SECURITY.md
Created by pmeunier on Aug 21, 2026, 7:04 AM
State:
AEGELFYVLVOM5ISWYX4AXVXYDQSQGND6WDYPKMEBTEHGUAISDBNQCVersion bumps
Created by pmeunier on Aug 21, 2026, 6:54 AM
State:
75T2XUW4KQGOYXO5OURJWKWQL7ZEYKXNDUV6CTKMOIAKY3MKEI5ACthrussh-keys: stop panicking on malformed OpenSSH/PKCS8 key files
Created by pmeunier on Aug 21, 2026, 6:46 AM
State:
ODHL6Y3JMQAGEQAQJA2MKYPIPPHU4KQVAK2FIUE6PQQD3AMS24CACcryptovec/encoding: checked size arithmetic and overflow-safe reader bounds
Created by pmeunier on Aug 21, 2026, 6:46 AM
State:
B4LIIUSLGG7IEWMZ73LKWS636HN7PJXIP67MWR6K6OAKSIG5J5FQCenforce strict-KEX during initial exchange, dispatch none auth, harden banner read
Created by pmeunier on Aug 21, 2026, 6:46 AM
State:
GW5AUMNXCZYI7CGN46ZJ4H4LBTLT7MR6T5HIQW4DBJRWQYMWXUZQCthrussh-keys: bound key/signature parsing and harden agent inputs
Created by pmeunier on Aug 21, 2026, 6:37 AM
State:
YNQSHDGW2GB2OFJUH7CGJXCOUUALGKMKRZCGFNOMZDLXKSOTFKNQCtransport/channels: fix remote-triggerable panics and a hang DoS
Created by pmeunier on Aug 21, 2026, 6:37 AM
State:
TQPUO465FXJ7ICS53HXD2MUXYC5RQ2LT7IOW433WUA2CK44R7C5ACkex: fix pre-auth panic, enable client strict-KEX, reject low-order points
Created by pmeunier on Aug 21, 2026, 6:37 AM
State:
N2KCY7Z75HFYCXLF3DUQX24OK2JHHGUQBTKD2RVKUCW27CMRC3WACbound decompression output and SSH-agent message length against OOM
Created by pmeunier on Aug 21, 2026, 6:19 AM
State:
LGLX3GXHKBKNJOTOYZWUTAKWM7433LAZ6GAWUT2BLWVUEGSYG77ACfix publickey auth bypass: bind PK_OK fast-path to the exact key
Created by pmeunier on Aug 21, 2026, 6:19 AM
State:
V3BN7PKXNRU67X6JFOIB7XD4SERRUDZSJEFFFSHNQ65UX3N2DKPQCharden SSH parsing against remote panics/OOM from russh advisories
Created by pmeunier on Aug 21, 2026, 6:13 AM
State:
OO3NMIEBNU56E5BFI4ZGM5JEQTWHCISWUFA253SVTA6QETPYE6DACversion bump
Created by pmeunier on Aug 14, 2026, 11:22 AM
State:
6VEDW34EZ4BIHBVKJTKDV2ZBAJY25ED2J5NDYXUILHVKJA7XVPCACFix the ordering between pending data and EOF (don't push EOF if there's pending data that couldn't yet be encoded because of windows)
Created by pmeunier on Aug 14, 2026, 11:21 AM
State:
L3UUIXKCU3OEFNFABN2H4STNOK2MNL355M5T2IU5SATO2BNRMOEQCFixing the encoding of keys resulting from PQ-kex
Created by pmeunier on Aug 8, 2026, 4:07 AM
State:
5M6YPIXWSBUMABD6DBYUGGUICN7GGA62IDL2DTX2QFU5RJISW5TQCconflict
Created by pmeunier on Aug 8, 2026, 3:59 AM
State:
VXCOV5DZWZE7AOFEHQZ7ZV65ZQRQWMFP7G6SW4IWNH6X62AWLYUQCVersion bump
Created by pmeunier on Aug 2, 2026, 2:33 PM
State:
UYU5S7N57R7U6III4OFAH4MIVUDGUVHAMDVVTSFLOVWQJR4LIJMQCAdding post-quantum key exchange
Created by pmeunier on Aug 1, 2026, 7:59 AM
State:
CKQTTLJDLJAY6D6ZVSMUKCUTIESO4XPUAUR5X6A424MVRUW2JYVACAccept ssh-rsa as a format in the agent
Created by pmeunier on Jul 12, 2026, 5:54 PM
State:
6SKAZD63KHG7L3AGR2FKVTGZYXL4BCHM3O5IS4MCQNRADQWSABUQCAdding a handler for the sshsig format
Created by 4a2HRdWi1jDSEAsuk3yWcagztBipc84Wt9boC5pMhy5B on Jun 20, 2026, 1:36 PM
State:
T4A4L2TVRAFN5XD32O3L2S6AQ7HLHHVMLZCARMWJDVXM2RICWWNQCversion bumps
Created by 4a2HRdWi1jDSEAsuk3yWcagztBipc84Wt9boC5pMhy5B on Jun 20, 2026, 1:34 PM
State:
ZIBLL5KJLAILC5BYC7UD2SDQFGOX26TPDTKJCQLRQMVUICU26D6ACFixing channel replies
Created by pmeunier on Sep 15, 2025, 5:53 PM
State:
HLNBQPB5TUBKNSNF2XG4QPXCLMTDOLLC6XVYTOKVBAJ27N4UQRVAC