[ssh_x509] upcoming release 13.6

[ssh_x509 at roumenpetrov.info]

Hello,

ssh_x509 at roumenpetrov.info wrote:
> Hello,
>
> With minimisation of memory leak when is activated key exchange, cipher or algorithm compatibility PKIX-SSH 13.5 introduces double-free memory fault.
> It is not exploitable on server side as freed pointer is duplicate of configuration settings and source is not used any more.
> Client could be impacted but when server is crafted specialty.

Extra tests shows that OpenBSD server implementation refuses connections while PKIX-SSH server works fine.


> Regards,
> Roumen Petrov
>
> P.S. correction - https://gitlab.com/secsh/pkixssh/-/commit/41e983695d76ac20b8b254759994bd60fd1433ef
>
> _______________________________________________
> ssh_x509 mailing list
> ssh_x509 at roumenpetrov.info
> http://roumenpetrov.info/mailman/listinfo/ssh_x509_roumenpetrov.info
>