./security/libssh2, SSH2 protocol library

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]

Branch: CURRENT, Version: 1.11.0nb2, Package name: libssh2-1.11.0nb2, Maintainer: pkgsrc-users

libssh2 is a library implementing the SSH2 protocol, available under
the revised BSD license.

Required to run:

Required to build:

Master sites:

Filesize: 1028.869 KB

Version history: (Expand)

CVS history: (Expand)

   2023-12-21 08:04:19 by Thomas Klausner | Files touched by this commit (8)
Log message:
libssh2: add upstream fix for Terrapin

   2023-10-25 00:11:51 by Thomas Klausner | Files touched by this commit (2298)
Log message:
*: bump for openssl 3
   2023-06-06 10:05:15 by Thomas Klausner | Files touched by this commit (3) | Package updated
Log message:
libssh2: update to 1.11.0.

Version 1.11.0 - May 30 2023

Enhancements and bugfixes

    Adds support for encrypt-then-mac (ETM) MACs
    Adds support for AES-GCM crypto protocols
    Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
    Adds support for RSA certificate authentication
    Adds FIDO support with *_sk() functions
    Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
    Adds Agent Forwarding and libssh2_agent_sign()
    Adds support for Channel Signal message libssh2_channel_signal_ex()
    Adds support to get the user auth banner message libssh2_userauth_banner()
    Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
    Adds wolfSSL support to CMake file
    Adds mbedTLS 3.x support
    Adds LibreSSL 3.5 support
    Adds support for CMake "unity" builds
    Adds CMake support for building shared and static libs in a single pass
    Adds symbol hiding support to CMake
    Adds support for libssh2.rc for all build tools
    Adds .zip, .tar.xz and .tar.bz2 release tarballs
    Enables ed25519 key support for LibreSSL 3.7.0 or higher
    Improves OpenSSL 1.1 and 3 compatibility
    Now requires OpenSSL 1.0.2 or newer
    Now requires CMake 3.1 or newer
    SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
    SFTP: No longer has a packet limit when reading a directory
    SFTP: now parses attribute extensions if they exist
    SFTP: no longer will busy loop if SFTP fails to initialize
    SFTP: now clear various errors as expected
    SFTP: no longer skips files if the line buffer is too small
    SCP: add option to not quote paths
    SCP: Enables 64-bit offset support unconditionally
    Now skips leading \r and \n characters in banner_receive()
    Enables secure memory zeroing with all build tools on all platforms
    No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
    Speed up base64 encoding by 7x
    Assert if there is an attempt to write a value that is too large
    WinCNG: fix memory leak in _libssh2_dh_secret()
    Added protection against possible null pointer dereferences
    Agent now handles overly large comment lengths
    Now ensure KEX replies don't include extra bytes
    Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
    Fixed possible buffer overflow in keyboard interactive code path
    Fixed overlapping memcpy()
    Fixed Windows UWP builds
    Fixed DLL import name
    Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
    Support for building with gcc versions older than 8
    Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
    Restores ANSI C89 compliance
    Enabled new compiler warnings and fixed/silenced them
    Improved error messages
    Now uses CIFuzz
    Numerous minor code improvements
    Improvements to CI builds
    Improvements to unit tests
    Improvements to doc files
    Improvements to example files
    Removed "old gex" build option
    Removed no-encryption/no-mac builds
    Removed support for NetWare and Watcom wmake build files
   2021-10-26 13:18:07 by Nia Alarie | Files touched by this commit (605)
Log message:
security: Replace RMD160 checksums with BLAKE2s checksums

All checksums have been double-checked against existing RMD160 and
SHA512 hashes

Unfetchable distfiles (fetched conditionally?):
./security/cyrus-sasl/distinfo \ 
   2021-10-07 16:54:50 by Nia Alarie | Files touched by this commit (606)
Log message:
security: Remove SHA1 hashes for distfiles
   2020-05-10 19:27:27 by Roland Illig | Files touched by this commit (1)
Log message:
security/libssh2: remove unknown configure options
   2020-03-12 18:46:22 by Thomas Klausner | Files touched by this commit (2)
Log message:
libssh2: add upstream bug report
   2020-03-12 18:28:10 by Thomas Klausner | Files touched by this commit (3)
Log message:
libssh2: fix unportable test(1) operator in Makefile.in

Skip check for Makefile.am.