shinys000114/libssh
1
0
Fork 0
mirror of https://git.libssh.org/projects/libssh.git synced 2026-02-04 20:30:38 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
63fbf00efef84f1591c3c82911c6a92e77ca8d2c
libssh/src
History
Jakub Jelen 63fbf00efe pki: Use constant for minimal RSA key size in FIPS 
Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
2025-11-06 16:25:25 +01:00
..
ABI
API: Bump SO version to 4.10.0
2024-07-31 15:00:24 +02:00
external
kex: Add sntrup761x25519-sha512@openssh.com.
2025-01-21 11:32:49 +01:00
threads
mbedtls: Warn about missing featues of mbedTLS build
2025-09-30 13:16:34 +02:00
agent.c
Make ssh_socket_set_fd() return errors
2025-08-12 12:12:47 +02:00
auth.c
Use calloc instead of zeroizing structure after malloc
2025-08-06 11:16:58 +02:00
base64.c
CVE-2025-4877 base64: Prevent integer overflow and potential OOB
2025-06-23 13:33:10 +02:00
bignum.c
bignum: Make sure the padding is large enough for the number
2025-01-21 11:32:49 +01:00
bind_config.c
Add RequiredRsaSize configuration option
2025-10-01 16:06:43 +02:00
bind.c
fix(bind): Remove code duplication in ssh_bind_listen
2025-09-18 13:57:12 +02:00
buffer.c
feat(buffer): add ssh_buffer_dup function to duplicate existing buffers
2025-09-25 15:04:17 +02:00
callbacks.c
fix(callbacks): make is_callback_valid's behaviour consistent with its name
2025-07-24 16:10:54 +02:00
chachapoly.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
channels.c
channels: Improve logging information about channels
2025-10-01 16:04:56 +02:00
client.c
client: Reset session packet state on disconnect
2025-11-05 17:44:33 +01:00
CMakeLists.txt
kex: Implement mlkem768x25519-sha256
2025-11-05 17:44:33 +01:00
config_parser.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
config.c
Add RequiredRsaSize configuration option
2025-10-01 16:06:43 +02:00
connect.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
connector.c
connector: Improve logging
2025-10-01 16:04:57 +02:00
crypto_common.c
crypto: Use stdint types and make code more readable of secure_memcmp()
2022-06-20 09:18:59 +02:00
curve25519_crypto.c
CVE-2025-8277: Fix memory leak of unused ephemeral key pair after client's wrong KEX guess
2025-08-14 10:32:05 +02:00
curve25519_fallback.c
refactor(curve25519): split the single file curve25519.c into multiple files for better readability
2025-05-06 22:03:18 +02:00
curve25519_gcrypt.c
CVE-2025-8277: Fix memory leak of unused ephemeral key pair after client's wrong KEX guess
2025-08-14 10:32:05 +02:00
curve25519_mbedcrypto.c
refactor(curve25519): split the single file curve25519.c into multiple files for better readability
2025-05-06 22:03:18 +02:00
curve25519.c
refactor(curve25519): split the single file curve25519.c into multiple files for better readability
2025-05-06 22:03:18 +02:00
dh_crypto.c
CVE-2025-8277: Fix memory leak of unused ephemeral key pair after client's wrong KEX guess
2025-08-14 10:32:05 +02:00
dh_key.c
CVE-2025-8277: Fix memory leak of unused ephemeral key pair after client's wrong KEX guess
2025-08-14 10:32:05 +02:00
dh-gex.c
dh-gex: Reformat the dhgex_server_callbacks structure
2025-06-24 10:14:29 +02:00
dh.c
CVE-2023-48795: client side mitigation
2023-12-18 17:35:04 +01:00
ecdh_crypto.c
CVE-2025-8277: ecdh: Free previously allocated pubkeys
2025-08-14 10:32:10 +02:00
ecdh_gcrypt.c
CVE-2025-8277: ecdh: Free previously allocated pubkeys
2025-08-14 10:32:10 +02:00
ecdh_mbedcrypto.c
CVE-2025-8277: mbedtls: Avoid leaking ecdh keys
2025-08-14 10:32:24 +02:00
ecdh.c
CVE-2023-48795: client side mitigation
2023-12-18 17:35:04 +01:00
error.c
SSH_LOG_TRACE: Recategorize loglevels
2022-10-07 09:13:19 +02:00
gcrypt_missing.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
getpass.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
getrandom_crypto.c
getrandom_crypto.c: Add function to the documentation
2022-09-29 11:12:55 +02:00
getrandom_gcrypt.c
Build external override library with all symbols
2022-07-19 15:21:50 +02:00
getrandom_mbedcrypto.c
Build external override library with all symbols
2022-07-19 15:21:50 +02:00
gssapi.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
gzip.c
zlib: Move conditional compilation inside of the gzip.c
2025-01-14 14:47:44 +01:00
init.c
Add missing includes for fprintf()
2022-11-23 15:29:29 +01:00
kdf.c
CVE-2023-6918: kdf: Detect context init failures
2023-12-18 17:35:04 +01:00
kex.c
kex: Place PQC KEX methods first
2025-11-06 16:24:47 +01:00
known_hosts.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
knownhosts.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
legacy.c
CVE-2025-4878 legacy: Properly check return value to avoid NULL pointer dereference
2025-06-23 15:24:30 +02:00
libcrypto-compat.h
Move old DSA and RSA structs into EVP_PKEY
2022-12-20 10:07:27 +01:00
libcrypto.c
libcrypto: update EVP API usage
2025-11-04 14:45:39 +01:00
libgcrypt.c
gcrypt: Store random numbers in secure memory
2024-12-03 15:19:51 +01:00
libmbedcrypto.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
libssh.map
feat(string): add ssh_string_from_data function to create ssh_string from data buffer
2025-10-10 14:00:22 +02:00
log.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
match.c
Fix implicit type conversions and warnings on windows builds
2025-01-03 15:18:53 +01:00
mbedcrypto_missing.c
crypto: Add ssh_crypto_free().
2023-08-25 15:13:31 +02:00
mbedcrypto-compat.h
refactor(curve25519): split the single file curve25519.c into multiple files for better readability
2025-05-06 22:03:18 +02:00
md_crypto.c
CVE-2023-6918: Systematically check return values when calculating digests
2023-12-18 17:35:04 +01:00
md_gcrypt.c
CVE-2023-6918: Systematically check return values when calculating digests
2023-12-18 17:35:04 +01:00
md_mbedcrypto.c
CVE-2023-6918: Systematically check return values when calculating digests
2023-12-18 17:35:04 +01:00
messages.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
misc.c
scp: Workaround for Cisco devices not handling single quotes
2025-10-10 16:20:54 +02:00
mlkem768.c
mlkem768: Fix missing jumps in error handling
2025-11-06 12:10:03 +01:00
options.c
Bump minimal RSA key size to 1024
2025-11-06 16:25:25 +01:00
packet_cb.c
extensions: Host-bound public key authentication
2025-03-18 17:34:04 +02:00
packet_crypt.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
packet.c
Remove references to (unused) pre-release ssh messages SSH2_MSG_ECMQV_*
2025-11-06 16:24:47 +01:00
pcap.c
Use calloc instead of zeroizing structure after malloc
2025-08-06 11:16:58 +02:00
pki_container_openssh.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
pki_crypto.c
pki_crypto: Avoid potential memory leak if malloc fails
2025-11-04 16:08:58 +01:00
pki_ed25519_common.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
pki_ed25519.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
pki_gcrypt.c
pki: update RSA key generation to use default size when parameter is 0
2025-09-25 15:04:57 +02:00
pki_mbedcrypto.c
pki: update RSA key generation to use default size when parameter is 0
2025-09-25 15:04:57 +02:00
pki.c
pki: Use constant for minimal RSA key size in FIPS
2025-11-06 16:25:25 +01:00
poll.c
poll: Use is_locked helper where possible
2025-08-14 10:33:58 +02:00
scp.c
scp: Workaround for Cisco devices not handling single quotes
2025-10-10 16:20:54 +02:00
server.c
Fix ssh_handle_key_exchange() timeout
2025-07-24 13:08:46 +02:00
session.c
kex: Implement mlkem768x25519-sha256
2025-11-05 17:44:33 +01:00
sftp_aio.c
sftp: Avoid dead code and possible overruns
2025-01-13 15:47:43 +01:00
sftp_common.c
sftp: Avoid memory leaks from extended attributes
2025-01-13 15:47:43 +01:00
sftp.c
CVE-2025-5449 sftpserver: Fix possible read behind buffer on 32bit arch
2025-06-23 13:37:06 +02:00
sftpserver.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
sntrup761.c
Use gcrypt implementation of ntruprime
2025-01-21 11:32:49 +01:00
socket.c
socket: do not free poll object if it is locked
2025-08-14 10:33:57 +02:00
string.c
feat(string): add ssh_string_from_data function to create ssh_string from data buffer
2025-10-10 14:00:22 +02:00
threads.c
threads.c: Remove dot from documentation group definition
2022-10-04 10:35:02 +02:00
token.c
CVE-2023-1667:token: Add missing whitespace
2023-05-04 11:51:17 +02:00
ttyopts.c
ttyopts: make non-POSIX defines optional
2025-11-04 14:46:58 +01:00
wrapper.c
kex: Implement mlkem768x25519-sha256
2025-11-05 17:44:33 +01:00