Skip to content

Commit 375182f

Browse files
committed
Release v1.4.22
1. Update ChangeLog for last minute PR/Vuln fix.
1 parent b7c26d2 commit 375182f

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

ChangeLog.md

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,11 @@
99
and earlier. Users of wolfSSH must update or apply the fix patch and it’s
1010
recommended to update credentials used. This fix is also recommended for
1111
wolfSSH server applications. While there aren’t any specific attacks, the
12-
same defect is present.
12+
same defect is present. (PR 855)
13+
- [Medium] CVE-2025-15382. The function used to clean up a path string may read
14+
one byte off the end of the bounds of the string. The function is used by the
15+
SCP handling in wolfSSH. This affects server applications with wolfSSH
16+
versions 1.4.12 through 1.4.21, inclusive. (PR 859)
1317

1418
## New Features
1519

@@ -50,6 +54,8 @@
5054

5155
## Fixes
5256

57+
- Fix off-by-1 read error when cleaning the file path for SCP and SFTP. (PR
58+
859)
5359
- Fixed incorrect handling of zero-length SSH strings in packet parsing. (PR
5460
857)
5561
- Fixed a worker-thread deadlock caused by blocked sends preventing

0 commit comments

Comments
 (0)