libssh.git, branch v0-5

security: fix for vulnerability CVE-2014-0017

2014-03-04T08:54:25+00:00

When accepting a new connection, a forking server based on libssh forks
and the child process handles the request. The RAND_bytes() function of
openssl doesn't reset its state after the fork, but simply adds the
current process id (getpid) to the PRNG state, which is not guaranteed
to be unique.
This can cause several children to end up with same PRNG state which is
a security issue.

Conflicts:
	src/bind.c

tests: Add a sftp_read blocking test.

2013-10-23T13:54:12+00:00

socket: Call data handler as long as handler takes data.

2013-10-06T15:48:40+00:00

Reviewed-by: Andreas Schneider

Update ChangeLog.

2013-07-26T06:42:26+00:00

BUG 103: Disable proxy command if set to 'none'.

2013-07-26T06:42:26+00:00

Signed-off-by: Andreas Schneider

client: Fix possible NULL pointer dereference.

2013-07-26T06:42:26+00:00

kex: Fix a double free.

2013-07-26T06:42:26+00:00

Check for NULL pointers in channels.c

2013-07-26T06:42:26+00:00

cmake: Set application version as package version.

2013-07-26T06:42:26+00:00

BUG 103: Fix ProxyCommand parsing.

2013-06-02T17:33:57+00:00