Merge pull request #508 from ejohnstown/release-1.4.13

Release 1.4.13

Author: JacobBarthelmeh

ChangeLog.md

@@ -1,3 +1,30 @@
+# wolfSSH v1.4.13 (Apr 3, 2023)
+
+## New Feature Additions and Improvements
+
+- Improvement to forking the wolfSSHd daemon.
+- Added an STM32Cube Expansion pack. See the file _ide/STM32CUBE/README.md_
+  for more information. (https://www.wolfssl.com/files/ide/I-CUBE-wolfSSH.pack)
+- Improved test coverage for wolfSSHd.
+- X.509 style private key support.
+
+## Fixes
+
+- Fixed shadow password checking in wolfSSHd.
+- Building cleanups: warnings, types, 32-bit.
+- SFTP fixes for large files.
+- Testing and fixes with SFTP and LwIP.
+
+## Vulnerabilities
+
+- wolfSSHd would allow users without passwords to log in with any password.
+  This is fixed as of this version. The return value of crypt() was not
+  correctly checked. This issue was introduced in v1.4.11 and only affects
+  wolfSSHd when using the default authentication callback provided with
+  wolfSSHd. Anyone using wolfSSHd should upgrade to v1.4.13.
+
+---
+
 # wolfSSH v1.4.12 (Dec 28, 2022)
 
 ## New Feature Additions and Improvements

apps/wolfsshd/auth.c

@@ -1,6 +1,6 @@
 /* auth.c
  *
- * Copyright (C) 2014-2022 wolfSSL Inc.
+ * Copyright (C) 2014-2023 wolfSSL Inc.
  *
  * This file is part of wolfSSH.
  *

apps/wolfsshd/auth.h

@@ -1,6 +1,6 @@
 /* auth.h
  *
- * Copyright (C) 2014-2022 wolfSSL Inc.
+ * Copyright (C) 2014-2023 wolfSSL Inc.
  *
  * This file is part of wolfSSH.
  *

apps/wolfsshd/configuration.c

@@ -1,6 +1,6 @@
 /* configuration.c
  *
- * Copyright (C) 2014-2022 wolfSSL Inc.
+ * Copyright (C) 2014-2023 wolfSSL Inc.
  *
  * This file is part of wolfSSH.
  *

apps/wolfsshd/configuration.h

@@ -1,6 +1,6 @@
 /* configuration.h
  *
- * Copyright (C) 2014-2022 wolfSSL Inc.
+ * Copyright (C) 2014-2023 wolfSSL Inc.
  *
  * This file is part of wolfSSH.
  *

apps/wolfsshd/wolfsshd.c

@@ -1,6 +1,6 @@
 /* wolfsshd.c
  *
- * Copyright (C) 2014-2022 wolfSSL Inc.
+ * Copyright (C) 2014-2023 wolfSSL Inc.
  *
  * This file is part of wolfSSH.
  *

configure.ac

@@ -1,9 +1,9 @@
 # wolfssh
-# Copyright (C) 2014-2022 wolfSSL Inc.
+# Copyright (C) 2014-2023 wolfSSL Inc.
 # All right reserved.
 
-AC_COPYRIGHT([Copyright (C) 2014-2022 wolfSSL Inc.])
-AC_INIT([wolfssh],[1.4.12],[[email protected]],[wolfssh],[https://www.wolfssl.com])
+AC_COPYRIGHT([Copyright (C) 2014-2023 wolfSSL Inc.])
+AC_INIT([wolfssh],[1.4.13],[[email protected]],[wolfssh],[https://www.wolfssl.com])
 AC_PREREQ([2.63])
 AC_CONFIG_AUX_DIR([build-aux])
 
@@ -18,7 +18,7 @@ AC_ARG_PROGRAM
 AC_CONFIG_MACRO_DIR([m4])
 AC_CONFIG_HEADERS([config.h])
 
-WOLFSSH_LIBRARY_VERSION=14:0:6
+WOLFSSH_LIBRARY_VERSION=15:0:7
 #                       | | |
 #                +------+ | +---+
 #                |        |     |

examples/client/client.c

@@ -1,6 +1,6 @@
 /* client.c
  *
- * Copyright (C) 2014-2022 wolfSSL Inc.
+ * Copyright (C) 2014-2023 wolfSSL Inc.
  *
  * This file is part of wolfSSH.
  *

examples/client/client.h

@@ -1,6 +1,6 @@
 /* client.h
  *
- * Copyright (C) 2014-2022 wolfSSL Inc.
+ * Copyright (C) 2014-2023 wolfSSL Inc.
  *
  * This file is part of wolfSSH.
  *

examples/echoserver/echoserver.c

@@ -1,6 +1,6 @@
 /* echoserver.c
  *
- * Copyright (C) 2014-2022 wolfSSL Inc.
+ * Copyright (C) 2014-2023 wolfSSL Inc.
  *
  * This file is part of wolfSSH.
  *