./security/libssh, SSHv2+v1 protocol library

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: pkgsrc-2019Q4, Version: 0.93, Package name: libssh-0.93, Maintainer: is

libssh is a multiplatform C library implementing the SSHv2 and SSHv1 protocol
on client and server side. With libssh, you can remotely execute programs,
transfer files, use a secure and transparent tunnel for
your remote applications.


Required to run:
[devel/argp] [devel/cmocka]

Required to build:
[pkgtools/cwrappers]

Package options: openssl

Master sites:

SHA1: 24bb9d6f53691236f34cc8e6fec86dd659aef757
RMD160: ef2f8e5564f7508db4829fe655644d959e35da5d
Filesize: 488.348 KB

Version history: (Expand)


CVS history: (Expand)


   2020-01-07 20:26:28 by Benny Siegert | Files touched by this commit (3) | Package updated
Log message:
Pullup ticket #6107 - requested by is
security/libssh: security fix

Revisions pulled up:
- security/libssh/Makefile                                      1.34
- security/libssh/PLIST                                         1.15
- security/libssh/distinfo                                      1.20

---
   Module Name:    pkgsrc
   Committed By:   wiz
   Date:           Tue Dec 31 12:27:03 UTC 2019

   Modified Files:
           pkgsrc/security/libssh: Makefile PLIST distinfo

   Log message:
   libssh: update to 0.93.

   version 0.9.3 (released 2019-12-10)
     * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution
     * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
     * SSH-01-006 General: Various unchecked Null-derefs cause DOS
     * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
     * SSH-01-010 SSH: Deprecated hash function in fingerprinting
     * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
     * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
     * SSH-01-001 State Machine: Initial machine states should be set explicitly
     * SSH-01-002 Kex: Differently bound macros used to iterate same array
     * SSH-01-005 Code-Quality: Integer sign confusion during assignments
     * SSH-01-008 SCP: Protocol Injection via unescaped File Names
     * SSH-01-009 SSH: Update documentation which RFCs are implemented
     * SSH-01-012 PKI: Information leak via uninitialized stack buffer