Thema: SSH/SSL/VPN Tools...

[SiLæncer]

Terminal/ssh/sftp client(linux, mac, win) based on electron/ssh2/node-pty/xterm/antd/subx and other libs.

MIT License

Whats new:>>

    Quick bug fix release:

    Fix telnet bookmark can not be saved properly issue

https://github.com/electerm/electerm

[SiLæncer]

NetMod is a lightweight utility that can act as a proxy server with advanced capabilities, namely the ability to modify requests and access blocked websites behind the firewall. As you probably hinted, the application comes with a built-in SSH client, OpenVPN and SSL/TLS tunneling, so you are able to access everything blocked for your system or geographic area.

Freeware

Whats new:>>

-Added uninstaller dialog to clear app data
-Bug fixes

https://sourceforge.net/projects/netmodhttp/

[SiLæncer]

Whats new:>>

    New features:

    Support load batch operation in command line use (#2904)
    Support set serverPort by command line param (#2896)

    Bug fixes:

    Fix open/close setting/batchOp modal logic
    Fix enableGlobalProxy setting not working issue
    fix #2900 hide copy file path context menu when right click blank area

https://github.com/electerm/electerm

[SiLæncer]

Changelog

    Fix excessive time spent checking DH q parameter value: The function DH_check() performs various checks on DH parameters. After fixing CVE-2023-3446 it was discovered that a large q parameter value can also trigger an overly long computation during some of these checks. A correct q value, if present, cannot be larger than the modulus parameter, thus it is unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value, DH_CHECK_INVALID_Q_VALUE return flag is set and the computationally intensive checks are skipped.
    Fix DH_check() excessive time with over sized modulus:
    The function DH_check() performs various checks on DH parameters. One of those checks confirms that the modulus ("p" parameter) is not too large. Trying to use a very large modulus is slow and OpenSSL will not normally use a modulus which is over 10,000 bits in length. However the DH_check() function checks numerous aspects of the key or
    parameters that have been supplied. Some of those checks use the supplied modulus value even if it has already been found to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying a key/parameters with a modulus over this size will simply cause DH_check() to fail.

### Changes between 3.1.1 and 3.1.2 [1 Aug 2023]

 * Fix excessive time spent checking DH q parameter value.

   The function DH_check() performs various checks on DH parameters. After
   fixing CVE-2023-3446 it was discovered that a large q parameter value can
   also trigger an overly long computation during some of these checks.
   A correct q value, if present, cannot be larger than the modulus p
   parameter, thus it is unnecessary to perform these checks if q is larger
   than p.

   If DH_check() is called with such q parameter value,
   DH_CHECK_INVALID_Q_VALUE return flag is set and the computationally
   intensive checks are skipped.

   ([CVE-2023-3817])

   *Tomáš Mráz*

 * Fix DH_check() excessive time with over sized modulus.

   The function DH_check() performs various checks on DH parameters. One of
   those checks confirms that the modulus ("p" parameter) is not too large.
   Trying to use a very large modulus is slow and OpenSSL will not normally use
   a modulus which is over 10,000 bits in length.

   However the DH_check() function checks numerous aspects of the key or
   parameters that have been supplied. Some of those checks use the supplied
   modulus value even if it has already been found to be too large.

   A new limit has been added to DH_check of 32,768 bits. Supplying a
   key/parameters with a modulus over this size will simply cause DH_check() to
   fail.

   ([CVE-2023-3446])

   *Matt Caswell*

 * Do not ignore empty associated data entries with AES-SIV.

   The AES-SIV algorithm allows for authentication of multiple associated
   data entries along with the encryption. To authenticate empty data the
   application has to call `EVP_EncryptUpdate()` (or `EVP_CipherUpdate()`)
   with NULL pointer as the output buffer and 0 as the input buffer length.
   The AES-SIV implementation in OpenSSL just returns success for such call
   instead of performing the associated data authentication operation.
   The empty data thus will not be authenticated. ([CVE-2023-2975])

   Thanks to Juerg Wullschleger (Google) for discovering the issue.

   The fix changes the authentication tag value and the ciphertext for
   applications that use empty associated data entries with AES-SIV.
   To decrypt data encrypted with previous versions of OpenSSL the application
   has to skip calls to `EVP_DecryptUpdate()` for empty associated data
   entries.

   *Tomáš Mráz*

 * When building with the `enable-fips` option and using the resulting
   FIPS provider, TLS 1.2 will, by default, mandate the use of an extended
   master secret (FIPS 140-3 IG G.Q) and the Hash and HMAC DRBGs will
   not operate with truncated digests (FIPS 140-3 IG G.R).

[close]

https://www.openssl.org/

[SiLæncer]

Whats new:>>

-Bug fixes

https://sourceforge.net/projects/netmodhttp/

[SiLæncer]

Whats new:>>

-Fixed scrollbar where user cannot press on track
-Added scrollbar arrow buttons
-Bug and crash fixes

https://sourceforge.net/projects/netmodhttp/

[SiLæncer]

Whats new:>>

    New features:

    Support portable in Windows OS (#2916)

    Bug fixes/UI:

    fix #2908 Improve zoom button UI in system menu
    fix #2908 Fix zoom not applied issue when restart

    Other updates:

    Upgrade electron to v22 (#2921)

https://github.com/electerm/electerm

[SiLæncer]

Whats new:>>

    Quick bug fix release:

    Fix #2929 Fix read file function
    Fix #2930 Fix dns lookup function

https://github.com/electerm/electerm

[SiLæncer]

Whats new:>>

    Quick bug fix release:

    fix #2931 Fix open link cause error issue

https://github.com/electerm/electerm

[SiLæncer]

PuTTY is a free implementation of SSH and Telnet for Windows and Unix platforms, along with an xterm terminal emulator.

Freeware

Changelog

    Windows installer scope is back to the normal 'per machine' setting, reverting 0.78's security workaround.

    Note: this means that installing the 0.79 or later Windows installer will not automatically uninstall 0.78, if 0.78 was installed using its default 'per user' scope. In that situation we recommend uninstalling 0.78 first, if possible. If both end up installed, uninstalling both and then re-installing the new version will fix things up.
    Terminal mouse tracking: support for mouse movements which are not drags.
    Terminal mouse tracking: support for horizontal scroll events (e.g. generated by trackpads).
    Backwards compatibility fix: certificate-based user authentication now works with OpenSSH 7.7 and earlier.
    Bug fix: in a session using the 'Raw' protocol, pressing ^D twice in the terminal window could cause an assertion failure.
    Bug fix: terminal output could hang if a resize control sequence was sent by the server (and was not disabled in the Features panel) but PuTTY's window was set to non-resizable in the Window panel.
    Bug fix: GTK PuTTY could fail an assertion if a resize control sequence was sent by the server while the window was docked to one half of the screen in KDE.
    Bug fix: GTK PuTTY could fail an assertion if you tried to change the font size while the window was maximised.
    Bug fix: the 'bell overload' timing settings were misinterpreted by Unix PuTTY and pterm 0.77/0.78; if any settings were saved using these versions, confusion can persist with newer versions.
    Bug fix: SSH authentication banners were not reliably printed if a server sent one immediately before closing the connection (e.g. intended as a user-visible explanation for the connection closure).
    Bug fix: the 'close' command in PSFTP always reported failure, so that ending a psftp -b batch script with it would cause PSFTP as a whole to believe it had failed, even if everything worked fine.
    Bug fix: certificate handling would do the wrong thing, for RSA keys only, if you specified a detached certificate to go with a PPK file that had a different certificate embedded.
    Bug fix: Windows Pageant's option to write out a configuration file fragment for Windows OpenSSH now works even if you have a space in your user name.
    Bug fix: in local-line-editing mode, pressing ^U now just clears the line, instead of clearing it and then inserting a literal ^U.
    Several bug fixes in edge cases of terminal wrapping, involving double-width characters.

[close]

http://www.chiark.greenend.org.uk/~sgtatham/putty/

[SiLæncer]

PuTTY Key Generator, also known by the PuTTYgen moniker, is a small yet efficient program that can generate RSA and DSA keys for use with the OpenSSH authorized_keys file. It is a component of PuTTY and can be installed automatically with the Telnet client, but the chances are you would also see it incorporated in other third-party software.

MIT License

Changelog

    Windows installer scope is back to the normal 'per machine' setting, reverting 0.78's security workaround.
    Terminal mouse tracking: support for mouse movements which are not drags.
    Terminal mouse tracking: support for horizontal scroll events (e.g. generated by trackpads).
    Backwards compatibility fix: certificate-based user authentication now works with OpenSSH 7.7 and earlier.
    Bug fix: in a session using the 'Raw' protocol, pressing ^D twice in the terminal window could cause an assertion failure.
    Bug fix: terminal output could hang if a resize control sequence was sent by the server (and was not disabled in the Features panel) but PuTTY's window was set to non-resizable in the Window panel.
    Bug fix: GTK PuTTY could fail an assertion if a resize control sequence was sent by the server while the window was docked to one half of the screen in KDE.
    Bug fix: GTK PuTTY could fail an assertion if you tried to change the font size while the window was maximised.
    Bug fix: the 'bell overload' timing settings were misinterpreted by Unix PuTTY and pterm 0.77/0.78; if any settings were saved using these versions, confusion can persist with newer versions.
    Bug fix: SSH authentication banners were not reliably printed if a server sent one immediately before closing the connection (e.g. intended as a user-visible explanation for the connection closure).
    Bug fix: the 'close' command in PSFTP always reported failure, so that ending a psftp -b batch script with it would cause PSFTP as a whole to believe it had failed, even if everything worked fine.
    Bug fix: certificate handling would do the wrong thing, for RSA keys only, if you specified a detached certificate to go with a PPK file that had a different certificate embedded.
    Bug fix: Windows Pageant's option to write out a configuration file fragment for Windows OpenSSH now works even if you have a space in your user name.
    Bug fix: in local-line-editing mode, pressing ^U now just clears the line, instead of clearing it and then inserting a literal ^U.
    Several bug fixes in edge cases of terminal wrapping, involving double-width characters.

[close]

http://www.chiark.greenend.org.uk/~sgtatham/putty/

[SiLæncer]

Whats new:>>

    New features:

    fix #2892 Highlight all matches when search in terminal
    fix #2938 Add auto focus for keyboard interactive input

    Bug fixes/UI:

    Improve footer UI

    Other updates:

    Update antd to v5, improve setting page open speed (#2937)
    Change Winget Releaser job to ubuntu-latest (#2932) by @sitiom

https://github.com/electerm/electerm

[SiLæncer]

User-friendly and well-put-together piece of software that allows you to effortlessly import, manage, and configure OpenVPN profiles.

Freeware

Whats new:>>

Fix DNS issues.

https://client.pritunl.com

[SiLæncer]

Whats new:>>

    Quick bug fix release:

    Fix tsz not working issue

https://github.com/electerm/electerm

[SiLæncer]

Whats new:>>

Fix #2945 Fix proxy apply logic

https://github.com/electerm/electerm