| libssh2 1.10 |
| |
| This release includes the following enhancements and bugfixes: |
| |
| o adds agent forwarding support |
| o adds OpenSSH Agent support on Windows |
| o adds ECDSA key support using the Mbed TLS backend |
| o adds ECDSA cert authentication |
| o adds diffie-hellman-group14-sha256, diffie-hellman-group16-sha512, |
| diffie-hellman-group18-sha512 key exchanges |
| o adds support for PKIX key reading when using ed25519 with OpenSSL |
| o adds support for EWOULDBLOCK on VMS systems |
| o adds support for building with OpenSSL 3 |
| o adds support for using FIPS mode in OpenSSL |
| o adds debug symbols when building with MSVC |
| o adds support for building on the 3DS |
| o adds unicode build support on Windows |
| o restores os400 building |
| o increases min, max and opt Diffie Hellman group values |
| o improves portiablity of the make file |
| o improves timeout behavior with 2FA keyboard auth |
| o various improvements to the Wincng backend |
| o fixes reading parital packet replies when using an agent |
| o fixes Diffie Hellman key exchange on Windows 1903+ builds |
| o fixes building tests with older versions of OpenSSL |
| o fixes possible multiple definition warnings |
| o fixes potential cast issues _libssh2_ecdsa_key_get_curve_type() |
| o fixes potential use after free if libssh2_init() is called twice |
| o improved linking when using Mbed TLS |
| o fixes call to libssh2_crypto_exit() if crypto hasn't been initialized |
| o fixes crash when loading public keys with no id |
| o fixes possible out of bounds read when exchanging keys |
| o fixes possible out of bounds read when reading packets |
| o fixes possible out of bounds read when opening an X11 connection |
| o fixes possible out of bounds read when ecdh host keys |
| o fixes possible hang when trying to read a disconnected socket |
| o fixes a crash when using the delayed compression option |
| o fixes read error with large known host entries |
| o fixes various warnings |
| o fixes various small memory leaks |
| o improved error handling, various detailed errors will now be reported |
| o builds are now using OSS-Fuzz |
| o builds now use autoreconf instead of a custom build script |
| o cmake now respects install directory |
| o improved CI backend |
| o updated HACKING-CRYPTO documentation |
| o use markdown file extensions |
| o improved unit tests |
| |
| This release would not have looked like this without help, code, reports and |
| advice from friends like these: |
| |
| katzer, Orgad Shaneh, mark-i-m, Zenju, axjowa, Thilo Schulz, |
| Etienne Samson, hlefebvre, seba30, Panos, jethrogb, Fabrice Fontaine, |
| Will Cosgrove, Daniel Stenberg, Michael Buckley, Wallace Souza Silva, |
| Romain-Geissler-1A, meierha, Tseng Jun, Thomas Klausner, Brendan Shanks, |
| Harry Sintonen, monnerat, Koutheir Attouchi, Marc Hörsken, yann-morin-1998, |
| Wez Furlong, TDi-jonesds, David Benjamin, Max Dymond, Igor Klevanets, |
| Viktor Szakats, Laurent Stacul, Mstrodl, Gabriel Smith, MarcT512, |
| Paul Capron, teottin, Tor Erik Ottinsen, Brian Inglis |
| |
| (40 contributors) |
