Skip to content

Skiff v0.2.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Sep 22:17
· 46 commits to master since this release
v0.2.2
3c6f100

Skiff v0.2.2 — security update.

Upgrades the SSH engine russh 0.54 → 0.63.3, clearing a batch of RUSTSEC /
Dependabot advisories (unbounded allocation, pre-auth panics, and unbounded
message/banner parsing). These are DoS-class issues exploitable only by the
server you connect to — no code execution or credential disclosure — and the
server-only advisories don't apply since Skiff is a client. Recommended for all
users.

No feature or UI changes. All auth methods (password / key / agent /
keyboard-interactive), ProxyJump, and port forwarding were retested against
real servers.

Downloads

  • Windows: Skiff_0.2.2_x64-setup.exe (installer) or skiff.exe (portable)
  • Linux: Skiff_0.2.2_amd64.AppImage or skiff_0.2.2_amd64.deb

Windows binaries are unsigned; SmartScreen will warn on first run — More info →
Run anyway. Next up (v0.3.0): customizable host-color policies + subnet-aware
sidebar filter.

Assets 6
Loading