[ssh_x509] SecureBox Pro 3.7.1 and SecureBox 2.8.1 with PKIX-SSH 14.4.1

[ssh_x509 at roumenpetrov.info]

Hello,

New versions of Android applications are available on "Play Store".
Both are packaged with PKIX-SSH 14.4.1 with excluded EtM functionality from default configuration.


PKIX-SSH 14.4.1 tarbal is available for download. The security related release includes following:

(x) Features:

(*) do not prefer OpenSSH EtM functionality

(*) exclude EtM functionality from defaults
A pre-processor directive allows to exclude EtM functionality from default configurations. This is yet another work-around to avoid prefix truncation attack on the ssh binary packet protocol. Also avoids use of custom "strict key exchange" extension.


(x) Bugs:
fix memory leak in dh and ecdh key exchange


(x) Misc:

(*) selinux compatibility with ancient OS-es Restore use of matchpathcon if selabel_lookup is not.

(*) autoconf compatibility with ancient OS-es


Regards,
Roumen Petrov

-- 
Advanced secure shell implementation with X.509 certificate support
http://roumenpetrov.info/secsh/