summaryrefslogtreecommitdiff
path: root/security/libssh
AgeCommit message (Collapse)AuthorFilesLines
2016-10-09Add missing dependency: devel/argpkamil2-3/+6
This fixes build on NetBSD-7.99.39 with pkgsrc-current from 2016-10-09. Bump PKGREVISION to 2.
2016-03-05Bump PKGREVISION for security/openssl ABI bump.jperkin2-3/+4
2016-02-23Update libssh to 0.7.3:wiz3-14/+13
version 0.7.3 (released 2016-01-23) * Fixed CVE-2016-0739 * Fixed ssh-agent on big endian * Fixed some documentation issues
2016-02-23Fix option handling in bl3.mk.wiz1-4/+3
2015-11-18Restore SHA512 checksumwiz1-1/+2
2015-11-18Pass pkglint.christos4-18/+23
2015-11-17update to 0.72 since the previous versions have known security issues.christos4-18/+19
2015-11-04Add SHA512 digests for distfiles for security categoryagc1-1/+2
Problems found locating distfiles: Package f-prot-antivirus6-fs-bin: missing distfile fp-NetBSD.x86.32-fs-6.2.3.tar.gz Package f-prot-antivirus6-ws-bin: missing distfile fp-NetBSD.x86.32-ws-6.2.3.tar.gz Package libidea: missing distfile libidea-0.8.2b.tar.gz Package openssh: missing distfile openssh-7.1p1-hpn-20150822.diff.bz2 Package uvscan: missing distfile vlp4510e.tar.Z Otherwise, existing SHA1 digests verified and found to be the same on the machine holding the existing distfiles (morden). All existing SHA1 digests retained for now as an audit trail.
2014-02-12Recursive PKGREVISION bump for OpenSSL API version bump.tron2-4/+4
2014-01-27Do not set FETCH_USING, should not be set in a package Makefile.wiz1-7/+1
2014-01-09Needs zlib.jperkin1-1/+2
2014-01-01Recursive PKGREVISION bump for libgcrypt-1.6.0 shlib major bump.wiz1-2/+2
2013-04-08Remove "Trailing empty lines." and/or "Trailing white-space."rodent1-2/+2
2013-02-06PKGREVISION bumps for the security/openssl 1.0.1d update.jperkin2-3/+4
2013-02-01Make pkg_info show the upstream version, for comparison to advisories etc.is1-4/+5
2013-02-01fix typois1-1/+1
2013-02-01Commit missing file, and fix the version gate. Thanks to Noud de Brouweris2-3/+32
for beta-testing the package.
2013-02-01Update libssh to (upstream) 0.5.4 == (our) 0.54.is2-60/+12
(We need to keep the old numbering syntax to make versions compare correctly.) There are only two consumers in pkgsrc; one of them (remmina and remmina-plugins) actually needed library version 0.4 or later, and didn't build the ssh/sftp/nx plugins without. Hydra is also supposed to build with 0.4.x and later.) Upstream changelogs: 0.5.4: CVE-2013-0176 - NULL dereference leads to denial of service Fixed several NULL pointer dereferences in SSHv1. Fixed a free crash bug in options parsing. and for completeness 0.5.3: This is an important SECURITY and maintenance release in order to address CVE-2012-4559, CVE-2012-4560, CVE-2012-4561 and CVE-2012-4562. CVE-2012-4559 - Fix multiple double free() flaws CVE-2012-4560 - Fix multiple buffer overflow flaws CVE-2012-4561 - Fix multiple invalid free() flaws CVE-2012-4562 - Fix multiple improper overflow checks (...) Suggested by Noud de Brouwer in wip/libssh and PR pkg/47518, but needed some changes to PLIST as well as to make "pkg_admin audit" and updates compare correctly.
2013-02-01Update libssh to (upstream) 0.5.4 == (our) 0.54.is2-9/+18
(We need to keep the old numbering syntax to make versions compare correctly.) There are only two consumers in pkgsrc; one of them (remmina and remmina-plugins) actually needed library version 0.4 or later, and didn't build the ssh/sftp/nx plugins without. Hydra is also supposed to build with 0.4.x and later.) Upstream changelogs: 0.5.4: CVE-2013-0176 - NULL dereference leads to denial of service Fixed several NULL pointer dereferences in SSHv1. Fixed a free crash bug in options parsing. and for completeness 0.5.3: This is an important SECURITY and maintenance release in order to address CVE-2012-4559, CVE-2012-4560, CVE-2012-4561 and CVE-2012-4562. CVE-2012-4559 - Fix multiple double free() flaws CVE-2012-4560 - Fix multiple buffer overflow flaws CVE-2012-4561 - Fix multiple invalid free() flaws CVE-2012-4562 - Fix multiple improper overflow checks (...)
2013-02-01Update libssh to (upstream) 0.5.4 == (our) 0.54.is2-28/+37
(We need to keep the old numbering syntax to make versions compare correctly.) There are only two consumers in pkgsrc; one of them (remmina and remmina-plugins) actually needed library version 0.4 or later, and didn't build the ssh/sftp/nx plugins without. Hydra is also supposed to build with 0.4.x and later.) Upstream changelogs: 0.5.4: CVE-2013-0176 - NULL dereference leads to denial of service Fixed several NULL pointer dereferences in SSHv1. Fixed a free crash bug in options parsing. and for completeness 0.5.3: This is an important SECURITY and maintenance release in order to address CVE-2012-4559, CVE-2012-4560, CVE-2012-4561 and CVE-2012-4562. CVE-2012-4559 - Fix multiple double free() flaws CVE-2012-4560 - Fix multiple buffer overflow flaws CVE-2012-4561 - Fix multiple invalid free() flaws CVE-2012-4562 - Fix multiple improper overflow checks (...) Suggested by Noud de Brouwer in wip/libssh and PR pkg/47518, but needed some changes to PLIST as well as to make "pkg_admin audit" and updates compare correctly.
2013-02-01Update libssh to (upstream) 0.5.4 == (our) 0.54.is1-8/+4
(We need to keep the old numbering syntax to make versions compare correctly.) There are only two consumers in pkgsrc; one of them (remmina and remmina-plugins) actually needed library version 0.4 or later, and didn't build the ssh/sftp/nx plugins without. Hydra is also supposed to build with 0.4.x and later.) Upstream changelogs: 0.5.4: CVE-2013-0176 - NULL dereference leads to denial of service Fixed several NULL pointer dereferences in SSHv1. Fixed a free crash bug in options parsing. and for completeness 0.5.3: This is an important SECURITY and maintenance release in order to address CVE-2012-4559, CVE-2012-4560, CVE-2012-4561 and CVE-2012-4562. CVE-2012-4559 - Fix multiple double free() flaws CVE-2012-4560 - Fix multiple buffer overflow flaws CVE-2012-4561 - Fix multiple invalid free() flaws CVE-2012-4562 - Fix multiple improper overflow checks (...)
2012-10-23Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.asau1-3/+1
2012-05-07Set BUILDLINK_ABI_DEPENDS correctly (with +=, not ?=)dholland1-2/+2
It turns out there were a lot of these.
2011-11-27Add missing devel/zlib buildlink.sbd2-3/+7
Bump PKGREVISION
2010-01-17Recursive PKGREVISION bump for jpeg update to 8.wiz1-2/+2
2009-11-25Fix permissions of include files. Fix linkage for systems with opensshjoerg3-5/+53
in base. Add destdir support.
2009-07-17Give up MAINTAINERadrianp1-2/+2
2009-06-14Remove @dirrm entries from PLISTsjoerg1-3/+1
2009-03-20Simply and speed up buildlink3.mk files and processing.joerg1-13/+6
This changes the buildlink3.mk files to use an include guard for the recursive include. The use of BUILDLINK_DEPTH, BUILDLINK_DEPENDS, BUILDLINK_PACKAGES and BUILDLINK_ORDER is handled by a single new variable BUILDLINK_TREE. Each buildlink3.mk file adds a pair of enter/exit marker, which can be used to reconstruct the tree and to determine first level includes. Avoiding := for large variables (BUILDLINK_ORDER) speeds up parse time as += has linear complexity. The include guard reduces system time by avoiding reading files over and over again. For complex packages this reduces both %user and %sys time to half of the former time.
2008-01-18Per the process outlined in revbump(1), perform a recursive revbumptnn1-1/+2
on packages that are affected by the switch from the openssl 0.9.7 branch to the 0.9.8 branch. ok jlam@
2007-02-25Make this build on Darwin.yyamano2-6/+6
2006-07-08Change the format of BUILDLINK_ORDER to contain depth information as well,jlam1-2/+2
and add a new helper target and script, "show-buildlink3", that outputs a listing of the buildlink3.mk files included as well as the depth at which they are included. For example, "make show-buildlink3" in fonts/Xft2 displays: zlib fontconfig iconv zlib freetype2 expat freetype2 Xrender renderproto
2006-07-08Track information in a new variable BUILDLINK_ORDER that informs usjlam1-1/+2
of the order in which buildlink3.mk files are (recursively) included by a package Makefile.
2006-04-12Aligned the last line of the buildlink3.mk files with the first line, sorillig1-2/+2
that they look nicer.
2006-04-06Over 1200 files touched but no revisions bumped :)reed1-2/+2
RECOMMENDED is removed. It becomes ABI_DEPENDS. BUILDLINK_RECOMMENDED.foo becomes BUILDLINK_ABI_DEPENDS.foo. BUILDLINK_DEPENDS.foo becomes BUILDLINK_API_DEPENDS.foo. BUILDLINK_DEPENDS does not change. IGNORE_RECOMMENDED (which defaulted to "no") becomes USE_ABI_DEPENDS which defaults to "yes". Added to obsolete.mk checking for IGNORE_RECOMMENDED. I did not manually go through and fix any aesthetic tab/spacing issues. I have tested the above patch on DragonFly building and packaging subversion and pkglint and their many dependencies. I have also tested USE_ABI_DEPENDS=no on my NetBSD workstation (where I have used IGNORE_RECOMMENDED for a long time). I have been an active user of IGNORE_RECOMMENDED since it was available. As suggested, I removed the documentation sentences suggesting bumping for "security" issues. As discussed on tech-pkg. I will commit to revbump, pkglint, pkg_install, createbuildlink separately. Note that if you use wip, it will fail! I will commit to pkgsrc-wip later (within day).
2006-02-17Add DragonFly support.joerg2-4/+6
2006-02-05Update PLIST that was missed in the recent updateadrianp1-2/+3
2006-02-05Update to 0.11adrianp4-9/+27
> -server implementation development. I won't document it before it even works. > -small bug corrected when connecting to sun ssh servers. > -channel wierdness corrected (writing huge data packets) > -channel_read_nonblocking added > -channel bug where stderr wasn't correctly read fixed. > -sftp_file_set_nonblocking added. It's now possible to have nonblocking SFTP IO > -connect_status callback. > -priv.h contains the internal functions, libssh.h the public interface > -options_set_timeout (thx marcelo) really working. > -tcp tunneling through channel_open_forward. > -channel_request_exec() > -channel_request_env() > -ssh_get_pubkey_hash() > -ssh_is_server_known() > -ssh_write_known_host() > -options_set_ssh_dir > -how could this happen ! there weren't any channel_close ! > -nasty channel_free bug resolved. > -removed the unsigned long all around the code. use only u8,u32 & u64. > -it now compiles and runs under amd64 ! > -channel_request_exec() > -channel_request_env() > -ssh_get_pubkey_hash() > -ssh_is_server_known() > -ssh_write_known_host() > -options_set_ssh_dir > -how could this happen ! there weren't any channel_close ! > -nasty channel_free bug resolved. > -removed the unsigned long all around the code. use only u8,u32 & u64. > -it now compiles and runs under amd64 ! > -channel_request_pty_size > -channel_change_pty_size > -options_copy() > -ported the doc to an HTML file. > -small bugfix in packet.c > -prefixed error constants with SSH_ > -sftp_stat, sftp_lstat, sftp_fstat. thanks Michel Bardiaux for the patch. > -again channel number mismatch fixed. > -fixed a bug in ssh_select making the select fail when a signal has been caught. > -keyboard-interactive authentication working.
2005-12-28Fix typo in DESCR.reed2-3/+3
Reword COMMENT (which also removes the typo).
2005-09-28Removed trailing white-space.rillig1-2/+2
2005-06-01This buildlink3.mk wasn't adding to BUILDLINK_DEPENDS like it wasjlam1-2/+2
supposed to.
2005-05-15- Add a note in the Makefile about upgrading this package.adrianp1-1/+5
2005-04-17The ssh library was designed to be used by programmers needing a workingadrianp5-0/+62
SSH implementation by the mean of a library. The complete control of the client is made by the programmer. With libssh, you can remotely execute programs, transfer files, use a secure and transparent tunnel for your remote programs. With its Secure FTP implementation, you can play with remote files easily, without third-party programs others than libcrypto (from openssl).
generated by cgit v1.2.3 (git 2.39.1) at 2024-05-25 11:02:46 +0000