summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMatt Johnston <matt@ucc.asn.au>2016-03-09 22:54:15 +0800
committerMatt Johnston <matt@ucc.asn.au>2016-03-09 22:54:15 +0800
commit685a0a81792355e36f2fa275164d7dff71c4bb78 (patch)
tree10edaf3f06d9d1d1c84d403ed93fb3af37a71900
parentd97aaf0f1e40d4ef1d4729113851edbb0dbb51e5 (diff)
downloaddropbear-685a0a81792355e36f2fa275164d7dff71c4bb78.tar.gz
2016.72
-rw-r--r--CHANGES5
-rw-r--r--sysoptions.h2
2 files changed, 6 insertions, 1 deletions
diff --git a/CHANGES b/CHANGES
index 7b1e2da..d9d6029 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+2016.72 - 9 March 2016
+
+- Validate X11 forwarding input. Could allow bypass of authorized_keys command= restrictions,
+ found by github.com/tintinweb. Thanks for Damien Miller for a patch.
+
2015.71 - 3 December 2015
- Fix "bad buf_incrpos" when data is transferred, broke in 2015.69
diff --git a/sysoptions.h b/sysoptions.h
index a29cbbe..85ef718 100644
--- a/sysoptions.h
+++ b/sysoptions.h
@@ -4,7 +4,7 @@
*******************************************************************/
#ifndef DROPBEAR_VERSION
-#define DROPBEAR_VERSION "2015.71"
+#define DROPBEAR_VERSION "2016.72"
#endif
#define LOCAL_IDENT "SSH-2.0-dropbear_" DROPBEAR_VERSION