Jakub Jelen bf390a0426 CVE-2026-0965 config: Do not attempt to read non-regular and too large configuration files ...

Changes also the reading of known_hosts to use the new helper function

Signed-off-by: Jakub Jelen <jjelen@redhat.com>
Reviewed-by: Andreas Schneider <asn@cryptomilk.org>
(cherry picked from commit a5eb30dbfd)

2026-02-06 09:55:09 +01:00

..

agent.h

Add external c declaration for c++

2022-11-02 12:08:53 +01:00

auth.h

Add external c declaration for c++

2022-11-02 12:08:53 +01:00

bignum.h

Add external c declaration for c++

2022-11-02 12:08:53 +01:00

bind_config.h

Add external c declaration for c++

2022-11-02 12:08:53 +01:00

bind.h

Remove support for DSA Keys

2023-02-02 14:49:06 +01:00

blf.h

external: Update OpenSSH blowfish implementation

2024-05-21 11:33:17 +02:00

buffer.h

make ssh_buffer_pack_va() static

2024-06-28 17:18:08 +02:00

bytearray.h

include: Add macros for bytearray handling

2018-10-05 14:38:43 +02:00

callbacks.h

feat: add gssapi server callbacks tests

2024-07-11 16:44:20 +02:00

chacha20-poly1305-common.h

chacha: Create common file to avoid code duplication

2020-01-23 09:48:11 +01:00

chacha.h

Add external c declaration for c++

2022-11-02 12:08:53 +01:00

channels.h

channels: Use a structure to store exit information

2024-05-13 15:41:54 +02:00

CMakeLists.txt

sftpserver: Move duplicate code handling SFTP operations to library

2023-06-06 10:54:31 +02:00

config_parser.h

feat: implement proxy jump using libssh

2024-07-11 14:46:13 +02:00

config.h

Handle automatic certificate authentication

2023-12-05 14:45:51 +01:00

crypto.h

Cleanup the loaded pkcs11 provider

2025-08-08 11:28:13 +02:00

curve25519.h

CVE-2023-1667:dh: Expose the callback cleanup functions

2023-05-04 11:51:17 +02:00

dh-gex.h

CVE-2023-1667:dh: Expose the callback cleanup functions

2023-05-04 11:51:17 +02:00

dh.h

CVE-2023-1667:kex: Add support for sending first_kex_packet_follows flag

2023-05-04 11:51:17 +02:00

ecdh.h

CVE-2023-1667:dh: Expose the callback cleanup functions

2023-05-04 11:51:17 +02:00

ed25519.h

doc: Fix doxygen errors when QUIET=yes EXTRACT_ALL=yes

2023-03-15 10:21:31 +01:00

fe25519.h

Add external c declaration for c++

2022-11-02 12:08:53 +01:00

ge25519.h

Add external c declaration for c++

2022-11-02 12:08:53 +01:00

gssapi.h

fix: memory leaks in gssapi.c

2024-07-11 16:44:14 +02:00

kex.h

CVE-2023-48795: Server side mitigations

2023-12-18 17:35:04 +01:00

keys.h

Remove support for DSA Keys

2023-02-02 14:49:06 +01:00

knownhosts.h

Add external c declaration for c++

2022-11-02 12:08:53 +01:00

legacy.h

Add external c declaration for c++

2022-11-02 12:08:53 +01:00

libcrypto.h

Cleanup the loaded pkcs11 provider

2025-08-08 11:28:13 +02:00

libgcrypt.h

CVE-2023-6918: Remove unused evp functions and types

2023-12-18 17:35:04 +01:00

libmbedcrypto.h

mbedcrypto: Fix bignum_dup()

2024-05-16 09:56:38 +02:00

libssh_version.h.cmake

cmake: Add autogenerated libssh_version.h

2020-05-06 13:02:32 +02:00

libssh.h

Happy new year 2025!

2025-06-23 13:10:16 +02:00

libsshpp.hpp

channels: Implement better ssh_channel_get_exit_state() variant

2024-05-13 15:41:54 +02:00

messages.h

Add external c declaration for c++

2022-11-02 12:08:53 +01:00

misc.h

CVE-2026-0965 config: Do not attempt to read non-regular and too large configuration files

2026-02-06 09:55:09 +01:00

options.h

Add support for more options in ssh_options_get()

2024-04-09 12:46:05 +02:00

packet.h

packet: Implement logging of SSH2_MSG_DEBUG message

2025-06-23 13:10:09 +02:00

pcap.h

Add external c declaration for c++

2022-11-02 12:08:53 +01:00

pki_priv.h

pki: New API functions exporting (also ed25519 keys in different formats)

2023-12-15 10:08:35 +01:00

pki.h

mbedtls: Avoid memory leak when handling ECDSA keys

2024-07-02 15:57:45 +02:00

poll.h

socket: do not free poll object if it is locked

2025-08-14 11:02:39 +02:00

poly1305.h

Add external c declaration for c++

2022-11-02 12:08:53 +01:00

priv.h

CVE-2026-0965 config: Do not attempt to read non-regular and too large configuration files

2026-02-06 09:55:09 +01:00

sc25519.h

Add external c declaration for c++

2022-11-02 12:08:53 +01:00

scp.h

Add external c declaration for c++

2022-11-02 12:08:53 +01:00

server.h

feat: add option to read user-supplied key string in ssh_bind_options_set()

2024-04-15 11:48:31 +02:00

session.h

feat: implement proxy jump using libssh

2024-07-11 14:46:13 +02:00

sftp_priv.h

Move certain functions from sftp.c to a new file sftp_common.c

2023-12-04 18:34:27 +01:00

sftp.h

sftp: Added lsetstat extension

2024-04-29 08:35:42 +02:00

sftpserver.h

Add missing #include's to sftpserver.h

2025-06-23 13:06:40 +02:00

socket.h

feat: implement proxy jump using libssh

2024-07-11 14:46:13 +02:00

ssh2.h

client: Handle the MSG_EXT_INFO packet signalling supported extensions

2018-08-31 14:18:34 +02:00

string.h

Add external c declaration for c++

2022-11-02 12:08:53 +01:00

threads.h

Add external c declaration for c++

2022-11-02 12:08:53 +01:00

token.h

tokens: Add low-level function to exlclude, prepend lists

2022-11-18 20:28:28 +01:00

wrapper.h

CVE-2023-6918: Systematically check return values when calculating digests

2023-12-18 17:35:04 +01:00