Tags: yrutschle/sslh
Tags
v2.2.4: Fix CVE-2025-46806 for "Misaligned Memory Accesses in `is_openvpn_protocol()`" Fix CVE-2025-46807 for "File Descriptor Exhaustion in sslh-select and sslh-ev" Fix potential parsing of undefined data in syslog probe (no CVE assigned) Thanks to Matthias Gerstner of the SUSE security team for the security review that found these defects!
v2.2.0: Added a boolean setting "is_unix" for listen and protocol entries. This will use the 'host' setting as a path name to a socket file, and connections (listening or connecting) will be performed on Unix socket instead of Internet sockets. Support HAProxy's proxyprotocol on the backend server side. Lots of documentation about a new, simpler way to perform transparent proxying. New "verbose" option that overrides all other verbose settings.
v2.1.0: Support for the Landlock LSM. After initial setup, sslh gives up all local file access rights. Reintroduced --ssl as an alias to --tls. Introduce autoconf to adapt to landlock presence. Close connexion without error message if remote client forcefully closes connexion, for Windows.
PreviousNext