ChangeLog 6.2 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159
  1. PingTunnel-NG Changelog
  2. =======================
  3. 1.42 - 27. April 2019
  4. - updated SeLinux policy file
  5. - added SeLinux policy compile script
  6. - list available pcap devices
  7. - fixed build errors related to pcap
  8. 1.41 - 03. April 2019
  9. - change the RNG device during ./configure (fixes issues on systems without
  10. enough entropy avilable from it's random source)
  11. 1.40 - 20. March 2019
  12. - improved empty ping mode (by Masaq-)
  13. - fixed NULL pointer derefs and division by zero
  14. - more secure chroot
  15. - CWE-126 workaround reported by codacy
  16. - switched to /dev/random as RNG except for Windows
  17. - fixed CLang related build errors
  18. - fixed SEGFAULT when network not reachable (by Masaq-)
  19. - added extended options for protocol tuning (by Masaq-)
  20. - Systemd support (also in debian/rules)
  21. - fixed compilation issues for Android targets
  22. - fixed 100% CPU consumption when receive window is full but data via select()
  23. available
  24. (by Masq-)
  25. 1.32 - 24. January 2019
  26. - improved error logging
  27. - introduced icmp_filter via setsockopt to filter unwanted icmp messages
  28. - more "secure" random number generator
  29. - fixed NULL deref and invalid memory access by elnerd
  30. (https://github.com/elnerd) PoC: https://www.securityfocus.com/bid/54627/info
  31. 1.31 - 03. December 2018
  32. - added Android build support (requires a root'ed device!)
  33. - fixed ArchLinux PKGBUILD/AUR
  34. 1.30 - 19. October 2018
  35. - travis-ci, coverity integration
  36. - xcompile issue for mingw-w64 fixed
  37. - fixed wrong usage of format() specifiers
  38. 1.20 - 15. July 2018
  39. - Readme improvements
  40. - Fixes a possible memory leak when a packet could not send
  41. - Better error handling on socket descriptor creation
  42. - All Coverity issues fixed
  43. 1.00 - 18. December 2017
  44. - First public release
  45. - Fixes a exploitable memory leak (proxy/forwarder) if using password
  46. protected challenge response authentication.
  47. - Fixes an invalid memory write during a pcap capture.
  48. - Full source refactoring. The code should be more readable imho.
  49. - This project is now Autotools based.
  50. Disable optional features: SeLinux, pcap.
  51. - Removed an already disabled and highly buggy feature: kPT_add_iphdr
  52. - Added a more "GNU" alike option parsing.
  53. - Support a user defined PingTunnel-NG magic value which is required
  54. for bypassing Cisco IPS (and maybe other IDS/IPS/Firewalls).
  55. This feature was well tested against Cisco's "IronPort" which
  56. scans for fingerprints in an ICMP packet (PingTunnel magic value).
  57. PingTunnel Changelog
  58. ====================
  59. 0.72 - 5. September 2011
  60. - Fixes an authentication bug that would manifest as hung connections with
  61. protocols that send data from the client-side before receiving data from
  62. the server-side. Thanks to StalkR for locating the bug and fixing it.
  63. - Fixes a crash when attempting to enable packet-capture for non-existing
  64. network devices. Thanks to Steffen Wendzel for the patch.
  65. 0.71 - 22. June 2009
  66. - Added security features and SELinux support, courtesy of Sebastien Raveau.
  67. 0.70 - 12. January 2009
  68. - Added rudimentary support for tunneling over udp port 53.
  69. - Added built-in support for compiling on Windows, thanks to Mike Miller.
  70. - Added syslog support, also courtesy of Mike Miller.
  71. - Experimental support for spoofing the source IP address. The source
  72. address must be explicitly configured in the source code, and it might
  73. not work (which is why it's experimental). To enable, define
  74. kPT_add_iphdr to 1.
  75. 0.62 - [Never released]
  76. - Added many comments to the ptunnel header file.
  77. - Moved most include directives to the header file.
  78. - Fixed crash if proxy or destination hostnames could not be looked up.
  79. 0.61 - 26. May 2005
  80. - Noted that ptunnel now works without packet capturing on Mac OS X 10.4
  81. Tiger.
  82. - Log files are now opened in append-mode (i.e., not truncated).
  83. - Fixed a bug that could cause ptunnel to crash if passwords shorter than
  84. 16 characters were used (the overwhelming majority of passwords, most
  85. likely!).
  86. 0.60 - 15. Apr 2005
  87. - Added authentication support, changing parts of the ptunnel protocol.
  88. - Added a manpage.
  89. - Added MD5 implementation by L. Peter Deutsch for authentication.
  90. - Moved declaration of a variable to allow ptunnel to compile cleanly
  91. on gcc 2.95 - thanks Choong!
  92. - Added error handling for proxy connections.
  93. - Fixed a problem with printing send/recv info. All verbosity levels
  94. should work now.
  95. - Updated contact info.
  96. 0.55 - 18. Feb 2005
  97. - Fixed a locking bug that would manifest itself when the maximum
  98. connection count on the proxy was reached.
  99. - Fixed ptunnel to compile correctly on 64-bit architectures (thanks
  100. to Åsmund Grammeltvedt for pointing out the necessary changes!)
  101. - Added a new logging level (level 5). Level 4 no longer outputs send
  102. and receive info; for this info level 5 is necessary.
  103. - When libpcap is in use, the interface is no longer put in promiscous
  104. mode. This has never been necessary, and also makes it impossible to
  105. use ptunnel with more than one client on the same network.
  106. - Discovered a problem with pcap that would cause ptunnel to hang when
  107. pcap was in use. This problem has not been resolved; the workaround is
  108. to simply re-execute the client, or disable pcap if possible.
  109. - Added support for specifying a log file on the command line, using
  110. the -f switch.
  111. 0.54 - 1. Feb 2005
  112. - Fixed a byte-order bug (thanks Alfred!)
  113. 0.53 - 31. Jan 2005
  114. - Fixed a threading bug, and implemented support for limiting the
  115. maximum number of tunnels.
  116. Thanks to Alfred Young for reporting and fixing the following bugs:
  117. - Fixed a bug with packets captured via libpcap, where the struct
  118. sockaddr wasn't properly zeroed.
  119. - Fixed a byte order bug in create_and_insert_proxy_desc.
  120. - Fixed a memory leak in remove_proxy_desc.
  121. 0.52 - 3. Jan 2005
  122. - Fixed a problem introduced by the ICMP ID field changes. The
  123. proxy didn't retain the ID of the packets received from clients,
  124. resulting in dropped ICMP packets at the router. This in turn
  125. lead to the tunnel no longer working, depending on the strictness
  126. of the router. This version fixes that problem.
  127. - Makefile is better now, thanks to Dries Verachtert.
  128. 0.51 - 2. Jan 2005
  129. - Fixed incorrect checksum calculation for resent packets.
  130. - Stopped relying on the ICMP packet's "built-in" ID field,
  131. and moved the information to the data portion of the packet.
  132. - Changed default verbosity level from debug to verbose.
  133. 0.50 - 7. Dec 2004
  134. Initial public release.