The unified diff between revisions [8036b554..] and [8a7db1e2..] is displayed below. It can also be downloaded as a raw diff.
This diff has been restricted to the following files: 'CHANGES'
# # # patch "CHANGES" # from [4de896d8eb9ec752aaad4706a128f98fe199c869] # to [e725f331510859501b092d9dd9e8d6c258e73e3b] # ============================================================ --- CHANGES 4de896d8eb9ec752aaad4706a128f98fe199c869 +++ CHANGES e725f331510859501b092d9dd9e8d6c258e73e3b @@ -1,3 +1,89 @@ +0.50 - Wed 8 August 2007 + +- Add DROPBEAR_PASSWORD environment variable to specify a dbclient password + +- Use /dev/urandom by default, since that's what everyone does anyway + +- Correct vfork() use for uClinux in scp + (thanks to Alex Landau) + +- Exit with an exit code of 1 if dropbear can't bind to any ports + (thanks to Nicolai Ehemann) + +- Improve network performance and add a -W <receive_window> argument for + adjusting the tradeoff between network performance and memory consumption. + +- Fix a problem where reply packets could be sent during key exchange, + in violation of the SSH spec. This could manifest itself with connections + being terminated after 8 hours with new TCP-forward connections being + established. + +- Add -K <keepalive_time> argument, ensuring that data is transmitted + over the connection at least every N seconds. + +- dropbearkey will no longer generate DSS keys of sizes other than 1024 + bits, as required by the DSS specification. (Other sizes are still + accepted for use to provide backwards compatibility). + +0.49 - Fri 23 February 2007 + +- Security: dbclient previously would prompt to confirm a + mismatching hostkey but wouldn't warn loudly. It will now + exit upon a mismatch. + +- Compile fixes, make sure that all variable definitions are at the start + of a scope. + +- Added -P pidfile argument to the server (from Swen Schillig) + +- Add -N dbclient option for "no command" + +- Add -f dbclient option for "background after auth" + +- Add ability to limit binding to particular addresses, use + -p [address:]port, patch from Max-Gerd Retzlaff. + +- Try to finally fix ss_family compilation problems (for old + glibc systems) + +- Fix finding relative-path server hostkeys when running daemonized + +- Use $HOME in preference to that from /etc/passwd, so that + dbclient can still work on broken systems. + +- Fix various issues found by Klocwork defect analysis, mostly memory leaks + and error-handling. Thanks to Klocwork for their service. + +- Improve building in a separate directory + +- Add compile-time LOG_COMMANDS option to log user commands + +- Add '-y' flag to dbclient to unconditionally accept host keys, + patch from Luciano Miguel Ferreira Rocha + +- Return immediately for "sleep 10 & echo foo", rather than waiting + for the sleep to return (pointed out by Rob Landley). + +- Avoid hanging after exit in certain cases (such as scp) + +- Various minor fixes, in particular various leaks reported by + Erik Hovland + +- Disable core dumps on startup + +- Don't erase over every single buffer, since it was a bottleneck. + On systems where it really matters, encrypted swap should be utilised. + +- Read /dev/[u]random only once at startup to conserve kernel entropy + +- Upgrade to LibTomCrypt 1.16 and LibTomMath 0.40 + +- Upgrade config.status and config.guess + +0.48.1 - Sat 11 March 2006 + +- Compile fix for scp + 0.48 - Thurs 9 March 2006 - Check that the circular buffer is properly empty before