Anderson Toshiyuki Sasaki 00dd3f864b CVE-2019-14889: scp: Log SCP warnings received from the server ...

Fixes T181

Previously, warnings received from the server were ignored.  With this
change the warning message sent by the server will be logged.

Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
(cherry picked from commit c75d417d06)

2019-12-09 16:38:36 +01:00

..

ABI

src: Add missing ABI files

2019-11-07 16:19:45 +01:00

external

ed25519: Replace unsigned long long with uint64_t

2019-06-14 15:22:45 +02:00

threads

libcrypto: Fix access violation in ssh_init()

2018-11-30 18:26:55 +01:00

agent.c

agent: Use SHA2 signatures also for RSA certificates

2019-06-13 11:00:56 +02:00

auth.c

auth: Set auto_state->state explicitly

2019-12-09 16:38:35 +01:00

base64.c

Remove vim modelines from all files

2018-06-28 08:41:08 +02:00

bignum.c

bignum: Pass const to ssh_print_bignum()

2019-08-08 09:45:36 +02:00

bind_config.c

bind_config: Fail if a known option couldn't be set

2019-06-12 10:17:54 +02:00

bind.c

Use only one variable denoting the size of methods arrays

2019-12-09 16:38:36 +01:00

buffer.c

buffer: Simplify handling of the return codes

2019-09-30 16:00:30 +02:00

callbacks.c

callbacks: Implement list of callbacks for channels

2016-05-02 16:56:54 +02:00

chachapoly.c

Replace ssh_print_hexa() with ssh_log_hexdump()

2019-08-08 09:44:18 +02:00

channels.c

channels: Initialize states explicitly

2019-12-09 16:38:35 +01:00

client.c

SSH_LOG: Adjust log level from SSH_LOG_WARNING to SSH_LOG_PROTOCOL

2019-06-13 16:43:44 +02:00

CMakeLists.txt

cmake: Fix building libssh as a static lib on Windows

2019-11-18 11:38:27 +01:00

config_parser.c

config: Move common parser functions to config_parser.c

2019-04-01 08:25:22 +02:00

config.c

config: Support match localuser

2019-09-30 15:58:57 +02:00

connect.c

connect: Code style formatting

2019-06-27 10:37:46 +02:00

connector.c

connector: Stop socket-to-channel EOF flooding

2019-04-29 13:16:54 +02:00

curve25519.c

server: Use really the negotiated signature type

2019-11-07 16:14:46 +01:00

dh_crypto.c

dh: Add ssh_dh_debug_crypto()

2019-08-08 09:45:38 +02:00

dh_key.c

dh: Add ssh_dh_debug_crypto()

2019-08-08 09:45:38 +02:00

dh-gex.c

dh-gex: Correctly free modulus and generator with openssl

2019-09-30 16:00:09 +02:00

dh.c

server: Use really the negotiated signature type

2019-11-07 16:14:46 +01:00

ecdh_crypto.c

server: Use really the negotiated signature type

2019-11-07 16:14:46 +01:00

ecdh_gcrypt.c

server: Use really the negotiated signature type

2019-11-07 16:14:46 +01:00

ecdh_mbedcrypto.c

server: Use really the negotiated signature type

2019-11-07 16:14:46 +01:00

ecdh.c

kex: use runtime callbacks (server)

2019-01-24 09:19:59 +01:00

error.c

error: Add ssh_reset_error() function

2018-08-27 11:29:18 +02:00

gcrypt_missing.c

dh: Do some basic refactoring

2019-01-24 11:56:23 +01:00

getpass.c

getpass: Use explicit_bzero()

2018-09-04 19:57:31 +02:00

gssapi.c

gssapi: Add missing malloc checks

2019-04-29 13:17:21 +02:00

gzip.c

gzip: Add missing NULL check

2019-05-28 09:18:52 +02:00

init.c

libcrypto: detect non matching headers/shared lib

2018-11-21 16:54:15 +01:00

kdf.c

Use a common KDF function

2019-03-07 12:03:32 +01:00

kex.c

Use only one variable denoting the size of methods arrays

2019-12-09 16:38:36 +01:00

known_hosts.c

known_hosts: Avoid using deprecated functions (even from deprecated functions)

2019-09-30 15:42:26 +02:00

knownhosts.c

knownhosts: Use ssh_mkdirs() instead of ssh_mkdir()

2019-08-08 09:45:08 +02:00

legacy.c

legacy: Fix possible null pointer dereference

2018-10-24 09:48:35 +02:00

libcrypto-compat.c

dh: Add compat function for openssl < 1.1.0

2019-04-04 08:00:31 +02:00

libcrypto-compat.h

dh: Add compat function for openssl < 1.1.0

2019-04-04 08:00:31 +02:00

libcrypto.c

libcrypto: Avoid incompatible pointers

2019-08-08 09:44:54 +02:00

libgcrypt.c

wrapper: Make sha{1, 256, 384, 512}() input const

2019-05-13 16:37:51 +02:00

libmbedcrypto.c

wrapper: Make sha{1, 256, 384, 512}() input const

2019-05-13 16:37:51 +02:00

libssh.map

Bump SO version to 4.8.1

2019-06-14 15:22:56 +02:00

log.c

log: Make sure the buffer for date is big enough

2018-08-20 18:42:03 +02:00

match.c

config: Parse Match keyword

2018-09-05 11:43:05 +02:00

mbedcrypto_missing.c

bignum: Pass const to ssh_print_bignum()

2019-08-08 09:45:36 +02:00

messages.c

messages: Set signature state explicitly

2019-12-09 16:38:35 +01:00

misc.c

misc: Allow %% to escape a single % in paths.

2019-08-08 10:36:50 +02:00

options.c

Use only one variable denoting the size of methods arrays

2019-12-09 16:38:36 +01:00

packet_cb.c

kex: use runtime callbacks (client)

2019-01-24 09:11:30 +01:00

packet_crypt.c

packet_crypt: Avoid out of bounds access in debug functions

2019-10-25 16:11:17 +02:00

packet.c

packet: Do not deref a NULL pointer in ssh_packet_set_newkeys()

2019-12-09 16:38:36 +01:00

pcap.c

pcap: Correctly initialize sockaddr_in in ssh_pcap_context_set_file()

2019-01-22 13:12:25 +01:00

pki_container_openssh.c

pki_crypto: Use OpenSSL for Ed25519 signatures

2019-09-30 16:57:23 +02:00

pki_crypto.c

pki_crypto: Support Ed25519 keys in PEM files

2019-09-30 16:58:07 +02:00

pki_ed25519_common.c

pki_crypto: Use OpenSSL for Ed25519 signatures

2019-09-30 16:57:23 +02:00

pki_ed25519.c

pki: Move common Ed25519 functions to pki_ed25519_common.c

2019-09-30 16:57:16 +02:00

pki_gcrypt.c

pki: Remove unused function pki_signature_verify()

2019-09-30 16:57:31 +02:00

pki_mbedcrypto.c

pki: Remove unused function pki_signature_verify()

2019-09-30 16:57:31 +02:00

pki.c

server: Use really the negotiated signature type

2019-11-07 16:14:46 +01:00

poll.c

ssh_event_dopoll can also return SSH_AGAIN

2019-02-27 08:17:53 +01:00

scp.c

CVE-2019-14889: scp: Log SCP warnings received from the server

2019-12-09 16:38:36 +01:00

server.c

Use only one variable denoting the size of methods arrays

2019-12-09 16:38:36 +01:00

session.c

Use only one variable denoting the size of methods arrays

2019-12-09 16:38:36 +01:00

sftp.c

sftp: Do not mix integer types

2019-06-14 15:22:45 +02:00

sftpserver.c

sftpserver: allocate packet on sftp_server_new

2018-09-25 16:41:54 +02:00

socket.c

socket: Do not process stderr of proxy commands (Fixes T130)

2019-06-24 15:41:53 +02:00

string.c

string: Don't allow to allocate strings bigger than 256M

2018-09-04 12:29:20 +02:00

threads.c

threads: Automatically call ssh_init on load

2018-08-03 16:43:03 +02:00

token.c

token: Added function to remove duplicates

2019-07-04 11:26:19 +02:00

wrapper.c

server: Use really the negotiated signature type

2019-11-07 16:14:46 +01:00