Mercurial > dropbear
comparison CHANGES @ 1646:6d1bbe7d5fa5 DROPBEAR_2019.77
2019.77
author | Matt Johnston <matt@ucc.asn.au> |
---|---|
date | Sat, 23 Mar 2019 21:46:29 +0800 |
parents | 2fd52c383163 |
children | 009d52ae26d3 |
comparison
equal
deleted
inserted
replaced
1645:0276c0f8c2b8 | 1646:6d1bbe7d5fa5 |
---|---|
1 2019.77 - 23 March 2019 | |
2 | |
3 - Fix server -R option with ECDSA - only advertise one key size which will be accepted. | |
4 Reported by Peter Krefting, 2018.76 regression. | |
5 | |
6 - Fix server regression in 2018.76 where multiple client -R forwards were all forwarded | |
7 to the first destination. Reported by Iddo Samet. | |
8 | |
9 - Make failure delay more consistent to avoid revealing valid usernames, set server password | |
10 limit of 100 characters. Problem reported by usd responsible disclosure team | |
11 | |
12 - Change handling of failed authentication to avoid disclosing valid usernames, | |
13 CVE-2018-15599. | |
14 | |
15 - Fix dbclient to reliably return the exit code from the remote server. | |
16 Reported by W. Mike Petullo | |
17 | |
18 - Fix export of 521-bit ECDSA keys, from Christian Hohnstädt | |
19 | |
20 - Add -o Port=xxx option to work with sshfs, from xcko | |
21 | |
22 - Merged fuzzing code, see FUZZER-NOTES.md | |
23 | |
24 - Add a DROPBEAR_SVR_MULTIUSER=0 compile option to run on | |
25 single-user Linux kernels (CONFIG_MULTIUSER disabled). From Patrick Stewart | |
26 | |
27 - Increase allowed username to 100 characters, reported by W. Mike Petullo | |
28 | |
29 - Update config.sub and config.guess, should now work with RISC-V | |
30 | |
31 - Cygwin compile fix from karel-m | |
32 | |
33 - Don't require GNU sed (accidentally in 2018.76), reported by Samuel Hsu | |
34 | |
35 - Fix for IRIX and writev(), reported by Kazuo Kuroi | |
36 | |
37 - Other fixes and cleanups from François Perrad, Andre McCurdy, Konstantin Demin, | |
38 Michael Jones, Pawel Rapkiewicz | |
39 | |
40 | |
1 2018.76 - 27 February 2018 | 41 2018.76 - 27 February 2018 |
2 | 42 |
3 > > > Configuration/compatibility changes | 43 > > > Configuration/compatibility changes |
4 IMPORTANT | 44 IMPORTANT |
5 Custom configuration is now specified in localoptions.h rather than options.h | 45 Custom configuration is now specified in localoptions.h rather than options.h |