lib/libssh
1
0
Fork 0
mirror of https://git.libssh.org/projects/libssh.git synced 2026-10-28 16:57:24 +03:00
Code Activity
Files
d1aec3bba775341df58cd4b2f03b6652a8bc80c6
libssh/src
History
Pavol Žáčik d9a31b0932 knownhosts: Return SSH_KNOWN_HOSTS_UNKNOWN with GSS KEX and no host key 
Also document that the knownhosts check may alternatively be skipped
with GSS key exchange, since the server is already authenticated
via Kerberos MIC.

Signed-off-by: Pavol Žáčik <pzacik@redhat.com>
Reviewed-by: Jakub Jelen <jjelen@redhat.com>
Merge-Request: <https://gitlab.com/libssh/libssh-mirror/-/merge_requests/842>
2026-06-29 13:28:29 +02:00
..
ABI
libssh-0.12.0
2026-02-10 10:35:23 +01:00
external
options: Add bundled getopt implementation from FreeBSD
2026-03-24 15:11:55 +01:00
threads
mbedtls: Warn about missing featues of mbedTLS build
2025-09-30 13:16:34 +02:00
agent.c
Use SSH_LOG_STRERROR where applicable
2026-04-01 14:40:47 +02:00
auth.c
Add a new API function ssh_session_kex_is_gss
2026-06-29 13:28:28 +02:00
base64.c
CVE-2025-4877 base64: Prevent integer overflow and potential OOB
2025-06-23 13:33:10 +02:00
bignum.c
bignum: Make sure the padding is large enough for the number
2025-01-21 11:32:49 +01:00
bind_config.c
docs: add doxygen documentation and fix inconsistencies
2026-03-13 20:48:07 +01:00
bind.c
docs: add doxygen documentation and fix inconsistencies
2026-03-13 20:48:07 +01:00
buffer.c
doc: add missing Doxygen comments and fix documentation style
2026-03-17 11:46:11 +01:00
callbacks.c
fix(callbacks): make is_callback_valid's behaviour consistent with its name
2025-07-24 16:10:54 +02:00
chachapoly.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
channels.c
Initialize some more pointers
2026-06-12 15:38:12 +02:00
client.c
misc: cap finite timeout conversion at INT_MAX
2026-04-30 15:05:55 +02:00
CMakeLists.txt
options: Add platform-independent getopt wrapper header
2026-03-24 15:11:55 +01:00
config_parser.c
Fix semantics of strchr() for C23
2026-05-05 18:29:53 +02:00
config.c
config: SendEnv implementation and configuration support
2026-06-27 00:16:07 +02:00
connect.c
connect: Avoid calling close with negative argument
2026-01-07 14:46:07 +01:00
connector.c
fix typos
2026-02-10 10:35:23 +01:00
crypto_common.c
…
curve25519_crypto.c
CVE-2025-8277: Fix memory leak of unused ephemeral key pair after client's wrong KEX guess
2025-08-14 10:32:05 +02:00
curve25519_fallback.c
refactor(curve25519): split the single file curve25519.c into multiple files for better readability
2025-05-06 22:03:18 +02:00
curve25519_gcrypt.c
CVE-2025-8277: Fix memory leak of unused ephemeral key pair after client's wrong KEX guess
2025-08-14 10:32:05 +02:00
curve25519_mbedcrypto.c
refactor(curve25519): split the single file curve25519.c into multiple files for better readability
2025-05-06 22:03:18 +02:00
curve25519.c
curve25519: Make ssh_curve25519_build_k public
2026-01-05 12:24:13 +01:00
dh_crypto.c
feat: add gssapi key exchange
2026-01-05 12:24:00 +01:00
dh_key.c
dh: Validate peer public key
2026-03-27 15:10:55 +01:00
dh-gex.c
dh-gex: Add missing goto error
2026-05-04 16:40:58 +02:00
dh.c
reformat: gssapi key exchange
2026-01-05 12:24:13 +01:00
ecdh_crypto.c
Native ML-KEM768 implementation
2026-01-15 12:48:06 +01:00
ecdh_gcrypt.c
Native ML-KEM768 implementation
2026-01-15 12:48:06 +01:00
ecdh_mbedcrypto.c
Native ML-KEM768 implementation
2026-01-15 12:48:06 +01:00
ecdh.c
CVE-2023-48795: client side mitigation
2023-12-18 17:35:04 +01:00
error.c
doc: add missing Doxygen comments and fix documentation style
2026-03-17 11:46:11 +01:00
gcrypt_missing.c
fix: replace str(n)(cat|cpy) with strl(cat|cpy)
2026-04-24 11:11:24 +02:00
getpass.c
fix: replace str(n)(cat|cpy) with strl(cat|cpy)
2026-04-24 11:11:24 +02:00
getrandom_crypto.c
getrandom_crypto.c: Add function to the documentation
2022-09-29 11:12:55 +02:00
getrandom_gcrypt.c
Build external override library with all symbols
2022-07-19 15:21:50 +02:00
getrandom_mbedcrypto.c
Build external override library with all symbols
2022-07-19 15:21:50 +02:00
gssapi.c
gssapi: fail if the selected OID is not in client-supplied OIDs
2026-05-04 12:16:08 +02:00
gzip.c
zlib: Move conditional compilation inside of the gzip.c
2025-01-14 14:47:44 +01:00
hybrid_mlkem.c
hybrid_mlkem: Fix incomplete error handling of short ML-KEM keys
2026-04-27 17:26:12 +02:00
init.c
Add missing includes for fprintf()
2022-11-23 15:29:29 +01:00
kdf.c
CVE-2023-6918: kdf: Detect context init failures
2023-12-18 17:35:04 +01:00
kex-gss.c
Use SSH_LOG_STRERROR where applicable
2026-04-01 14:40:47 +02:00
kex.c
Fix semantics of strchr() for C23
2026-05-05 18:29:53 +02:00
known_hosts.c
knownhosts: restrict StrictHostKeyChecking off on key mismatches
2026-04-30 17:23:12 +02:00
knownhosts.c
knownhosts: Return SSH_KNOWN_HOSTS_UNKNOWN with GSS KEX and no host key
2026-06-29 13:28:29 +02:00
legacy.c
doc: add missing Doxygen comments and fix documentation style
2026-03-17 11:46:11 +01:00
libcrypto-compat.h
Move old DSA and RSA structs into EVP_PKEY
2022-12-20 10:07:27 +01:00
libcrypto.c
crypto: Add support for Poly1305 from LibreSSL
2026-02-02 18:37:54 +01:00
libgcrypt.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
libmbedcrypto.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
libssh.map
Add a new API function ssh_session_kex_is_gss
2026-06-29 13:28:28 +02:00
log.c
doc: add missing Doxygen comments and fix documentation style
2026-03-17 11:46:11 +01:00
match.c
fix: replace str(n)(cat|cpy) with strl(cat|cpy)
2026-04-24 11:11:24 +02:00
mbedcrypto_missing.c
crypto: Add ssh_crypto_free().
2023-08-25 15:13:31 +02:00
mbedcrypto-compat.h
refactor(curve25519): split the single file curve25519.c into multiple files for better readability
2025-05-06 22:03:18 +02:00
md_crypto.c
kex: Allow MLKEM key exchanges in FIPS mode
2026-04-24 13:17:18 +02:00
md_gcrypt.c
md: Implement one-shot md5
2026-01-05 12:24:13 +01:00
md_mbedcrypto.c
md: Implement one-shot md5
2026-01-05 12:24:13 +01:00
messages.c
Add a new API function ssh_session_kex_is_gss
2026-06-29 13:28:28 +02:00
misc.c
Fix semantics of strchr() for C23
2026-05-05 18:29:53 +02:00
mlkem_crypto.c
kex: Allow MLKEM key exchanges in FIPS mode
2026-04-24 13:17:18 +02:00
mlkem_gcrypt.c
Add missing check in ML-KEM implementation of gcrypt
2026-01-15 12:23:42 +01:00
mlkem_native.c
Native ML-KEM768 implementation
2026-01-15 12:48:06 +01:00
mlkem.c
Native ML-KEM768 implementation
2026-01-15 12:48:06 +01:00
options.c
config: SendEnv implementation and configuration support
2026-06-27 00:16:07 +02:00
packet_cb.c
Add missing newline on eof
2026-04-28 15:22:19 +02:00
packet_crypt.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
packet.c
packet: avoid logging uninitialized sequence number
2026-06-03 10:38:45 +02:00
pcap.c
Use calloc instead of zeroizing structure after malloc
2025-08-06 11:16:58 +02:00
pki_container_openssh.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
pki_context.c
pki_context: Document 0 is valid for bit size (default)
2026-03-16 19:04:57 +01:00
pki_crypto.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
pki_ed25519_common.c
CVE-2025-4878 Initialize pointers where possible
2025-06-23 15:24:30 +02:00
pki_ed25519.c
ed25519: Avoid timing leak when comparing private keys
2026-02-05 17:19:01 +01:00
pki_gcrypt.c
fix: test failure in pkd against dropbear with libgcrypt
2026-04-27 17:53:22 +02:00
pki_mbedcrypto.c
pki: Avoild false positive matches when comparing certificates in mbedtls and gcrypt
2026-01-05 12:21:43 +01:00
pki_sk.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
pki.c
Fix semantics of strchr() for C23
2026-05-05 18:29:53 +02:00
poll.c
doc: add missing Doxygen comments and fix documentation style
2026-03-17 11:46:11 +01:00
scp.c
CVE-2026-0964 scp: Reject invalid paths received through scp
2026-02-05 22:31:48 +01:00
server.c
Add a new API function ssh_session_kex_is_gss
2026-06-29 13:28:28 +02:00
session.c
Add a new API function ssh_session_kex_is_gss
2026-06-29 13:28:28 +02:00
sftp_aio.c
sftp: Avoid dead code and possible overruns
2025-01-13 15:47:43 +01:00
sftp_common.c
CVE-2026-0968: sftp: Sanitize input handling in sftp_parse_longname()
2026-02-05 17:19:01 +01:00
sftp.c
Initialize some more pointers
2026-06-12 15:38:12 +02:00
sftpserver.c
sftpserver: Fix Doxygen syntax warning for @warning command
2026-06-27 00:18:19 +02:00
sk_common.c
Replace explicit_bzero with ssh_burn
2025-12-12 18:03:19 +01:00
sk_usbhid.c
fido2: implement the default sk_callbacks for FIDO2/U2F keys using the usb-hid protocol
2025-11-09 05:52:45 +05:30
sntrup761.c
sntrup: Remove needless conversion of shared secret to bignum
2026-03-06 15:02:37 +01:00
socket.c
Use SSH_LOG_STRERROR where applicable
2026-04-01 14:40:47 +02:00
string.c
string: Made ssh_string_new() to zero-init payload on creation
2026-05-08 14:23:34 +02:00
threads.c
doc: add missing Doxygen comments and fix documentation style
2026-03-17 11:46:11 +01:00
token.c
fix: replace str(n)(cat|cpy) with strl(cat|cpy)
2026-04-24 11:11:24 +02:00
ttyopts.c
ttyopts: make non-POSIX defines optional
2025-11-04 14:46:58 +01:00
wrapper.c
pki: add ssh_key_type_and_hash_from_signature_name()
2026-03-24 10:50:39 +01:00