CARVIEW |
Navigation Menu
-
Notifications
You must be signed in to change notification settings - Fork 578
Releases: libssh2/libssh2
1.11.1
Compare
This release includes the following enhancements and bugfixes:
- autotools: fix to update
LDFLAGS
for each detected dependency (d19b619 #1384 #1381 #1377) - autotools: delete
--disable-tests
option, fix CI tests (e051ae3 #1271 #715 revert: 7483edf) - autotools: show the default for
hidden-symbols
option (a3f5594 #1269) - autotools: enable
-Wunused-macros
with gcc (ecdf519 #1262 #1227 #1224) - autotools: fix dotless gcc and Apple clang version detections (89ccc83 #1232 #1187)
- autotools: show more clang/gcc version details (fb58016 #1230)
- autotools: avoid warnings in libtool stub code (96682bd #1227 #1224)
- autotools: sync warning enabler code with curl (5996fef #1223)
- autotools: rename variable (ce5f208 #1222)
- autotools: picky warning options tidy-up (cdca8cf #1221)
- autotools: fix
cp
to preserve attributes and timestamp inMakefile.am
(f64e631) - autotools: fix selecting WinCNG in cross-builds (and more) (00a3b88 #1187 #1186)
- autotools: use comma separator in
Requires.private
oflibssh2.pc
(7f83de1 #1124) - autotools: remove
AB_INIT
fromconfigure.ac
(f4f52cc) - autotools: improve libz position (c89174a #1077 #941 #1075 #1013 regr: 4f0f4bf)
- autotools: skip tests requiring static lib if
--disable-static
(572c57c #1072 #663 #1056 regr: 83853f8) - build: stop detecting
sys/param.h
header (2677d3b #1418 #1415) - build: silence warnings inside
FD_SET()
/FD_ISSET()
macros (323a14b #1379) - build: drop
-Wformat-nonliteral
warning suppressions (c452c5c #1342) - build: enable
-pedantic-errors
(3ec53f3 #1286) - build: add mingw-w64 support to
LIBSSH2_PRINTF()
attribute (f8c4579 #1287) - build: add
LIBSSH2_NO_DEPRECATED
option (b141450 #1267 #1266 #1260 #1259) - build: enable missing OpenSSF-recommended warnings, with fixes (afa6b86 #1257)
- build: enable more compiler warnings and fix them (7ecc309 #1224)
- build: picky warning updates (328a96b #1219)
- build: revert: respect autotools
DLL_EXPORT
inlibssh2.h
(481be04 #1141 #917 revert: fb1195c) - build: stop requiring libssl from openssl (c84745e #1128)
- build: tidy-up
libssh2.pc.in
variable names (5720dd9 #1125) - build: add/fix
Requires.private
packages inlibssh2.pc
(ef53806 #1123) - buildconf: drop (814a850 #1441 follow: fc5d778)
- checksrc: update, check all sources, fix fallouts (1117b67 #1457)
- checksrc: sync with curl (8cd473c #1272)
- checksrc: fix spelling in comment (a95d401)
- checksrc: modernise Perl file open (3d309f9)
- checksrc: switch to dot file (d67a91a #1052)
- ci: use Ninja with cmake (20ad047 #1458)
- ci: disable dependency tracking in autotools builds (e44f041 #1396)
- ci: fix mbedtls runners on macOS (8441153 #1381)
- ci: enable Unity mode for most CMake builds (1bfae57 #1367 #1034)
- ci: add shellcheck job and script (d88b9bc)
- ci: verify build and install from tarball (a86e27e #1362)
- ci: add reproducibility test for
maketgz
(2d765e4 #1360) - ci: use Linux runner for BSDs, add arm64 FreeBSD 14 job (6f86b19 #1343)
- ci: do not parallelize
distcheck
job (5e65dd8 #1339) - ci: add FreeBSD 14 job, fix issues (46333ad #1277)
- ci: add OmniOS job, fix issues (5e0ec99)
- ci: show compiler in cross/cygwin job names (c912408)
- ci: add OpenBSD (v7.4) job + fix build error in example (0c9a8e3 #1250)
- ci: add NetBSD (v9.3) job (65c7a7a)
- ci: update and speed up FreeBSD job (eee4e80)
- ci: use absolute path in
CMAKE_INSTALL_PREFIX
(7494881 #1247) - ci: boost mbedTLS build speed (236e79a #1245)
- ci: add BoringSSL job (cmake, gcc, amd64) (c9dd356 #1233)
- ci: fixup FreeBSD version, bump mbedTLS (fea6664 #1217)
- ci: add FreeBSD 13.2 job (a7d2a57 #1215)
- ci: mbedTLS 3.5.0 (5e19044 #1202)
- ci: update actions, use shallow clones with appveyor (d468a33 #1199)
- ci: replace
mv
+chmod
withinstall
inDockerfile
(5754fed #1175) - ci: set file mode early in
appveyor_docker.yml
(633db55) - ci: add spellcheck (codespell) (a79218d)
- ci: add MSYS builds (autotools and cmake) (d43b8d9 #1162)
- ci: add Cygwin builds (autotools and cmake) (f1e96e7 #1161)
- ci: add mingw-w64 UWP build (1215aa5 #1155 #1147)
- ci: add missing timeout to 'autotools distcheck' step (6265ffd)
- ci: add non-static autotools i386 build, ignore GHA updates on AppVeyor (c6e137f #1074 #1072)
- ci: prefer
=
operator in shell snippets (e5c0304 #1073) - ci: drop redundant/unused vars, sync var names (ab8e95b #1059)
- ci: add i386 Linux build (with mbedTLS) (abdf40c #1057 #1053)
- ci/appveyor: reduce test runs (workaround for infrastructure permafails) (b5e68bd #1461)
- ci/appveyor: increase wait for SSH server on GHA (bf3af90)
- ci/appveyor: bump to OpenSSL 3.2.1 (53d9c1a #1363 #1348)
- ci/appveyor: re-enable parallel mode (e190e5b #1294 #884 #867)
- ci/appveyor: delete UWP job broken since Visual Studio upgrade (d0a7f1d #1275)
- ci/appveyor: YAML/PowerShell formatting, shorten variable name (06fd721 #1200)
- ci/appveyor: move to pure PowerShell (8a081fd #1197)
- ci/GHA: revert concurrency and improve permissions (e4c042f)
- ci/GHA: FreeBSD 14.1, actions bump (ae04b1b #1424)
- ci/GHA: fix wolfSSL-from-source AES-GCM tests (1c0b07a #1409 #1408)
- ci/GHA: add Linux job with latest wolfSSL built from source (d4cea53 #1408 #1299 #1020)
- ci/GHA: tidy up build-from-source steps (2c63303)
- ci/GHA: show configure logs on failure and other tidy-ups (dab4839 #1403)
- ci/GHA: bump parallel jobs to nproc+1 (6f3d3bc #1402)
- ci/GHA: show test logs on failure (b8ffa7a #1401)
- ci/GHA: fix
Dockerfile
failing after Ubuntu package update (839bb84 #1400) - ci/GHA: use ubuntu-latest with OmniOS job (50143d5)
- ci/GHA: shell syntax tidy-up (3b23e03 #1390)
- ci/GHA: bump NetBSD/OpenBSD, add NetBSD arm64 job (e980af7 #1388)
- ci/GHA: tidy up wolfSSL autotools config on macOS (5953c1f #1383)
- ci/GHA: shorter mbedTLS autotools workaround (736e3d7 #1382 #1381)
- ci/GHA: fix gcrypt with autotools/macOS/Homebrew/ARM64 (ae2770d #1377)
- ci/GHA: fix verbose option for autotools jobs (499b27a #1376)
- ci/GHA: dump
config.log
on failure for macOS autotools jobs (4fa6921 #1375) - ci/GHA: fix
autoreconf
failure on macOS/Homebrew (0b64b30 #1374) - ci/GHA: fixup Homebrew location (for ARM runners) (6128aee #1373)
- ci/GHA: review/fixup auto-cancel settings (b08cfbc #1292)
- ci/GHA: restore curly braces in
if
(3674827 #1145) - ci/GHA: simplify
if
strings (cab3db5 #1140) - cmake: sync and improve Find modules, add
pkg-config
native detection (4506413 #1445 #1420) - cmake: generate
LIBSSH2_PC_LIBS_PRIVATE
dynamically (c87f129 #1466) - cmake: add comment about
ibssh2.pc.in
variables (14b1b9d) - cmake: support absolute
CMAKE_INSTALL_INCLUDEDIR
/CMAKE_INSTALL_LIBDIR
(d70cee3 #1465) - cmake: rename two variables and initialize them (0fce9dc #1464)
- cmake: prefer
find_dependency()
inlibssh2-config.cmake
(d9c2e55 #1460) - cmake: tidy up syntax, minor improvements (9d9ee78 #1446)
- cmake: rename mbedTLS and wolfSSL Find modules (570de0f)
- cmake: fixup version detection in mbedTLS Find module (8e3c40b #1444)
- cmake: mbedTLS detection tidy-ups (6d1d13c #1438)
- cmake: add quotes, delete ending dirseps (2bb46d4 #1437 #1166)
- cmake: sync formatting in
cmake/Find*
modules (a031069) - cmake: tidy up function name casing in
CopyRuntimeDependencies.cmake
(03547cb) - cmake: use the imported target of FindOpenSSL module (82b09f9 #1322)
- cmake: rename picky warnings script (64d6789 #1225)
- cmake: fix multiple include of libssh2 package (932d6a3 #1216)
- cmake: show crypto backend in feature summary (2038728 #1211)
- cmake: simplify showing CMake version (fc00bdd #1203)
- cmake: cleanup mbedTLS version detection more (4c241d5 #1196 #1192)
- cmake: delete duplicate
include()
(30eef0a) - cmake: improve/fix mbedTLS detection (4159467 #1192 #1191)
- cmake: tidy-up
foreach()
syntax (4a64ca1 #1180) - cmake: verify
libssh2_VERSION
in integration tests (a20572e) - cmake: show cmake versions in ci (87f5769)
- cmake: quote more strings (e9c7d3a #1173)
- cmake: add
ExternalProject
integration test (aeaefaf #1171) - cmake: add integration tests (8715c3d #1170)
- cmake: (re-)add aliases for
add_subdirectory()
builds (4ff64ae #1169) - cmake: style tidy-up (3fa5282 #1166)
- cmake: add
LIB_NAME
variable (5453fc8 #1159) - cmake: tidy-up concatenation in
CMAKE_MODULE_PATH
(ae7d510 #1157) - cmake: replace
libssh2
literals withPROJECT_NAME
variable (72fd259 #1152) - cmake: fix
STREQUAL
check in error branch (42d3bf1 #1151) - cmake: cache more config values on Windows (11a0369 #1142)
- cmake: streamline invocation (f58f77b #1138)
- cmake: merge
set_target_properties()
calls (a909100 #1132) - cmake: (re-)add zlib to
Libs.private
inlibssh2.pc
(6464301 #1131) - cmake: use
wolfssl/options.h
for detection, like autotools (c5ec6c4 #1130) - cmake: add openssl libs to
Libs.private
inlibssh2.pc
(5cfa59d #1127) - cmake: bump minimum CMake version to v3.7.0 (9cd18f4 #1126)
- cmake: CMAKE_SOURCE_DIR -> PROJECT_SOURCE_DIR (0f396aa #1121)
- cmake: tidy-ups (2fc3679 #1122)
- cmake: re-add
Libssh2:libssh2
for compatibility + lowercase namespace (2da13c1 #1104 #731 #1103) - copyright: remove years from copyright headers (187d89b #1082)
- disable DSA by default (b7ab0fa #1435 #1433)
- docs: update
INSTALL_AUTOTOOLS
(2f0efde #1316) - docs: replace SHA1 with SHA256 in CMake example (766bde9)
- example: restore
sys/time.h
for AIX (24503cb #1340 #1335 #1334 #1001 regr: e53aae0) - example: use
libssh2_socket_t
in X11 example (3f60ccb) - example: replace remaining libssh2_scp_recv with libssh2_scp_recv2 in output messages (8d69e63 #1258 follow: 6c84a42)
- example: fix regression in
ssh2_exec.c
(279a2e5 #1106 #861 #846 #1105 regr: ...
Assets 10
1.11.0
Compare
libssh2 1.11
This release includes the following enhancements and bugfixes:
o Adds support for encrypt-then-mac (ETM) MACs
o Adds support for AES-GCM crypto protocols
o Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
o Adds support for RSA certificate authentication
o Adds FIDO support with *_sk() functions
o Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
o Adds Agent Forwarding and libssh2_agent_sign()
o Adds support for Channel Signal message libssh2_channel_signal_ex()
o Adds support to get the user auth banner message libssh2_userauth_banner()
o Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519, AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES}
options
o Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
o Adds wolfSSL support to CMake file
o Adds mbedTLS 3.x support
o Adds LibreSSL 3.5 support
o Adds support for CMake "unity" builds
o Adds CMake support for building shared and static libs in a single pass
o Adds symbol hiding support to CMake
o Adds support for libssh2.rc for all build tools
o Adds .zip, .tar.xz and .tar.bz2 release tarballs
o Enables ed25519 key support for LibreSSL 3.7.0 or higher
o Improves OpenSSL 1.1 and 3 compatibility
o Now requires OpenSSL 1.0.2 or newer
o Now requires CMake 3.1 or newer
o SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
o SFTP: No longer has a packet limit when reading a directory
o SFTP: now parses attribute extensions if they exist
o SFTP: no longer will busy loop if SFTP fails to initialize
o SFTP: now clear various errors as expected
o SFTP: no longer skips files if the line buffer is too small
o SCP: add option to not quote paths
o SCP: Enables 64-bit offset support unconditionally
o Now skips leading \r and \n characters in banner_receive()
o Enables secure memory zeroing with all build tools on all platforms
o No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
o Speed up base64 encoding by 7x
o Assert if there is an attempt to write a value that is too large
o WinCNG: fix memory leak in _libssh2_dh_secret()
o Added protection against possible null pointer dereferences
o Agent now handles overly large comment lengths
o Now ensure KEX replies don't include extra bytes
o Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
o Fixed possible buffer overflow in keyboard interactive code path
o Fixed overlapping memcpy()
o Fixed Windows UWP builds
o Fixed DLL import name
o Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
o Support for building with gcc versions older than 8
o Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
o Restores ANSI C89 compliance
o Enabled new compiler warnings and fixed/silenced them
o Improved error messages
o Now uses CIFuzz
o Numerous minor code improvements
o Improvements to CI builds
o Improvements to unit tests
o Improvements to doc files
o Improvements to example files
o Removed "old gex" build option
o Removed no-encryption/no-mac builds
o Removed support for NetWare and Watcom wmake build files
This release would not have looked like this without help, code, reports and advice from friends like these:
Viktor Szakats, Dan Fandrich, Will Cosgrove, Daniel Stenberg, Michael Buckley,
Zenju, Miguel de Icaza, Nick Woodruff, Keith Dart, Anders Borum,
Jörgen Sigvardsson, vajdaakos, Gustavo Junior Alves, Marc Hörsken, iruis,
Nishit Majithia, Stefan Eissing, metab0t, Y. Yang, skundu07, Mike Harris,
Gabriel Smith, Leo Liu, Miguel de Icaza, Sandeep Bansal, Harry Sintonen,
xalopp, tihmstar, Sunil Nimmagadda
Assets 10
1.10.0
Compare
Assets 4
1.9.0
42d37aa
Compare
Assets 4
1.8.2
1.8.0
Compare
Assets 4
1.7.0
Compare
Assets 2
libssh2 1.6.0
Compare
This release includes the following changes:
o Added CMake build system
o Added libssh2_userauth_publickey_frommemory()
This release includes the following bugfixes:
o wait_socket: wrong use of difftime() [1]
o userauth: Fixed prompt text no longer being copied to the prompts struct
o mingw build: allow to pass custom CFLAGS
o Let mansyntax.sh work regardless of where it is called from
o Init HMAC_CTX before using it
o direct_tcpip: Fixed channel write
o WinCNG: fixed backend breakage
o OpenSSL: caused by introducing libssh2_hmac_ctx_init
o userauth.c: fix possible dereferences of a null pointer
o wincng: Added explicit clear memory feature to WinCNG backend
o openssl.c: fix possible segfault in case EVP_DigestInit fails
o wincng: fix return code of libssh2_md5_init()
o kex: do not ignore failure of libssh2_sha1_init()
o scp: fix that scp_send may transmit not initialised memory [3]
o scp.c: improved command length calculation
o nonblocking examples: fix warning about unused tvdiff on Mac OS X
o configure: make clear-memory default but WARN if backend unsupported
o OpenSSL: Enable use of OpenSSL that doesn't have DSA
o OpenSSL: Use correct no-blowfish #define
o kex: fix libgcrypt memory leaks of bignum [2]
o libssh2_channel_open: more detailed error message
o wincng: fixed memleak in (block) cipher destructor
This release would not have looked like this without help, code, reports and
advice from friends like these:
Alexander Lamaison, Daniel Stenberg, David Calavera, Hannes Domani,
Jakob Egger, Joe Turpin, Marc Hoersken, Viktor Szakáts, Will Cosgrove,
(9 contributors)
Thanks! (and sorry if I forgot to mention someone)
[1] = #1
[2] = https://trac.libssh2.org/ticket/168
[3] = https://trac.libssh2.org/ticket/244