# HG changeset patch
# User Matt Johnston <matt@ucc.asn.au>
# Date 1553348789 -28800
# Node ID 6d1bbe7d5fa5827c7eae28bca044d691f7efa785
# Parent  0276c0f8c2b8f66ac1e481561594d4e659ac140e
2019.77

diff -r 0276c0f8c2b8 -r 6d1bbe7d5fa5 CHANGES
--- a/CHANGES	Sat Mar 23 21:45:00 2019 +0800
+++ b/CHANGES	Sat Mar 23 21:46:29 2019 +0800
@@ -1,3 +1,43 @@
+2019.77 - 23 March 2019
+
+- Fix server -R option with ECDSA - only advertise one key size which will be accepted.
+  Reported by Peter Krefting, 2018.76 regression.
+
+- Fix server regression in 2018.76 where multiple client -R forwards were all forwarded 
+  to the first destination. Reported by Iddo Samet.
+
+- Make failure delay more consistent to avoid revealing valid usernames, set server password 
+  limit of 100 characters. Problem reported by usd responsible disclosure team
+
+- Change handling of failed authentication to avoid disclosing valid usernames,
+  CVE-2018-15599. 
+
+- Fix dbclient to reliably return the exit code from the remote server.
+  Reported by W. Mike Petullo
+
+- Fix export of 521-bit ECDSA keys, from Christian Hohnstädt
+
+- Add -o Port=xxx option to work with sshfs, from xcko
+
+- Merged fuzzing code, see FUZZER-NOTES.md
+
+- Add a DROPBEAR_SVR_MULTIUSER=0 compile option to run on 
+  single-user Linux kernels (CONFIG_MULTIUSER disabled). From Patrick Stewart
+
+- Increase allowed username to 100 characters, reported by W. Mike Petullo
+
+- Update config.sub and config.guess, should now work with RISC-V
+
+- Cygwin compile fix from karel-m
+
+- Don't require GNU sed (accidentally in 2018.76), reported by Samuel Hsu
+
+- Fix for IRIX and writev(), reported by Kazuo Kuroi
+
+- Other fixes and cleanups from François Perrad, Andre McCurdy, Konstantin Demin,
+  Michael Jones, Pawel Rapkiewicz
+
+
 2018.76 - 27 February 2018
 
 > > > Configuration/compatibility changes
diff -r 0276c0f8c2b8 -r 6d1bbe7d5fa5 debian/changelog
--- a/debian/changelog	Sat Mar 23 21:45:00 2019 +0800
+++ b/debian/changelog	Sat Mar 23 21:46:29 2019 +0800
@@ -1,3 +1,9 @@
+dropbear (2019.77-0.1) unstable; urgency=low
+
+  * New upstream release.
+
+ -- Matt Johnston <matt@ucc.asn.au>  Sat, 23 Mar 2019 22:51:57 +0800
+
 dropbear (2018.76-0.1) unstable; urgency=low
 
   * New upstream release.
diff -r 0276c0f8c2b8 -r 6d1bbe7d5fa5 sysoptions.h
--- a/sysoptions.h	Sat Mar 23 21:45:00 2019 +0800
+++ b/sysoptions.h	Sat Mar 23 21:46:29 2019 +0800
@@ -4,7 +4,7 @@
  *******************************************************************/
 
 #ifndef DROPBEAR_VERSION
-#define DROPBEAR_VERSION "2018.76"
+#define DROPBEAR_VERSION "2019.77"
 #endif
 
 #define LOCAL_IDENT "SSH-2.0-dropbear_" DROPBEAR_VERSION