shinys000114/libssh
1
0
Fork 0
mirror of https://git.libssh.org/projects/libssh.git synced 2026-02-04 12:20:42 +09:00
Code Issues Packages Projects Releases Wiki Activity
Files
a983142a07de4cf0fa95c01806ef04f0434d51c1
libssh/src
History
Jakub Jelen 5545b8808b sntrup: Avoid linking issues in external_override tests 
This linking worked only in CI and local builds, but not during
the build in RPM as it fails on missing symbols that were defined
only in the main library. This is solved as with the other digest
dependencies in external crypto by removing the intermediate
function. We are already linking the md_*.o objects.

The error was like this

sh: symbol lookup error: /path/libssh/libssh-0.12.0-build/libssh-0.12.0/redhat-linux-build/lib/libsntrup761_override.so: undefined symbol: crypto_hash_sha512

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Pavol Žáčik <pzacik@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
2026-01-15 12:22:10 +01:00
..
ABI
API: Bump SO version to 4.10.0
2024-07-31 15:00:24 +02:00
external
sntrup: Avoid linking issues in external_override tests
2026-01-15 12:22:10 +01:00
threads
mbedtls: Warn about missing featues of mbedTLS build
2025-09-30 13:16:34 +02:00
agent.c
Make ssh_socket_set_fd() return errors
2025-08-12 12:12:47 +02:00
auth.c
gssapi: free session->gssapi->user before assigning
2026-01-05 12:24:13 +01:00
base64.c
CVE-2025-4877 base64: Prevent integer overflow and potential OOB
2025-06-23 13:33:10 +02:00
bignum.c
bignum: Make sure the padding is large enough for the number
2025-01-21 11:32:49 +01:00
bind_config.c
Add RequiredRsaSize configuration option
2025-10-01 16:06:43 +02:00
bind.c
bind: adjust hostkey error messages to be more precise
2026-01-05 12:24:13 +01:00
buffer.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
callbacks.c
fix(callbacks): make is_callback_valid's behaviour consistent with its name
2025-07-24 16:10:54 +02:00
chachapoly.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
channels.c
Improve doxygen documentation
2025-12-18 13:44:05 +01:00
client.c
gssapi: Add support for ECDH GSSAPI KEX
2026-01-05 12:24:13 +01:00
CMakeLists.txt
Add ML-KEM implementation for gcrypt
2026-01-07 15:46:33 +01:00
config_parser.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
config.c
config: Allow setting username from configuration
2026-01-05 13:32:01 +01:00
connect.c
connect: Avoid calling close with negative argument
2026-01-07 14:46:07 +01:00
connector.c
connector: Avoid possible underflow ...
2026-01-07 14:46:07 +01:00
crypto_common.c
crypto: Use stdint types and make code more readable of secure_memcmp()
2022-06-20 09:18:59 +02:00
curve25519_crypto.c
CVE-2025-8277: Fix memory leak of unused ephemeral key pair after client's wrong KEX guess
2025-08-14 10:32:05 +02:00
curve25519_fallback.c
refactor(curve25519): split the single file curve25519.c into multiple files for better readability
2025-05-06 22:03:18 +02:00
curve25519_gcrypt.c
CVE-2025-8277: Fix memory leak of unused ephemeral key pair after client's wrong KEX guess
2025-08-14 10:32:05 +02:00
curve25519_mbedcrypto.c
refactor(curve25519): split the single file curve25519.c into multiple files for better readability
2025-05-06 22:03:18 +02:00
curve25519.c
curve25519: Make ssh_curve25519_build_k public
2026-01-05 12:24:13 +01:00
dh_crypto.c
feat: add gssapi key exchange
2026-01-05 12:24:00 +01:00
dh_key.c
feat: add gssapi key exchange
2026-01-05 12:24:00 +01:00
dh-gex.c
dh-gex: Initialize best_size to make the code mode straight-forward
2026-01-07 14:46:07 +01:00
dh.c
reformat: gssapi key exchange
2026-01-05 12:24:13 +01:00
ecdh_crypto.c
gssapi: Add support for ECDH GSSAPI KEX
2026-01-05 12:24:13 +01:00
ecdh_gcrypt.c
Add ML-KEM implementation for gcrypt
2026-01-07 15:46:33 +01:00
ecdh_mbedcrypto.c
gssapi: Add support for ECDH GSSAPI KEX
2026-01-05 12:24:13 +01:00
ecdh.c
CVE-2023-48795: client side mitigation
2023-12-18 17:35:04 +01:00
error.c
SSH_LOG_TRACE: Recategorize loglevels
2022-10-07 09:13:19 +02:00
gcrypt_missing.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
getpass.c
use standard O_NONBLOCK naming
2025-12-12 18:18:02 +01:00
getrandom_crypto.c
getrandom_crypto.c: Add function to the documentation
2022-09-29 11:12:55 +02:00
getrandom_gcrypt.c
Build external override library with all symbols
2022-07-19 15:21:50 +02:00
getrandom_mbedcrypto.c
Build external override library with all symbols
2022-07-19 15:21:50 +02:00
gssapi.c
gssapi: Fix typo
2026-01-07 15:44:52 +01:00
gzip.c
zlib: Move conditional compilation inside of the gzip.c
2025-01-14 14:47:44 +01:00
hybrid_mlkem.c
Add ML-KEM implementation for gcrypt
2026-01-07 15:46:33 +01:00
init.c
Add missing includes for fprintf()
2022-11-23 15:29:29 +01:00
kdf.c
CVE-2023-6918: kdf: Detect context init failures
2023-12-18 17:35:04 +01:00
kex-gss.c
gssapi: Add support for ECDH GSSAPI KEX
2026-01-05 12:24:13 +01:00
kex.c
gssapi: enable gssapi-keyex in FIPS mode
2026-01-05 12:24:13 +01:00
known_hosts.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
knownhosts.c
ssh_known_hosts_get_algorithms: Simplify cleanup ...
2025-12-12 18:06:47 +01:00
legacy.c
CVE-2025-4878 legacy: Properly check return value to avoid NULL pointer dereference
2025-06-23 15:24:30 +02:00
libcrypto-compat.h
Move old DSA and RSA structs into EVP_PKEY
2022-12-20 10:07:27 +01:00
libcrypto.c
libcrypto.c: Use openssl const algorithm names
2025-12-12 18:12:13 +01:00
libgcrypt.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
libmbedcrypto.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
libssh.map
feat(pki): add security key support with enrollment, signing, and resident key loading functions
2025-11-13 15:27:36 +05:30
log.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
match.c
Fix implicit type conversions and warnings on windows builds
2025-01-03 15:18:53 +01:00
mbedcrypto_missing.c
crypto: Add ssh_crypto_free().
2023-08-25 15:13:31 +02:00
mbedcrypto-compat.h
refactor(curve25519): split the single file curve25519.c into multiple files for better readability
2025-05-06 22:03:18 +02:00
md_crypto.c
md: Implement one-shot md5
2026-01-05 12:24:13 +01:00
md_gcrypt.c
md: Implement one-shot md5
2026-01-05 12:24:13 +01:00
md_mbedcrypto.c
md: Implement one-shot md5
2026-01-05 12:24:13 +01:00
messages.c
Add Keyboard Interactive
2026-01-06 22:56:44 +05:30
misc.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
mlkem_crypto.c
kex: Implement remaining hybrid ML-KEM methods
2025-11-25 17:57:42 +01:00
mlkem_gcrypt.c
Add ML-KEM implementation for gcrypt
2026-01-07 15:46:33 +01:00
mlkem.c
kex: Implement remaining hybrid ML-KEM methods
2025-11-25 17:57:42 +01:00
options.c
options: replace SSH_OPTIONS_GSSAPI_KEY_EXCHANGE_ALGS example
2026-01-05 12:24:13 +01:00
packet_cb.c
packet_cb: adjust response to NEWKEYS w.r.t. GSSAPI
2026-01-05 12:24:13 +01:00
packet_crypt.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
packet.c
packet: complete GSSAPI packet filter
2026-01-05 12:24:13 +01:00
pcap.c
Use calloc instead of zeroizing structure after malloc
2025-08-06 11:16:58 +02:00
pki_container_openssh.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
pki_context.c
feat(pki): implement PKI context API
2025-11-13 15:11:53 +05:30
pki_crypto.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
pki_ed25519_common.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
pki_ed25519.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
pki_gcrypt.c
pki: Avoild false positive matches when comparing certificates in mbedtls and gcrypt
2026-01-05 12:21:43 +01:00
pki_mbedcrypto.c
pki: Avoild false positive matches when comparing certificates in mbedtls and gcrypt
2026-01-05 12:21:43 +01:00
pki_sk.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
pki.c
pki: Improve documentation about pubkey import functions
2026-01-07 15:44:52 +01:00
poll.c
poll: Use is_locked helper where possible
2025-08-14 10:33:58 +02:00
scp.c
scp: Workaround for Cisco devices not handling single quotes
2025-10-10 16:20:54 +02:00
server.c
gssapi: enable gssapi-keyex in FIPS mode
2026-01-05 12:24:13 +01:00
session.c
gssapi: Add support for ECDH GSSAPI KEX
2026-01-05 12:24:13 +01:00
sftp_aio.c
sftp: Avoid dead code and possible overruns
2025-01-13 15:47:43 +01:00
sftp_common.c
sftp: Avoid memory leaks from extended attributes
2025-01-13 15:47:43 +01:00
sftp.c
CVE-2025-5449 sftpserver: Fix possible read behind buffer on 32bit arch
2025-06-23 13:37:06 +02:00
sftpserver.c
Improve doxygen documentation
2025-12-18 13:44:05 +01:00
sk_common.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
sk_usbhid.c
fido2: implement the default sk_callbacks for FIDO2/U2F keys using the usb-hid protocol
2025-11-09 05:52:45 +05:30
sntrup761.c
sntrup: Avoid linking issues in external_override tests
2026-01-15 12:22:10 +01:00
socket.c
socket: Properly close the proxyjump FD when proxy connection fails
2026-01-05 13:32:01 +01:00
string.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
threads.c
threads.c: Remove dot from documentation group definition
2022-10-04 10:35:02 +02:00
token.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
ttyopts.c
ttyopts: make non-POSIX defines optional
2025-11-04 14:46:58 +01:00
wrapper.c
Add ML-KEM implementation for gcrypt
2026-01-07 15:46:33 +01:00