Commit Graph

Select branches

Hide Pull Requests

master

master-fix

stable-0.10

stable-0.11

stable-0.8

stable-0.9

v0-2

v0-3

v0-4

v0-5

v0-6

v0-7

libssh-0.10.0

libssh-0.10.2

libssh-0.10.3

libssh-0.10.4

libssh-0.10.5

libssh-0.10.6

libssh-0.11.0

libssh-0.11.1

libssh-0.11.2

libssh-0.11.3

libssh-0.11.4

libssh-0.12.0

libssh-0.5.1

libssh-0.5.2

libssh-0.5.3

libssh-0.5.4

libssh-0.5.5

libssh-0.6.0

libssh-0.6.1

libssh-0.6.3

libssh-0.6.4

libssh-0.6.5

libssh-0.7.0

libssh-0.7.1

libssh-0.7.2

libssh-0.7.3

libssh-0.7.4

libssh-0.7.5

libssh-0.7.6

libssh-0.7.7

libssh-0.8.0

libssh-0.8.1

libssh-0.8.2

libssh-0.8.3

libssh-0.8.4

libssh-0.8.5

libssh-0.8.6

libssh-0.8.7

libssh-0.8.8

libssh-0.8.9

libssh-0.9.0

libssh-0.9.1

libssh-0.9.2

libssh-0.9.3

libssh-0.9.4

libssh-0.9.5

libssh-0.9.6

libssh-0.9.7

libssh-0.9.8

release-0-3-0

release-0-3-1

release-0-3-2

release-0-3-3

release-0-3-4

release-0-4-0

release-0-4-1

release-0-4-2

release-0-4-3

release-0-4-4

release-0-4-5

release-0-4-6

release-0-4-7

release-0-4-8

release-0-5-0

Mono Color

• 729a44e121 ci: Skip macos jobs on forks master Jakub Jelen 2026-03-11 11:41:55 +01:00
• 051ac812db examples: Add warning about example code Jakub Jelen 2026-03-05 18:09:12 +01:00
• 01772c4f79 pki: add ssh_key_type_and_hash_from_signature_name() Haythem666 2026-03-13 16:03:58 +01:00
• 9f7c596ca5 tests: add coverage for NULL session in ssh_channel_is_open Manas Trivedi 2026-03-21 04:16:57 +00:00
• 34bbb48561 channels: add NULL session check in ssh_channel_is_open Manas Trivedi 2026-03-20 18:06:23 +00:00
• f060583d6f tests: Generate coverage for fuzzing tests Jakub Jelen 2026-03-17 10:28:34 +01:00
• a05b2b76be tests: initialize sftp test pointers to NULL Bulitha Kawushika De Zoysa 2026-03-18 10:59:55 +05:30
• c9f34ac55f sftp: Add support for the users-groups-by-id@openssh.com OpenSSH extension on the server side. Bulitha Kawushika De Zoysa 2026-03-18 10:48:39 +05:30
• bc24bba176 docs: Add documentation for test_server functions Ahmed hossam 2026-03-16 22:43:11 +02:00
• 3154a4ab8d sftpserver: Fix client messages being ignored if sent at a high rate Colin Baumgarten 2026-03-11 16:08:54 +01:00
• 9478de8082 doc: add missing Doxygen comments and fix documentation style Sudharshan Hegde 2026-03-10 18:16:42 +05:30
• e927820082 Make headers self-contained and include-order independent Shreyas Mahajan 2026-02-09 23:36:31 +05:30
• 67950c620d misc: Reformat struct ssh_list members to use 4-space indentation ShreyasMahajann 2026-03-12 03:31:02 +05:30
• 31ea4d1213 tests: Negative tests for ssh_pki_ctx_options_set Jakub Jelen 2026-03-12 15:19:56 +01:00
• 29c503ed7c tests: Remove needless reset to NULL Jakub Jelen 2026-03-12 14:41:01 +01:00
• b1a28f7987 tests: Use the new ssh_pki_generate_key() where possible Jakub Jelen 2026-03-12 14:40:34 +01:00
• 616d165f14 pki_context: Document 0 is valid for bit size (default) Jakub Jelen 2026-03-16 18:19:10 +01:00
• b9ecb9283e pki_context: Allow using minimal RSA key size in new API Jakub Jelen 2026-03-12 14:39:23 +01:00
• c38edb59f2 examples: Avoid using deprecated ssh_pki_generate Jakub Jelen 2026-03-12 12:36:58 +01:00
• def7a679f8 examples: Use separate variable for exit code Jakub Jelen 2026-03-16 18:20:46 +01:00
• 6f671919ad examples: Use separate variable for fd Jakub Jelen 2026-03-16 18:20:25 +01:00
• 45b1d85fb0 fuzz: Add debugging hints to readme Jakub Jelen 2026-03-04 17:37:59 +01:00
• e7f4cc9580 knownhosts: Avoid possible memory leak on failed malloc Jakub Jelen 2026-03-04 17:37:39 +01:00
• 5479b276b2 Use ARRAY_SIZE systematically Jakub Jelen 2026-03-05 21:04:34 +01:00
• 5d7fbcf22a Fix line endings in sftp_attr_fuzzer Jakub Jelen 2026-03-05 21:05:58 +01:00
• 123c442a56 tests: Reformat torture_buffer Jakub Jelen 2026-03-05 22:21:14 +01:00
• 4dfcdd96b8 OSS-Fuzz: Add fuzzer for scp functions Arthur Chan 2026-02-24 10:44:49 +00:00
• 9d36b9dd81 docs: add doxygen documentation and fix inconsistencies Emmanuel Ugwu 2026-03-11 00:26:12 +01:00
• afa21334b4 tests: Add tests for originalhost/host separation and Match support Rui Li 2026-03-10 17:49:10 -07:00
• a2ebc7ea9b Implement originalhost/host separation and Match support Rui Li 2026-03-10 17:28:31 -07:00
• 1ab8a35c5d Add strict validation mode to ssh_config_parse_uri in config_parser Rui Li 2026-03-06 21:31:44 -08:00
• 8782fcec18 agent: Add support for SSH2_AGENTC_REMOVE_IDENTITY Madhav Vasisth 2026-02-14 12:06:25 +00:00
• 8d563f90f3 Add more krb5-related Valgrind suppressions Pavol Žáčik 2026-03-06 09:21:12 +01:00
• 6a5e298cec Log more useful information to be able to troubleshoot sftp server Jakub Jelen 2026-02-24 13:22:16 +01:00
• 163e1b059b Expansion of %s expansion is no longer happening. Jan Pazdziora 2026-03-05 12:01:07 +01:00
• e16018491e Add casts to a couple more pack size constants in hybrid_mlkem.c Michael Hansen 2026-03-05 08:26:55 -08:00
• c26e9298e3 Fix parameter size mismatch in ssh_buffer_pack for hybrid_mlkem.c Michael Hansen 2026-03-04 11:10:48 -08:00
• 3c0567cb67 docs: Fix struct field comment positioning for Doxygen Shiva Kiran Koninty 2026-02-26 19:26:06 +05:30
• 00d1903bf6 doc: Document sftp_attributes_struct Shiva Kiran Koninty 2026-02-24 22:37:16 +05:30
• bc2a483aa1 headers: add missing stdint/stddef includes Himaneesh Mishra 2026-02-22 15:19:57 -05:00
• 5ad8dda6f6 buffer: Remove support for format specifier 'F' in ssh_buffer_pack() Shiva Kiran Koninty 2026-02-24 20:34:24 +05:30
• d680b8ea8a sntrup: Remove needless conversion of shared secret to bignum Shiva Kiran Koninty 2026-02-23 10:42:56 +05:30
• 90b07e2c18 refactor(server): Warn about config override behavior in bind APIs Francesco Rollo 2026-02-17 15:31:29 +01:00
• edbd929fa2 feat(server): Add support for -o option argument in server example Francesco Rollo 2024-08-20 11:32:10 +02:00
• 38932b74c0 docs: reduce Doxygen warnings in libsshpp.hpp Himaneesh Mishra 2026-01-14 22:21:02 -05:00
• 60d6179eaa tests: Add opendir handle exhaustion test for sftpserver Mingyuan Li 2026-02-23 23:31:56 +08:00
• 0d9b2c68cc sftpserver: Fix memory leak of h->name in process_opendir error path Mingyuan Li 2026-02-23 23:31:34 +08:00
• adc2462329 docs: clarify ssh-agent API usage and lifecycle Madhav Vasisth 2026-01-29 16:18:09 +00:00
• 0bff33c790 gss-kex: Fix memory leaks in ssh_gssapi_check_client_config Pavol Žáčik 2026-02-13 11:34:32 +01:00
• 47e9b5536a gss-kex: Release output_token and mic on error paths Pavol Žáčik 2026-02-13 11:24:13 +01:00
• 2f1f474e27 gssapi: Free both_supported on a new error path Pavol Žáčik 2026-02-13 10:16:21 +01:00
• 18d7a3967c tests: Add interoperability tests against TinySSH Bulitha Kawushika De Zoysa 2026-02-07 13:43:55 +05:30
• d45ce10c83 channels: Fix OOM error check after strdup Antoni Bertolin Monferrer 2025-12-11 21:42:16 +01:00
• a7fd80795e Update recently added logging to be less verbose Pavol Žáčik 2026-02-19 10:03:28 +01:00
• f8cba20859 Add back Security section to 0.12.0 changelog Jakub Jelen 2026-02-12 14:54:06 +01:00
• f13a8d7ced OSS-Fuzz Add fuzzer and corpora for sftp attr parsing Arthur Chan 2026-01-28 09:44:11 +00:00
• c0963b3417 SSH2 NONE authentication Shreyas Mahajan 2026-02-07 00:29:24 +05:30
• 50313883f3 libssh-0.12.0 libssh-0.12.0 Jakub Jelen 2026-01-08 21:37:11 +01:00
• 7e02580dff Copy changelog + ABI files from last minor releases Jakub Jelen 2026-01-21 12:35:24 +01:00
• 3232d72812 fix typos Jakub Jelen 2026-02-09 12:22:57 +01:00
• 60ad19c2c8 misc: Fix possible NULL dereference Jakub Jelen 2026-02-09 10:50:19 +01:00
• ca9c055d7c libssh-0.11.4 libssh-0.11.4 stable-0.11 Jakub Jelen 2026-02-06 10:11:42 +01:00
• c53b0ef3ec CVE-2025-14821 cmake: Fix global config location on Windows Andreas Schneider 2025-11-21 08:14:38 +01:00
• f49b4442a9 cmake: Reformat DefineOptions.cmake with cmake-format Andreas Schneider 2025-11-21 08:05:59 +01:00
• a5e4b12090 CVE-2026-0964 scp: Reject invalid paths received through scp Jakub Jelen 2025-12-22 19:16:44 +01:00
• bf390a0426 CVE-2026-0965 config: Do not attempt to read non-regular and too large configuration files Jakub Jelen 2025-12-11 17:33:19 +01:00
• 3e1d276a5a CVE-2026-0966 doc: Update guided tour to use SHA256 fingerprints Jakub Jelen 2026-01-08 12:10:44 +01:00
• b156391833 CVE-2026-0966 tests: Test coverage for ssh_get_hexa Jakub Jelen 2026-01-08 12:10:16 +01:00
• 6ba5ff1b7b CVE-2026-0966 misc: Avoid heap buffer underflow in ssh_get_hexa Jakub Jelen 2026-01-08 12:09:50 +01:00
• 6d74aa6138 CVE-2026-0967 match: Avoid recursive matching (ReDoS) Jakub Jelen 2025-12-17 18:48:34 +01:00
• 212121971f CVE-2026-0968 tests: Reproducer for invalid longname data Jakub Jelen 2025-12-22 21:00:03 +01:00
• 796d85f786 CVE-2026-0968: sftp: Sanitize input handling in sftp_parse_longname() Jakub Jelen 2025-12-22 20:59:11 +01:00
• 4c0c4ea32e sftp: Initialize pointers Jakub Jelen 2025-12-22 20:05:59 +01:00
• 02c6f5f7ec Reproducer for out of bounds read of SFTP extensions Jakub Jelen 2025-12-11 13:21:23 +01:00
• f80670a7ab sftp: Fix out-of-bound read from sftp extensions Jakub Jelen 2025-12-11 13:22:44 +01:00
• 829fae6404 sftp: Reformat sftp_extensions_* API Jakub Jelen 2025-12-10 19:27:58 +01:00
• 74670207bf connector: Fix sftp aio read/write with ProxyJump Eshan Kelkar 2025-08-14 12:35:43 +05:30
• e34e6c8c94 sftp: Remove needless newline from log messages Jakub Jelen 2026-01-16 19:10:48 +01:00
• 7ecca1fd26 auth: Log the username used for authentication Jakub Jelen 2026-01-16 16:35:14 +01:00
• dbb4c4cc11 bugfix: test presence of before_connection before dereferencing Eshan Kelkar 2025-08-18 17:15:57 -05:00
• ce4c81c614 Reproducer for memory leak from parsing knonw hosts Jakub Jelen 2026-01-15 11:57:23 +01:00
• 441dfa5327 knownhosts: Avoid memory leaks on invalid entries Jakub Jelen 2026-01-15 11:32:51 +01:00
• c4681304cc cmake: Propagate WITH_FINAL to abimap conditionally Jakub Jelen 2026-01-22 22:47:30 +01:00
• 1887c9dbcd Require abimap 0.4.0 Jakub Jelen 2026-01-22 22:44:41 +01:00
• 9e2ec491de tests: Workaround softhsm-2.7.0 bug in hashed ECDSA Jakub Jelen 2026-01-21 17:55:25 +01:00
• ee1f7293cf ci: Use pkcs11-provider on c9s Jakub Jelen 2026-01-09 17:47:18 +01:00
• 8e85a1067c pki: Improve documentation about pubkey import functions Jakub Jelen 2026-01-05 14:13:32 +01:00
• cc1a811ae5 connect: Avoid calling close with negative argument Jakub Jelen 2026-01-07 13:25:25 +01:00
• 463665db9d connect: Close possibly leaking socket Jakub Jelen 2025-12-16 17:22:27 +01:00
• 20d78046aa socket: Properly close the proxyjump FD when proxy connection fails Jakub Jelen 2025-10-14 22:52:14 +02:00
• 6a7f19ec34 CVE-2025-14821 cmake: Fix global config location on Windows Andreas Schneider 2025-11-21 08:14:38 +01:00
• 12ccea8dd8 cmake: Reformat DefineOptions.cmake with cmake-format Andreas Schneider 2025-11-21 08:05:59 +01:00
• daa80818f8 CVE-2026-0964 scp: Reject invalid paths received through scp Jakub Jelen 2025-12-22 19:16:44 +01:00
• a5eb30dbfd CVE-2026-0965 config: Do not attempt to read non-regular and too large configuration files Jakub Jelen 2025-12-11 17:33:19 +01:00
• 1b2a4f760b CVE-2026-0966 doc: Update guided tour to use SHA256 fingerprints Jakub Jelen 2026-01-08 12:10:44 +01:00
• 9be83584a5 CVE-2026-0966 tests: Test coverage for ssh_get_hexa Jakub Jelen 2026-01-08 12:10:16 +01:00
• 417a095e67 CVE-2026-0966 misc: Avoid heap buffer underflow in ssh_get_hexa Jakub Jelen 2026-01-08 12:09:50 +01:00
• a411de5ce8 CVE-2026-0967 match: Avoid recursive matching (ReDoS) Jakub Jelen 2025-12-17 18:48:34 +01:00
• 90a5d8f473 CVE-2026-0968 tests: Reproducer for invalid longname data Jakub Jelen 2025-12-22 21:00:03 +01:00
• 20856f44c1 CVE-2026-0968: sftp: Sanitize input handling in sftp_parse_longname() Jakub Jelen 2025-12-22 20:59:11 +01:00