ChangeLog 6.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153
  1. PingTunnel-NG Changelog
  2. =======================
  3. 1.41 - 03. April 2019
  4. - change the RNG device during ./configure (fixes issues on systems without
  5. enough entropy avilable from it's random source)
  6. 1.40 - 20. March 2019
  7. - improved empty ping mode (by Masaq-)
  8. - fixed NULL pointer derefs and division by zero
  9. - more secure chroot
  10. - CWE-126 workaround reported by codacy
  11. - switched to /dev/random as RNG except for Windows
  12. - fixed CLang related build errors
  13. - fixed SEGFAULT when network not reachable (by Masaq-)
  14. - added extended options for protocol tuning (by Masaq-)
  15. - Systemd support (also in debian/rules)
  16. - fixed compilation issues for Android targets
  17. - fixed 100% CPU consumption when receive window is full but data via select()
  18. available
  19. (by Masq-)
  20. 1.32 - 24. January 2019
  21. - improved error logging
  22. - introduced icmp_filter via setsockopt to filter unwanted icmp messages
  23. - more "secure" random number generator
  24. - fixed NULL deref and invalid memory access by elnerd
  25. (https://github.com/elnerd) PoC: https://www.securityfocus.com/bid/54627/info
  26. 1.31 - 03. December 2018
  27. - added Android build support (requires a root'ed device!)
  28. - fixed ArchLinux PKGBUILD/AUR
  29. 1.30 - 19. October 2018
  30. - travis-ci, coverity integration
  31. - xcompile issue for mingw-w64 fixed
  32. - fixed wrong usage of format() specifiers
  33. 1.20 - 15. July 2018
  34. - Readme improvements
  35. - Fixes a possible memory leak when a packet could not send
  36. - Better error handling on socket descriptor creation
  37. - All Coverity issues fixed
  38. 1.00 - 18. December 2017
  39. - First public release
  40. - Fixes a exploitable memory leak (proxy/forwarder) if using password
  41. protected challenge response authentication.
  42. - Fixes an invalid memory write during a pcap capture.
  43. - Full source refactoring. The code should be more readable imho.
  44. - This project is now Autotools based.
  45. Disable optional features: SeLinux, pcap.
  46. - Removed an already disabled and highly buggy feature: kPT_add_iphdr
  47. - Added a more "GNU" alike option parsing.
  48. - Support a user defined PingTunnel-NG magic value which is required
  49. for bypassing Cisco IPS (and maybe other IDS/IPS/Firewalls).
  50. This feature was well tested against Cisco's "IronPort" which
  51. scans for fingerprints in an ICMP packet (PingTunnel magic value).
  52. PingTunnel Changelog
  53. ====================
  54. 0.72 - 5. September 2011
  55. - Fixes an authentication bug that would manifest as hung connections with
  56. protocols that send data from the client-side before receiving data from
  57. the server-side. Thanks to StalkR for locating the bug and fixing it.
  58. - Fixes a crash when attempting to enable packet-capture for non-existing
  59. network devices. Thanks to Steffen Wendzel for the patch.
  60. 0.71 - 22. June 2009
  61. - Added security features and SELinux support, courtesy of Sebastien Raveau.
  62. 0.70 - 12. January 2009
  63. - Added rudimentary support for tunneling over udp port 53.
  64. - Added built-in support for compiling on Windows, thanks to Mike Miller.
  65. - Added syslog support, also courtesy of Mike Miller.
  66. - Experimental support for spoofing the source IP address. The source
  67. address must be explicitly configured in the source code, and it might
  68. not work (which is why it's experimental). To enable, define
  69. kPT_add_iphdr to 1.
  70. 0.62 - [Never released]
  71. - Added many comments to the ptunnel header file.
  72. - Moved most include directives to the header file.
  73. - Fixed crash if proxy or destination hostnames could not be looked up.
  74. 0.61 - 26. May 2005
  75. - Noted that ptunnel now works without packet capturing on Mac OS X 10.4
  76. Tiger.
  77. - Log files are now opened in append-mode (i.e., not truncated).
  78. - Fixed a bug that could cause ptunnel to crash if passwords shorter than
  79. 16 characters were used (the overwhelming majority of passwords, most
  80. likely!).
  81. 0.60 - 15. Apr 2005
  82. - Added authentication support, changing parts of the ptunnel protocol.
  83. - Added a manpage.
  84. - Added MD5 implementation by L. Peter Deutsch for authentication.
  85. - Moved declaration of a variable to allow ptunnel to compile cleanly
  86. on gcc 2.95 - thanks Choong!
  87. - Added error handling for proxy connections.
  88. - Fixed a problem with printing send/recv info. All verbosity levels
  89. should work now.
  90. - Updated contact info.
  91. 0.55 - 18. Feb 2005
  92. - Fixed a locking bug that would manifest itself when the maximum
  93. connection count on the proxy was reached.
  94. - Fixed ptunnel to compile correctly on 64-bit architectures (thanks
  95. to Åsmund Grammeltvedt for pointing out the necessary changes!)
  96. - Added a new logging level (level 5). Level 4 no longer outputs send
  97. and receive info; for this info level 5 is necessary.
  98. - When libpcap is in use, the interface is no longer put in promiscous
  99. mode. This has never been necessary, and also makes it impossible to
  100. use ptunnel with more than one client on the same network.
  101. - Discovered a problem with pcap that would cause ptunnel to hang when
  102. pcap was in use. This problem has not been resolved; the workaround is
  103. to simply re-execute the client, or disable pcap if possible.
  104. - Added support for specifying a log file on the command line, using
  105. the -f switch.
  106. 0.54 - 1. Feb 2005
  107. - Fixed a byte-order bug (thanks Alfred!)
  108. 0.53 - 31. Jan 2005
  109. - Fixed a threading bug, and implemented support for limiting the
  110. maximum number of tunnels.
  111. Thanks to Alfred Young for reporting and fixing the following bugs:
  112. - Fixed a bug with packets captured via libpcap, where the struct
  113. sockaddr wasn't properly zeroed.
  114. - Fixed a byte order bug in create_and_insert_proxy_desc.
  115. - Fixed a memory leak in remove_proxy_desc.
  116. 0.52 - 3. Jan 2005
  117. - Fixed a problem introduced by the ICMP ID field changes. The
  118. proxy didn't retain the ID of the packets received from clients,
  119. resulting in dropped ICMP packets at the router. This in turn
  120. lead to the tunnel no longer working, depending on the strictness
  121. of the router. This version fixes that problem.
  122. - Makefile is better now, thanks to Dries Verachtert.
  123. 0.51 - 2. Jan 2005
  124. - Fixed incorrect checksum calculation for resent packets.
  125. - Stopped relying on the ICMP packet's "built-in" ID field,
  126. and moved the information to the data portion of the packet.
  127. - Changed default verbosity level from debug to verbose.
  128. 0.50 - 7. Dec 2004
  129. Initial public release.