Thu Oct 18 13:02:37 2018 UTC ()
Pullup ticket #5843 - requested by maya
security/libssh: security fix

Revisions pulled up:
- security/libssh/Makefile                                      1.24
- security/libssh/PLIST                                         1.8
- security/libssh/distinfo                                      1.13

---
   Module Name:	pkgsrc
   Committed By:	maya
   Date:		Tue Oct 16 20:25:25 UTC 2018

   Modified Files:
   	pkgsrc/security/libssh: Makefile PLIST distinfo

   Log Message:
   libssh: update to 0.7.6. security fix.

   version 0.7.6 (released 2018-10-16)
     * Fixed CVE-2018-10933
     * Added support for OpenSSL 1.1
     * Added SHA256 support for ssh_get_publickey_hash()
     * Fixed config parsing
     * Fixed random memory corruption when importing pubkeys

   version 0.7.5 (released 2017-04-13)
     * Fixed a memory allocation issue with buffers
     * Fixed PKI on Windows
     * Fixed some SSHv1 functions
     * Fixed config hostname expansion

   version 0.7.4 (released 2017-02-03)
     * Added id_ed25519 to the default identity list
     * Fixed sftp EOF packet handling
     * Fixed ssh_send_banner() to confirm with RFC 4253
     * Fixed some memory leaks


(bsiegert)
diff -r1.23 -r1.23.18.1 pkgsrc/security/libssh/Makefile
diff -r1.7 -r1.7.24.1 pkgsrc/security/libssh/PLIST
diff -r1.12 -r1.12.6.1 pkgsrc/security/libssh/distinfo

cvs diff -r1.23 -r1.23.18.1 pkgsrc/security/libssh/Makefile (expand / switch to unified diff)

--- pkgsrc/security/libssh/Makefile 2016/10/09 22:02:07 1.23
+++ pkgsrc/security/libssh/Makefile 2018/10/18 13:02:36 1.23.18.1
@@ -1,31 +1,31 @@ @@ -1,31 +1,31 @@
1# $NetBSD: Makefile,v 1.23 2016/10/09 22:02:07 kamil Exp $ 1# $NetBSD: Makefile,v 1.23.18.1 2018/10/18 13:02:36 bsiegert Exp $
2# 2#
3# history: upstream renamed 0.11 to 0.1.1; 3# history: upstream renamed 0.11 to 0.1.1;
4# we have to use the old-style convention so that version compares work. 4# we have to use the old-style convention so that version compares work.
5# 5#
6VER= 0.7.3 6VER= 0.7.6
7DISTNAME= libssh-${VER} 7DISTNAME= libssh-${VER}
8PKGNAME= libssh-0.73 8PKGNAME= libssh-0.76
9PKGREVISION= 2 
10CATEGORIES= security 9CATEGORIES= security
11MASTER_SITES= https://red.libssh.org/attachments/download/195/ 10MASTER_SITES= https://www.libssh.org/files/0.7/
12EXTRACT_SUFX= .tar.xz 11EXTRACT_SUFX= .tar.xz
13 12
14MAINTAINER= is@NetBSD.org 13MAINTAINER= is@NetBSD.org
15HOMEPAGE= http://www.libssh.org/ 14HOMEPAGE= http://www.libssh.org/
16COMMENT= SSHv2+v1 protocol library 15COMMENT= SSHv2+v1 protocol library
17LICENSE= 2-clause-bsd 16LICENSE= 2-clause-bsd
18 17
19DIST_SUBDIR= security 18DIST_SUBDIR= security
20 19
21USE_CMAKE= yes 20USE_CMAKE= yes
22USE_LANGUAGES= c c++ 21USE_LANGUAGES= c c++
 22CMAKE_ARGS+= WITH_TESTING=yes
23 23
24PKGCONFIG_OVERRIDE+= libssh.pc.in 24PKGCONFIG_OVERRIDE+= libssh.pc.in
25TEST_TARGET= check 25TEST_TARGET= check
26 26
27.include "options.mk" 27.include "options.mk"
28 28
29.include "../../devel/argp/buildlink3.mk" 29.include "../../devel/argp/buildlink3.mk"
30.include "../../devel/zlib/buildlink3.mk" 30.include "../../devel/zlib/buildlink3.mk"
31.include "../../mk/bsd.pkg.mk" 31.include "../../mk/bsd.pkg.mk"

cvs diff -r1.7 -r1.7.24.1 pkgsrc/security/libssh/PLIST (expand / switch to unified diff)

--- pkgsrc/security/libssh/PLIST 2016/02/23 15:49:42 1.7
+++ pkgsrc/security/libssh/PLIST 2018/10/18 13:02:36 1.7.24.1
@@ -1,18 +1,18 @@ @@ -1,18 +1,18 @@
1@comment $NetBSD: PLIST,v 1.7 2016/02/23 15:49:42 wiz Exp $ 1@comment $NetBSD: PLIST,v 1.7.24.1 2018/10/18 13:02:36 bsiegert Exp $
2include/libssh/callbacks.h 2include/libssh/callbacks.h
3include/libssh/legacy.h 3include/libssh/legacy.h
4include/libssh/libssh.h 4include/libssh/libssh.h
5include/libssh/libsshpp.hpp 5include/libssh/libsshpp.hpp
6include/libssh/server.h 6include/libssh/server.h
7include/libssh/sftp.h 7include/libssh/sftp.h
8include/libssh/ssh2.h 8include/libssh/ssh2.h
9lib/cmake/libssh/libssh-config-version.cmake 9lib/cmake/libssh/libssh-config-version.cmake
10lib/cmake/libssh/libssh-config.cmake 10lib/cmake/libssh/libssh-config.cmake
11lib/libssh.so 11lib/libssh.so
12lib/libssh.so.4 12lib/libssh.so.4
13lib/libssh.so.4.4.1 13lib/libssh.so.4.4.3
14lib/libssh_threads.so 14lib/libssh_threads.so
15lib/libssh_threads.so.4 15lib/libssh_threads.so.4
16lib/libssh_threads.so.4.4.1 16lib/libssh_threads.so.4.4.3
17lib/pkgconfig/libssh.pc 17lib/pkgconfig/libssh.pc
18lib/pkgconfig/libssh_threads.pc 18lib/pkgconfig/libssh_threads.pc

cvs diff -r1.12 -r1.12.6.1 pkgsrc/security/libssh/distinfo (expand / switch to unified diff)

--- pkgsrc/security/libssh/distinfo 2018/02/02 09:31:29 1.12
+++ pkgsrc/security/libssh/distinfo 2018/10/18 13:02:36 1.12.6.1
@@ -1,8 +1,8 @@ @@ -1,8 +1,8 @@
1$NetBSD: distinfo,v 1.12 2018/02/02 09:31:29 jperkin Exp $ 1$NetBSD: distinfo,v 1.12.6.1 2018/10/18 13:02:36 bsiegert Exp $
2 2
3SHA1 (security/libssh-0.7.3.tar.xz) = 9de2a8fde51aa7b7855008fafd5bf47ebb01289f 3SHA1 (security/libssh-0.7.6.tar.xz) = 8e5f23a861f84fa214ca1da0e3f98b839ff7c051
4RMD160 (security/libssh-0.7.3.tar.xz) = af73d82dad552233791aea8ac1198232e0fb0f68 4RMD160 (security/libssh-0.7.6.tar.xz) = 7316fae4a5355cf2c511cd91a5a65d7354ab361f
5SHA512 (security/libssh-0.7.3.tar.xz) = 6797ea9492c9d07e0169163e6559a7880dd368ee763eff297b3cbddda5e892703cf32506f9513e7d9b5135984e1e888c4893b342df07da1b7ee30968c9185869 5SHA512 (security/libssh-0.7.6.tar.xz) = 2a01402b5a9fab9ecc29200544ed45d3f2c40871ed1c8241ca793f8dc7fdb3ad2150f6a522c4321affa9b8778e280dc7ed10f76adfc4a73f0751ae735a42f56c
6Size (security/libssh-0.7.3.tar.xz) = 350464 bytes 6Size (security/libssh-0.7.6.tar.xz) = 366556 bytes
7SHA1 (patch-aa) = 2f9a7c8a629188f40f3c94d4304b1e44720e45ae 7SHA1 (patch-aa) = 2f9a7c8a629188f40f3c94d4304b1e44720e45ae
8SHA1 (patch-cmake_Modules_DefineCompilerFlags.cmake) = 9f140ad664363953e4c7ff4e3bede74c693da993 8SHA1 (patch-cmake_Modules_DefineCompilerFlags.cmake) = 9f140ad664363953e4c7ff4e3bede74c693da993