Skip to content

Releases: janmojzis/tinyssh

20260401

01 Apr 04:27
ff51088

Choose a tag to compare

  • Fixed session handling, now rejects out-of-order or duplicate channel requests.
  • Fixed connection shutdown, timeout handling and subprocess waiting edge cases.
  • Fixed inherited file-descriptor leak before fork.
  • Fixed file descriptor leak in authorized_keys processing.
  • Fixed log buffer purging and a potential out-of-bounds read in buf_putsharedsecret_.
  • Updated makefilegen.sh to use gcc -MM -isystem /usr/local/include
  • Moved LICENCE.md -> LICENSE.md

20260301

01 Mar 06:47
a1eefe3

Choose a tag to compare

  • Fixed crypto_sign_ed25519_tinyssh_open, now rejects signatures where S >= L (Ed25519 group order) (Thanks @py-thok for pointing out the issue)

20250501

02 May 06:24
5e679c9

Choose a tag to compare

  • Fixed minor strict kex violation, thanks to Fabian Bäumer and Marcus Brinkmann for the bug report.
  • Updated cryptoint to version 20250414
  • Added support for external lib1305

20250411

11 Apr 18:46
9c9e9ae

Choose a tag to compare

20250411 Pre-release
Pre-release
  • add lib1305 support
  • update to cryptoint version 20250228

20250201

01 Feb 09:02
372ce83

Choose a tag to compare

  • Relicensed under CC0-1.0 OR 0BSD OR MIT-0 OR MIT
  • Final reformatting using clang-format

20250126

26 Jan 20:07
354f001

Choose a tag to compare

20250126 Pre-release
Pre-release
  • Fixed more compiler warnings
  • More used cryptoint

20241201

01 Dec 10:44
3f7c39b

Choose a tag to compare

20241201 Pre-release
Pre-release
  • Switched to cryptoint 20241003
  • Switched to tests from SUPERCOP for crypto primitives
  • Fixed various compiler warnings

20241111

11 Nov 21:55
fe255f6

Choose a tag to compare

20241111 Pre-release
Pre-release
  • Fixed implicit-function-declaration warning packet_put.c (tnx @lanodan)
  • Modification of the build system to a simple Makefile (old build system still in directory 'old')
  • Added support for external librandombytes, lib25519, libntruprime library
  • Dropped support for other NaCl-compatible external libraries
  • Temporary disabled unit tests.

20240101

01 Jan 08:25
20240101
cc242da

Choose a tag to compare

  • fixed channel_forkpty() race condition between close(slave) in parent process and login_tty(slave) in child process
  • fixed behavior when using terminal mode and stdin redirected to /dev/null 'ssh -tt -n'
  • added an 'strict-key' key exchange [email protected] (Mitigates CVE-2023-48795 "Terrapin attack")

20230101

31 Dec 23:40
5a94d31

Choose a tag to compare

  • LICENCE update from public-domain to CC0,
    public domain works differently depending on the country,
    to avoid it, set explicitly CC0
  • fixed sysdep tests, tnx Johannes Nixdorf