comparison CHANGES @ 399:a707e6148060

merge of '5fdf69ca60d1683cdd9f4c2595134bed26394834' and '6b61c50f4cf888bea302ac8fcf5dbb573b443251'
author Matt Johnston <matt@ucc.asn.au>
date Sat, 03 Feb 2007 08:20:34 +0000
parents bfa09e369e0e
children 67689b7ceaf0
comparison
equal deleted inserted replaced
394:17d097fc111c 399:a707e6148060
1 0.49 - Tues 13 June 2003
2
3 - Return immediately for "sleep 10 & echo foo", rather than waiting
4 for the sleep to return (pointed out by Rob Landley)
5
6 - Added -P pidfile argument to the server (from Swen Schillig)
7
8 - Compile fixes, make sure that all variable definitions are at the start
9 of a scope.
10
11 - Use $HOME in preference to that from /etc/passwd, so that it
12 dbclient can still work on systems with a broken setup.
13
14 - Add -N dbclient option for "no command"
15
16 - Add -f dbclient option for "background after auth"
17
18 - Try to finally fix ss_family compilation problems
19
20 0.48.1 - Sat 11 March 2006
21
22 - Compile fix for scp
23
24 0.48 - Thurs 9 March 2006
25
26 - Check that the circular buffer is properly empty before
27 closing a channel, which could cause truncated transfers
28 (thanks to Tomas Vanek for helping track it down)
29
30 - Implement per-IP pre-authentication connection limits
31 (after some poking from Pablo Fernandez)
32
33 - Exit gracefully if trying to connect to as SSH v1 server
34 (reported by Rushi Lala)
35
36 - Only read /dev/random once at startup when in non-inetd mode
37
38 - Allow ctrl-c to close a dbclient password prompt (may
39 still have to press enter on some platforms)
40
41 - Merged in uClinux patch for inetd mode
42
43 - Updated to scp from OpenSSH 4.3p2 - fixes a security issue
44 where use of system() could cause users to execute arbitrary
45 code through malformed filenames, ref CVE-2006-0225
46
47 0.47 - Thurs Dec 8 2005
48
49 - SECURITY: fix for buffer allocation error in server code, could potentially
50 allow authenticated users to gain elevated privileges. All multi-user systems
51 running the server should upgrade (or apply the patch available on the
52 Dropbear webpage).
53
54 - Fix channel handling code so that redirecting to /dev/null doesn't use
55 100% CPU.
56
57 - Turn on zlib compression for dbclient.
58
59 - Set "low delay" TOS bit, can significantly improve interactivity
60 over some links.
61
62 - Added client keyboard-interactive mode support, allows operation with
63 newer OpenSSH servers in default config.
64
65 - Log when pubkey auth fails because of bad ~/.ssh/authorized_keys permissions
66
67 - Improve logging of assertions
68
69 - Added aes-256 cipher and sha1-96 hmac.
70
71 - Fix twofish so that it actually works.
72
73 - Improve PAM prompt comparison.
74
75 - Added -g (dbclient) and -a (dropbear server) options to allow
76 connections to listening forwarded ports from remote machines.
77
78 - Various other minor fixes
79
80 - Compile fixes for glibc 2.1 (ss_family vs __ss_family) and NetBSD
81 (netinet/in_systm.h needs to be included).
82
1 0.46 - Sat July 9 2005 83 0.46 - Sat July 9 2005
2 84
3 - Fix long-standing bug which caused connections to be closed if an ssh-agent 85 - Fix long-standing bug which caused connections to be closed if an ssh-agent
4 socket was no longer available 86 socket was no longer available
5 87