commit 97dff151ae2c6c5a622b0d625c2e4764de62ca84
author Matt Johnston <matt@ucc.asn.au> Wed Mar 09 22:54:15 2016 +0800
committer Matt Johnston <matt@ucc.asn.au> Wed Mar 09 22:54:15 2016 +0800
tree 5a51f699af96b9f525ff72e48cdd99b8a91dcfd4
parent 18681875e30e1ea251914417829fdbb50534c9ba

2016.72

CHANGES

diff --git a/CHANGES b/CHANGES
index 7b1e2da..d9d6029 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+2016.72 - 9 March 2016
+
+- Validate X11 forwarding input. Could allow bypass of authorized_keys command= restrictions,
+  found by github.com/tintinweb. Thanks for Damien Miller for a patch.
+
 2015.71 - 3 December 2015
 
 - Fix "bad buf_incrpos" when data is transferred, broke in 2015.69

sysoptions.h

diff --git a/sysoptions.h b/sysoptions.h
index a29cbbe..85ef718 100644
--- a/sysoptions.h
+++ b/sysoptions.h
@@ -4,7 +4,7 @@
  *******************************************************************/
 
 #ifndef DROPBEAR_VERSION
-#define DROPBEAR_VERSION "2015.71"
+#define DROPBEAR_VERSION "2016.72"
 #endif
 
 #define LOCAL_IDENT "SSH-2.0-dropbear_" DROPBEAR_VERSION