[ssh_x509] upcoming release 14.1
ssh_x509 at roumenpetrov.info
ssh_x509 at roumenpetrov.info
Sat Feb 4 09:15:28 EET 2023
P.S. Next release is 14.1 :(
ssh_x509 at roumenpetrov.info wrote:
> Hello,
>
> ssh_x509 at roumenpetrov.info wrote:
>> Hello,
>>
>> With minimisation of memory leak when is activated key exchange, cipher or algorithm compatibility PKIX-SSH 13.5 introduces double-free memory fault.
>> It is not exploitable on server side as freed pointer is duplicate of configuration settings and source is not used any more.
>> Client could be impacted but when server is crafted specialty.
>
> Extra tests shows that OpenBSD server implementation refuses connections while PKIX-SSH server works fine.
>
>
>> Regards,
>> Roumen Petrov
>>
>> P.S. correction - https://gitlab.com/secsh/pkixssh/-/commit/41e983695d76ac20b8b254759994bd60fd1433ef
>>
>> _______________________________________________
>> ssh_x509 mailing list
>> ssh_x509 at roumenpetrov.info
>> http://roumenpetrov.info/mailman/listinfo/ssh_x509_roumenpetrov.info
>>
>
>
>
> _______________________________________________
> ssh_x509 mailing list
> ssh_x509 at roumenpetrov.info
> http://roumenpetrov.info/mailman/listinfo/ssh_x509_roumenpetrov.info
More information about the ssh_x509
mailing list