[ssh_x509] PKIX-SSH release 15.1

ssh_x509 at roumenpetrov.info ssh_x509 at roumenpetrov.info
Sat Jul 6 19:21:31 EEST 2024


Hello,

Regular release PKIX-SSH 15.1 is available for download. This release 
adds following:


(x) Security:
(*) disable again logging in alarm handler
Race condition could lead to code execution on some C libraries. 
Affected PKIX-SSH 13.3.2-15.0.


(x) Features:
(*) SSH_AUTH_INFO_0 and PAM
Export SSH_AUTH_INFO_0 in PAM password authentication method.

(*) askpass on wayland
Enable secsh "askpass" on wayland display as well.


(x) Bugs:
(*) properly implement sftp home-directory extension
It always returned the current user's home directory contrary to the spec.

(*) utmpx login
Use appropriate variable to record "utmpx" login.

(*) sftp-prompt
flush stdout after output of "sftp>" prompt


(x) Misc:
(*) askpass scripts
More secsh askpass scripts based on dialog programs like xdialog and zenity.

(*) use terminal wrappers to open files
Reserved for "TermOne Plus"(Android) generic "addon" command interface.

(*) print specified user in sftp connections
Make connection message consistent regardless of whether how destination 
is specified on command line.

(*) simplify client quit message handling
Also write quit message before to send disconnect packet.

(*) promote connection-closed messages from verbose to information level
Used if the client does not send a "disconnect" message.

(*) quiet mode when utility gather public keys from servers
Do not emit comment lines with hostname and SSH protocol banner.

(*) never close stdin in gather public keys utility

(*) add daemon option PamServiceName
Reserved for future.

(*) documentation
Many documentation and manual page improvements.

Regards,
Roumen Petrov


P.S. Note tarbal before compression is signed with new gpg key.






More information about the ssh_x509 mailing list