[ssh_x509] PKIX-SSH release 15.1

ssh_x509 at roumenpetrov.info ssh_x509 at roumenpetrov.info
Thu Jul 11 20:37:17 EEST 2024



On 2024-07-06 09:21, ssh_x509 at roumenpetrov.info wrote:
> Regular release PKIX-SSH 15.1 is available for download. This release 
> adds following:

Hi, it seems that the diff has not been published for this release. Is 
there a plan to release a diff for the 16.1 release?

> 
> (x) Security:
> (*) disable again logging in alarm handler
> Race condition could lead to code execution on some C libraries. 
> Affected PKIX-SSH 13.3.2-15.0.
> 
> 
> (x) Features:
> (*) SSH_AUTH_INFO_0 and PAM
> Export SSH_AUTH_INFO_0 in PAM password authentication method.
> 
> (*) askpass on wayland
> Enable secsh "askpass" on wayland display as well.
> 
> 
> (x) Bugs:
> (*) properly implement sftp home-directory extension
> It always returned the current user's home directory contrary to the spec.
> 
> (*) utmpx login
> Use appropriate variable to record "utmpx" login.
> 
> (*) sftp-prompt
> flush stdout after output of "sftp>" prompt
> 
> 
> (x) Misc:
> (*) askpass scripts
> More secsh askpass scripts based on dialog programs like xdialog and 
> zenity.
> 
> (*) use terminal wrappers to open files
> Reserved for "TermOne Plus"(Android) generic "addon" command interface.
> 
> (*) print specified user in sftp connections
> Make connection message consistent regardless of whether how destination 
> is specified on command line.
> 
> (*) simplify client quit message handling
> Also write quit message before to send disconnect packet.
> 
> (*) promote connection-closed messages from verbose to information level
> Used if the client does not send a "disconnect" message.
> 
> (*) quiet mode when utility gather public keys from servers
> Do not emit comment lines with hostname and SSH protocol banner.
> 
> (*) never close stdin in gather public keys utility
> 
> (*) add daemon option PamServiceName
> Reserved for future.
> 
> (*) documentation
> Many documentation and manual page improvements.
> 
> Regards,
> Roumen Petrov
> 
> 
> P.S. Note tarbal before compression is signed with new gpg key.
> 
> 
> 
> 
> _______________________________________________
> ssh_x509 mailing list
> ssh_x509 at roumenpetrov.info
> http://roumenpetrov.info/mailman/listinfo/ssh_x509_roumenpetrov.info



More information about the ssh_x509 mailing list