Accepting request 1303518 from devel:libraries:c_c++

OBS-URL: https://build.opensuse.org/request/show/1303518
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/libssh?expand=0&rev=80

libssh-0.11.2.tar.xz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCgAdFiEEiKIo2JsHwsd9DHgJA9XfjP3T6OcFAmhaqdkACgkQA9XfjP3T
-6Oe5xA/+LkbLEPKgNRKMFbXZX2UIyotnFUbZ2o0bujswAxGPqY2paYDHuA5njjKD
-b9I7WGKstrlywyDr3c+fBSak4uRkLgV7vb6GfjSTXwUoqCwXkUqjVMSO58iSnblZ
-gjuRglsL0dgTd6jF+LCGqD5JMDNk2spvK0xD/8i53MCqaLv2ysevR1Q2osaw8Hca
-AM3kHoCRK1TR2gDMLDoX9zSh0UrbHj7o5yG7KBTFoXJsJeR6OtTir72RVTuro8v7
-8rT1nWbEcgIk/W9+5k7fVuIZc7w1wHqkX8Rj3aubKsLLPPRRJ0Yy7eCRJ26i3d5J
-51NlmkjrXzmAVd80DOfcd8Ux4I3p85QFXqkgd3J5TgzeV1r0/xJ0Qer612pSPTXq
-7UPZmyD914ak0EUdiBmud9OIKNmS+szAW2gAtz3Es59aK3LrLO/wgSi09Jq0wqfZ
-yyvG4/a9dkHaNk0+cSy5YsL0truGCoIPYfKe5ESy5OdzYSYbCdymS8cQRVH3t0is
-inVV5PbfymbPtscYAliTOMhSYL6VktRBOf5kFA/8EG4+SPI6ingTecc0GqOMPhVu
-gYuj6G+bmschKkhHcMpbkmo7HN+sDBpdOWyPqs68RvytNWjng0x5jAFdDvA/I/6b
-ZNmiDlTUfTgsNqBLMNkQ+cx+mRzpp4L87Xvm4ZQhDl3MwxvY048=
-=aw47
------END PGP SIGNATURE-----

libssh-0.11.3.tar.xz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=wFeb
+-----END PGP SIGNATURE-----

libssh.changes

@@ -1,3 +1,16 @@
+-------------------------------------------------------------------
+Tue Sep  9 15:19:24 UTC 2025 - Lucas Mulling <lucas.mulling@suse.com>
+
+- Update to 0.11.3
+  * Security:
+    * CVE-2025-8114: Fix NULL pointer dereference after allocation failure (bsc#1246974)
+    * CVE-2025-8277: Fix memory leak of ephemeral key pair during repeated wrong KEX (bsc#1249375)
+    * Potential UAF when send() fails during key exchange
+  * Bugfixes:
+    * Fix possible timeout during KEX if client sends authentication too early
+    * Cleanup OpenSSL PKCS#11 provider when loaded
+    * Zeroize buffers containing private key blobs during export
+
 -------------------------------------------------------------------
 Tue Jun 24 14:36:44 UTC 2025 - Andreas Schneider <asn@cryptomilk.org>
 

libssh.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package libssh
 #
-# Copyright (c) 2025 SUSE LLC
+# Copyright (c) 2025 SUSE LLC and contributors
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -32,7 +32,7 @@
 %endif
 
 Name:           libssh%{pkg_suffix}
-Version:        0.11.2
+Version:        0.11.3
 Release:        0
 Summary:        The SSH library
 License:        LGPL-2.1-or-later