Pedro Monreal Gonzalez
24b9d6f488
- Fix an issue with Encrypt-then-MAC family. [bsc#1221622]
* Test the ETM feature in the remote end's configuration when
receiving data. Upstream issue: #1331.
* Add libssh2_org-ETM-remote.patch
- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
when configuring custom method list. [bsc#1218971, CVE-2023-48795]
* The strict-kex extension is announced in the list of available
KEX methods. However, when the default KEX method list is modified
or replaced, the extension is not added back automatically.
* Add libssh2_org-CVE-2023-48795-ext.patch
OBS-URL: https://build.opensuse.org/request/show/1164237
OBS-URL: https://build.opensuse.org/package/show/devel:libraries:c_c++/libssh2_org?expand=0&rev=77
113 lines
3.6 KiB
RPMSpec
113 lines
3.6 KiB
RPMSpec
#
|
|
# spec file for package libssh2_org
|
|
#
|
|
# Copyright (c) 2024 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
|
|
%define pkg_name libssh2
|
|
Name: libssh2_org
|
|
Version: 1.11.0
|
|
Release: 0
|
|
Summary: A library implementing the SSH2 protocol
|
|
License: BSD-3-Clause
|
|
Group: Development/Libraries/C and C++
|
|
URL: https://www.libssh2.org/
|
|
Source0: https://www.libssh2.org/download/%{pkg_name}-%{version}.tar.xz
|
|
Source1: https://www.libssh2.org/download/%{pkg_name}-%{version}.tar.xz.asc
|
|
Source2: baselibs.conf
|
|
Source3: libssh2_org.keyring
|
|
Patch0: libssh2-ocloexec.patch
|
|
# PATCH-FIX-UPSTREAM bsc#1218127 CVE-2023-48795: Add 'strict KEX' to fix Terrapin Attack
|
|
Patch1: libssh2_org-CVE-2023-48795.patch
|
|
# PATCH-FIX-SUSE bsc#1218971 Always add extension indicators to kex_algorithms
|
|
Patch2: libssh2_org-CVE-2023-48795-ext.patch
|
|
# PATCH-FIX-UPSTREAM bsc#1221622 Test ETM feature in remote end's config when receiving data
|
|
Patch3: libssh2_org-ETM-remote.patch
|
|
BuildRequires: libtool
|
|
BuildRequires: openssl-devel
|
|
BuildRequires: pkgconfig
|
|
BuildRequires: pkgconfig(zlib)
|
|
# drops build cycle in Factory
|
|
#!BuildIgnore: groff-full
|
|
|
|
%description
|
|
libssh2 is a library implementing the SSH2 protocol as defined by
|
|
Internet Drafts: SECSH-TRANS, SECSH-USERAUTH, SECSH-CONNECTION,
|
|
SECSH-ARCH, SECSH-FILEXFER, SECSH-DHGEX, SECSH-NUMBERS, and
|
|
SECSH-PUBLICKEY.
|
|
|
|
%package -n libssh2-1
|
|
Summary: A library implementing the SSH2 protocol
|
|
Group: Development/Libraries/C and C++
|
|
|
|
%description -n libssh2-1
|
|
libssh2 is a library implementing the SSH2 protocol as defined by
|
|
Internet Drafts: SECSH-TRANS, SECSH-USERAUTH, SECSH-CONNECTION,
|
|
SECSH-ARCH, SECSH-FILEXFER, SECSH-DHGEX, SECSH-NUMBERS, and
|
|
SECSH-PUBLICKEY.
|
|
|
|
%package -n libssh2-devel
|
|
Summary: A library implementing the SSH2 protocol
|
|
Group: Development/Libraries/C and C++
|
|
Requires: glibc-devel
|
|
Requires: libssh2-1 = %{version}
|
|
|
|
%description -n libssh2-devel
|
|
libssh2 is a library implementing the SSH2 protocol as defined by
|
|
Internet Drafts: SECSH-TRANS, SECSH-USERAUTH, SECSH-CONNECTION,
|
|
SECSH-ARCH, SECSH-FILEXFER, SECSH-DHGEX, SECSH-NUMBERS, and
|
|
SECSH-PUBLICKEY.
|
|
|
|
%prep
|
|
%autosetup -p1 -n %{pkg_name}-%{version}
|
|
|
|
%build
|
|
sed -i -e 's@AM_CONFIG_HEADER@AC_CONFIG_HEADERS@g' configure.ac
|
|
# remove m4 macro files for libtool as they should be picked up by
|
|
rm -v m4/libtool.m4 m4/lt*
|
|
autoreconf -fiv
|
|
export CFLAGS="%{optflags} -DOPENSSL_LOAD_CONF"
|
|
%configure \
|
|
--disable-silent_rules \
|
|
--enable-shared \
|
|
--disable-rpath \
|
|
--disable-docker-tests \
|
|
--with-libssl-prefix=%{_prefix} \
|
|
--with-libz=%{_prefix}
|
|
|
|
%make_build
|
|
|
|
%check
|
|
%make_build check
|
|
|
|
%install
|
|
%make_install
|
|
rm -f %{buildroot}%{_libdir}/*.la %{buildroot}%{_libdir}/*.a
|
|
|
|
%post -n libssh2-1 -p /sbin/ldconfig
|
|
%postun -n libssh2-1 -p /sbin/ldconfig
|
|
|
|
%files -n libssh2-1
|
|
%{_libdir}/libssh2.so.1*
|
|
|
|
%files -n libssh2-devel
|
|
%doc NEWS docs/BINDINGS.md docs/HACKING.md docs/TODO
|
|
%{_libdir}/libssh2.so
|
|
%{_includedir}/*.h
|
|
%{_mandir}/man3/*
|
|
%{_libdir}/pkgconfig/libssh2.pc
|
|
|
|
%changelog
|