comparison CHANGES @ 297:79bf1023cf11 agent-client

propagate from branch 'au.asn.ucc.matt.dropbear' (head 0501e6f661b5415eb76f3b312d183c3adfbfb712) to branch 'au.asn.ucc.matt.dropbear.cli-agent' (head 01038174ec27245b51bd43a66c01ad930880f67b)
author Matt Johnston <matt@ucc.asn.au>
date Tue, 21 Mar 2006 16:20:59 +0000
parents 03f65e461915
children bfa09e369e0e
comparison
equal deleted inserted replaced
225:ca7e76d981d9 297:79bf1023cf11
1 0.48.1 - Sat 11 March 2006
2
3 - Compile fix for scp
4
5 0.48 - Thurs 9 March 2006
6
7 - Check that the circular buffer is properly empty before
8 closing a channel, which could cause truncated transfers
9 (thanks to Tomas Vanek for helping track it down)
10
11 - Implement per-IP pre-authentication connection limits
12 (after some poking from Pablo Fernandez)
13
14 - Exit gracefully if trying to connect to as SSH v1 server
15 (reported by Rushi Lala)
16
17 - Only read /dev/random once at startup when in non-inetd mode
18
19 - Allow ctrl-c to close a dbclient password prompt (may
20 still have to press enter on some platforms)
21
22 - Merged in uClinux patch for inetd mode
23
24 - Updated to scp from OpenSSH 4.3p2 - fixes a security issue
25 where use of system() could cause users to execute arbitrary
26 code through malformed filenames, ref CVE-2006-0225
27
28 0.47 - Thurs Dec 8 2005
29
30 - SECURITY: fix for buffer allocation error in server code, could potentially
31 allow authenticated users to gain elevated privileges. All multi-user systems
32 running the server should upgrade (or apply the patch available on the
33 Dropbear webpage).
34
35 - Fix channel handling code so that redirecting to /dev/null doesn't use
36 100% CPU.
37
38 - Turn on zlib compression for dbclient.
39
40 - Set "low delay" TOS bit, can significantly improve interactivity
41 over some links.
42
43 - Added client keyboard-interactive mode support, allows operation with
44 newer OpenSSH servers in default config.
45
46 - Log when pubkey auth fails because of bad ~/.ssh/authorized_keys permissions
47
48 - Improve logging of assertions
49
50 - Added aes-256 cipher and sha1-96 hmac.
51
52 - Fix twofish so that it actually works.
53
54 - Improve PAM prompt comparison.
55
56 - Added -g (dbclient) and -a (dropbear server) options to allow
57 connections to listening forwarded ports from remote machines.
58
59 - Various other minor fixes
60
61 - Compile fixes for glibc 2.1 (ss_family vs __ss_family) and NetBSD
62 (netinet/in_systm.h needs to be included).
63
1 0.46 - Sat July 9 2005 64 0.46 - Sat July 9 2005
2 65
3 - Fix long-standing bug which caused connections to be closed if an ssh-agent 66 - Fix long-standing bug which caused connections to be closed if an ssh-agent
4 socket was no longer available 67 socket was no longer available
5 68