[ssh_x509] PKIX-SSH release 18.0.3

[ssh_x509 at roumenpetrov.info]

Hello,

A new PKIX-SSH "patch" release is available for download.

(x) Security:
(*) properly clear setuid/setgid bits
Ensure consistent behavior if secure copy downloads without preserve mode are from multiple sources.


(x) Features:
(*) do not use OpenSSL based arc4random_buf on Android
Avoids early and unexpected initialization of the cryptographic library.


(x) Bugs:
(*) unify events mask if socket is waiting for I/O
Use computed mask as for other descriptors.

(*) use complete open() variant to load password file in Android port
Allows to "wrap" of function calls i.e., to redirect to installed location.


(x) Misc:
(*) split hardening rules
Use separate configuration arguments for pre-processor flags(fortify source) and linker flags. Note that by default, when "hardening" is activated, "fortification" is also activated.


Regards,
Roumen Petrov