pkgsrc/security/libssh, branch pkgsrc_2013Q3[no description]https://git.osdyson.ru/mirror/pkgsrc/atom?h=pkgsrc_2013Q32013-04-08T11:17:08ZRemove "Trailing empty lines." and/or "Trailing white-space."2013-04-08T11:17:08Zrodentrodent2013-04-08T11:17:08Zurn:sha1:964e82f84a31c3742d196f3ebcf9cf755a13725dPKGREVISION bumps for the security/openssl 1.0.1d update.2013-02-06T23:20:50Zjperkinjperkin2013-02-06T23:20:50Zurn:sha1:3f77c48b9aa5259445074dd7190ffd1dbb9b5d62Make pkg_info show the upstream version, for comparison to advisories etc.2013-02-01T21:55:55Zisis2013-02-01T21:55:55Zurn:sha1:05da1c21d80490e58fad186ccc79965a5e37c379fix typo2013-02-01T21:50:45Zisis2013-02-01T21:50:45Zurn:sha1:303f93c5664dddd7656a6a55bfbd5939db3c7a68Commit missing file, and fix the version gate. Thanks to Noud de Brouwer2013-02-01T16:47:51Zisis2013-02-01T16:47:51Zurn:sha1:fb0611baaefadf8b6d19af5349f36e713cf3b4be
for beta-testing the package.
Update libssh to (upstream) 0.5.4 == (our) 0.54.2013-02-01T13:33:49Zisis2013-02-01T13:33:49Zurn:sha1:ca74e4ea01f8d305884df285386017fada748ffb
(We need to keep the old numbering syntax to make versions compare
correctly.)
There are only two consumers in pkgsrc; one of them (remmina and
remmina-plugins) actually needed library version 0.4 or later, and
didn't build the ssh/sftp/nx plugins without. Hydra is also supposed
to build with 0.4.x and later.)
Upstream changelogs:
0.5.4:
CVE-2013-0176 - NULL dereference leads to denial of service
Fixed several NULL pointer dereferences in SSHv1.
Fixed a free crash bug in options parsing.
and for completeness 0.5.3:
This is an important SECURITY and maintenance release in
order to address CVE-2012-4559, CVE-2012-4560, CVE-2012-4561
and CVE-2012-4562.
CVE-2012-4559 - Fix multiple double free() flaws
CVE-2012-4560 - Fix multiple buffer overflow flaws
CVE-2012-4561 - Fix multiple invalid free() flaws
CVE-2012-4562 - Fix multiple improper overflow checks
(...)
Suggested by Noud de Brouwer in wip/libssh and PR pkg/47518, but needed
some changes to PLIST as well as to make "pkg_admin audit" and updates
compare correctly.
Update libssh to (upstream) 0.5.4 == (our) 0.54.2013-02-01T13:33:48Zisis2013-02-01T13:33:48Zurn:sha1:0bcbf6543656d2916f4b109fbc59eaef2432891a
(We need to keep the old numbering syntax to make versions compare
correctly.)
There are only two consumers in pkgsrc; one of them (remmina and
remmina-plugins) actually needed library version 0.4 or later, and
didn't build the ssh/sftp/nx plugins without. Hydra is also supposed
to build with 0.4.x and later.)
Upstream changelogs:
0.5.4:
CVE-2013-0176 - NULL dereference leads to denial of service
Fixed several NULL pointer dereferences in SSHv1.
Fixed a free crash bug in options parsing.
and for completeness 0.5.3:
This is an important SECURITY and maintenance release in
order to address CVE-2012-4559, CVE-2012-4560, CVE-2012-4561
and CVE-2012-4562.
CVE-2012-4559 - Fix multiple double free() flaws
CVE-2012-4560 - Fix multiple buffer overflow flaws
CVE-2012-4561 - Fix multiple invalid free() flaws
CVE-2012-4562 - Fix multiple improper overflow checks
(...)
Update libssh to (upstream) 0.5.4 == (our) 0.54.2013-02-01T13:33:48Zisis2013-02-01T13:33:48Zurn:sha1:27e4367f7c93c67ac4becc78166c994d137052dc
(We need to keep the old numbering syntax to make versions compare
correctly.)
There are only two consumers in pkgsrc; one of them (remmina and
remmina-plugins) actually needed library version 0.4 or later, and
didn't build the ssh/sftp/nx plugins without. Hydra is also supposed
to build with 0.4.x and later.)
Upstream changelogs:
0.5.4:
CVE-2013-0176 - NULL dereference leads to denial of service
Fixed several NULL pointer dereferences in SSHv1.
Fixed a free crash bug in options parsing.
and for completeness 0.5.3:
This is an important SECURITY and maintenance release in
order to address CVE-2012-4559, CVE-2012-4560, CVE-2012-4561
and CVE-2012-4562.
CVE-2012-4559 - Fix multiple double free() flaws
CVE-2012-4560 - Fix multiple buffer overflow flaws
CVE-2012-4561 - Fix multiple invalid free() flaws
CVE-2012-4562 - Fix multiple improper overflow checks
(...)
Suggested by Noud de Brouwer in wip/libssh and PR pkg/47518, but needed
some changes to PLIST as well as to make "pkg_admin audit" and updates
compare correctly.
Update libssh to (upstream) 0.5.4 == (our) 0.54.2013-02-01T13:33:48Zisis2013-02-01T13:33:48Zurn:sha1:97cdfa3dbdc70cfb3f8a004b39254cb3d8e808f4
(We need to keep the old numbering syntax to make versions compare
correctly.)
There are only two consumers in pkgsrc; one of them (remmina and
remmina-plugins) actually needed library version 0.4 or later, and
didn't build the ssh/sftp/nx plugins without. Hydra is also supposed
to build with 0.4.x and later.)
Upstream changelogs:
0.5.4:
CVE-2013-0176 - NULL dereference leads to denial of service
Fixed several NULL pointer dereferences in SSHv1.
Fixed a free crash bug in options parsing.
and for completeness 0.5.3:
This is an important SECURITY and maintenance release in
order to address CVE-2012-4559, CVE-2012-4560, CVE-2012-4561
and CVE-2012-4562.
CVE-2012-4559 - Fix multiple double free() flaws
CVE-2012-4560 - Fix multiple buffer overflow flaws
CVE-2012-4561 - Fix multiple invalid free() flaws
CVE-2012-4562 - Fix multiple improper overflow checks
(...)
Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.2012-10-23T18:16:19Zasauasau2012-10-23T18:16:19Zurn:sha1:02fd687ccd4b6e6c62304e11bab2551c0a4e3b20