Francesco Rollo edbd929fa2 feat(server): Add support for -o option argument in server example ...

Allow passing server configuration options via the -o flag and expose
ssh_bind_config_parse_string() as a public API.

Signed-off-by: Francesco <eferollo@gmail.com>
Reviewed-by: Jakub Jelen <jjelen@redhat.com>

2026-02-24 10:36:58 +01:00

..

ABI

libssh-0.12.0

2026-02-10 10:35:23 +01:00

external

mlkem: Use fprintf instead of internal logging function

2026-02-02 19:32:16 +01:00

threads

mbedtls: Warn about missing featues of mbedTLS build

2025-09-30 13:16:34 +02:00

agent.c

Make ssh_socket_set_fd() return errors

2025-08-12 12:12:47 +02:00

auth.c

Update recently added logging to be less verbose

2026-02-20 10:54:27 +01:00

base64.c

CVE-2025-4877 base64: Prevent integer overflow and potential OOB

2025-06-23 13:33:10 +02:00

bignum.c

bignum: Make sure the padding is large enough for the number

2025-01-21 11:32:49 +01:00

bind_config.c

feat(server): Add support for -o option argument in server example

2026-02-24 10:36:58 +01:00

bind.c

bind: adjust hostkey error messages to be more precise

2026-01-05 12:24:13 +01:00

buffer.c

Replace explicit_bzero with ssh_burn

2025-12-12 18:03:19 +01:00

callbacks.c

fix(callbacks): make is_callback_valid's behaviour consistent with its name

2025-07-24 16:10:54 +02:00

chachapoly.c

CVE-2025-4878 Initialize pointers where possible

2025-06-23 15:24:30 +02:00

channels.c

channels: Fix OOM error check after strdup

2026-02-20 10:55:17 +01:00

client.c

Native ML-KEM768 implementation

2026-01-15 12:48:06 +01:00

CMakeLists.txt

Native ML-KEM768 implementation

2026-01-15 12:48:06 +01:00

config_parser.c

CVE-2025-4878 Initialize pointers where possible

2025-06-23 15:24:30 +02:00

config.c

Update recently added logging to be less verbose

2026-02-20 10:54:27 +01:00

connect.c

connect: Avoid calling close with negative argument

2026-01-07 14:46:07 +01:00

connector.c

fix typos

2026-02-10 10:35:23 +01:00

crypto_common.c

crypto: Use stdint types and make code more readable of secure_memcmp()

2022-06-20 09:18:59 +02:00

curve25519_crypto.c

CVE-2025-8277: Fix memory leak of unused ephemeral key pair after client's wrong KEX guess

2025-08-14 10:32:05 +02:00

curve25519_fallback.c

refactor(curve25519): split the single file curve25519.c into multiple files for better readability

2025-05-06 22:03:18 +02:00

curve25519_gcrypt.c

CVE-2025-8277: Fix memory leak of unused ephemeral key pair after client's wrong KEX guess

2025-08-14 10:32:05 +02:00

curve25519_mbedcrypto.c

refactor(curve25519): split the single file curve25519.c into multiple files for better readability

2025-05-06 22:03:18 +02:00

curve25519.c

curve25519: Make ssh_curve25519_build_k public

2026-01-05 12:24:13 +01:00

dh_crypto.c

feat: add gssapi key exchange

2026-01-05 12:24:00 +01:00

dh_key.c

feat: add gssapi key exchange

2026-01-05 12:24:00 +01:00

dh-gex.c

CVE-2026-0965 config: Do not attempt to read non-regular and too large configuration files

2026-02-05 22:31:48 +01:00

dh.c

reformat: gssapi key exchange

2026-01-05 12:24:13 +01:00

ecdh_crypto.c

Native ML-KEM768 implementation

2026-01-15 12:48:06 +01:00

ecdh_gcrypt.c

Native ML-KEM768 implementation

2026-01-15 12:48:06 +01:00

ecdh_mbedcrypto.c

Native ML-KEM768 implementation

2026-01-15 12:48:06 +01:00

ecdh.c

CVE-2023-48795: client side mitigation

2023-12-18 17:35:04 +01:00

error.c

SSH_LOG_TRACE: Recategorize loglevels

2022-10-07 09:13:19 +02:00

gcrypt_missing.c

CVE-2025-4878 Initialize pointers where possible

2025-06-23 15:24:30 +02:00

getpass.c

use standard O_NONBLOCK naming

2025-12-12 18:18:02 +01:00

getrandom_crypto.c

getrandom_crypto.c: Add function to the documentation

2022-09-29 11:12:55 +02:00

getrandom_gcrypt.c

Build external override library with all symbols

2022-07-19 15:21:50 +02:00

getrandom_mbedcrypto.c

Build external override library with all symbols

2022-07-19 15:21:50 +02:00

gssapi.c

gss-kex: Fix memory leaks in ssh_gssapi_check_client_config

2026-02-24 10:30:53 +01:00

gzip.c

zlib: Move conditional compilation inside of the gzip.c

2025-01-14 14:47:44 +01:00

hybrid_mlkem.c

Native ML-KEM768 implementation

2026-01-15 12:48:06 +01:00

init.c

Add missing includes for fprintf()

2022-11-23 15:29:29 +01:00

kdf.c

CVE-2023-6918: kdf: Detect context init failures

2023-12-18 17:35:04 +01:00

kex-gss.c

gss-kex: Release output_token and mic on error paths

2026-02-24 10:30:53 +01:00

kex.c

Native ML-KEM768 implementation

2026-01-15 12:48:06 +01:00

known_hosts.c

CVE-2026-0965 config: Do not attempt to read non-regular and too large configuration files

2026-02-05 22:31:48 +01:00

knownhosts.c

CVE-2026-0965 config: Do not attempt to read non-regular and too large configuration files

2026-02-05 22:31:48 +01:00

legacy.c

New ssh_get_local_hostname()

2026-02-05 15:43:11 +01:00

libcrypto-compat.h

Move old DSA and RSA structs into EVP_PKEY

2022-12-20 10:07:27 +01:00

libcrypto.c

crypto: Add support for Poly1305 from LibreSSL

2026-02-02 18:37:54 +01:00

libgcrypt.c

Replace explicit_bzero with ssh_burn

2025-12-12 18:03:19 +01:00

libmbedcrypto.c

Replace explicit_bzero with ssh_burn

2025-12-12 18:03:19 +01:00

libssh.map

feat(server): Add support for -o option argument in server example

2026-02-24 10:36:58 +01:00

log.c

CVE-2025-4878 Initialize pointers where possible

2025-06-23 15:24:30 +02:00

match.c

CVE-2026-0967 match: Avoid recursive matching (ReDoS)

2026-02-05 17:19:01 +01:00

mbedcrypto_missing.c

crypto: Add ssh_crypto_free().

2023-08-25 15:13:31 +02:00

mbedcrypto-compat.h

refactor(curve25519): split the single file curve25519.c into multiple files for better readability

2025-05-06 22:03:18 +02:00

md_crypto.c

md: Implement one-shot md5

2026-01-05 12:24:13 +01:00

md_gcrypt.c

md: Implement one-shot md5

2026-01-05 12:24:13 +01:00

md_mbedcrypto.c

md: Implement one-shot md5

2026-01-05 12:24:13 +01:00

messages.c

Add Keyboard Interactive

2026-01-06 22:56:44 +05:30

misc.c

Update recently added logging to be less verbose

2026-02-20 10:54:27 +01:00

mlkem_crypto.c

kex: Implement remaining hybrid ML-KEM methods

2025-11-25 17:57:42 +01:00

mlkem_gcrypt.c

Add missing check in ML-KEM implementation of gcrypt

2026-01-15 12:23:42 +01:00

mlkem_native.c

Native ML-KEM768 implementation

2026-01-15 12:48:06 +01:00

mlkem.c

Native ML-KEM768 implementation

2026-01-15 12:48:06 +01:00

options.c

CVE-2025-14821 cmake: Fix global config location on Windows

2026-02-05 22:31:48 +01:00

packet_cb.c

packet_cb: adjust response to NEWKEYS w.r.t. GSSAPI

2026-01-05 12:24:13 +01:00

packet_crypt.c

Replace explicit_bzero with ssh_burn

2025-12-12 18:03:19 +01:00

packet.c

packet: complete GSSAPI packet filter

2026-01-05 12:24:13 +01:00

pcap.c

Use calloc instead of zeroizing structure after malloc

2025-08-06 11:16:58 +02:00

pki_container_openssh.c

Replace explicit_bzero with ssh_burn

2025-12-12 18:03:19 +01:00

pki_context.c

feat(pki): implement PKI context API

2025-11-13 15:11:53 +05:30

pki_crypto.c

Replace explicit_bzero with ssh_burn

2025-12-12 18:03:19 +01:00

pki_ed25519_common.c

CVE-2025-4878 Initialize pointers where possible

2025-06-23 15:24:30 +02:00

pki_ed25519.c

ed25519: Avoid timing leak when comparing private keys

2026-02-05 17:19:01 +01:00

pki_gcrypt.c

pki: Avoild false positive matches when comparing certificates in mbedtls and gcrypt

2026-01-05 12:21:43 +01:00

pki_mbedcrypto.c

pki: Avoild false positive matches when comparing certificates in mbedtls and gcrypt

2026-01-05 12:21:43 +01:00

pki_sk.c

Replace explicit_bzero with ssh_burn

2025-12-12 18:03:19 +01:00

pki.c

pki: Discourage comparing private keys

2026-02-05 17:19:01 +01:00

poll.c

poll: Use is_locked helper where possible

2025-08-14 10:33:58 +02:00

scp.c

CVE-2026-0964 scp: Reject invalid paths received through scp

2026-02-05 22:31:48 +01:00

server.c

gssapi: enable gssapi-keyex in FIPS mode

2026-01-05 12:24:13 +01:00

session.c

misc: Add support for %j and %C percent expand

2026-02-05 15:43:11 +01:00

sftp_aio.c

sftp: Avoid dead code and possible overruns

2025-01-13 15:47:43 +01:00

sftp_common.c

CVE-2026-0968: sftp: Sanitize input handling in sftp_parse_longname()

2026-02-05 17:19:01 +01:00

sftp.c

sftp: Fix out-of-bound read from sftp extensions

2026-02-05 17:19:00 +01:00

sftpserver.c

sftpserver: Fix memory leak of h->name in process_opendir error path

2026-02-24 10:33:35 +01:00

sk_common.c

Replace explicit_bzero with ssh_burn

2025-12-12 18:03:19 +01:00

sk_usbhid.c

fido2: implement the default sk_callbacks for FIDO2/U2F keys using the usb-hid protocol

2025-11-09 05:52:45 +05:30

sntrup761.c

sntrup: Avoid linking issues in external_override tests

2026-01-15 12:22:10 +01:00

socket.c

Update recently added logging to be less verbose

2026-02-20 10:54:27 +01:00

string.c

Replace explicit_bzero with ssh_burn

2025-12-12 18:03:19 +01:00

threads.c

threads.c: Remove dot from documentation group definition

2022-10-04 10:35:02 +02:00

token.c

Replace explicit_bzero with ssh_burn

2025-12-12 18:03:19 +01:00

ttyopts.c

ttyopts: make non-POSIX defines optional

2025-11-04 14:46:58 +01:00

wrapper.c

Native ML-KEM768 implementation

2026-01-15 12:48:06 +01:00