[ssh_x509] PKIX-SSH release 15.1
ssh_x509 at roumenpetrov.info
ssh_x509 at roumenpetrov.info
Thu Jul 11 20:37:17 EEST 2024
On 2024-07-06 09:21, ssh_x509 at roumenpetrov.info wrote:
> Regular release PKIX-SSH 15.1 is available for download. This release
> adds following:
Hi, it seems that the diff has not been published for this release. Is
there a plan to release a diff for the 16.1 release?
>
> (x) Security:
> (*) disable again logging in alarm handler
> Race condition could lead to code execution on some C libraries.
> Affected PKIX-SSH 13.3.2-15.0.
>
>
> (x) Features:
> (*) SSH_AUTH_INFO_0 and PAM
> Export SSH_AUTH_INFO_0 in PAM password authentication method.
>
> (*) askpass on wayland
> Enable secsh "askpass" on wayland display as well.
>
>
> (x) Bugs:
> (*) properly implement sftp home-directory extension
> It always returned the current user's home directory contrary to the spec.
>
> (*) utmpx login
> Use appropriate variable to record "utmpx" login.
>
> (*) sftp-prompt
> flush stdout after output of "sftp>" prompt
>
>
> (x) Misc:
> (*) askpass scripts
> More secsh askpass scripts based on dialog programs like xdialog and
> zenity.
>
> (*) use terminal wrappers to open files
> Reserved for "TermOne Plus"(Android) generic "addon" command interface.
>
> (*) print specified user in sftp connections
> Make connection message consistent regardless of whether how destination
> is specified on command line.
>
> (*) simplify client quit message handling
> Also write quit message before to send disconnect packet.
>
> (*) promote connection-closed messages from verbose to information level
> Used if the client does not send a "disconnect" message.
>
> (*) quiet mode when utility gather public keys from servers
> Do not emit comment lines with hostname and SSH protocol banner.
>
> (*) never close stdin in gather public keys utility
>
> (*) add daemon option PamServiceName
> Reserved for future.
>
> (*) documentation
> Many documentation and manual page improvements.
>
> Regards,
> Roumen Petrov
>
>
> P.S. Note tarbal before compression is signed with new gpg key.
>
>
>
>
> _______________________________________________
> ssh_x509 mailing list
> ssh_x509 at roumenpetrov.info
> http://roumenpetrov.info/mailman/listinfo/ssh_x509_roumenpetrov.info
More information about the ssh_x509
mailing list