- Fixed compilation issues with different OpenSSL versions
- Fixed StrictHostKeyChecking in new knownhosts API
- Fixed ssh_send_keepalive() with packet filter
- Fixed possible crash with knownhosts options
- Fixed issus with rekeying
- Fixed strong ECDSA keys
- Fixed some issues with rsa-sha2 extentions
- Fixed access violation in ssh_init() (static linking)
- Fixed ssh_channel_close() handling
- Added support to get known_hosts locations with ssh_options_get()
- Fixed preferred algorithm for known hosts negotiations
- Fixed KEX with some server implementations (e.g. Cisco)
- Fixed keyboard-interactive auth in server mode (regression from CVE-2018-10933)
- Fixed gssapi auth in server mode (regression from CVE-2018-10933)
- Fixed socket fd handling with proxy command
- Fixed a memory leak with OpenSSL
Signed-off-by: Pierre-Yves <pyu@riseup.net>