DMARC-Filter: OpenDMARC Filter v1.4.2 sourceware.org 6C989385773C
To: cygwin AT cygwin DOT com
Date: Sat, 10 Jun 2023 15:09:21 -0600
Message-Id: <announce.20230610150921.14914-1-Brian.Inglis@Shaw.ca>
Subject: [ANNOUNCEMENT] Updated: libssh2{_1, -devel} mingw64-{x86_64,
 i686}-libssh2 1.11
From: Cygwin libssh2 Maintainer via Cygwin-announce via Cygwin
 <cygwin AT cygwin DOT com>
Reply-To: cygwin AT cygwin DOT com
Cc: Cygwin libssh2 Maintainer via Cygwin-announce <cygwin-announce AT cygwin DOT com>,
        Cygwin libssh2 Maintainer <Brian DOT Inglis AT Shaw DOT ca>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: "Cygwin" <cygwin-bounces+archive-cygwin=delorie DOT com AT cygwin DOT com>

The following packages have been upgraded in the Cygwin distribution:

* libssh2_1			1.11
* libssh2-devel			1.11
* mingw64-x86_64-libssh2	1.11

libssh2 is a library implementing the SSH2 protocol, supporting many features.

The Mingw package provides Mingw MS VC RT-linked binaries, NOT Cygwin binaries,
for use with the mingw64-x86_64-gcc cross compiler, installed in
/usr/x86_64-w64-mingw32/sys-root/mingw/{bin,lib,include}/.

For more information see the project home page:

	https://libssh2.org/

As there are many changes each release please see below or read
/usr/share/doc/libssh2/RELEASE-NOTES after installation for details:

	https://libssh2.org/changes.html


libssh2 1.11

This release includes the following enhancements and bugfixes:

* Adds support for encrypt-then-mac (ETM) MACs
* Adds support for AES-GCM crypto protocols
* Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
* Adds support for RSA certificate authentication
* Adds FIDO support with *_sk() functions
* Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
* Adds Agent Forwarding and libssh2_agent_sign()
* Adds support for Channel Signal message libssh2_channel_signal_ex()
* Adds support to get the user auth banner message libssh2_userauth_banner()
* Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
  AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
* Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
* Adds wolfSSL support to CMake file
* Adds mbedTLS 3.x support
* Adds LibreSSL 3.5 support
* Adds support for CMake "unity" builds
* Adds CMake support for building shared and static libs in a single pass
* Adds symbol hiding support to CMake
* Adds support for libssh2.rc for all build tools
* Adds .zip, .tar.xz and .tar.bz2 release tarballs
* Enables ed25519 key support for LibreSSL 3.7.0 or higher
* Improves OpenSSL 1.1 and 3 compatibility
* Now requires OpenSSL 1.0.2 or newer
* Now requires CMake 3.1 or newer
* SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
* SFTP: No longer has a packet limit when reading a directory
* SFTP: now parses attribute extensions if they exist
* SFTP: no longer will busy loop if SFTP fails to initialize
* SFTP: now clear various errors as expected
* SFTP: no longer skips files if the line buffer is too small
* SCP: add option to not quote paths
* SCP: Enables 64-bit offset support unconditionally
* Now skips leading \r and \n characters in banner_receive()
* Enables secure memory zeroing with all build tools on all platforms
* No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
* Speed up base64 encoding by 7x
* Assert if there is an attempt to write a value that is too large
* WinCNG: fix memory leak in _libssh2_dh_secret()
* Added protection against possible null pointer dereferences
* Agent now handles overly large comment lengths
* Now ensure KEX replies don't include extra bytes
* Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
* Fixed possible buffer overflow in keyboard interactive code path
* Fixed overlapping memcpy()
* Fixed Windows UWP builds
* Fixed DLL import name
* Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
* Support for building with gcc versions older than 8
* Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
* Restores ANSI C89 compliance
* Enabled new compiler warnings and fixed/silenced them
* Improved error messages
* Now uses CIFuzz
* Numerous minor code improvements
* Improvements to CI builds
* Improvements to unit tests
* Improvements to doc files
* Improvements to example files
* Removed "old gex" build option
* Removed no-encryption/no-mac builds
* Removed support for NetWare and Watcom wmake build files


-- 
Problem reports:      https://cygwin.com/problems.html
FAQ:                  https://cygwin.com/faq/
Documentation:        https://cygwin.com/docs.html
Unsubscribe info:     https://cygwin.com/ml/#unsubscribe-simple