# HG changeset patch
# User Matt Johnston <matt@ucc.asn.au>
# Date 1115631109 0
# Node ID ca6a7c7a925c8790ee059eadbf952dc3e20fd4e4
# Parent  06e326daf16a6e828f9f76645be3349d38453496
Preparing for 0.46

diff -r 06e326daf16a -r ca6a7c7a925c CHANGES
--- a/CHANGES	Thu May 05 04:00:10 2005 +0000
+++ b/CHANGES	Mon May 09 09:31:49 2005 +0000
@@ -1,3 +1,24 @@
+0.46
+
+- Fix long-standing bug which caused connections to be closed if an ssh-agent
+  socket was no longer available
+
+- print a warning if we seem to be blocking on /dev/random 
+  (suggested by Paul Fox)
+
+- fixed a memory leak in DSS code (thanks to Boris Berezovsky for the patch)
+
+- dbclient -L no longer segfaults, allocate correct buffer size (thanks
+  to David Cook for reporting it)
+
+- added RSA blinding (recommended by Dan Kaminsky)
+
+- rearranged bignum reading/random generation code
+
+- Reset the non-blocking status on stderr and stdout as well as stdin,
+  fixes a problem where the shell running dbclient will exit (thanks to 
+  Brent Roman for reporting it)
+
 0.45 - Mon March 7 2005
 
 - Makefile no longer appends 'static' to statically linked binaries
diff -r 06e326daf16a -r ca6a7c7a925c TODO
--- a/TODO	Thu May 05 04:00:10 2005 +0000
+++ b/TODO	Mon May 09 09:31:49 2005 +0000
@@ -13,9 +13,9 @@
 
 - Binding to different interfaces
 
-- possible RSA blinding? need to check whether this is vuln to timing attacks
 - check PRNG
-- CTR mode, SSH_MSG_IGNORE sending to improve CBC security
+- CTR mode
+- SSH_MSG_IGNORE sending to improve CBC security
 - DH Group Exchange possibly, or just add group14 (whatever it's called today)
 
 - fix scp.c for IRIX