Anderson Toshiyuki Sasaki 203818608a CVE-2018-10933: Introduced packet filtering ...

The packet filter checks required states for the incoming packets and
reject them if they arrived in the wrong state.

Fixes T101

Signed-off-by: Anderson Toshiyuki Sasaki <ansasaki@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>

2018-10-16 09:19:40 +02:00

..

ABI

cmake: Bump library version

2018-09-20 17:23:42 +02:00

external

chacha: remove re-declared type

2018-10-13 22:09:18 +02:00

threads

threads: Add Windows threads implementation

2018-08-03 16:43:03 +02:00

agent.c

SHA2 extension in the ssh-agent interface

2018-08-31 14:30:53 +02:00

auth.c

CVE-2018-10933: Introduce SSH_AUTH_STATE_AUTH_NONE_SENT

2018-10-16 09:19:40 +02:00

base64.c

Remove vim modelines from all files

2018-06-28 08:41:08 +02:00

bignum.c

add mbedtls crypto support

2017-12-28 11:17:39 +01:00

bind.c

Remove internal calls to ssh_init

2018-08-03 16:43:03 +02:00

buffer.c

buffer: Don't call va_end() twice

2018-09-20 16:35:04 +02:00

callbacks.c

callbacks: Implement list of callbacks for channels

2016-05-02 16:56:54 +02:00

chachapoly.c

chachapoly: Use a function instead of an extern variable

2018-06-30 14:37:04 +02:00

channels.c

CVE-2018-10933: Check channel state when OPEN_FAILURE arrives

2018-10-16 09:19:40 +02:00

client.c

dh: Add diffie-hellman-group18-sha512 support

2018-09-20 16:35:05 +02:00

CMakeLists.txt

cmake: Fix FindABIMap targets

2018-08-27 16:46:59 +02:00

config.c

config: Fix building without globbing support

2018-09-25 16:41:31 +02:00

connect.c

connect: Fix build warning on Windows

2018-09-25 16:41:31 +02:00

connector.c

connector: Add checks if file descriptor is a socket

2018-09-25 16:41:31 +02:00

curve25519.c

crytpo: Make sure we check return of ssh_get_random() correctly

2018-07-05 12:12:14 +02:00

dh.c

dh: Use ssh_get_fingerprint_hash() in ssh_print_hash()

2018-09-20 17:23:41 +02:00

ecdh_crypto.c

ecdh: fix SSH_MSG_KEXDH_REPLY for libcrypto

2018-06-27 21:25:24 +02:00

ecdh_gcrypt.c

ecdh: fix SSH_MSG_KEXDH_REPLY for libgcrypt

2018-06-27 21:25:26 +02:00

ecdh_mbedcrypto.c

mbedtls: Use getter for ssh_mbedtls_ctr_drbg

2018-08-20 18:43:04 +02:00

ecdh.c

crypto: Change the type of server_pubkey to ssh_key

2018-03-21 20:40:02 +01:00

error.c

error: Add ssh_reset_error() function

2018-08-27 12:25:09 +02:00

gcrypt_missing.c

bignum: Make bignum_free safer

2018-07-05 14:35:13 +02:00

getpass.c

getpass: Use explicit_bzero()

2018-09-04 20:00:04 +02:00

gssapi.c

CVE-2018-10933: Set correct state after sending MIC

2018-10-16 09:19:40 +02:00

gzip.c

gzip: Use calloc in initcompress() and initdecompress()

2018-09-04 20:00:04 +02:00

init.c

init: Only add DllMain if we create a shared library

2018-10-09 11:40:54 +02:00

kex.c

dh: Add diffie-hellman-group18-sha512 support

2018-09-20 16:35:05 +02:00

known_hosts.c

knownhosts: Fix invalid read of known_hosts token

2018-10-13 22:09:16 +02:00

knownhosts.c

knownhosts: Add knownhosts to libssh_session group

2018-08-22 09:09:06 +02:00

legacy.c

Rest in Peace SSHv1

2018-06-29 14:41:14 +02:00

libcrypto-compat.c

libcrypto-compat: fix HMAC_CTX_free for OpenSSL < 1.1.0

2017-07-13 19:28:59 +02:00

libcrypto-compat.h

libcrypto: Introduce a libcrypto compat file

2016-11-07 11:42:06 +01:00

libcrypto.c

crypto: Split init and finalize functions

2018-07-05 12:55:23 +02:00

libgcrypt.c

tests: Add test for RSA PKI running on threads

2018-08-03 16:43:03 +02:00

libmbedcrypto.c

libmbedcrypto: Fix creating evp hash

2018-09-18 10:17:31 +02:00

libssh.map

cmake: Bump library version

2018-09-20 17:23:42 +02:00

log.c

log: Make sure the buffer for date is big enough

2018-08-20 18:43:06 +02:00

match.c

config: Parse Match keyword

2018-09-05 12:39:02 +02:00

mbedcrypto_missing.c

mbedtls: Use getter for ssh_mbedtls_ctr_drbg

2018-08-20 18:43:04 +02:00

messages.c

messages: Fixed possible memory leak in ssh_message_queue

2018-09-27 15:39:20 +02:00

misc.c

misc: Use C99 initializer to initialize string

2018-09-04 20:00:04 +02:00

options.c

options: The new option SSH_OPTIONS_PUBLICKEY_ACCEPTED_TYPES

2018-08-31 14:30:53 +02:00

packet_cb.c

dh: Add diffie-hellman-group18-sha512 support

2018-09-20 16:35:05 +02:00

packet_crypt.c

Rest in Peace SSHv1

2018-06-29 14:41:14 +02:00

packet.c

CVE-2018-10933: Introduced packet filtering

2018-10-16 09:19:40 +02:00

pcap.c

buffer: Add and use ssh_buffer_allocate_size()

2018-08-01 11:04:33 +02:00

pki_container_openssh.c

pki: Implement reading public key from OpenSSH private key container

2018-09-18 10:17:32 +02:00

pki_crypto.c

pki: Allow reading keys in new OpenSSH format

2018-09-18 10:17:31 +02:00

pki_ed25519.c

pki: Allow reading keys in new OpenSSH format

2018-09-18 10:17:31 +02:00

pki_gcrypt.c

pki: Allow reading keys in new OpenSSH format

2018-09-18 10:17:31 +02:00

pki_mbedcrypto.c

pki: Allow reading keys in new OpenSSH format

2018-09-18 10:17:31 +02:00

pki.c

pki: Use strndup in ssh_pki_export_privkey_base64()

2018-09-20 17:23:41 +02:00

poll.c

poll: Fix size types in ssh_event_free()

2018-08-30 08:59:56 +02:00

scp.c

Remove vim modelines from all files

2018-06-28 08:41:08 +02:00

server.c

dh: Add diffie-hellman-group18-sha512 support

2018-09-20 16:35:05 +02:00

session.c

dh: Add diffie-hellman-group18-sha512 support

2018-09-20 16:35:05 +02:00

sftp.c

sftpserver: allocate packet on sftp_server_new

2018-09-25 16:42:08 +02:00

sftpserver.c

sftpserver: allocate packet on sftp_server_new

2018-09-25 16:42:08 +02:00

socket.c

socket: Pass MSG_NOSIGNAL to send()

2018-09-25 16:41:31 +02:00

string.c

string: Don't allow to allocate strings bigger than 256M

2018-09-04 12:29:41 +02:00

threads.c

threads: Automatically call ssh_init on load

2018-08-03 16:43:03 +02:00

wrapper.c

wrapper: Use explicit_bzero() in crypto_free()

2018-09-04 20:00:04 +02:00