Jakub Jelen 03bbbc9e4c CVE-2023-48795: Strip extensions from both kex lists for matching ...

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>

2023-12-18 17:57:27 +01:00

..

ABI

Bump version to 0.9.7

2023-05-04 13:41:53 +02:00

external

ed25519: Harmonize arguments to make new gcc happy

2021-08-17 15:46:54 +02:00

threads

[winlocks] Include stdlib.h to avoid crash in Windows

2021-08-17 15:46:54 +02:00

agent.c

agent: Use SSH_BUFFER_FREE()

2019-12-09 16:38:36 +01:00

auth.c

auth: Fix memory leak in ssh_userauth_publickey_auto()

2020-03-29 09:59:52 +02:00

base64.c

base64: Use SSH_BUFFER_FREE()

2019-12-09 16:38:37 +01:00

bignum.c

bignum: Print ssh_make_string_bn() using SSH_LOG()

2019-12-09 16:38:36 +01:00

bind_config.c

bind_config: Fail if a known option couldn't be set

2019-06-12 10:17:54 +02:00

bind.c

Use only one variable denoting the size of methods arrays

2019-12-09 16:38:36 +01:00

buffer.c

buffer: Add NULL check for 'buffer' argument

2020-06-08 09:15:26 +02:00

callbacks.c

callbacks: Implement list of callbacks for channels

2016-05-02 16:56:54 +02:00

chachapoly.c

Replace ssh_print_hexa() with ssh_log_hexdump()

2019-08-08 09:44:18 +02:00

channels.c

channels: Avoid out-of-bounds writes

2023-12-18 17:57:23 +01:00

client.c

CVE-2023-1667:kex: Add support for sending first_kex_packet_follows flag

2023-05-04 13:40:48 +02:00

CMakeLists.txt

CVE-2023-6004: misc: Add ipv6 link-local check for an ip address

2023-12-18 17:57:27 +01:00

config_parser.c

CVE-2023-6004: config_parser: Check for valid syntax of a hostname if it is a domain name

2023-12-18 17:57:27 +01:00

config.c

config: Support more identity files in configuration

2021-08-17 15:46:53 +02:00

connect.c

CVE-2023-6004: misc: Add ipv6 link-local check for an ip address

2023-12-18 17:57:27 +01:00

connector.c

connector: Stop socket-to-channel EOF flooding

2019-04-29 13:16:54 +02:00

curve25519.c

CVE-2023-48795: client side mitigation

2023-12-18 17:57:27 +01:00

dh_crypto.c

kex: Add support for diffie-hellman-group14-sha256

2020-04-06 11:36:35 +02:00

dh_key.c

kex: Add support for diffie-hellman-group14-sha256

2020-04-06 11:36:35 +02:00

dh-gex.c

CVE-2023-48795: client side mitigation

2023-12-18 17:57:27 +01:00

dh.c

CVE-2023-48795: client side mitigation

2023-12-18 17:57:27 +01:00

ecdh_crypto.c

CVE-2023-48795: client side mitigation

2023-12-18 17:57:27 +01:00

ecdh_gcrypt.c

CVE-2023-48795: client side mitigation

2023-12-18 17:57:27 +01:00

ecdh_mbedcrypto.c

CVE-2023-48795: client side mitigation

2023-12-18 17:57:27 +01:00

ecdh.c

CVE-2023-48795: client side mitigation

2023-12-18 17:57:27 +01:00

error.c

error: Add ssh_reset_error() function

2018-08-27 11:29:18 +02:00

gcrypt_missing.c

dh: Do some basic refactoring

2019-01-24 11:56:23 +01:00

getpass.c

Fix some compiler warnings

2021-08-17 15:46:54 +02:00

gssapi.c

gssapi: Free mic_buffer on all code paths (GHSL-2023-042)

2023-04-28 11:51:22 +02:00

gzip.c

gzip: Use SSH_BUFFER_FREE()

2019-12-09 16:38:37 +01:00

init.c

examples: Fix build issue with new clang 15

2023-04-17 18:11:29 +02:00

kdf.c

CVE-2021-3634: Create a separate length for session_id

2021-08-18 14:16:18 +02:00

kex.c

CVE-2023-48795: Strip extensions from both kex lists for matching

2023-12-18 17:57:27 +01:00

known_hosts.c

known_hosts: Avoid using deprecated functions (even from deprecated functions)

2019-09-30 15:42:26 +02:00

knownhosts.c

Always check return value of ssh_list_new()

2021-08-17 15:46:53 +02:00

legacy.c

legacy,keys: Fix the macro conditions

2020-01-23 09:49:26 +01:00

libcrypto-compat.c

libcrypto-compat: Fix indentation and return value

2020-05-05 14:32:27 +02:00

libcrypto-compat.h

libcrypto-compat: add extra functions

2020-05-05 14:32:15 +02:00

libcrypto.c

CVE-2021-3634: Create a separate length for session_id

2021-08-18 14:16:18 +02:00

libgcrypt.c

libgcrypt: Do not leak memory with invalid key lengths

2020-01-23 09:49:35 +01:00

libmbedcrypto.c

mbedtls: Change the last argument of cipher_[de|en]crypt_cbc to size_t

2021-08-17 15:46:54 +02:00

libssh.map

Bump SO version to 4.8.1

2019-06-14 15:22:56 +02:00

log.c

log: Make sure the buffer for date is big enough

2018-08-20 18:42:03 +02:00

match.c

match: Limit possible recursion when parsing wildcards to a sensible number

2019-12-09 16:38:37 +01:00

mbedcrypto_missing.c

mbedcrypto_missing: Always check return values

2020-01-23 09:49:22 +01:00

messages.c

CVE-2021-3634: Create a separate length for session_id

2021-08-18 14:16:18 +02:00

misc.c

CVE-2023-6004: misc: Add ipv6 link-local check for an ip address

2023-12-18 17:57:27 +01:00

options.c

CVE-2023-6004: options: Simplify the hostname parsing in ssh_options_set

2023-12-18 17:57:27 +01:00

packet_cb.c

CVE-2023-48795: client side mitigation

2023-12-18 17:57:27 +01:00

packet_crypt.c

packet_crypt: Check return values from AEAD deciphering

2020-01-23 10:31:44 +01:00

packet.c

CVE-2023-48795: client side mitigation

2023-12-18 17:57:27 +01:00

pcap.c

pcap: Use SSH_BUFFER_FREE()

2019-12-09 16:38:37 +01:00

pki_container_openssh.c

pki: Fix possible information leak via uninitialized stack buffer

2019-12-09 16:38:37 +01:00

pki_crypto.c

CVE-2023-2283:pki_crypto: Remove unnecessary NULL check

2023-05-04 13:41:08 +02:00

pki_ed25519_common.c

Add safety checks for all ssh_string_fill calls

2021-08-17 15:46:53 +02:00

pki_ed25519.c

pki: Move common Ed25519 functions to pki_ed25519_common.c

2019-09-30 16:57:16 +02:00

pki_gcrypt.c

Add safety checks for all ssh_string_fill calls

2021-08-17 15:46:53 +02:00

pki_mbedcrypto.c

Add safety checks for all ssh_string_fill calls

2021-08-17 15:46:53 +02:00

pki.c

CVE-2021-3634: Create a separate length for session_id

2021-08-18 14:16:18 +02:00

poll.c

ssh_event_dopoll can also return SSH_AGAIN

2019-02-27 08:17:53 +01:00

scp.c

scp: Do not allow newlines in pushed files names

2019-12-09 16:38:37 +01:00

server.c

CVE-2023-48795: Server side mitigations

2023-12-18 17:57:27 +01:00

session.c

session: Avoid potential null dereference on low-memory conditions

2023-12-18 17:57:18 +01:00

sftp.c

Fix error: dereferencing pointer to incomplete type ‘struct timeval’

2021-08-17 15:46:54 +02:00

sftpserver.c

sftpserver: Add missing return check for ssh_buffer_add_data()

2020-06-08 09:15:22 +02:00

socket.c

socket: Fix the error message

2020-01-23 09:50:04 +01:00

string.c

string: Don't allow to allocate strings bigger than 256M

2018-09-04 12:29:20 +02:00

threads.c

threads: Automatically call ssh_init on load

2018-08-03 16:43:03 +02:00

token.c

token: Add missing whitespace

2023-04-28 11:51:52 +02:00

wrapper.c

wrapper: Reformat crypto_new

2023-04-28 11:51:45 +02:00