|author||Andreas Schneider <email@example.com>||2015-05-06 11:00:43 +0200|
|committer||Andreas Schneider <firstname.lastname@example.org>||2015-05-06 11:00:43 +0200|
Signed-off-by: Andreas Schneider <email@example.com>
Diffstat (limited to 'ChangeLog')
1 files changed, 63 insertions, 1 deletions
@@ -1,16 +1,78 @@
-version 0.6.0 (released 2013-XX-XX)
+version 0.7.0 (released 2015-05-xx)
+ * Added support for ed25519 keys
+ * Added SHA2 algorithms for HMAC
+ * Added improved and more secure buffer handling code
+ * Added callback for auth_none_function
+ * Added support for ECDSA private key signing
+ * Added more tests
+ * Fixed a lot of bugs
+ * Improved API documentation
+version 0.6.5 (released 2015-04-29)
+ * Fixed CVE-2015-3146
+ * Fixed port handling in config file
+ * Fixed the build with libgcrypt
+ * Fixed SFTP endian issues (rlo #179)
+ * Fixed uninitilized sig variable (rlo #167)
+ * Fixed polling issues which could result in a hang
+ * Fixed handling of EINTR in ssh_poll() (rlo #186)
+ * Fixed C99 issues with __func__
+ * Fixed some memory leaks
+ * Improved macro detection on Windows
+version 0.6.4 (released 2014-12-19)
+ * Fixed CVE-2014-8132.
+ * Added SHA-2 for session ID signing with ECDSA keys.
+ * Added support for ECDSA host keys.
+ * Added support for more ECDSA hostkey algorithms.
+ * Added ssh_pki_key_ecdsa_name() API.
+ * Fixed setting the bindfd only after successful listen.
+ * Fixed issues with user created sockets.
+ * Fixed several issues in libssh C++ wrapper.
+ * Fixed several documentation issues.
+ * Fixed channel exit-signal request.
+ * Fixed X11 request screen number in messages.
+ * Fixed several memory leaks.
+version 0.6.3 (released 2014-03-04)
+ * Fixed CVE-2014-0017.
+ * Fixed memory leak with ecdsa signatures.
+version 0.6.2 (released 2014-03-04)
+ * security: fix for vulnerability CVE-2014-0017
+version 0.6.1 (released 2014-02-08)
+ * Added support for libgcrypt 1.6.
+ * Added ssh_channel_accept_forward().
+ * Added known_hosts heuristic during connection (#138).
+ * Added getters for session cipher names.
+ * Fixed decrypt of zero length buffer.
+ * Fixed padding in RSA signature blobs.
+ * Fixed DSA signature extraction.
+ * Fixed some memory leaks.
+ * Fixed read of non-connected socket.
+ * Fixed thread dectection.
+version 0.6.0 (released 2014-01-08)
* Added new publicy key API.
* Added new userauth API.
+ * Added ssh_get_publickey_hash() function.
+ * Added ssh_get_poll_flags() function.
* Added gssapi-mic userauth.
+ * Added GSSAPIServerIdentity option.
+ * Added GSSAPIClientIdentity option.
+ * Added GSSAPIDelegateCredentials option.
* Added new callback based server API.
* Added Elliptic Curve DSA (ECDSA) support (with OpenSSL).
* Added Elliptic Curve Diffie Hellman (ECDH) support.
+ * Added Curve25519 for ECDH key exchange.
* Added improved logging system.
* Added SSH-agent forwarding.
* Added key-reexchange.
+ * Added more unit tests.
* Improved documentation.
* Fixed timeout handling.