forked from openkylin/libssh2
63 lines
2.9 KiB
Plaintext
63 lines
2.9 KiB
Plaintext
|
libssh2 1.10
|
||
|
|
|
||
|
|
This release includes the following enhancements and bugfixes:
|
||
|
|
|
||
|
|
o adds agent forwarding support
|
||
|
|
o adds OpenSSH Agent support on Windows
|
||
|
|
o adds ECDSA key support using the Mbed TLS backend
|
||
|
|
o adds ECDSA cert authentication
|
||
|
|
o adds diffie-hellman-group14-sha256, diffie-hellman-group16-sha512,
|
||
|
|
diffie-hellman-group18-sha512 key exchanges
|
||
|
|
o adds support for PKIX key reading when using ed25519 with OpenSSL
|
||
|
|
o adds support for EWOULDBLOCK on VMS systems
|
||
|
|
o adds support for building with OpenSSL 3
|
||
|
|
o adds support for using FIPS mode in OpenSSL
|
||
|
|
o adds debug symbols when building with MSVC
|
||
|
|
o adds support for building on the 3DS
|
||
|
|
o adds unicode build support on Windows
|
||
|
|
o restores os400 building
|
||
|
|
o increases min, max and opt Diffie Hellman group values
|
||
|
|
o improves portiablity of the make file
|
||
|
|
o improves timeout behavior with 2FA keyboard auth
|
||
|
|
o various improvements to the Wincng backend
|
||
|
|
o fixes reading parital packet replies when using an agent
|
||
|
|
o fixes Diffie Hellman key exchange on Windows 1903+ builds
|
||
|
|
o fixes building tests with older versions of OpenSSL
|
||
|
|
o fixes possible multiple definition warnings
|
||
|
|
o fixes potential cast issues _libssh2_ecdsa_key_get_curve_type()
|
||
|
|
o fixes potential use after free if libssh2_init() is called twice
|
||
|
|
o improved linking when using Mbed TLS
|
||
|
|
o fixes call to libssh2_crypto_exit() if crypto hasn't been initialized
|
||
|
|
o fixes crash when loading public keys with no id
|
||
|
|
o fixes possible out of bounds read when exchanging keys
|
||
|
|
o fixes possible out of bounds read when reading packets
|
||
|
|
o fixes possible out of bounds read when opening an X11 connection
|
||
|
|
o fixes possible out of bounds read when ecdh host keys
|
||
|
|
o fixes possible hang when trying to read a disconnected socket
|
||
|
|
o fixes a crash when using the delayed compression option
|
||
|
|
o fixes read error with large known host entries
|
||
|
|
o fixes various warnings
|
||
|
|
o fixes various small memory leaks
|
||
|
|
o improved error handling, various detailed errors will now be reported
|
||
|
|
o builds are now using OSS-Fuzz
|
||
|
|
o builds now use autoreconf instead of a custom build script
|
||
|
|
o cmake now respects install directory
|
||
|
|
o improved CI backend
|
||
|
|
o updated HACKING-CRYPTO documentation
|
||
|
|
o use markdown file extensions
|
||
|
|
o improved unit tests
|
||
|
|
|
||
|
|
This release would not have looked like this without help, code, reports and
|
||
|
|
advice from friends like these:
|
||
|
|
|
||
|
|
katzer, Orgad Shaneh, mark-i-m, Zenju, axjowa, Thilo Schulz,
|
||
|
|
Etienne Samson, hlefebvre, seba30, Panos, jethrogb, Fabrice Fontaine,
|
||
|
|
Will Cosgrove, Daniel Stenberg, Michael Buckley, Wallace Souza Silva,
|
||
|
|
Romain-Geissler-1A, meierha, Tseng Jun, Thomas Klausner, Brendan Shanks,
|
||
|
|
Harry Sintonen, monnerat, Koutheir Attouchi, Marc Hörsken, yann-morin-1998,
|
||
|
|
Wez Furlong, TDi-jonesds, David Benjamin, Max Dymond, Igor Klevanets,
|
||
|
|
Viktor Szakats, Laurent Stacul, Mstrodl, Gabriel Smith, MarcT512,
|
||
|
|
Paul Capron, teottin, Tor Erik Ottinsen, Brian Inglis
|
||
|
|
|
||
|
|
(40 contributors)
|