22

✏️ Editing: RELEASE-NOTES

libssh2 1.10

This release includes the following enhancements and bugfixes:

o adds agent forwarding support
 o adds OpenSSH Agent support on Windows
 o adds ECDSA key support using the Mbed TLS backend
 o adds ECDSA cert authentication
 o adds diffie-hellman-group14-sha256, diffie-hellman-group16-sha512,
   diffie-hellman-group18-sha512 key exchanges
 o adds support for PKIX key reading when using ed25519 with OpenSSL
 o adds support for EWOULDBLOCK on VMS systems
 o adds support for building with OpenSSL 3
 o adds support for using FIPS mode in OpenSSL
 o adds debug symbols when building with MSVC
 o adds support for building on the 3DS
 o adds unicode build support on Windows
 o restores os400 building
 o increases min, max and opt Diffie Hellman group values
 o improves portiablity of the make file
 o improves timeout behavior with 2FA keyboard auth
 o various improvements to the Wincng backend
 o fixes reading parital packet replies when using an agent
 o fixes Diffie Hellman key exchange on Windows 1903+ builds
 o fixes building tests with older versions of OpenSSL
 o fixes possible multiple definition warnings
 o fixes potential cast issues _libssh2_ecdsa_key_get_curve_type()
 o fixes potential use after free if libssh2_init() is called twice
 o improved linking when using Mbed TLS
 o fixes call to libssh2_crypto_exit() if crypto hasn't been initialized
 o fixes crash when loading public keys with no id
 o fixes possible out of bounds read when exchanging keys
 o fixes possible out of bounds read when reading packets
 o fixes possible out of bounds read when opening an X11 connection
 o fixes possible out of bounds read when ecdh host keys
 o fixes possible hang when trying to read a disconnected socket
 o fixes a crash when using the delayed compression option
 o fixes read error with large known host entries
 o fixes various warnings
 o fixes various small memory leaks
 o improved error handling, various detailed errors will now be reported
 o builds are now using OSS-Fuzz
 o builds now use autoreconf instead of a custom build script
 o cmake now respects install directory
 o improved CI backend
 o updated HACKING-CRYPTO documentation
 o use markdown file extensions
 o improved unit tests

This release would not have looked like this without help, code, reports and
advice from friends like these:

katzer, Orgad Shaneh, mark-i-m, Zenju, axjowa, Thilo Schulz,
  Etienne Samson, hlefebvre, seba30, Panos, jethrogb, Fabrice Fontaine,
  Will Cosgrove, Daniel Stenberg, Michael Buckley, Wallace Souza Silva,
  Romain-Geissler-1A, meierha, Tseng Jun, Thomas Klausner, Brendan Shanks,
  Harry Sintonen, monnerat, Koutheir Attouchi, Marc Hörsken, yann-morin-1998,
  Wez Furlong, TDi-jonesds, David Benjamin, Max Dymond, Igor Klevanets,
  Viktor Szakats, Laurent Stacul, Mstrodl, Gabriel Smith, MarcT512,
  Paul Capron, teottin, Tor Erik Ottinsen, Brian Inglis

(40 contributors)

MR SKB