0.48 progress

--HG--
extra : convert_revision : 23abf9a27f91b8191c12b24a8b2557e5e8750c21
This commit is contained in:
Matt Johnston
2006-03-09 12:37:38 +00:00
parent 9368e4db33
commit 94b28e420c
6 changed files with 26 additions and 10824 deletions

23
CHANGES
View File

@@ -1,3 +1,26 @@
0.48 -
- Check that the circular buffer is properly empty before
closing a channel, which could cause truncated transfers
(thanks to Tomas Vanek for helping track it down)
- Implement per-IP pre-authentication connection limits
(after some poking from Pablo Fernandez)
- Exit gracefully if trying to connect to as SSH v1 server
(reported by Rushi Lala)
- Only read /dev/random once at startup when in non-inetd mode
- Allow ctrl-c to close a dbclient password prompt (may
still have to press enter on some platforms)
- Merged in uClinux patch for inetd mode
- Updated to scp from OpenSSH 4.3p2 - fixes a security issue
where use of system() could cause users to execute arbitrary
code through malformed filenames, ref CVE-2006-0225
0.47 - Thurs Dec 8 2005
- SECURITY: fix for buffer allocation error in server code, could potentially