Update to 1.4.3:

Changelog:
Version 1.4.3 - November 27 2012

libssh2 1.4.3 GPG sig (685712 bytes)

Changes:

    compression: add support for zlib@openssh.com

Bug fixes:

    sftp_read: return error if a too large package arrives
    libssh2_hostkey_hash.3: update the description of return value
    Fixed MSVC NMakefile
    examples: use stderr for messages, stdout for data
    openssl: do not leak memory when handling errors
    improved handling of disabled MD5 algorithm in OpenSSL
    known_hosts: Fail when parsing unknown keys in known_hosts file
    configure: gcrypt doesn't come with pkg-config support
    session_free: wrong variable used for keeping state
    libssh2_userauth_publickey_fromfile_ex.3: mention publickey == NULL
    comp_method_zlib_decomp: handle Z_BUF_ERROR when inflating

Version 1.4.2 - May 18 2012

libssh2 1.4.2 GPG sig (679992 bytes)

Bug fixes:

    Return LIBSSH2_ERROR_SOCKET_DISCONNECT on EOF when reading banner
    userauth.c: fread() from public key file to correctly detect any
errors
    configure.ac: Add option to disable build of the example
applications
    Added 'Requires.private:' line to libssh2.pc
    SFTP: filter off incoming "zombie" responses
    gettimeofday: no need for a replacement under cygwin
    SSH_MSG_CHANNEL_REQUEST: default to want_reply
    win32/libssh2_config.h: Remove hardcoded #define LIBSSH2_HAVE_ZLIB

Version 1.4.1 - April 4 2012

libssh2 1.4.1 GPG sig (658507 bytes)

Bug fixes:

    build error with gcrypt backend
    always do "forced" window updates to avoid corner case stalls
    aes: the init function fails when OpenSSL has AES support
    transport_send: Finish in-progress key exchange before sending data
    channel_write: acknowledge transport errors
    examples/x11.c: Make sure sizeof passed to read operation is correct
    examples/x11.c:,Fix suspicious sizeof usage
    sftp_packet_add: verify the packet before accepting it
    SFTP: preserve the original error code more
    sftp_packet_read: adjust window size as necessary
    Use safer snprintf rather then sprintf in several places
    Define and use LIBSSH2_INVALID_SOCKET instead of INVALID_SOCKET
    sftp_write: cannot return acked data *and* EAGAIN
    sftp_read: avoid data *and* EAGAIN
    libssh2.h: Add missing prototype for libssh2_session_banner_set()

Version 1.4.0 - January 31 2012

libssh2 1.4.0 GPG sig (653514 bytes)

Changes:

    Added libssh2_session_supported_algs()
    Added libssh2_session_banner_get()
    Added libssh2_sftp_get_channel()
    libssh2.h: bump the default window size to 256K

Bug fixes:

    sftp-seek: clear EOF flag
    userauth: Provide more informations if ssh pub key extraction fails
    ssh2_exec: skip error outputs for EAGAIN
    LIBSSH2_SFTP_PACKET_MAXLEN: increase to 80000
    knownhost_check(): Don't dereference ext if NULL is passed
    knownhost_add: Avoid dereferencing uninitialized memory on error
path
    OpenSSL EVP: fix threaded use of structs
    _libssh2_channel_read: react on errors from receive_window_adjust
    sftp_read: cap the read ahead maximum amount
    _libssh2_channel_read: fix non-blocking window adjusting

Version 1.3.0 - September 6 2011

libssh2 1.3.0 GPG sig (639262 bytes)

Changes:

    Added custom callbacks for performing low level socket I/O

Bug fixes:

    sftp_read: advance offset correctly for buffered copies
    libssh2_sftp_seek64: flush packetlist and buffered data
    _libssh2_packet_add: adjust window size when truncating
    sftp_read: a short read is not end of file

Version 1.2.9 - August 16 2011

libssh2 1.2.9 GPG sig (642150 bytes)

Changes:

    Added libssh2_session_set_timeout() and
libssh2_session_get_timeout() to make blocking calls get a timeout

Bug fixes:

    configure and pkg-config: fix $VERSION
    s/\.NF/.nf/ to fix wrong macro name caught by man --warnings
    keepalive: add first basic man pages
    sftp_write: flush the packetlist on error
    sftp_write: clean offsets on error
    msvcproj: added libs and debug stuff
    SCP: fix incorrect error code
    session_startup: init state properly
    sftp_write_sliding: send the complete file
    userauth_keyboard_interactive: skip code on zero length auth
    _libssh2_wait_socket: fix timeouts for poll() uses
    agent_list_identities: fix out of scope access
    _libssh2_recv(): handle ENOENT error as EAGAIN
    userauth_keyboard_interactive: fix buffer overflow
    removed man pages for non-existing functions!
    gettimeofday: fix name space pollution
    _libssh2_channel_write: handle window_size == 0 better

Version 1.2.8 - April 5 2011

libssh2 1.2.8 GPG sig (637707 bytes)

Changes:

    added libssh2_free, libssh2_channel_get_exit_signal and
libssh2_session_handshake
    SFTP read/write remade and now MUCH faster, especially on high
latency connections
    added new examples: ssh2_echo.c, sftp_append.c and
sftp_write_sliding.c
    userauth: derive publickey from private
    NEWS: now generated from git

Bug fixes:

    Support unlimited number of host names in a single line of the
known_hosts file.
    fix memory leak in userauth_keyboard_interactive()
    fix memory leaks (two times cipher_data) for each sftp session
    session_startup: manage server data before server identification
    SCP: allow file names with bytes > 126
    scp_recv: improved treatment of channel_read() returning zero
    libssh2_userauth_authenticated: make it work as documented
    variable size cleanup: match internal variable sizes better with the
sizes of the fields used on the wire
    channel_request_pty_size: fix reqPTY_state
    sftp_symlink: return error if receive buffer too small
    sftp_readdir: return error if buffer is too small
    libssh2_knownhost_readfile.3: clarify return value
    configure: stop using the deprecated AM_INIT_AUTOMAKE syntax
    Fixed Win32 makefile which was now broken at resource build
    kex_agree_hostkey: fix NULL pointer derefence
    _libssh2_ntohu64: fix conversion from network bytes to uint64
    ssize_t: proper typedef with MSVC compilers
    zlib: Add debug tracing of zlib errors
    decomp: increase decompression buffer sizes

Version 1.2.7 - August 17 2010

libssh2 1.2.7 GPG sig (583105 bytes)

Changes:

    Added Watcom makefile

Bug fixes:

    Better handling of invalid key files
    inputchecks: make lots of API functions check for NULL pointers
    libssh2_session_callback_set: extended the man page
    SFTP: limit write() to not produce overly large packets
    agent: make libssh2_agent_userauth() work blocking properly
    _libssh2_userauth_publickey: reject method names longer than the
data
    channel_free: ignore problems with channel_close()
    typedef: make ssize_t get typedef without LIBSSH2_WIN32
    _libssh2_wait_socket: poll needs milliseconds
    libssh2_wait_socket: reset error code to "leak" EAGAIN less
    Added include for sys/select.h to get fd.set on some platforms
    session_free: free more data to avoid memory leaks
    openssl: make use of the EVP interface
    Fix underscore typo for 64-bit printf format specifiers on Windows
    Make libssh2_debug() create a correctly terminated string
    userauth_hostbased_fromfile: packet length too short
    handshake: Compression enabled at the wrong time
    Don't overflow MD5 server hostkey

Version 1.2.6 - June 10 2010

libssh2 1.2.6 GPG sig (579590 bytes)

Changes:

    Added libssh2_sftp_statvfs() and libssh2_sftp_fstatvfs()
    Added libssh2_knownhost_checkp()
    Added libssh2_scp_send64()

Bug fixes:

    wait_socket: make c89 compliant and use two fd_sets for select()
    OpenSSL AES-128-CTR detection
    proper keyboard-interactive user dialog in the sftp.c example
    build procedure for VMS
    fixed libssh2.dsw to use the generated libssh2.dsp
    several Windows-related build fixes
    fail to init SFTP if session isn't already authenticated
    many tiny fixes that address clang-analyzer warnings
    sftp_open: deal with short channel_write calls
    libssh2_publickey_init: fixed to work better non-blocking
    sftp_close_handle: add precation to not access NULL pointer
    sftp_readdir: simplified and bugfixed
    channel_write: if data has been sent, don't return EAGAIN

Version 1.2.5 - April 13 2010

libssh2 1.2.5 GPG sig (559553 bytes)

Changes:

    Added Add keep-alive support: libssh2_keepalive_config() and
libssh2_keepalive_send()
    Added libssh2_knownhost_addc(), libssh2_init() and libssh2_exit()
    Added LIBSSH2_SFTP_S_IS***() macros

Bug fixes:

    fix memory leak in libssh2_session_startup()
    added missing error codes - shown as hangs in blocking mode
    fix memory leak in userauth_keyboard_interactive()
    libssh2_knownhost_del: fix write to freed memory
    Send and receive channel EOF before sending SSH_MSG_CHANNEL_CLOSE
    Use AES-CTR from OpenSSL when available
    Fixed gettimeofday to compile with Visual C++ 6
    NULL dereference when window adjusting a non-existing channel
    avoid using poll on interix and mac os x systems
    fix scp memory leak
    Correctly clear blocking flag after sending multipart packet
    Reduce used window sizes by factor 10
    libssh2_userauth_publickey_fromfile_ex() handles a NULL password
    sftp_init() deal with _libssh2_channel_write() short returns

Version 1.2.4 - February 13 2010

libssh2 1.2.4 GPG sig (547675 bytes)

Bug fixes:

    Resolve compile issues on Solaris x64 and UltraSPARC
    Allow compiling with OpenSSL when AES isn't available
    Fix Tru64 socklen_t compile issue with example/direct_tcpip.c

Version 1.2.3 - February 3 2010

libssh2 1.2.3 GPG sig (547652 bytes)

Changes:

    ssh-agent support with the new libssh2_agent_* functions
    Added libssh2_trace_sethandler()
    Added the direct_tcpip.c and ssh2_agent.c examples

Bug fixes:

    Fixed memory leak in userauth_publickey
    Fixed publickey authentication regression
    Silenced several compiler warnings
    avoid returning data to memory already freed
    transport layer fix for bogus -39 (LIBSSH2_ERROR_BAD_USE) errors
    Fixed padding in ssh-dss signature blob encoding
    Fixed direction blocking flag problems
    Fixed memory leak in sftp_fstat()

3 files changed, 80 insertions, 11 deletions

diff --git a/security/libssh2/Makefile b/security/libssh2/Makefile
index 504cb5b6cce..8eb05939301 100644
--- a/security/libssh2/Makefile
+++ b/security/libssh2/Makefile
@@ -1,8 +1,7 @@
-# $NetBSD: Makefile,v 1.9 2014/02/12 23:18:33 tron Exp $
+# $NetBSD: Makefile,v 1.10 2014/07/20 22:02:58 schnoebe Exp $
 #
 
-DISTNAME=	libssh2-1.2.2
-PKGREVISION=	3
+DISTNAME=	libssh2-1.4.3
 CATEGORIES=	security
 MASTER_SITES=	http://www.libssh2.org/download/
 
diff --git a/security/libssh2/PLIST b/security/libssh2/PLIST
index 51d3fa77a6d..af4f0e53a6c 100644
--- a/security/libssh2/PLIST
+++ b/security/libssh2/PLIST
@@ -1,43 +1,75 @@
-@comment $NetBSD: PLIST,v 1.3 2009/11/20 16:45:30 drochner Exp $
+@comment $NetBSD: PLIST,v 1.4 2014/07/20 22:02:58 schnoebe Exp $
 include/libssh2.h
 include/libssh2_publickey.h
 include/libssh2_sftp.h
 lib/libssh2.la
 lib/pkgconfig/libssh2.pc
+man/man3/libssh2_agent_connect.3
+man/man3/libssh2_agent_disconnect.3
+man/man3/libssh2_agent_free.3
+man/man3/libssh2_agent_get_identity.3
+man/man3/libssh2_agent_init.3
+man/man3/libssh2_agent_list_identities.3
+man/man3/libssh2_agent_userauth.3
 man/man3/libssh2_banner_set.3
 man/man3/libssh2_base64_decode.3
 man/man3/libssh2_channel_close.3
+man/man3/libssh2_channel_direct_tcpip.3
 man/man3/libssh2_channel_direct_tcpip_ex.3
 man/man3/libssh2_channel_eof.3
+man/man3/libssh2_channel_exec.3
+man/man3/libssh2_channel_flush.3
 man/man3/libssh2_channel_flush_ex.3
+man/man3/libssh2_channel_flush_stderr.3
 man/man3/libssh2_channel_forward_accept.3
 man/man3/libssh2_channel_forward_cancel.3
+man/man3/libssh2_channel_forward_listen.3
 man/man3/libssh2_channel_forward_listen_ex.3
 man/man3/libssh2_channel_free.3
+man/man3/libssh2_channel_get_exit_signal.3
 man/man3/libssh2_channel_get_exit_status.3
 man/man3/libssh2_channel_handle_extended_data.3
 man/man3/libssh2_channel_handle_extended_data2.3
+man/man3/libssh2_channel_ignore_extended_data.3
 man/man3/libssh2_channel_open_ex.3
+man/man3/libssh2_channel_open_session.3
 man/man3/libssh2_channel_process_startup.3
+man/man3/libssh2_channel_read.3
 man/man3/libssh2_channel_read_ex.3
+man/man3/libssh2_channel_read_stderr.3
 man/man3/libssh2_channel_receive_window_adjust.3
 man/man3/libssh2_channel_receive_window_adjust2.3
+man/man3/libssh2_channel_request_pty.3
 man/man3/libssh2_channel_request_pty_ex.3
+man/man3/libssh2_channel_request_pty_size.3
 man/man3/libssh2_channel_request_pty_size_ex.3
 man/man3/libssh2_channel_send_eof.3
 man/man3/libssh2_channel_set_blocking.3
+man/man3/libssh2_channel_setenv.3
 man/man3/libssh2_channel_setenv_ex.3
+man/man3/libssh2_channel_shell.3
+man/man3/libssh2_channel_subsystem.3
 man/man3/libssh2_channel_wait_closed.3
 man/man3/libssh2_channel_wait_eof.3
+man/man3/libssh2_channel_window_read.3
 man/man3/libssh2_channel_window_read_ex.3
+man/man3/libssh2_channel_window_write.3
 man/man3/libssh2_channel_window_write_ex.3
+man/man3/libssh2_channel_write.3
 man/man3/libssh2_channel_write_ex.3
+man/man3/libssh2_channel_write_stderr.3
+man/man3/libssh2_channel_x11_req.3
 man/man3/libssh2_channel_x11_req_ex.3
-man/man3/libssh2_free_host_entry.3
-man/man3/libssh2_host_entry_match.3
+man/man3/libssh2_exit.3
+man/man3/libssh2_free.3
 man/man3/libssh2_hostkey_hash.3
+man/man3/libssh2_init.3
+man/man3/libssh2_keepalive_config.3
+man/man3/libssh2_keepalive_send.3
 man/man3/libssh2_knownhost_add.3
+man/man3/libssh2_knownhost_addc.3
 man/man3/libssh2_knownhost_check.3
+man/man3/libssh2_knownhost_checkp.3
 man/man3/libssh2_knownhost_del.3
 man/man3/libssh2_knownhost_free.3
 man/man3/libssh2_knownhost_get.3
@@ -46,55 +78,93 @@ man/man3/libssh2_knownhost_readfile.3
 man/man3/libssh2_knownhost_readline.3
 man/man3/libssh2_knownhost_writefile.3
 man/man3/libssh2_knownhost_writeline.3
-man/man3/libssh2_new_host_entry.3
 man/man3/libssh2_poll.3
 man/man3/libssh2_poll_channel_read.3
+man/man3/libssh2_publickey_add.3
 man/man3/libssh2_publickey_add_ex.3
 man/man3/libssh2_publickey_init.3
 man/man3/libssh2_publickey_list_fetch.3
 man/man3/libssh2_publickey_list_free.3
+man/man3/libssh2_publickey_remove.3
 man/man3/libssh2_publickey_remove_ex.3
 man/man3/libssh2_publickey_shutdown.3
 man/man3/libssh2_scp_recv.3
+man/man3/libssh2_scp_send.3
+man/man3/libssh2_scp_send64.3
 man/man3/libssh2_scp_send_ex.3
 man/man3/libssh2_session_abstract.3
+man/man3/libssh2_session_banner_get.3
+man/man3/libssh2_session_banner_set.3
 man/man3/libssh2_session_block_directions.3
 man/man3/libssh2_session_callback_set.3
+man/man3/libssh2_session_disconnect.3
 man/man3/libssh2_session_disconnect_ex.3
 man/man3/libssh2_session_flag.3
 man/man3/libssh2_session_free.3
 man/man3/libssh2_session_get_blocking.3
+man/man3/libssh2_session_get_timeout.3
 man/man3/libssh2_session_hostkey.3
+man/man3/libssh2_session_init.3
 man/man3/libssh2_session_init_ex.3
 man/man3/libssh2_session_last_errno.3
 man/man3/libssh2_session_last_error.3
 man/man3/libssh2_session_method_pref.3
 man/man3/libssh2_session_methods.3
 man/man3/libssh2_session_set_blocking.3
+man/man3/libssh2_session_set_timeout.3
 man/man3/libssh2_session_startup.3
+man/man3/libssh2_session_supported_algs.3
+man/man3/libssh2_sftp_close.3
 man/man3/libssh2_sftp_close_handle.3
+man/man3/libssh2_sftp_closedir.3
+man/man3/libssh2_sftp_fsetstat.3
+man/man3/libssh2_sftp_fstat.3
 man/man3/libssh2_sftp_fstat_ex.3
+man/man3/libssh2_sftp_fstatvfs.3
+man/man3/libssh2_sftp_get_channel.3
 man/man3/libssh2_sftp_init.3
 man/man3/libssh2_sftp_last_error.3
+man/man3/libssh2_sftp_lstat.3
+man/man3/libssh2_sftp_mkdir.3
 man/man3/libssh2_sftp_mkdir_ex.3
+man/man3/libssh2_sftp_open.3
 man/man3/libssh2_sftp_open_ex.3
+man/man3/libssh2_sftp_opendir.3
 man/man3/libssh2_sftp_read.3
+man/man3/libssh2_sftp_readdir.3
 man/man3/libssh2_sftp_readdir_ex.3
+man/man3/libssh2_sftp_readlink.3
+man/man3/libssh2_sftp_realpath.3
+man/man3/libssh2_sftp_rename.3
 man/man3/libssh2_sftp_rename_ex.3
+man/man3/libssh2_sftp_rewind.3
+man/man3/libssh2_sftp_rmdir.3
 man/man3/libssh2_sftp_rmdir_ex.3
 man/man3/libssh2_sftp_seek.3
+man/man3/libssh2_sftp_seek64.3
+man/man3/libssh2_sftp_setstat.3
 man/man3/libssh2_sftp_shutdown.3
+man/man3/libssh2_sftp_stat.3
 man/man3/libssh2_sftp_stat_ex.3
+man/man3/libssh2_sftp_statvfs.3
+man/man3/libssh2_sftp_symlink.3
 man/man3/libssh2_sftp_symlink_ex.3
 man/man3/libssh2_sftp_tell.3
 man/man3/libssh2_sftp_tell64.3
+man/man3/libssh2_sftp_unlink.3
 man/man3/libssh2_sftp_unlink_ex.3
 man/man3/libssh2_sftp_write.3
 man/man3/libssh2_trace.3
+man/man3/libssh2_trace_sethandler.3
 man/man3/libssh2_userauth_authenticated.3
+man/man3/libssh2_userauth_hostbased_fromfile.3
 man/man3/libssh2_userauth_hostbased_fromfile_ex.3
+man/man3/libssh2_userauth_keyboard_interactive.3
 man/man3/libssh2_userauth_keyboard_interactive_ex.3
 man/man3/libssh2_userauth_list.3
+man/man3/libssh2_userauth_password.3
 man/man3/libssh2_userauth_password_ex.3
+man/man3/libssh2_userauth_publickey.3
+man/man3/libssh2_userauth_publickey_fromfile.3
 man/man3/libssh2_userauth_publickey_fromfile_ex.3
 man/man3/libssh2_version.3
diff --git a/security/libssh2/distinfo b/security/libssh2/distinfo
index ff8574b8a5f..294204106e0 100644
--- a/security/libssh2/distinfo
+++ b/security/libssh2/distinfo
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.3 2009/11/20 16:45:30 drochner Exp $
+$NetBSD: distinfo,v 1.4 2014/07/20 22:02:58 schnoebe Exp $
 
-SHA1 (libssh2-1.2.2.tar.gz) = d1a52cd4949efc7befcd61052de7fce4ae3e7415
-RMD160 (libssh2-1.2.2.tar.gz) = 21e90f957019c11d0447352c5ac19c9dc3f8dd5c
-Size (libssh2-1.2.2.tar.gz) = 535430 bytes
+SHA1 (libssh2-1.4.3.tar.gz) = c27ca83e1ffeeac03be98b6eef54448701e044b0
+RMD160 (libssh2-1.4.3.tar.gz) = 9664d05973f62a3b1716c9a07dcdddf0374a604c
+Size (libssh2-1.4.3.tar.gz) = 685712 bytes