | |
| 1285 | 209 2016.73 - 18 March 2016 |
| 1253 | 210 |
| 211 - Support syslog in dbclient, option -o usesyslog=yes. Patch from Konstantin Tokarev | |
| 212 | |
| 213 - Kill a proxycommand when dbclient exits, patch from Konstantin Tokarev | |
| 214 | |
| 215 - Option to exit when a TCP forward fails, patch from Konstantin Tokarev | |
| 216 | |
| 217 - New "-o" option parsing from Konstantin Tokarev. This allows handling some extra options | |
| 218 in the style of OpenSSH, though implementing all OpenSSH options is not planned. | |
| 219 | |
| 1285 | 220 - Fix crash when fallback initshells() is used, reported by Michael Nowak and Mike Tzou |
| 1253 | 221 |
| 222 - Allow specifying commands eg "dropbearmulti dbclient ..." instead of symlinks | |
| 223 | |
| 1285 | 224 - Various cleanups for issues found by a lint tool, patch from Francois Perrad |
| 225 | |
| 1253 | 226 - Fix tab indent consistency, patch from Francois Perrad |
| 227 | |
| 228 - Fix issues found by cppcheck, reported by Mike Tzou | |
| 229 | |
| 1285 | 230 - Use system memset_s() or explicit_bzero() if available to clear memory. Also make |
| 231 libtomcrypt/libtommath routines use that (or Dropbear's own m_burn()). | |
| 232 | |
| 233 - Prevent scp failing when the local user doesn't exist. Based on patch from Michael Witten. | |
| 234 | |
| 235 - Improved Travis CI test running, thanks to Mike Tzou | |
| 236 | |
| 237 - Improve some code that was flagged by Coverity and Fortify Static Code Analyzer | |
| 238 | |
| 1230 | 239 2016.72 - 9 March 2016 |
| 240 | |
| 241 - Validate X11 forwarding input. Could allow bypass of authorized_keys command= restrictions, | |
| 1279 | 242 found by github.com/tintinweb. Thanks for Damien Miller for a patch. CVE-2016-3116 |
| 1321 | 243 https://secure.ucc.asn.au/hg/dropbear/rev/a3e8389e01ff |
| 1230 | 244 |
| 1200 | 245 2015.71 - 3 December 2015 |
|
1198
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
246 |
| 1199 | 247 - Fix "bad buf_incrpos" when data is transferred, broke in 2015.69 |
|
1198
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
248 |
| 1203 | 249 - Fix crash on exit when -p address:port is used, broke in 2015.68, thanks to |
| 250 Frank Stollenwerk for reporting and investigation | |
|
1198
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
251 |
|
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
252 - Fix building with only ENABLE_CLI_REMOTETCPFWD given, patch from Konstantin Tokarev |
|
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
253 |
|
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
254 - Fix bad configure script test which didn't work with dash shell, patch from Juergen Daubert, |
|
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
255 broke in 2015.70 |
|
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
256 |
|
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
257 - Fix server race condition that could cause sessions to hang on exit, |
|
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
258 https://github.com/robotframework/SSHLibrary/issues/128 |
|
388e5c3e380e
preliminary 2015.71 CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
1188
diff
changeset
|
259 |
| 1188 | 260 2015.70 - 26 November 2015 |
| 1187 | 261 |
| 262 - Fix server password authentication on Linux, broke in 2015.69 | |
| 263 | |
| 1178 | 264 2015.69 - 25 November 2015 |
| 265 | |
| 266 - Fix crash when forwarded TCP connections fail to connect (bug introduced in 2015.68) | |
| 267 | |
| 268 - Avoid hang on session close when multiple sessions are started, affects Qt Creator | |
| 269 Patch from Andrzej Szombierski | |
| 270 | |
| 271 - Reduce per-channel memory consumption in common case, increase default | |
| 272 channel limit from 100 to 1000 which should improve SOCKS forwarding for modern | |
| 273 webpages | |
| 274 | |
| 275 - Handle multiple command line arguments in a single flag, thanks to Guilhem Moulin | |
| 276 | |
| 277 - Manpage improvements from Guilhem Moulin | |
| 278 | |
| 279 - Build fixes for Android from Mike Frysinger | |
| 280 | |
| 281 - Don't display the MOTD when an explicit command is run from Guilhem Moulin | |
| 282 | |
| 283 - Check curve25519 shared secret isn't zero | |
| 284 | |
|
1147
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
285 2015.68 - Saturday 8 August 2015 |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
286 |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
287 - Reduce local data copying for improved efficiency. Measured 30% |
| 1125 | 288 increase in throughput for connections to localhost |
|
1063
9a5677293671
changes (also testing hg bookmarks)
Matt Johnston <matt@ucc.asn.au>
parents:
1004
diff
changeset
|
289 |
|
1147
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
290 - Forwarded TCP ports connect asynchronously and try all available addresses |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
291 (IPv4, IPv6, round robin DNS) |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
292 |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
293 - Fix all compile warnings, many patches from Gaël Portay |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
294 Note that configure with -Werror may not be successful on some platforms (OS X) |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
295 and some configuration options may still result in unused variable |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
296 warnings. |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
297 |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
298 - Use TCP Fast Open on Linux if available. Saves a round trip at connection |
| 1064 | 299 to hosts that have previously been connected. |
| 300 Needs a recent Linux kernel and possibly "sysctl -w net.ipv4.tcp_fastopen=3" | |
| 1125 | 301 Client side is disabled by default pending further compatibility testing |
| 302 with networks and systems. | |
| 1064 | 303 |
|
1147
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
304 - Increase maximum command length to 9000 bytes |
| 1064 | 305 |
| 306 - Free memory before exiting, patch from Thorsten Horstmann. Useful for | |
| 307 Dropbear ports to embedded systems and for checking memory leaks | |
|
1147
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
308 with valgrind. Only partially implemented for dbclient. |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
309 This is disabled by default, enable with DROPBEAR_CLEANUP in sysoptions.h |
| 1064 | 310 |
|
1147
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
311 - DROPBEAR_DEFAULT_CLI_AUTHKEY setting now always prepends home directory unless |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
312 there is a leading slash (~ isn't treated specially) |
| 1125 | 313 |
| 1064 | 314 - Fix small ECC memory leaks |
| 315 | |
| 1125 | 316 - Tighten validation of Diffie-Hellman parameters, from Florent Daigniere of |
|
1141
63ac2261e1b0
couple more changelog items
Matt Johnston <matt@ucc.asn.au>
parents:
1125
diff
changeset
|
317 Matta Consulting. Odds of bad values are around 2**-512 -- improbable. |
| 1125 | 318 |
| 319 - Twofish-ctr cipher is supported though disabled by default | |
| 320 | |
|
1141
63ac2261e1b0
couple more changelog items
Matt Johnston <matt@ucc.asn.au>
parents:
1125
diff
changeset
|
321 - Fix pre-authentication timeout when waiting for client SSH-2.0 banner, thanks |
|
63ac2261e1b0
couple more changelog items
Matt Johnston <matt@ucc.asn.au>
parents:
1125
diff
changeset
|
322 to CL Ouyang |
|
63ac2261e1b0
couple more changelog items
Matt Johnston <matt@ucc.asn.au>
parents:
1125
diff
changeset
|
323 |
|
1147
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
324 - Fix null pointer crash with restrictions in authorized_keys without a command, patch from |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
325 Guilhem Moulin |
|
1141
63ac2261e1b0
couple more changelog items
Matt Johnston <matt@ucc.asn.au>
parents:
1125
diff
changeset
|
326 |
|
1147
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
327 - Ensure authentication timeout is handled while reading the initial banner, |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
328 thanks to CL Ouyang for finding it. |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
329 |
|
809feaa9408f
changelog and version 2015.68
Matt Johnston <matt@ucc.asn.au>
parents:
1141
diff
changeset
|
330 - Fix null pointer crash when handling bad ECC keys. Found by afl-fuzz |
| 1125 | 331 |
| 1004 | 332 2015.67 - Wednesday 28 January 2015 |
| 333 | |
| 334 - Call fsync() after generating private keys to ensure they aren't lost if a | |
| 335 reboot occurs. Thanks to Peter Korsgaard | |
| 336 | |
| 337 - Disable non-delayed zlib compression by default on the server. Can be | |
| 338 enabled if required for old clients with DROPBEAR_SERVER_DELAY_ZLIB | |
| 339 | |
| 340 - Default client key path ~/.ssh/id_dropbear | |
| 341 | |
| 342 - Prefer stronger algorithms by default, from Fedor Brunner. | |
| 343 AES256 over 3DES | |
| 344 Diffie-hellman group14 over group1 | |
| 345 | |
| 346 - Add option to disable CBC ciphers. | |
| 347 | |
| 348 - Disable twofish in default options.h | |
| 349 | |
| 350 - Enable sha2 HMAC algorithms by default, the code was already required | |
| 351 for ECC key exchange. sha1 is the first preference still for performance. | |
| 352 | |
| 353 - Fix installing dropbear.8 in a separate build directory, from Like Ma | |
| 354 | |
| 355 - Allow configure to succeed if libtomcrypt/libtommath are missing, from Elan Ruusamäe | |
| 356 | |
| 357 - Don't crash if ssh-agent provides an unknown type of key. From Catalin Patulea | |
| 358 | |
| 359 - Minor bug fixes, a few issues found by Coverity scan | |
| 360 | |
|
979
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
361 2014.66 - Thursday 23 October 2014 |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
362 |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
363 - Use the same keepalive handling behaviour as OpenSSH. This will work better |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
364 with some SSH implementations that have different behaviour with unknown |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
365 message types. |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
366 |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
367 - Don't reply with SSH_MSG_UNIMPLEMENTED when we receive a reply to our own |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
368 keepalive message |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
369 |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
370 - Set $SSH_CLIENT to keep bash happy, patch from Ryan Cleere |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
371 |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
372 - Fix wtmp which broke since 2013.62, patch from Whoopie |
|
735511a4c761
changelog, version number bump
Matt Johnston <matt@ucc.asn.au>
parents:
965
diff
changeset
|
373 |
| 965 | 374 2014.65 - Friday 8 August 2014 |
| 375 | |
| 376 - Fix 2014.64 regression, server session hang on exit with scp (and probably | |
| 377 others), thanks to NiLuJe for tracking it down | |
| 378 | |
| 379 - Fix 2014.64 regression, clock_gettime() error handling which broke on older | |
| 380 Linux kernels, reported by NiLuJe | |
| 381 | |
| 382 - Fix 2014.64 regression, writev() could occassionally fail with EAGAIN which | |
| 383 wasn't caught | |
| 384 | |
| 385 - Avoid error message when trying to set QoS on proxycommand or multihop pipes | |
| 386 | |
| 387 - Use /usr/bin/xauth, thanks to Mike Frysinger | |
| 388 | |
| 389 - Don't exit the client if the local user entry can't be found, thanks to iquaba | |
| 390 | |
| 947 | 391 2014.64 - Sunday 27 July 2014 |
| 942 | 392 |
| 393 - Fix compiling with ECDSA and DSS disabled | |
| 394 | |
| 395 - Don't exit abruptly if too many outgoing packets are queued for writev(). Patch | |
| 396 thanks to Ronny Meeus | |
| 397 | |
| 398 - The -K keepalive option now behaves more like OpenSSH's "ServerAliveInterval". | |
| 399 If no response is received after 3 keepalives then the session is terminated. This | |
| 400 will close connections faster than waiting for a TCP timeout. | |
| 401 | |
| 402 - Rework TCP priority setting. New settings are | |
| 403 if (connecting || ptys || x11) tos = LOWDELAY | |
| 404 else if (tcp_forwards) tos = 0 | |
| 405 else tos = BULK | |
| 406 Thanks to Catalin Patulea for the suggestion. | |
| 407 | |
| 408 - Improve handling of many concurrent new TCP forwarded connections, should now | |
| 409 be able to handle as many as MAX_CHANNELS. Thanks to Eduardo Silva for reporting | |
| 410 and investigating it. | |
| 411 | |
| 412 - Make sure that exit messages from the client are printed, regression in 2013.57 | |
| 413 | |
| 414 - Use monotonic clock where available, timeouts won't be affected by system time | |
| 415 changes | |
| 416 | |
| 947 | 417 - Add -V for version |
| 418 | |
| 900 | 419 2014.63 - Wednesday 19 February 2014 |
| 420 | |
| 421 - Fix ~. to terminate a client interactive session after waking a laptop | |
| 422 from sleep. | |
| 423 | |
| 424 - Changed port separator syntax again, now using host^port. This is because | |
| 425 IPv6 link-local addresses use %. Reported by Gui Iribarren | |
| 426 | |
| 427 - Avoid constantly relinking dropbearmulti target, fix "make install" | |
| 428 for multi target, thanks to Mike Frysinger | |
| 429 | |
| 430 - Avoid getting stuck in a loop writing huge key files, reported by Bruno | |
| 431 Thomsen | |
| 432 | |
| 433 - Don't link dropbearkey or dropbearconvert to libz or libutil, | |
| 434 thanks to Nicolas Boos | |
| 435 | |
| 436 - Fix linking -lcrypt on systems without /usr/lib, thanks to Nicolas Boos | |
| 437 | |
| 438 - Avoid crash on exit due to cleaned up keys before last packets are sent, | |
| 439 debugged by Ronald Wahl | |
| 440 | |
| 441 - Fix a race condition in rekeying where Dropbear would exit if it received a | |
| 442 still-in-flight packet after initiating rekeying. Reported by Oliver Metz. | |
| 443 This is a longstanding bug but is triggered more easily since 2013.57 | |
| 444 | |
| 905 | 445 - Fix README for ecdsa keys, from Catalin Patulea |
| 900 | 446 |
| 447 - Ensure that generated RSA keys are always exactly the length | |
| 448 requested. Previously Dropbear always generated N+16 or N+15 bit keys. | |
| 449 Thanks to Unit 193 | |
| 450 | |
| 451 - Fix DROPBEAR_CLI_IMMEDIATE_AUTH mode which saves a network round trip if the | |
| 452 first public key succeeds. Still not enabled by default, needs more | |
| 453 compatibility testing with other implementations. | |
| 454 | |
| 455 - Fix for port 0 forwarding in the client and port forwarding with Apache MINA SSHD. Thanks to | |
| 456 | |
| 457 - Fix for bad system linux/pkt-sched.h header file with older Linux | |
| 458 kernels, from Steve Dover | |
| 459 | |
| 460 - Fix signal handlers so that errno is saved, thanks to Erik Ahlén for a patch | |
| 461 and Mark Wickham for independently spotting the same problem. | |
| 462 | |
| 878 | 463 2013.62 - Tuesday 3 December 2013 |
| 464 | |
| 465 - Disable "interactive" QoS connection options when a connection doesn't | |
| 466 have a PTY (eg scp, rsync). Thanks to Catalin Patulea for the patch. | |
| 467 | |
| 468 - Log when a hostkey is generated with -R, fix some bugs in handling server | |
| 469 hostkey commandline options | |
| 470 | |
| 471 - Fix crash in Dropbearconvert and 521 bit key, reported by NiLuJe | |
| 472 | |
| 473 - Update config.guess and config.sub again | |
| 474 | |
| 861 | 475 2013.61test - Thursday 14 November 2013 |
| 476 | |
|
1433
b19877938d6a
document changed default RSA key size back in 2013.61test
Matt Johnston <matt@ucc.asn.au>
parents:
1345
diff
changeset
|
477 - Default generated RSA key size changed from 1024 to 2048 bits |
|
b19877938d6a
document changed default RSA key size back in 2013.61test
Matt Johnston <matt@ucc.asn.au>
parents:
1345
diff
changeset
|
478 |
| 861 | 479 - ECC (elliptic curve) support. Supports ECDSA hostkeys (requires new keys to |
| 480 be generated) and ECDH for setting up encryption keys (no intervention | |
| 481 required). This is significantly faster. | |
| 482 | |
| 483 - [email protected] support for setting up encryption keys. This is | |
| 484 another elliptic curve mode with less potential of NSA interference in | |
| 485 algorithm parameters. curve25519-donna code thanks to Adam Langley | |
| 486 | |
| 487 - -R option to automatically generate hostkeys. This is recommended for | |
| 488 embedded platforms since it allows the system random number device | |
| 489 /dev/urandom a longer startup time to generate a secure seed before the | |
| 490 hostkey is required. | |
| 491 | |
| 492 - Compile fixes for old vendor compilers like Tru64 from Daniel Richard G. | |
| 493 | |
| 878 | 494 - Make authorized_keys handling more robust, don't exit encountering |
| 495 malformed lines. Thanks to Lorin Hochstein and Mark Stillwell | |
| 496 | |
| 830 | 497 2013.60 - Wednesday 16 October 2013 |
| 498 | |
| 499 - Fix "make install" so that it doesn't always install to /bin and /sbin | |
| 500 | |
| 501 - Fix "make install MULTI=1", installing manpages failed | |
| 502 | |
| 503 - Fix "make install" when scp is included since it has no manpage | |
| 504 | |
| 505 - Make --disable-bundled-libtom work | |
| 506 | |
| 822 | 507 2013.59 - Friday 4 October 2013 |
| 508 | |
| 509 - Fix crash from -J command | |
| 510 Thanks to Lluís Batlle i Rossell and Arnaud Mouiche for patches | |
| 511 | |
| 512 - Avoid reading too much from /proc/net/rt_cache since that causes | |
| 513 system slowness. | |
| 514 | |
| 515 - Improve EOF handling for half-closed connections | |
| 516 Thanks to Catalin Patulea | |
| 517 | |
| 518 - Send a banner message to report PAM error messages intended for the user | |
| 519 Patch from Martin Donnelly | |
| 520 | |
| 521 - Limit the size of decompressed payloads, avoids memory exhaustion denial | |
| 522 of service | |
| 830 | 523 Thanks to Logan Lamb for reporting and investigating it. CVE-2013-4421 |
| 1321 | 524 https://secure.ucc.asn.au/hg/dropbear/rev/0bf76f54de6f |
| 822 | 525 |
| 526 - Avoid disclosing existence of valid users through inconsistent delays | |
| 830 | 527 Thanks to Logan Lamb for reporting. CVE-2013-4434 |
| 1321 | 528 https://secure.ucc.asn.au/hg/dropbear/rev/d7784616409a |
| 822 | 529 |
| 530 - Update config.guess and config.sub for newer architectures | |
| 531 | |
| 532 - Avoid segfault in server for locked accounts | |
| 533 | |
| 534 - "make install" now installs manpages | |
| 535 dropbearkey.8 has been renamed to dropbearkey.1 | |
| 536 manpage added for dropbearconvert | |
| 537 | |
| 538 - Get rid of one second delay when running non-interactive commands | |
| 539 | |
| 540 | |
| 786 | 541 2013.58 - Thursday 18 April 2013 |
| 542 | |
| 543 - Fix building with Zlib disabled, thanks to Hans Harder and cuma@freetz | |
| 544 | |
| 545 - Use % as a separator for ports, fixes scp in multihop mode, from Hans Harder | |
| 546 | |
| 547 - Reject logins for other users when running as non-root, from Hans Harder | |
| 548 | |
| 549 - Disable client immediate authentication request by default, it prevents | |
| 550 passwordless logins from working | |
| 551 | |
|
776
f7c8b786e595
changelog updates for 2013.57
Matt Johnston <matt@ucc.asn.au>
parents:
775
diff
changeset
|
552 2013.57 - Monday 15 April 2013 |
|
775
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
553 |
|
776
f7c8b786e595
changelog updates for 2013.57
Matt Johnston <matt@ucc.asn.au>
parents:
775
diff
changeset
|
554 - Decreased connection setup time particularly with high latency connections, |
|
f7c8b786e595
changelog updates for 2013.57
Matt Johnston <matt@ucc.asn.au>
parents:
775
diff
changeset
|
555 the number of round trips has been reduced for both client and server. |
|
775
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
556 CPU time hasn't been changed. |
|
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
557 |
|
776
f7c8b786e595
changelog updates for 2013.57
Matt Johnston <matt@ucc.asn.au>
parents:
775
diff
changeset
|
558 - Client will send an initial key exchange guess to save a round trip. |
|
f7c8b786e595
changelog updates for 2013.57
Matt Johnston <matt@ucc.asn.au>
parents:
775
diff
changeset
|
559 Dropbear implements an extension [email protected] to allow the first |
|
f7c8b786e595
changelog updates for 2013.57
Matt Johnston <matt@ucc.asn.au>
parents:
775
diff
changeset
|
560 packet guess to succeed in wider circumstances than the standard behaviour. |
|
f7c8b786e595
changelog updates for 2013.57
Matt Johnston <matt@ucc.asn.au>
parents:
775
diff
changeset
|
561 When communicating with other implementations the standard behaviour is used. |
|
775
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
562 |
|
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
563 - Client side: when public key or password authentication with |
|
776
f7c8b786e595
changelog updates for 2013.57
Matt Johnston <matt@ucc.asn.au>
parents:
775
diff
changeset
|
564 $DROPBEAR_PASSWORD is used an initial authentication request will |
|
775
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
565 be sent immediately rather than querying the list of available methods. |
|
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
566 This behaviour is enabled by CLI_IMMEDIATE_AUTH option (on by default), |
|
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
567 please let the Dropbear author know if it causes any interoperability |
|
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
568 problems. |
|
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
569 |
|
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
570 - Implement client escape characters ~. (terminate session) and |
|
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
571 ~^Z (background session) |
|
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
572 |
|
776
f7c8b786e595
changelog updates for 2013.57
Matt Johnston <matt@ucc.asn.au>
parents:
775
diff
changeset
|
573 - Server will more reliably clean up utmp when connection is closed, reported by |
| 789 | 574 Mattias Walström |
|
775
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
575 |
|
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
576 - Don't crash if /dev/urandom isn't writable (RHEL5), thanks to Scott Case |
|
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
577 |
|
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
578 - Add "-y -y" client option to skip host key checking, thanks to Hans Harder |
|
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
579 |
|
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
580 - scp didn't work properly on systems using vfork(), thanks to Frank Van Uffelen |
|
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
581 |
|
776
f7c8b786e595
changelog updates for 2013.57
Matt Johnston <matt@ucc.asn.au>
parents:
775
diff
changeset
|
582 - Added IUTF8 terminal mode support (Linux and Mac OS). Not standardised yet |
|
f7c8b786e595
changelog updates for 2013.57
Matt Johnston <matt@ucc.asn.au>
parents:
775
diff
changeset
|
583 though probably will be soon |
|
775
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
584 |
|
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
585 - Some verbose DROPBEAR_TRACE output is now hidden unless $DROPBEAR_TRACE2 |
|
776
f7c8b786e595
changelog updates for 2013.57
Matt Johnston <matt@ucc.asn.au>
parents:
775
diff
changeset
|
586 enviroment variable is set |
|
f7c8b786e595
changelog updates for 2013.57
Matt Johnston <matt@ucc.asn.au>
parents:
775
diff
changeset
|
587 |
|
f7c8b786e595
changelog updates for 2013.57
Matt Johnston <matt@ucc.asn.au>
parents:
775
diff
changeset
|
588 - Fix using asymmetric MAC algorithms (broke in ) |
|
f7c8b786e595
changelog updates for 2013.57
Matt Johnston <matt@ucc.asn.au>
parents:
775
diff
changeset
|
589 |
|
f7c8b786e595
changelog updates for 2013.57
Matt Johnston <matt@ucc.asn.au>
parents:
775
diff
changeset
|
590 - Renamed configure.in to configure.ac to quieten autoconf, from Mike Frysinger |
|
775
2f1c199b6e4b
requirenext fixup for firstkexfollows
Matt Johnston <matt@ucc.asn.au>
parents:
719
diff
changeset
|
591 |
| 719 | 592 2013.56 - Thursday 21 March 2013 |
| 718 | 593 |
| 691 | 594 - Allow specifying cipher (-c) and MAC (-m) lists for dbclient |
| 595 | |
| 718 | 596 - Allow using 'none' cipher or MAC (off by default, use options.h). Encryption |
| 597 is used during authentication then disabled, similar to OpenSSH HPN mode | |
| 691 | 598 |
| 599 - Allow a user in immediately if the account has a blank password and blank | |
| 600 passwords are enabled | |
| 601 | |
| 602 - Include a few extra sources of entropy from /proc on Linux, hash private keys | |
| 718 | 603 as well. Dropbear will also write gathered entropy back into /dev/urandom |
| 691 | 604 |
| 718 | 605 - Added hmac-sha2-256 and hmac-sha2-512 support (off by default, use options.h) |
| 691 | 606 |
| 718 | 607 - Don't sent bad address "localhost" for -R forward connections, |
| 608 reported by Denis Bider | |
| 691 | 609 |
| 610 - Add "-B" runtime option to allow blank passwords | |
| 611 | |
|
708
b207d5183bb7
document a few more changes
Matt Johnston <matt@ucc.asn.au>
parents:
691
diff
changeset
|
612 - Allow using IPv6 bracket notation for addresses in server "-p" option, from Ben Jencks |
|
b207d5183bb7
document a few more changes
Matt Johnston <matt@ucc.asn.au>
parents:
691
diff
changeset
|
613 |
| 789 | 614 - A few improvements for Android from Reimar Döffinger |
|
708
b207d5183bb7
document a few more changes
Matt Johnston <matt@ucc.asn.au>
parents:
691
diff
changeset
|
615 |
|
b207d5183bb7
document a few more changes
Matt Johnston <matt@ucc.asn.au>
parents:
691
diff
changeset
|
616 - Fix memory leak for TCP forwarded connections to hosts that timed out, |
| 789 | 617 reported by Norbert Benczúr. Appears to be a very long-standing bug. |
|
708
b207d5183bb7
document a few more changes
Matt Johnston <matt@ucc.asn.au>
parents:
691
diff
changeset
|
618 |
| 718 | 619 - Fix "make clean" for out of tree builds |
| 620 | |
| 621 - Fix compilation when ENABLE_{SVR,CLI}_AGENTFWD are unset | |
| 622 | |
| 661 | 623 2012.55 - Wednesday 22 February 2012 |
| 624 | |
|
662
d354464b2aa6
- Improve CHANGES description
Matt Johnston <matt@ucc.asn.au>
parents:
661
diff
changeset
|
625 - Security: Fix use-after-free bug that could be triggered if command="..." |
|
d354464b2aa6
- Improve CHANGES description
Matt Johnston <matt@ucc.asn.au>
parents:
661
diff
changeset
|
626 authorized_keys restrictions are used. Could allow arbitrary code execution |
|
d354464b2aa6
- Improve CHANGES description
Matt Johnston <matt@ucc.asn.au>
parents:
661
diff
changeset
|
627 or bypass of the command="..." restriction to an authenticated user. |
|
d354464b2aa6
- Improve CHANGES description
Matt Johnston <matt@ucc.asn.au>
parents:
661
diff
changeset
|
628 This bug affects releases 0.52 onwards. Ref CVE-2012-0920. |
|
d354464b2aa6
- Improve CHANGES description
Matt Johnston <matt@ucc.asn.au>
parents:
661
diff
changeset
|
629 Thanks to Danny Fullerton of Mantor Organization for reporting |
|
d354464b2aa6
- Improve CHANGES description
Matt Johnston <matt@ucc.asn.au>
parents:
661
diff
changeset
|
630 the bug. |
| 1321 | 631 https://secure.ucc.asn.au/hg/dropbear/rev/818108bf7749 |
| 661 | 632 |
| 633 - Compile fix, only apply IPV6 socket options if they are available in headers | |
| 634 Thanks to Gustavo Zacarias for the patch | |
| 635 | |
|
662
d354464b2aa6
- Improve CHANGES description
Matt Johnston <matt@ucc.asn.au>
parents:
661
diff
changeset
|
636 - Overwrite session key memory on exit |
| 661 | 637 |
| 638 - Fix minor memory leak in unusual PAM authentication configurations. | |
| 639 Thanks to Stathis Voukelatos | |
| 640 | |
| 641 - Other small code cleanups | |
| 642 | |
|
636
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
643 2011.54 - Tuesday 8 November 2011 |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
644 |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
645 - Building statically works again, broke in 0.53 and 0.53.1 |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
646 |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
647 - Fix crash when forwarding with -R |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
648 |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
649 - Fixed various leaks found by Klocwork analysis software, thanks to them for |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
650 running it |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
651 |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
652 - Set IPTOS_LOWDELAY for IPv6, thanks to Dave Taht |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
653 |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
654 - Bind to sockets with IPV6_V6ONLY so that it works properly on systems |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
655 regardless of the system-wide setting |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
656 |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
657 - Added ALLOW_BLANK_PASSWORD option. Dropbear also now allows public key logins |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
658 to accounts with a blank password. Thanks to Rob Landley |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
659 |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
660 - Fixed case where "-K 1" keepalive for dbclient would cause a SSH_MSG_IGNORE |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
661 packet to be sent |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
662 |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
663 - Avoid some memory allocations in big number maths routines, improves |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
664 performance slightly |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
665 |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
666 - Fix symlink target for installdropbearmulti with DESTDIR set, thanks to |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
667 Scottie Shore |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
668 |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
669 - When requesting server allocated remote ports (-R 0:host:port) print a |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
670 message informing what the port is, thanks to Ali Onur Uyar. |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
671 |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
672 - New version numbering scheme. |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
673 |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
674 Source repository has now migrated to Mercurial at |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
675 https://secure.ucc.asn.au/hg/dropbear/graph/default |
|
3f12086c2ef2
Changelog and version bump for 2011.54
Matt Johnston <matt@ucc.asn.au>
parents:
607
diff
changeset
|
676 |
|
607
aa2f51a6b81d
Update changelog for 0.53.1
Matt Johnston <matt@ucc.asn.au>
parents:
601
diff
changeset
|
677 0.53.1 - Wednesday 2 March 2011 |
|
601
2cd89d627adb
Updates changelog. Mention diffie-hellman-group14-sha1 in 0.53
Matt Johnston <matt@ucc.asn.au>
parents:
598
diff
changeset
|
678 |
|
2cd89d627adb
Updates changelog. Mention diffie-hellman-group14-sha1 in 0.53
Matt Johnston <matt@ucc.asn.au>
parents:
598
diff
changeset
|
679 - -lcrypt needs to be before object files for static linking |
|
2cd89d627adb
Updates changelog. Mention diffie-hellman-group14-sha1 in 0.53
Matt Johnston <matt@ucc.asn.au>
parents:
598
diff
changeset
|
680 |
|
607
aa2f51a6b81d
Update changelog for 0.53.1
Matt Johnston <matt@ucc.asn.au>
parents:
601
diff
changeset
|
681 - Compile fix when both client and agent forwarding are disabled |
|
aa2f51a6b81d
Update changelog for 0.53.1
Matt Johnston <matt@ucc.asn.au>
parents:
601
diff
changeset
|
682 |
|
aa2f51a6b81d
Update changelog for 0.53.1
Matt Johnston <matt@ucc.asn.au>
parents:
601
diff
changeset
|
683 - Fix DROPBEAR_PRNGD_SOCKET mode |
|
aa2f51a6b81d
Update changelog for 0.53.1
Matt Johnston <matt@ucc.asn.au>
parents:
601
diff
changeset
|
684 |
|
aa2f51a6b81d
Update changelog for 0.53.1
Matt Johnston <matt@ucc.asn.au>
parents:
601
diff
changeset
|
685 - Don't allow setting zlib memLevel since it seems buggy |
|
aa2f51a6b81d
Update changelog for 0.53.1
Matt Johnston <matt@ucc.asn.au>
parents:
601
diff
changeset
|
686 |
|
598
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
687 0.53 - Thurs 24 February 2011 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
688 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
689 - Various performance/memory use improvements |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
690 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
691 - Client agent forwarding now works, using OpenSSH's ssh-agent |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
692 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
693 - Improve robustness of client multihop mode |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
694 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
695 - Fix a prime generation bug in bundled libtommath. This is unlikely to have |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
696 generated any bad keys in the wild. |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
697 See |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
698 https://bugzilla.redhat.com/show_bug.cgi?id=615088 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
699 http://bugs.gentoo.org/show_bug.cgi?id=328383 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
700 http://bugs.gentoo.org/show_bug.cgi?id=328409 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
701 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
702 - Attempt to build against system libtomcrypt/libtommath if available. This |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
703 can be disabled with ./configure --enable-bundled-libtom |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
704 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
705 - Make -K (keepalive) and -I (idle timeout) work together sensibly in the client. |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
706 The idle timeout is no longer reset by SSH_MSG_IGNORE packets. |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
707 |
|
601
2cd89d627adb
Updates changelog. Mention diffie-hellman-group14-sha1 in 0.53
Matt Johnston <matt@ucc.asn.au>
parents:
598
diff
changeset
|
708 - Add diffie-hellman-group14-sha1 key exchange method |
|
2cd89d627adb
Updates changelog. Mention diffie-hellman-group14-sha1 in 0.53
Matt Johnston <matt@ucc.asn.au>
parents:
598
diff
changeset
|
709 |
|
598
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
710 - Compile fix if ENABLE_CLI_PROXYCMD is disabled |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
711 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
712 - /usr/bin/X11/xauth is now the default path |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
713 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
714 - Client remote forward (-L/-R) arguments now accept a listen address |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
715 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
716 - In uClinux avoid trashing the parent process when a session exits |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
717 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
718 - Blowfish is now disabled by default since it has large memory usage |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
719 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
720 - Add option to change zlib windowbits/memlevel. Use less memory by default |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
721 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
722 - DROPBEAR_SMALL_CODE is now disabled by default |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
723 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
724 - SSH_ORIGINAL_COMMAND environment variable is set by the server when an |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
725 authorized_keys command is specified. |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
726 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
727 - Set SSH_TTY and SSH_CONNECTION environment variables in the server |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
728 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
729 - Client banner is now printed to standard error rather than standard output |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
730 |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
731 - Capitalisation in many log messages has been made consistent. This may affect |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
732 scripts that parse logfiles. |
|
7ec26a5b92e7
Changelog for 0.53, bump version
Matt Johnston <matt@ucc.asn.au>
parents:
518
diff
changeset
|
733 |
|
518
ce104c8b0be1
- Add a date for the release
Matt Johnston <matt@ucc.asn.au>
parents:
515
diff
changeset
|
734 0.52 - Wed 12 November 2008 |
|
510
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
735 |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
736 - Add "netcat-alike" option (-B) to dbclient, allowing Dropbear to tunnel |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
737 standard input/output to a TCP port-forwarded remote host. |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
738 |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
739 - Add "proxy command" support to dbclient, to allow using a spawned process for |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
740 IO rather than a direct TCP connection. eg |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
741 dbclient remotehost |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
742 is equivalent to |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
743 dbclient -J 'nc remotehost 22' remotehost |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
744 (the hostname is still provided purely for looking up saved host keys) |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
745 |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
746 - Combine netcat-alike and proxy support to allow "multihop" connections, with |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
747 comma-separated host syntax. Allows running |
| 515 | 748 |
|
510
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
749 dbclient user1@host1,user2@host2,user3@host3 |
| 515 | 750 |
|
510
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
751 to end up at host3 via the other two, using SSH TCP forwarding. It's a bit |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
752 like onion-routing. All connections are established from the local machine. |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
753 The comma-separated syntax can also be used for scp/rsync, eg |
| 515 | 754 |
|
513
a3748e54273c
Idle timeout patch from Farrell Aultman. Needs testing, unsure if server
Matt Johnston <matt@ucc.asn.au>
parents:
510
diff
changeset
|
755 rsync -a -e dbclient m@gateway,m2@host,martello:/home/matt/ ~/backup/ |
| 515 | 756 |
|
510
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
757 to bounce through a few hosts. |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
758 |
| 515 | 759 - Add -I "idle timeout" option (contributed by Farrell Aultman) |
| 760 | |
|
510
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
761 - Allow restrictions on authorized_keys logins such as restricting commands |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
762 to be run etc. This is a subset of those allowed by OpenSSH, doesn't |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
763 yet allow restricting source host. |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
764 |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
765 - Use vfork() for scp on uClinux |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
766 |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
767 - Default to PATH=/usr/bin:/bin for shells. |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
768 |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
769 - Report errors if -R forwarding fails |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
770 |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
771 - Add counter mode cipher support, which avoids some security problems with the |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
772 standard CBC mode. |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
773 |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
774 - Support [email protected] delayed compression for client/server. It can be |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
775 required for the Dropbear server with the '-Z' option. This is useful for |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
776 security as it avoids exposing the server to attacks on zlib by |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
777 unauthenticated remote users, though requires client side support. |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
778 |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
779 - options.h has been split into options.h (user-changable) and sysoptions.h |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
780 (less commonly changed) |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
781 |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
782 - Support "dbclient -s sftp" to specify a subsystem |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
783 |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
784 - Fix a bug in replies to channel requests that could be triggered by recent |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
785 versions of PuTTY |
|
b85507ade010
- Update manuals, include section on authorized_keys
Matt Johnston <matt@ucc.asn.au>
parents:
471
diff
changeset
|
786 |
| 471 | 787 0.51 - Thu 27 March 2008 |
| 468 | 788 |
| 789 - Make a copy of password fields rather erroneously relying on getwpnam() | |
| 790 to be safe to call multiple times | |
| 791 | |
| 792 - If $SSH_ASKPASS_ALWAYS environment variable is set (and $SSH_ASKPASS is | |
| 793 as well) always use that program, ignoring isatty() and $DISPLAY | |
| 794 | |
| 795 - Wait until a process exits before the server closes a connection, so | |
| 471 | 796 that an exit code can be sent. This fixes problems with exit codes not |
| 797 being returned, which could cause scp to fail. | |
| 468 | 798 |
| 455 | 799 0.50 - Wed 8 August 2007 |
| 800 | |
| 801 - Add DROPBEAR_PASSWORD environment variable to specify a dbclient password | |
| 802 | |
| 803 - Use /dev/urandom by default, since that's what everyone does anyway | |
| 804 | |
| 805 - Correct vfork() use for uClinux in scp | |
| 806 (thanks to Alex Landau) | |
| 807 | |
| 808 - Exit with an exit code of 1 if dropbear can't bind to any ports | |
| 809 (thanks to Nicolai Ehemann) | |
| 810 | |
| 811 - Improve network performance and add a -W <receive_window> argument for | |
| 812 adjusting the tradeoff between network performance and memory consumption. | |
| 813 | |
| 814 - Fix a problem where reply packets could be sent during key exchange, | |
| 815 in violation of the SSH spec. This could manifest itself with connections | |
| 816 being terminated after 8 hours with new TCP-forward connections being | |
| 817 established. | |
| 818 | |
| 819 - Add -K <keepalive_time> argument, ensuring that data is transmitted | |
| 820 over the connection at least every N seconds. | |
| 821 | |
|
457
e430a26064ee
Make dropbearkey only generate 1024 bit keys
Matt Johnston <matt@ucc.asn.au>
parents:
455
diff
changeset
|
822 - dropbearkey will no longer generate DSS keys of sizes other than 1024 |
|
e430a26064ee
Make dropbearkey only generate 1024 bit keys
Matt Johnston <matt@ucc.asn.au>
parents:
455
diff
changeset
|
823 bits, as required by the DSS specification. (Other sizes are still |
|
e430a26064ee
Make dropbearkey only generate 1024 bit keys
Matt Johnston <matt@ucc.asn.au>
parents:
455
diff
changeset
|
824 accepted for use to provide backwards compatibility). |
|
e430a26064ee
Make dropbearkey only generate 1024 bit keys
Matt Johnston <matt@ucc.asn.au>
parents:
455
diff
changeset
|
825 |
| 437 | 826 0.49 - Fri 23 February 2007 |
| 827 | |
| 828 - Security: dbclient previously would prompt to confirm a | |
| 829 mismatching hostkey but wouldn't warn loudly. It will now | |
| 830 | 830 exit upon a mismatch. CVE-2007-1099 |
| 337 | 831 |
| 832 - Compile fixes, make sure that all variable definitions are at the start | |
| 833 of a scope. | |
| 834 | |
| 430 | 835 - Added -P pidfile argument to the server (from Swen Schillig) |
| 337 | 836 |
| 837 - Add -N dbclient option for "no command" | |
| 838 | |
| 839 - Add -f dbclient option for "background after auth" | |
| 840 | |
| 437 | 841 - Add ability to limit binding to particular addresses, use |
| 842 -p [address:]port, patch from Max-Gerd Retzlaff. | |
| 843 | |
| 430 | 844 - Try to finally fix ss_family compilation problems (for old |
| 845 glibc systems) | |
| 846 | |
| 847 - Fix finding relative-path server hostkeys when running daemonized | |
| 848 | |
| 849 - Use $HOME in preference to that from /etc/passwd, so that | |
| 850 dbclient can still work on broken systems. | |
| 851 | |
| 852 - Fix various issues found by Klocwork defect analysis, mostly memory leaks | |
| 853 and error-handling. Thanks to Klocwork for their service. | |
| 854 | |
| 855 - Improve building in a separate directory | |
| 856 | |
| 857 - Add compile-time LOG_COMMANDS option to log user commands | |
| 858 | |
| 859 - Add '-y' flag to dbclient to unconditionally accept host keys, | |
| 860 patch from Luciano Miguel Ferreira Rocha | |
| 861 | |
| 862 - Return immediately for "sleep 10 & echo foo", rather than waiting | |
| 863 for the sleep to return (pointed out by Rob Landley). | |
| 864 | |
| 865 - Avoid hanging after exit in certain cases (such as scp) | |
| 866 | |
| 867 - Various minor fixes, in particular various leaks reported by | |
| 868 Erik Hovland | |
| 869 | |
| 870 - Disable core dumps on startup | |
| 871 | |
| 872 - Don't erase over every single buffer, since it was a bottleneck. | |
| 873 On systems where it really matters, encrypted swap should be utilised. | |
| 874 | |
| 875 - Read /dev/[u]random only once at startup to conserve kernel entropy | |
| 876 | |
| 877 - Upgrade to LibTomCrypt 1.16 and LibTomMath 0.40 | |
| 878 | |
| 879 - Upgrade config.status and config.guess | |
| 337 | 880 |
| 295 | 881 0.48.1 - Sat 11 March 2006 |
| 882 | |
| 883 - Compile fix for scp | |
| 884 | |
| 291 | 885 0.48 - Thurs 9 March 2006 |
| 290 | 886 |
| 887 - Check that the circular buffer is properly empty before | |
| 888 closing a channel, which could cause truncated transfers | |
| 889 (thanks to Tomas Vanek for helping track it down) | |
| 890 | |
| 891 - Implement per-IP pre-authentication connection limits | |
| 830 | 892 (after some poking from Pablo Fernandez) CVE-2006-1206 |
| 290 | 893 |
| 894 - Exit gracefully if trying to connect to as SSH v1 server | |
| 895 (reported by Rushi Lala) | |
| 896 | |
| 897 - Only read /dev/random once at startup when in non-inetd mode | |
| 898 | |
| 899 - Allow ctrl-c to close a dbclient password prompt (may | |
| 900 still have to press enter on some platforms) | |
| 901 | |
| 902 - Merged in uClinux patch for inetd mode | |
| 903 | |
| 904 - Updated to scp from OpenSSH 4.3p2 - fixes a security issue | |
| 905 where use of system() could cause users to execute arbitrary | |
| 906 code through malformed filenames, ref CVE-2006-0225 | |
| 907 | |
|
265
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
908 0.47 - Thurs Dec 8 2005 |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
909 |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
910 - SECURITY: fix for buffer allocation error in server code, could potentially |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
911 allow authenticated users to gain elevated privileges. All multi-user systems |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
912 running the server should upgrade (or apply the patch available on the |
| 830 | 913 Dropbear webpage). CVE-2005-4178 |
|
265
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
914 |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
915 - Fix channel handling code so that redirecting to /dev/null doesn't use |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
916 100% CPU. |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
917 |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
918 - Turn on zlib compression for dbclient. |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
919 |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
920 - Set "low delay" TOS bit, can significantly improve interactivity |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
921 over some links. |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
922 |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
923 - Added client keyboard-interactive mode support, allows operation with |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
924 newer OpenSSH servers in default config. |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
925 |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
926 - Log when pubkey auth fails because of bad ~/.ssh/authorized_keys permissions |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
927 |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
928 - Improve logging of assertions |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
929 |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
930 - Added aes-256 cipher and sha1-96 hmac. |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
931 |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
932 - Fix twofish so that it actually works. |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
933 |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
934 - Improve PAM prompt comparison. |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
935 |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
936 - Added -g (dbclient) and -a (dropbear server) options to allow |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
937 connections to listening forwarded ports from remote machines. |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
938 |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
939 - Various other minor fixes |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
940 |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
941 - Compile fixes for glibc 2.1 (ss_family vs __ss_family) and NetBSD |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
942 (netinet/in_systm.h needs to be included). |
|
9b9664204b97
* Update changelogs for 0.47 release
Matt Johnston <matt@ucc.asn.au>
parents:
224
diff
changeset
|
943 |
| 223 | 944 0.46 - Sat July 9 2005 |
| 193 | 945 |
| 946 - Fix long-standing bug which caused connections to be closed if an ssh-agent | |
| 947 socket was no longer available | |
| 948 | |
|
220
9089929fb2b7
* preparing for 0.46 release
Matt Johnston <matt@ucc.asn.au>
parents:
193
diff
changeset
|
949 - Print a warning if we seem to be blocking on /dev/random |
| 193 | 950 (suggested by Paul Fox) |
| 951 | |
|
220
9089929fb2b7
* preparing for 0.46 release
Matt Johnston <matt@ucc.asn.au>
parents:
193
diff
changeset
|
952 - Fixed a memory leak in DSS code (thanks to Boris Berezovsky for the patch) |
| 193 | 953 |
| 954 - dbclient -L no longer segfaults, allocate correct buffer size (thanks | |
|
220
9089929fb2b7
* preparing for 0.46 release
Matt Johnston <matt@ucc.asn.au>
parents:
193
diff
changeset
|
955 to David Cook for reporting it, and Christopher Faylor for independently |
|
9089929fb2b7
* preparing for 0.46 release
Matt Johnston <matt@ucc.asn.au>
parents:
193
diff
changeset
|
956 sending in a patch) |
| 193 | 957 |
| 223 | 958 - Added RSA blinding to signing code (suggested by Dan Kaminsky) |
| 193 | 959 |
|
220
9089929fb2b7
* preparing for 0.46 release
Matt Johnston <matt@ucc.asn.au>
parents:
193
diff
changeset
|
960 - Rearranged bignum reading/random generation code |
| 193 | 961 |
| 962 - Reset the non-blocking status on stderr and stdout as well as stdin, | |
| 963 fixes a problem where the shell running dbclient will exit (thanks to | |
| 964 Brent Roman for reporting it) | |
| 965 | |
| 223 | 966 - Fix so that all file descriptors are closed so the child shell doesn't |
|
220
9089929fb2b7
* preparing for 0.46 release
Matt Johnston <matt@ucc.asn.au>
parents:
193
diff
changeset
|
967 inherit descriptors (thanks to Linden May for the patch) |
|
9089929fb2b7
* preparing for 0.46 release
Matt Johnston <matt@ucc.asn.au>
parents:
193
diff
changeset
|
968 |
| 223 | 969 - Change signkey.c to avoid gcc 4 generating incorrect code |
|
220
9089929fb2b7
* preparing for 0.46 release
Matt Johnston <matt@ucc.asn.au>
parents:
193
diff
changeset
|
970 |
|
224
1dbd2473482f
* ... and a bit more for the CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
223
diff
changeset
|
971 - After both sides of a file descriptor have been shutdown(), close() |
|
1dbd2473482f
* ... and a bit more for the CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
223
diff
changeset
|
972 it to avoid leaking descriptors (thanks to Ari Hyttinen for a patch) |
|
1dbd2473482f
* ... and a bit more for the CHANGES
Matt Johnston <matt@ucc.asn.au>
parents:
223
diff
changeset
|
973 |
|
220
9089929fb2b7
* preparing for 0.46 release
Matt Johnston <matt@ucc.asn.au>
parents:
193
diff
changeset
|
974 - Update to LibTomCrypt 1.05 and LibTomMath 0.35 |
|
9089929fb2b7
* preparing for 0.46 release
Matt Johnston <matt@ucc.asn.au>
parents:
193
diff
changeset
|
975 |
| 176 | 976 0.45 - Mon March 7 2005 |
| 977 | |
| 978 - Makefile no longer appends 'static' to statically linked binaries | |
| 979 | |
| 980 - Add optional SSH_ASKPASS support to the client | |
| 981 | |
| 982 - Respect HOST_LOOKUP option | |
| 983 | |
| 984 - Fix accidentally removed "return;" statement which was removed in 0.44 | |
| 985 (causing clients which sent an empty terminal-modes string to fail to | |
| 986 connect - including pssh, ssh.com, danger hiptop). (patches | |
| 987 independently from Paul Fox, David Horwitt and Sven-Ola Tuecke) | |
| 988 | |
|
170
a62cb364f615
Read "y/n" response for fingerprints from /dev/tty directly so that dbclient
Matt Johnston <matt@ucc.asn.au>
parents:
161
diff
changeset
|
989 - Read "y/n" response for fingerprints from /dev/tty directly so that dbclient |
|
a62cb364f615
Read "y/n" response for fingerprints from /dev/tty directly so that dbclient
Matt Johnston <matt@ucc.asn.au>
parents:
161
diff
changeset
|
990 will work with scp. |
|
a62cb364f615
Read "y/n" response for fingerprints from /dev/tty directly so that dbclient
Matt Johnston <matt@ucc.asn.au>
parents:
161
diff
changeset
|
991 |
| 161 | 992 0.44 - Mon Jan 3 2005 |
| 993 | |
| 994 - SECURITY: Fix for PAM auth so that usernames are logged and conversation | |
| 995 function responses are allocated correctly - all 0.44test4 users with PAM | |
| 996 compiled in (not default) are advised to upgrade. | |
| 997 | |
| 998 - Fix calls to getnameinfo() for compatibility with Solaris | |
| 999 | |
| 1000 - Pristine compilation works (run 'configure' from a fresh dir and make it | |
| 1001 there) | |
| 1002 | |
| 1003 - Fixes for compiling with most options disabled. | |
| 1004 | |
| 1005 - Upgraded to LibTomCrypt 0.99 and LibTomMath 0.32 | |
| 1006 | |
| 1007 - Make sure that zeroing out of values in LTM and LTC won't get optimised away | |
| 1008 | |
| 1009 - Removed unused functions from loginrec.c | |
| 1010 | |
| 1011 - /dev/random is now the default entropy source rather than /dev/urandom | |
| 1012 | |
| 1013 - Logging of IPs in auth success/failure messages for improved greppability | |
| 134 | 1014 |
| 1015 - Fix dbclient so that "scp -i keyfile" works. (It can handle "-ikeyfile | |
| 1016 properly) | |
| 1017 | |
| 1018 - Avoid a race in server shell-handling code which prevents the exit-code | |
| 161 | 1019 from being returned to the client in some circumstances. |
| 134 | 1020 |
| 1021 - Makefile modified so that install target works correctly (doesn't try | |
| 1022 to install "all" binary) - patch from Juergen Daubert | |
| 1023 | |
| 161 | 1024 - Various minor fixes and compile warnings. |
| 1025 | |
| 1026 0.44test4 - Tue Sept 14 2004 21:15:54 +0800 | |
| 124 | 1027 |
| 1028 - Fix inetd mode so it actually loads the hostkeys (oops) | |
| 1029 | |
| 1030 - Changed DROPBEAR_DEFPORT properly everywhere | |
| 1031 | |
| 1032 - Fix a small memory leak in the auth code | |
| 1033 | |
| 1034 - WCOREDUMP is only used on systems which support it (ie not cygwin or AIX) | |
| 1035 | |
| 1036 - Check (and fail for) cases when we can't negotiate algorithms with the | |
| 1037 remote side successfully (rather than bombing out ungracefully) | |
| 1038 | |
| 1039 - Handle authorized_keys files without a terminating newline | |
| 1040 | |
| 1041 - Fiddle the channel receive window size for possibly better performance | |
| 1042 | |
| 1043 - Added in the PAM authentication code (finally! thanks to Martin Carlsson) | |
| 1044 | |
|
111
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1045 0.44test3 - Fri Aug 27 22:20:54 +0800 |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1046 |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1047 - Fixed a bunch of warnings. |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1048 |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1049 - scp works correctly when passed a username (fix for the dbclient program |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1050 itself as well, "-lmatt" works as well as "-l matt"). |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1051 |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1052 - Remove unrequired debian files |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1053 |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1054 - Exit with the remote process's return code for dbclient |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1055 |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1056 - Display stderr messages from the server in the client |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1057 |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1058 - Add circular buffering to the channel code. This should dramatically reduce |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1059 the amount of backtraffic sent in response to traffic incoming to the |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1060 Dropbear end - improves high-latency performance (ie dialup). |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1061 |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1062 - Various other related channel-handling fixups. |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1063 |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1064 - Allow leading lines in the banner when connecting to servers |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1065 |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1066 - Fixed printing out errors onto the network socket with stderr (for inetd |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1067 mode when using xinetd) |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1068 |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1069 - Remove obselete documentation |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1070 |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1071 - Fix a null-pointer exception when trying to free non-existant listeners |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1072 at cleanup. |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1073 |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1074 - DEBUG_TRACE now only works if you add "-v" to the program commandline |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1075 |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1076 - Don't leave stdin non-blocking on exit - this caused the parent shell |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1077 of dbclient to close when dbclient exited, for some shells in BusyBox |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1078 |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1079 - Server connections no longer timeout after 5 minutes |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1080 |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1081 - Fixed stupid DSS hostkey typo (server couldn't load host keys) |
|
88e0a1ad951a
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
90
diff
changeset
|
1082 |
|
90
c2ac796b130e
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
78
diff
changeset
|
1083 0.44test2 - Tues Aug 17 2004 17:43:54 +0800 |
|
c2ac796b130e
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
78
diff
changeset
|
1084 |
|
c2ac796b130e
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
78
diff
changeset
|
1085 - Fix up dropbearmulti targets in the Makefile - symlinks are now created |
|
c2ac796b130e
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
78
diff
changeset
|
1086 |
|
c2ac796b130e
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
78
diff
changeset
|
1087 - Compile fake-rfc2553 even with dropbearconvert/dropbearkey - this |
|
c2ac796b130e
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
78
diff
changeset
|
1088 allows them to work on platforms without a native getaddrinfo() |
|
c2ac796b130e
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
78
diff
changeset
|
1089 |
|
c2ac796b130e
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
78
diff
changeset
|
1090 - Create ~/.ssh/known_hosts properly if it doesn't exist |
|
c2ac796b130e
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
78
diff
changeset
|
1091 |
|
c2ac796b130e
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
78
diff
changeset
|
1092 - Fix basename() function prototype |
|
c2ac796b130e
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
78
diff
changeset
|
1093 |
|
c2ac796b130e
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
78
diff
changeset
|
1094 - Backport some local changes (more #ifdefs for termcodes.c, a fix for missing |
|
c2ac796b130e
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
78
diff
changeset
|
1095 defines on AIX). |
|
c2ac796b130e
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
78
diff
changeset
|
1096 |
|
c2ac796b130e
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
78
diff
changeset
|
1097 - Let dbclient be run as "ssh" |
|
c2ac796b130e
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
78
diff
changeset
|
1098 |
|
c2ac796b130e
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
78
diff
changeset
|
1099 - Initialise mp_ints by default |
|
c2ac796b130e
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
78
diff
changeset
|
1100 |
|
c2ac796b130e
merge of 00b67a11e33c3ed390556805ed6d1078528bee70
Matt Johnston <matt@ucc.asn.au>
parents:
78
diff
changeset
|
1101 0.44test1 - Sun Aug 16 2005 17:43:54 +0800 |
| 78 | 1102 |
| 1103 - TESTING RELEASE - this is the first public release of the client codebase, | |
| 1104 so there are sure to be bugs to be found. In addition, if you're just using | |
| 1105 the server portion, the final binary size probably will increase - I'll | |
| 1106 be trying to get it back down in future releases. | |
| 1107 | |
| 1108 - Dropbear client added - lots of changes to the server code as well to | |
| 1109 generalise things | |
| 1110 | |
| 1111 - IPv6 support added for client, server, and forwarding | |
| 1112 | |
| 1113 - New makefile with more generic support for multiple-program binaries | |
| 1114 | |
| 69 | 1115 0.43 - Fri Jul 16 2004 17:44:54 +0800 |
| 1116 | |
| 1117 - SECURITY: Don't try to free() uninitialised variables in DSS verification | |
| 1118 code. Thanks to Arne Bernin for pointing out this bug. This is possibly | |
| 1119 exploitable, all users with DSS and pubkey-auth compiled in are advised to | |
| 830 | 1120 upgrade. CVE-2004-2486 |
| 69 | 1121 |
| 1122 - Clean up agent forwarding socket files correctly, patch from Gerrit Pape. | |
| 1123 | |
| 1124 - Don't go into an infinite loop when portforwarding to servers which don't | |
| 1125 send any initial data/banner. Patch from Nikola Vladov | |
| 1126 | |
| 1127 - Fix for network vs. host byte order in logging remote TCP ports, also | |
| 1128 from Gerrit Pape. | |
| 1129 | |
| 1130 - Initialise many pointers to NULL, for general safety. Also checked cleanup | |
| 1131 code for mp_ints (related to security issues above). | |
| 1132 | |
| 1133 0.42 - Wed Jun 16 2004 12:44:54 +0800 | |
| 1134 | |
| 1135 - Updated to Gerrit Pape's official Debian subdirectory | |
| 1136 | |
| 1137 - Fixed bad check when opening /dev/urandom - thanks to Danny Sung. | |
| 1138 | |
| 1139 - Added -i inetd mode flag, and associated options in options.h . Dropbear | |
| 1140 can be compiled with either normal mode, inetd, or both modes. Thanks | |
| 1141 to Gerrit Pape for basic patch and motivation. | |
| 1142 | |
| 1143 - Use <dirent.h> rather than <sys/dir.h> for POSIX compliance. Thanks to Bill | |
| 1144 Sommerfield. | |
| 1145 | |
| 1146 - Fixed a TCP forwarding (client-local, -L style) bug which caused the whole | |
| 1147 session to close if the TCP connection failed. Thanks to Andrew Braund for | |
| 1148 reporting it and helping track it down. | |
| 1149 | |
| 1150 - Re-enable sigpipe for child processes. Thanks to Gerrit Pape for some | |
| 1151 suggestions, and BSD manpages for a clearer explanation of the behaviour. | |
| 1152 | |
| 1153 - Added manpages, thanks to Gerrit Pape. | |
| 1154 | |
| 1155 - Changed license text for LibTomCrypt and LibTomMath. | |
| 1156 | |
| 1157 - Added strip-static target | |
| 1158 | |
| 1159 - Fixed a bug in agent-forwarding cleanup handler - would segfault | |
| 1160 (dereferencing a null pointer) if agent forwarding had failed. | |
| 1161 | |
| 1162 - Fix behaviour of authorized_keys parsing, so larger (>1024 bit) DSA keys will | |
| 1163 work. Thanks to Dr. Markus Waldeck for the report. | |
| 1164 | |
| 1165 - Fixed local port forwarding code so that the "-j" option will make forwarding | |
| 1166 attempts fail more gracefully. | |
| 1167 | |
| 1168 - Allow repeated requests in a single session if previous ones fail - this fixes PuTTY and some other SCP clients, which try SFTP, then fall-back to SCP if it | |
| 1169 isn't available. Thanks to Stirling Westrup for the report. | |
| 1170 | |
| 1171 - Updated to LibTomCrypt 0.96 and LibTomMath 0.30. The AES code now uses | |
| 1172 smaller non-precomputed tables if DROPBEAR_SMALL_CODE is defined in | |
| 1173 options.h, leading to a significant reduction in the binary size. | |
| 1174 | |
|
4
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1175 0.41 - Mon Jan 19 2004 22:40:19 +0800 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1176 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1177 - Fix in configure so that cross-compiling works, thanks to numerous people for |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1178 reporting and testing |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1179 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1180 - Terminal mode parsing now handles empty terminal mode strings (sent by |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1181 Windows ssh.com clients), thanks to Ricardo Derbes for the report |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1182 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1183 - Handling is improved for users with no shell specified in /etc/passwd, |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1184 thanks again to Ricardo Derbes |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1185 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1186 - Fix for compiling with --disable-syslog, thanks to gordonfh |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1187 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1188 - Various minor fixes allow scp to work with irix, thanks to Paul Marinceu for |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1189 fixing it up |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1190 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1191 - Use <stropts.h> not <sys/stropts.h>, since the former seems more common |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1192 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1193 0.40 - Tue Jan 13 2004 21:05:19 +0800 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1194 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1195 - Remote TCP forwarding (-R) style implemented |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1196 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1197 - Local and remote TCP forwarding can each be disabled at runtime (-k and -j |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1198 switches) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1199 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1200 - Fix for problems detecting openpty() with uClibc - many thanks to various |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1201 people for reporting and testing fixes, including (in random order) Cristian |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1202 Ionescu-Idbohrn, James Ewing, Steve Dover, Thomas Lundquist and Frederic |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1203 Lavernhe |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1204 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1205 - Improved portability for IRIX, thanks to Paul Marinceu |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1206 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1207 - AIX and HPUX portability fixes, thanks to Darren Tucker for patches |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1208 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1209 - prngd should now work correctly, thanks to Darren Tucker for the patch |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1210 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1211 - scp compilation on systems without strlcpy() is fixed, thanks to Peter |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1212 Jannesen and David Muse for reporting it (independently and simultaneously :) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1213 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1214 - Merged in new LibTomCrypt 0.92 and LibTomMath 0.28 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1215 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1216 0.39 - Tue Dec 16 2003 15:19:19 +0800 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1217 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1218 - Better checking of key lengths and parameters for DSS and RSA auth |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1219 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1220 - Print fingerprint of keys used for pubkey auth |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1221 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1222 - More consistent logging of usernames and IPs |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1223 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1224 - Added option to disable password auth (or just for root) at runtime |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1225 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1226 - Avoid including bignum functions which don't give much speed benefit but |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1227 take up binary size |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1228 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1229 - Added a stripped down version of OpenSSH's scp binary |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1230 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1231 - Added additional supporting functions for Irix, thanks to Paul Marinceu |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1232 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1233 - Don't check for unused libraries in configure script |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1234 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1235 - Removed trailing comma in algorithm lists (thanks to Mihnea Stoenescu) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1236 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1237 - Fixed up channel close handling, always send close packet in response |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1238 (also thanks to Mihnea Stoenescu) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1239 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1240 - Various makefile improvements for cross-compiling, thanks to Friedrich |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1241 Lobenstock and Mihnea Stoenescu |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1242 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1243 - Use daemon() function if available (or our own copy) rather than separate |
| 789 | 1244 code (thanks to Frédéric Lavernhe for the report and debugging, and Bernard |
|
4
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1245 Blackham for his suggestion on what to look at) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1246 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1247 - Fixed up support for first_kex_packet_follows, required to talk to ssh.com |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1248 clients. Thanks to Marian Stagarescu for the bug report. |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1249 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1250 - Avoid using MAXPATHLEN, pointer from Ian Morris |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1251 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1252 - Improved input sanity checking |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1253 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1254 0.38 - Sat Oct 11 2003 16:28:13 +0800 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1255 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1256 - Default hostkey path changed to /etc/dropbear/dropbear_{rsa,dss}_host_key |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1257 rather than /etc/dropbear_{rsa,dss}_host_key |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1258 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1259 - Added SMALL and MULTI text files which have info on compiling for multiple |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1260 binaries or small binaries |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1261 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1262 - Allow for commandline definition of some options.h settings |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1263 (without warnings) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1264 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1265 - Be more careful handling EINTR |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1266 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1267 - More fixes for channel closing |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1268 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1269 - Added multi-binary support |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1270 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1271 - Improved logging of IPs, now get logged in all cases |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1272 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1273 - Don't chew cpu when waiting for version identification string, also |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1274 make sure that we kick off people if they don't auth within 5 minutes. |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1275 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1276 - Various small fixes, warnings etc |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1277 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1278 - Display MOTD if requested - suggested by |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1279 Trent Lloyd <lathiat at sixlabs.org> and |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1280 Zach White <zwhite at darkstar.frop.org> |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1281 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1282 - sftp support works (relies on OpenSSH sftp binary or similar) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1283 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1284 - Added --disable-shadow option (requested by the floppyfw guys) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1285 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1286 0.37 - Wed Sept 24 2003 19:42:12 +0800 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1287 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1288 - Various portability fixes, fixes for Solaris 9, Tru64 5.1, Mac OS X 10.2, |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1289 AIX, BSDs |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1290 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1291 - Updated LibTomMath to 0.27 and LibTomCrypt to 0.90 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1292 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1293 - Renamed util.{c,h} to dbutil.{c,h} to avoid conflicts with system util.h |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1294 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1295 - Added some small changes so it'll work with AIX (plus Linux Affinity). |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1296 Thanks to Shig for them. |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1297 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1298 - Improved the closing messages, so a clean exit is "Exited normally" |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1299 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1300 - Added some more robust integer/size checking in buffer.c as a backstop for |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1301 integer overflows |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1302 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1303 - X11 forwarding fixed for OSX, path for xauth changed to /usr/X11R6/bin/xauth |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1304 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1305 - Channel code handles closing more nicely, doesn't sit waiting for an extra |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1306 keystroke on BSD/OSX platforms, and data is flushed fully before closing |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1307 child processes (thanks to |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1308 Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn at axis.com> for |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1309 pointing that out). |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1310 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1311 - Changed "DISABLE_TCPFWD" to "ENABLE_TCPFWD" (and for x11/auth) so |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1312 "disable DISABLE_TCPWD" isn't so confusing. |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1313 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1314 - Fix authorized_keys handling (don't crash on too-long keys, and |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1315 use fgetc not getc to avoid strange macro-related issues), thanks to |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1316 Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn at axis.com> |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1317 and Steve Rodgers <hwstar at cox.net> for reporting and testing. |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1318 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1319 - Fixes to the README with regard to uClibc systems, thanks to |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1320 Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn at axis.com>, |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1321 as well as general improvements to documentation (split README/INSTALL) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1322 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1323 - Fixed up some compilation problems with dropbearconvert/dropbearkey if |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1324 DSS or RSA were disabled, reported by Patrik Karlsson <patrik at cqure.net> |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1325 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1326 - Fix double-free bug for hostkeys, reported by |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1327 Vincent Sanders <vince at kyllikki.org> |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1328 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1329 - Fix up missing \ns from dropbearconvert help message, |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1330 thanks to Mordy Ovits <movits at bloomberg.com> for the patch |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1331 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1332 0.36 - Tue August 19 2003 12:16:23 +0800 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1333 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1334 - Fix uninitialised temporary variable in DSS signing code |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1335 (thanks to Matthew Franz <mdfranz at io.com> for reporting, and the authors |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1336 of Valgrind for making it easy to track down) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1337 - Fix remote version-string parsing error |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1338 (thanks to Bernard Blackham <bernard at blackham.com.au> for noticing) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1339 - Improved host-algorithm-matching algorithm in algo.c |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1340 - Decreased MAX_STRING_LEN to a more realistic value |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1341 - Fix incorrect version (0.34) in this CHANGES file for the previous release. |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1342 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1343 0.35 - Sun August 17 2003 05:37:47 +0800 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1344 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1345 - Fix for remotely exploitable format string buffer overflow. |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1346 (thanks to Joel Eriksson <je at bitnux.com>) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1347 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1348 0.34 - Fri August 15 2003 15:10:00 +0800 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1349 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1350 - Made syslog optional, both at compile time and as a compile option |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1351 (suggested by Laurent Bercot <ska at skarnet.org>) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1352 - Fixup for bad base64 parsing in authorized_keys |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1353 (noticed by Davyd Madeley <davyd at zdlcomputing.com>) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1354 - Added initial tcp forwarding code, only -L (local) at this stage |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1355 - Improved "make install" with DESTDIR and changing ownership seperately, |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1356 don't check for setpgrp on Linux for crosscompiling. |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1357 (from Erik Andersen <andersen at codepoet.org>) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1358 - More commenting, fix minor compile warnings, make return values more |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1359 consistent etc |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1360 - Various signedness fixes |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1361 - Can listen on multiple ports |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1362 - added option to disable openpty with configure script, |
| 789 | 1363 (from K.-P. Kirchdörfer <kapeka at epost.de>) |
|
4
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1364 - Various cleanups to bignum code |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1365 (thanks to Tom St Denis <tomstdenis at iahu.ca>) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1366 - Fix compile error when disabling RSA |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1367 (from Marc Kleine-Budde <kleine-budde at gmx.de>) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1368 - Other cleanups, splitting large functions for packet and kex handling etc |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1369 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1370 0.33 - Sun June 22 2003 22:24:12 +0800 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1371 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1372 - Fixed some invalid assertions in the channel code, fixing the server dying |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1373 when forwarding X11 connections. |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1374 - Add dropbearconvert to convert to/from OpenSSH host keys and Dropbear keys |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1375 - RSA keys now keep p and q parameters for compatibility -- old Dropbear keys |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1376 still work, but can't be converted to OpenSSH etc. |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1377 - Debian packaging directory added, thanks to |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1378 Grahame (grahame at angrygoats.net) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1379 - 'install' target added to the makefile |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1380 - general tidying, improve consistency of functions etc |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1381 - If RSA or DSS hostkeys don't exist, that algorithm won't be used. |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1382 - Improved RSA and DSS key generation, more efficient and fixed some minor bugs |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1383 (thanks to Tom St Denis for the advice) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1384 - Merged new versions of LibTomCrypt (0.86) and LibTomMath (0.21) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1385 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1386 0.32 - Sat May 24 2003 12:44:11 +0800 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1387 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1388 - Don't compile unused code from libtomcrypt (test vectors etc) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1389 - Updated to libtommath 0.17 and libtomcrypt 0.83. New libtommath results |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1390 in smaller binary size, due to not linking unrequired code |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1391 - X11 forwarding added |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1392 - Agent forwarding added (for OpenSSH.com ssh client/agent) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1393 - Fix incorrect buffer freeing when banners are used |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1394 - Hostname resolution works |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1395 - Various minor bugfixes/code size improvements etc |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1396 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1397 0.31 - Fri May 9 2003 17:57:16 +0800 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1398 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1399 - Improved syslog messages - IP logging etc |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1400 - Strip control characters from log messages (specified username currently) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1401 - Login recording (utmp/wtmp) support, so last/w/who work - taken from OpenSSH |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1402 - Shell is started as a proper login shell, so /etc/profile etc is sourced |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1403 - Ptys work on Solaris (2.8 x86 tested) now |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1404 - Fixed bug in specifying the rsa hostkey |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1405 - Fixed bug in compression code, could trigger if compression resulted in |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1406 larger output than input (uncommon but possible). |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1407 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1408 0.30 - Thu Apr 17 2003 18:46:15 +0800 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1409 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1410 - SECURITY: buffer.c had bad checking for buffer increment length - fixed |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1411 - channel code now closes properly on EOF - scp processes don't hang around |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1412 - syslog support added - improved auth/login/failure messages |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1413 - general code tidying, made return codes more consistent |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1414 - Makefile fixed for dependencies and makes libtomcrypt as well |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1415 - Implemented sending SSH_MSG_UNIMPLEMENTED :) |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1416 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1417 0.29 - Wed Apr 9 2003 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1418 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1419 - Fixed a stupid bug in 0.28 release, 'newstr = strdup(oldstr)', |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1420 not 'newstr=oldstr' |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1421 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1422 0.28 - Sun Apr 6 2003 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1423 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1424 - Initial public release |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1425 |
|
fe6bca95afa7
Makefile.in contains updated files required
Matt Johnston <matt@ucc.asn.au>
parents:
diff
changeset
|
1426 Development was started in October 2002 |