Accepting request 1093948 from home:pmonrealgonzalez:branches:devel:libraries:c_c++
- Update to 1.11.0: * Enhancements and bugfixes - Adds support for encrypt-then-mac (ETM) MACs - Adds support for AES-GCM crypto protocols - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys - Adds support for RSA certificate authentication - Adds FIDO support with *_sk() functions - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends - Adds Agent Forwarding and libssh2_agent_sign() - Adds support for Channel Signal message libssh2_channel_signal_ex() - Adds support to get the user auth banner message libssh2_userauth_banner() - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519, AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex() - Adds wolfSSL support to CMake file - Adds mbedTLS 3.x support - Adds LibreSSL 3.5 support - Adds support for CMake "unity" builds - Adds CMake support for building shared and static libs in a single pass - Adds symbol hiding support to CMake - Adds support for libssh2.rc for all build tools - Adds .zip, .tar.xz and .tar.bz2 release tarballs - Enables ed25519 key support for LibreSSL 3.7.0 or higher - Improves OpenSSL 1.1 and 3 compatibility - Now requires OpenSSL 1.0.2 or newer - Now requires CMake 3.1 or newer - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs - SFTP: No longer has a packet limit when reading a directory - SFTP: now parses attribute extensions if they exist - SFTP: no longer will busy loop if SFTP fails to initialize OBS-URL: https://build.opensuse.org/request/show/1093948 OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libssh2_org?expand=0&rev=72
This commit is contained in:
parent
76e14e1783
commit
a10789ab49
@ -1,3 +0,0 @@
|
|||||||
version https://git-lfs.github.com/spec/v1
|
|
||||||
oid sha256:2d64e90f3ded394b91d3a2e774ca203a4179f69aebee03003e5a6fa621e41d51
|
|
||||||
size 965044
|
|
@ -1,11 +0,0 @@
|
|||||||
-----BEGIN PGP SIGNATURE-----
|
|
||||||
|
|
||||||
iQEzBAABCgAdFiEEJ+3q8i86vOtQ25oSXMkI/bceEsIFAmEr8DkACgkQXMkI/bce
|
|
||||||
EsIVWAgAnukavrtNIUkCCaXT7XBn8I4zLhXrfHted+Hq/c5wXi05cm1p1F2q7dun
|
|
||||||
aoiwayYydw2PglbZPRrC75dhQS1aIHg+0ZyjdpoyJEPmXuy3oYHSYqIs5ac9/JGF
|
|
||||||
/+/aumQwqLfSxBSo2Sa4si9aQblu9atdOWMnhOFT+kuu/FyfWrFv1ru3+NgefX2y
|
|
||||||
X+wbNOKl4KfAxJsAcNw48BbTooZVwBMYbKph2Nm+GzZ1H6biM6+BBlJjybTX3fHZ
|
|
||||||
6g+KBJrB/uP7Fy/fozn1sYokGAvDIEzXBXofA9bP44ejouNopDR0dll0MVUHnlqd
|
|
||||||
l0FCMO0pxJIGZD9se6UOkibhhYcQdQ==
|
|
||||||
=eKk3
|
|
||||||
-----END PGP SIGNATURE-----
|
|
BIN
libssh2-1.11.0.tar.xz
(Stored with Git LFS)
Normal file
BIN
libssh2-1.11.0.tar.xz
(Stored with Git LFS)
Normal file
Binary file not shown.
11
libssh2-1.11.0.tar.xz.asc
Normal file
11
libssh2-1.11.0.tar.xz.asc
Normal file
@ -0,0 +1,11 @@
|
|||||||
|
-----BEGIN PGP SIGNATURE-----
|
||||||
|
|
||||||
|
iQEzBAABCgAdFiEEJ+3q8i86vOtQ25oSXMkI/bceEsIFAmR2HWEACgkQXMkI/bce
|
||||||
|
EsIBgwf/ZExq9GsrLaX3eFiOe6/qjcixscNfP2TfBn/b9miKzmTCEle9H/wLUaeI
|
||||||
|
VVB/Zs9pNAlROJ+QEGQKfBb5fzGJm9nifWsuZ+Y65s8JGUzI3Y3cKdsyYTV8Myaj
|
||||||
|
1IvMR/oQoPjW8bd0a3SsKRLdWhN/9/Q4fiEjSs2Zp1OuCaLnLebyPgXx8f3BpXKQ
|
||||||
|
YfLYUslRgKGND+VULfUki1i8mvF4ledhanf1nTRxwfK5HrXWLT/Yd+lVRKTZgWl+
|
||||||
|
2YqXvGU9pI9N7GSVfHttYEbqP8hd8ncxea46bSaSauc4e5Sn9lYAvo2Wri33zPLw
|
||||||
|
MwI17cyi7s1H0CuIc2cT4L8BUYg3vw==
|
||||||
|
=eRz/
|
||||||
|
-----END PGP SIGNATURE-----
|
@ -9,11 +9,11 @@ Subject: [PATCH] Use O_CLOEXEC where needed
|
|||||||
src/userauth.c | 2 +-
|
src/userauth.c | 2 +-
|
||||||
3 files changed, 4 insertions(+), 4 deletions(-)
|
3 files changed, 4 insertions(+), 4 deletions(-)
|
||||||
|
|
||||||
Index: libssh2-1.10.0/src/agent.c
|
Index: libssh2-1.11.0/src/agent.c
|
||||||
===================================================================
|
===================================================================
|
||||||
--- libssh2-1.10.0.orig/src/agent.c
|
--- libssh2-1.11.0.orig/src/agent.c
|
||||||
+++ libssh2-1.10.0/src/agent.c
|
+++ libssh2-1.11.0/src/agent.c
|
||||||
@@ -109,7 +109,7 @@ agent_connect_unix(LIBSSH2_AGENT *agent)
|
@@ -177,7 +177,7 @@ agent_connect_unix(LIBSSH2_AGENT *agent)
|
||||||
"no auth sock variable");
|
"no auth sock variable");
|
||||||
}
|
}
|
||||||
|
|
||||||
@ -22,11 +22,11 @@ Index: libssh2-1.10.0/src/agent.c
|
|||||||
if(agent->fd < 0)
|
if(agent->fd < 0)
|
||||||
return _libssh2_error(agent->session, LIBSSH2_ERROR_BAD_SOCKET,
|
return _libssh2_error(agent->session, LIBSSH2_ERROR_BAD_SOCKET,
|
||||||
"failed creating socket");
|
"failed creating socket");
|
||||||
Index: libssh2-1.10.0/src/knownhost.c
|
Index: libssh2-1.11.0/src/knownhost.c
|
||||||
===================================================================
|
===================================================================
|
||||||
--- libssh2-1.10.0.orig/src/knownhost.c
|
--- libssh2-1.11.0.orig/src/knownhost.c
|
||||||
+++ libssh2-1.10.0/src/knownhost.c
|
+++ libssh2-1.11.0/src/knownhost.c
|
||||||
@@ -963,7 +963,7 @@ libssh2_knownhost_readfile(LIBSSH2_KNOWN
|
@@ -962,7 +962,7 @@ libssh2_knownhost_readfile(LIBSSH2_KNOWN
|
||||||
"Unsupported type of known-host information "
|
"Unsupported type of known-host information "
|
||||||
"store");
|
"store");
|
||||||
|
|
||||||
@ -35,7 +35,7 @@ Index: libssh2-1.10.0/src/knownhost.c
|
|||||||
if(file) {
|
if(file) {
|
||||||
while(fgets(buf, sizeof(buf), file)) {
|
while(fgets(buf, sizeof(buf), file)) {
|
||||||
if(libssh2_knownhost_readline(hosts, buf, strlen(buf), type)) {
|
if(libssh2_knownhost_readline(hosts, buf, strlen(buf), type)) {
|
||||||
@@ -1204,7 +1204,7 @@ libssh2_knownhost_writefile(LIBSSH2_KNOW
|
@@ -1203,7 +1203,7 @@ libssh2_knownhost_writefile(LIBSSH2_KNOW
|
||||||
"Unsupported type of known-host information "
|
"Unsupported type of known-host information "
|
||||||
"store");
|
"store");
|
||||||
|
|
||||||
@ -44,24 +44,24 @@ Index: libssh2-1.10.0/src/knownhost.c
|
|||||||
if(!file)
|
if(!file)
|
||||||
return _libssh2_error(hosts->session, LIBSSH2_ERROR_FILE,
|
return _libssh2_error(hosts->session, LIBSSH2_ERROR_FILE,
|
||||||
"Failed to open file");
|
"Failed to open file");
|
||||||
Index: libssh2-1.10.0/src/userauth.c
|
Index: libssh2-1.11.0/src/userauth.c
|
||||||
===================================================================
|
===================================================================
|
||||||
--- libssh2-1.10.0.orig/src/userauth.c
|
--- libssh2-1.11.0.orig/src/userauth.c
|
||||||
+++ libssh2-1.10.0/src/userauth.c
|
+++ libssh2-1.11.0/src/userauth.c
|
||||||
@@ -578,7 +578,7 @@ file_read_publickey(LIBSSH2_SESSION * se
|
@@ -654,7 +654,7 @@ file_read_publickey(LIBSSH2_SESSION * se
|
||||||
_libssh2_debug(session, LIBSSH2_TRACE_AUTH, "Loading public key file: %s",
|
_libssh2_debug((session, LIBSSH2_TRACE_AUTH, "Loading public key file: %s",
|
||||||
pubkeyfile);
|
pubkeyfile));
|
||||||
/* Read Public Key */
|
/* Read Public Key */
|
||||||
- fd = fopen(pubkeyfile, FOPEN_READTEXT);
|
- fd = fopen(pubkeyfile, FOPEN_READTEXT);
|
||||||
+ fd = fopen(pubkeyfile, FOPEN_READTEXT_CLOEXEC);
|
+ fd = fopen(pubkeyfile, FOPEN_READTEXT_CLOEXEC);
|
||||||
if(!fd) {
|
if(!fd) {
|
||||||
return _libssh2_error(session, LIBSSH2_ERROR_FILE,
|
return _libssh2_error(session, LIBSSH2_ERROR_FILE,
|
||||||
"Unable to open public key file");
|
"Unable to open public key file");
|
||||||
Index: libssh2-1.10.0/src/libssh2_priv.h
|
Index: libssh2-1.11.0/src/libssh2_priv.h
|
||||||
===================================================================
|
===================================================================
|
||||||
--- libssh2-1.10.0.orig/src/libssh2_priv.h
|
--- libssh2-1.11.0.orig/src/libssh2_priv.h
|
||||||
+++ libssh2-1.10.0/src/libssh2_priv.h
|
+++ libssh2-1.11.0/src/libssh2_priv.h
|
||||||
@@ -1149,6 +1149,8 @@ endings either CRLF or LF so 't' is appr
|
@@ -1218,6 +1218,8 @@ size_t plain_method(char *method, size_t
|
||||||
#define FOPEN_READTEXT "r"
|
#define FOPEN_READTEXT "r"
|
||||||
#define FOPEN_WRITETEXT "w"
|
#define FOPEN_WRITETEXT "w"
|
||||||
#define FOPEN_APPENDTEXT "a"
|
#define FOPEN_APPENDTEXT "a"
|
||||||
|
@ -1,3 +1,71 @@
|
|||||||
|
-------------------------------------------------------------------
|
||||||
|
Tue Jun 20 08:17:25 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
|
||||||
|
|
||||||
|
- Update to 1.11.0:
|
||||||
|
* Enhancements and bugfixes
|
||||||
|
- Adds support for encrypt-then-mac (ETM) MACs
|
||||||
|
- Adds support for AES-GCM crypto protocols
|
||||||
|
- Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
|
||||||
|
- Adds support for RSA certificate authentication
|
||||||
|
- Adds FIDO support with *_sk() functions
|
||||||
|
- Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
|
||||||
|
- Adds Agent Forwarding and libssh2_agent_sign()
|
||||||
|
- Adds support for Channel Signal message libssh2_channel_signal_ex()
|
||||||
|
- Adds support to get the user auth banner message libssh2_userauth_banner()
|
||||||
|
- Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
|
||||||
|
AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
|
||||||
|
- Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
|
||||||
|
- Adds wolfSSL support to CMake file
|
||||||
|
- Adds mbedTLS 3.x support
|
||||||
|
- Adds LibreSSL 3.5 support
|
||||||
|
- Adds support for CMake "unity" builds
|
||||||
|
- Adds CMake support for building shared and static libs in a single pass
|
||||||
|
- Adds symbol hiding support to CMake
|
||||||
|
- Adds support for libssh2.rc for all build tools
|
||||||
|
- Adds .zip, .tar.xz and .tar.bz2 release tarballs
|
||||||
|
- Enables ed25519 key support for LibreSSL 3.7.0 or higher
|
||||||
|
- Improves OpenSSL 1.1 and 3 compatibility
|
||||||
|
- Now requires OpenSSL 1.0.2 or newer
|
||||||
|
- Now requires CMake 3.1 or newer
|
||||||
|
- SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
|
||||||
|
- SFTP: No longer has a packet limit when reading a directory
|
||||||
|
- SFTP: now parses attribute extensions if they exist
|
||||||
|
- SFTP: no longer will busy loop if SFTP fails to initialize
|
||||||
|
- SFTP: now clear various errors as expected
|
||||||
|
- SFTP: no longer skips files if the line buffer is too small
|
||||||
|
- SCP: add option to not quote paths
|
||||||
|
- SCP: Enables 64-bit offset support unconditionally
|
||||||
|
- Now skips leading \r and \n characters in banner_receive()
|
||||||
|
- Enables secure memory zeroing with all build tools on all platforms
|
||||||
|
- No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
|
||||||
|
- Speed up base64 encoding by 7x
|
||||||
|
- Assert if there is an attempt to write a value that is too large
|
||||||
|
- WinCNG: fix memory leak in _libssh2_dh_secret()
|
||||||
|
- Added protection against possible null pointer dereferences
|
||||||
|
- Agent now handles overly large comment lengths
|
||||||
|
- Now ensure KEX replies don't include extra bytes
|
||||||
|
- Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
|
||||||
|
- Fixed possible buffer overflow in keyboard interactive code path
|
||||||
|
- Fixed overlapping memcpy()
|
||||||
|
- Fixed Windows UWP builds
|
||||||
|
- Fixed DLL import name
|
||||||
|
- Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
|
||||||
|
- Support for building with gcc versions older than 8
|
||||||
|
- Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
|
||||||
|
- Restores ANSI C89 compliance
|
||||||
|
- Enabled new compiler warnings and fixed/silenced them
|
||||||
|
- Improved error messages
|
||||||
|
- Now uses CIFuzz
|
||||||
|
- Numerous minor code improvements
|
||||||
|
- Improvements to CI builds
|
||||||
|
- Improvements to unit tests
|
||||||
|
- Improvements to doc files
|
||||||
|
- Improvements to example files
|
||||||
|
- Removed "old gex" build option
|
||||||
|
- Removed no-encryption/no-mac builds
|
||||||
|
- Removed support for NetWare and Watcom wmake build files
|
||||||
|
* Rebase libssh2-ocloexec.patch
|
||||||
|
|
||||||
-------------------------------------------------------------------
|
-------------------------------------------------------------------
|
||||||
Fri Dec 10 14:41:20 UTC 2021 - David Anes <david.anes@suse.com>
|
Fri Dec 10 14:41:20 UTC 2021 - David Anes <david.anes@suse.com>
|
||||||
|
|
||||||
|
@ -1,7 +1,7 @@
|
|||||||
#
|
#
|
||||||
# spec file for package libssh2_org
|
# spec file for package libssh2_org
|
||||||
#
|
#
|
||||||
# Copyright (c) 2021 SUSE LLC
|
# Copyright (c) 2023 SUSE LLC
|
||||||
#
|
#
|
||||||
# All modifications and additions to the file contributed by third parties
|
# All modifications and additions to the file contributed by third parties
|
||||||
# remain the property of their copyright owners, unless otherwise agreed
|
# remain the property of their copyright owners, unless otherwise agreed
|
||||||
@ -18,14 +18,14 @@
|
|||||||
|
|
||||||
%define pkg_name libssh2
|
%define pkg_name libssh2
|
||||||
Name: libssh2_org
|
Name: libssh2_org
|
||||||
Version: 1.10.0
|
Version: 1.11.0
|
||||||
Release: 0
|
Release: 0
|
||||||
Summary: A library implementing the SSH2 protocol
|
Summary: A library implementing the SSH2 protocol
|
||||||
License: BSD-3-Clause
|
License: BSD-3-Clause
|
||||||
Group: Development/Libraries/C and C++
|
Group: Development/Libraries/C and C++
|
||||||
URL: https://www.libssh2.org/
|
URL: https://www.libssh2.org/
|
||||||
Source0: https://www.libssh2.org/download/%{pkg_name}-%{version}.tar.gz
|
Source0: https://www.libssh2.org/download/%{pkg_name}-%{version}.tar.xz
|
||||||
Source1: https://www.libssh2.org/download/%{pkg_name}-%{version}.tar.gz.asc
|
Source1: https://www.libssh2.org/download/%{pkg_name}-%{version}.tar.xz.asc
|
||||||
Source2: baselibs.conf
|
Source2: baselibs.conf
|
||||||
Source3: libssh2_org.keyring
|
Source3: libssh2_org.keyring
|
||||||
Patch0: libssh2-ocloexec.patch
|
Patch0: libssh2-ocloexec.patch
|
||||||
@ -65,8 +65,7 @@ SECSH-ARCH, SECSH-FILEXFER, SECSH-DHGEX, SECSH-NUMBERS, and
|
|||||||
SECSH-PUBLICKEY.
|
SECSH-PUBLICKEY.
|
||||||
|
|
||||||
%prep
|
%prep
|
||||||
%setup -q -n %{pkg_name}-%{version}
|
%autosetup -p1 -n %{pkg_name}-%{version}
|
||||||
%patch0 -p1
|
|
||||||
|
|
||||||
%build
|
%build
|
||||||
sed -i -e 's@AM_CONFIG_HEADER@AC_CONFIG_HEADERS@g' configure.ac
|
sed -i -e 's@AM_CONFIG_HEADER@AC_CONFIG_HEADERS@g' configure.ac
|
||||||
@ -76,18 +75,20 @@ autoreconf -fiv
|
|||||||
export CFLAGS="%{optflags} -DOPENSSL_LOAD_CONF"
|
export CFLAGS="%{optflags} -DOPENSSL_LOAD_CONF"
|
||||||
%configure \
|
%configure \
|
||||||
--disable-silent_rules \
|
--disable-silent_rules \
|
||||||
--disable-static \
|
--enable-shared \
|
||||||
--disable-rpath \
|
--disable-rpath \
|
||||||
--with-libz=%{_prefix} \
|
--disable-docker-tests \
|
||||||
--with-openssl=%{_prefix}
|
--with-libssl-prefix=%{_prefix} \
|
||||||
make %{?_smp_mflags}
|
--with-libz=%{_prefix}
|
||||||
|
|
||||||
|
%make_build
|
||||||
|
|
||||||
%check
|
%check
|
||||||
make %{?_smp_mflags} check
|
%make_build check
|
||||||
|
|
||||||
%install
|
%install
|
||||||
%make_install
|
%make_install
|
||||||
rm -f %{buildroot}%{_libdir}/*.la %{buildroot}%{_libdir}/*.a
|
rm -f %{buildroot}%{_libdir}/*.la %{buildroot}%{_libdir}/*.a
|
||||||
|
|
||||||
%post -n libssh2-1 -p /sbin/ldconfig
|
%post -n libssh2-1 -p /sbin/ldconfig
|
||||||
%postun -n libssh2-1 -p /sbin/ldconfig
|
%postun -n libssh2-1 -p /sbin/ldconfig
|
||||||
@ -98,7 +99,7 @@ rm -f %{buildroot}%{_libdir}/*.la %{buildroot}%{_libdir}/*.a
|
|||||||
|
|
||||||
%files -n libssh2-devel
|
%files -n libssh2-devel
|
||||||
%defattr(-,root,root)
|
%defattr(-,root,root)
|
||||||
%doc NEWS
|
%doc NEWS docs/BINDINGS.md docs/HACKING.md docs/TODO
|
||||||
%{_libdir}/libssh2.so
|
%{_libdir}/libssh2.so
|
||||||
%{_includedir}/*.h
|
%{_includedir}/*.h
|
||||||
%{_mandir}/man3/*
|
%{_mandir}/man3/*
|
||||||
|
Loading…
Reference in New Issue
Block a user