35 Commits

Author SHA1 Message Date
kmos
91eff72277 libssh now needs ports-gcc on base-gcc arches
Fixes build on sparc64
2022-09-11 23:44:28 +00:00
sthen
e4059720f8 update to libssh-0.10.4 2022-09-08 20:11:23 +00:00
sthen
536fc67d5c update to libssh-0.10.3 2022-09-06 08:00:39 +00:00
sthen
09d8a859cc bump; static lib argp-standalone was updated 2022-09-02 09:42:27 +00:00
sthen
8d41f37742 update to libssh-0.10.1 2022-09-01 18:54:17 +00:00
naddy
8c0294c2fa drop RCS Ids 2022-03-11 19:53:16 +00:00
sthen
3cf68dde50 update to libssh-0.9.6, notable fixes:
CVE-2021-3634: Fix possible heap-buffer overflow when rekeying with
different key exchange mechanism

Fix handshake bug with AEAD ciphers and no HMAC overlap
2021-08-27 08:57:30 +00:00
sthen
66c3314caf missing a word in COMMENT 2021-01-05 13:48:16 +00:00
jasper
ffc04dfb02 update to libssh-0.9.5, includes a fix for CVE-2020-16135 2020-09-14 09:56:07 +00:00
jasper
97d84ba14a update to libssh-0.9.4 which addresses CVE-2020-1730.
see https://www.libssh.org/security/advisories/CVE-2020-1730.txt for more details

ok kn@ rpointel@
2020-04-20 11:28:34 +00:00
kn
1cb96ca669 Update to libssh 0.9.3
https://www.libssh.org/2019/12/10/libssh-0-9-3-and-libssh-0-8-8-security-release/

All consumers built fine on amd64, run-tested with tmate 2.4.0p1 on amd64
and sparc64.

Remove MAINTAINER on their behalf.

"Looks good overall" and priv.h patch that fixes unit tests from jca
"sounds good to me" rpointel
OK sthen
2020-03-31 18:46:01 +00:00
sthen
48b0b9660c replace simple PERMIT_PACKAGE_CDROM=Yes with PERMIT_PACKAGE=Yes 2019-07-12 20:48:23 +00:00
rpointel
7bd17fcbca update libssh to 0.8.7.
inputs and ok jca@.
2019-03-04 08:29:59 +00:00
jasper
ec6db39f19 update to libssh-0.8.4
this addresses https://www.libssh.org/security/advisories/CVE-2018-10933.txt

ok rpointel@ (MAINTAINER)
2018-10-23 19:28:18 +00:00
rsadowski
9e85a10c7b Fix MASTER_SITES also switch to https
ok rpointel@ (maintainer)
2018-06-26 20:45:41 +00:00
rsadowski
8f817a0a78 update libssh from 0.7.3 to 0.7.5
ChangeLog 0.7.5:

Fixed a memory allocation issue with buffers
Fixed PKI on Windows
Fixed some SSHv1 functions
Fixed config hostname expansion

ChangeLog 0.7.4:

Added id_ed25519 to the default identity list
Fixed sftp EOF packet handling
Fixed ssh_send_banner() to confirm with RFC 4253
Fixed some memory leaks

ok rpointel@
2017-09-21 17:07:52 +00:00
espie
22836dcd06 zap remaining trailing / at end of WRK* 2017-05-12 15:11:17 +00:00
espie
12d1421a8d exact same fix as cmocka 2017-05-11 00:21:50 +00:00
sthen
0948a2eb8a Security update to libssh 0.7.3: use correct length for ephemeral secret
for diffie-hellman-group1 and diffie-hellman-group14 kex; they were
fixed at 128 bits.

https://www.libssh.org/2016/02/23/libssh-0-7-3-security-and-bugfix-release/

From rpointel@, ok me, committing on rpointel's behalf
2016-02-23 14:09:59 +00:00
rpointel
1f5aeae95c update libssh to 0.7.2.
ok jca@.
2015-11-04 19:19:20 +00:00
rpointel
d06cede62d Update libssh to 0.6.4, bugfix and security release.
More information: https://www.libssh.org/2014/12/19/libssh-0-6-4-security-and-bugfix-release/
Few tweaks from jca@ and aja@, thanks.
2015-02-09 08:16:54 +00:00
rpointel
2b0f480bc9 update to 0.6.3
security fix: http://www.libssh.org/2014/03/04/libssh-0-6-3-security-release/
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-0017
2014-03-14 10:17:17 +00:00
rpointel
b7c8c3cb76 Update libssh to 0.6.0. 2014-03-09 20:41:14 +00:00
ajacoutot
04d17f1b94 -Wextra is supported by both our gcc. 2013-11-02 10:43:04 +00:00
rpointel
e17019ffb8 oops, add pthread to WANTLIB... 2013-08-09 19:26:56 +00:00
rpointel
e63340b418 Update libssh to 0.5.5.
ok aja@
2013-08-09 19:14:50 +00:00
espie
eae66e4a7b PERMIT_* / REGRESS->TEST sweep 2013-03-11 11:35:43 +00:00
rpointel
0b6e8563dc Update to 0.5.4.
security fix, more info http://www.libssh.org/2013/01/22/libssh-0-5-4-security-release/
2013-02-04 21:32:46 +00:00
sthen
e5bef61946 SECURITY update to libssh 0.5.3
More info at http://www.libssh.org/2012/11/20/libssh-0-5-3-security-release/

- CVE-2012-4559: multiple double free() flaws
- CVE-2012-4560: multiple buffer overflow flaws
- CVE-2012-4561: multiple invalid free() flaws
- CVE-2012-4562: multiple improper overflow checks

ok rpointel@ jasper@
2012-11-22 20:54:11 +00:00
jasper
9041fc74ae - these patches (or chunks) are not needed anymore since arpa/inet.h -r1.12 2012-06-26 14:40:06 +00:00
ajacoutot
d31ed2038a Fix several warnings.
ok rpointel@ (maintainer)
2012-05-20 17:04:55 +00:00
rpointel
4b823341da update libssh to 0.5.2 (bugfix release).
ok aja@.
2011-09-23 05:13:18 +00:00
naddy
76397543f2 Check for compiler flags not available with gcc < 4 before using them
and regen patches.  ok rpointel@
2011-09-10 11:56:42 +00:00
rpointel
4dae6f19c7 Update libssh to 0.5.1.
ok jasper@.
2011-08-22 15:05:02 +00:00
rpointel
f5f79db5ae Import libssh, a multiplatform C library implementing the SSHv2 and SSHv1
protocol on client and server side. With libssh, you can remotely
execute programs, transfer files, use a secure and transparent tunnel
for your remote applications.

ok jasper@.
2011-07-18 17:38:47 +00:00