Egbert Eich
d7bcf5b155
* GO-2025-4135 (CVE-2025-47914)
SSH Agent servers do not validate the size of messages
when processing new identity requests, which may cause
the program to panic if the message is malformed due to
an out of bounds read.
* GO-2025-4116 (CVE-2025-47913)
SSH clients receiving SSH_AGENT_SUCCESS when expecting a
typed response will panic and cause early termination of
the client process.
* GO-2025-4134 (CVE-2025-58181, bsc#1253952).
SSH servers parsing GSSAPI authentication
requests do not validate the number of mechanisms
specified in the request, allowing an attacker to cause
unbounded memory consumption.
Signed-off-by: Egbert Eich <eich@suse.com>
103 lines
3.2 KiB
RPMSpec
103 lines
3.2 KiB
RPMSpec
#
|
|
# spec file for package mcphost
|
|
#
|
|
# Copyright (c) 2025 SUSE LLC
|
|
#
|
|
# All modifications and additions to the file contributed by third parties
|
|
# remain the property of their copyright owners, unless otherwise agreed
|
|
# upon. The license for this file, and modifications and additions to the
|
|
# file, is the same license as for the pristine package itself (unless the
|
|
# license for the pristine package is not an Open Source License, in which
|
|
# case the license is the MIT License). An "Open Source License" is a
|
|
# license that conforms to the Open Source Definition (Version 1.9)
|
|
# published by the Open Source Initiative.
|
|
|
|
# Please submit bugfixes or comments via https://bugs.opensuse.org/
|
|
#
|
|
|
|
Name: mcphost
|
|
Version: 0.32.0
|
|
Release: 0
|
|
Summary: A CLI host application for the Model Context Protocol (MCP)
|
|
License: MIT and Apache-2.0 AND BSD-2-Clause AND BSD-3-Clause
|
|
URL: https://github.com/mark3labs/mcphost
|
|
Source0: https://github.com/mark3labs/mcphost/archive/refs/tags/v%{version}.tar.gz#/%{name}-%{version}.tar.gz
|
|
Source1: vendor.tar.gz
|
|
BuildRequires: golang(API) >= 1.24
|
|
|
|
%description
|
|
A CLI host application that enables Large Language Models (LLMs) to interact
|
|
with external tools through the Model Context Protocol (MCP). Currently
|
|
supports both Claude 3.5 Sonnet and Ollama models.
|
|
|
|
%package bash-completion
|
|
Summary: Bash Completion for %{name}
|
|
Group: System/Shells
|
|
Requires: bash-completion
|
|
BuildArch: noarch
|
|
Requires: %{name}
|
|
Supplements: (%{name} and bash-completion)
|
|
|
|
%description bash-completion
|
|
The official bash completion script for %{name}, generated during the build.
|
|
|
|
%package zsh-completion
|
|
Summary: ZSH Completion for %{name}
|
|
Group: System/Shells
|
|
BuildArch: noarch
|
|
Requires: %{name}
|
|
Supplements: (%{name} and zsh)
|
|
|
|
%description zsh-completion
|
|
The official zsh completion script for %{name}, generated during the build.
|
|
|
|
%package fish-completion
|
|
Summary: Fish Completion for %{name}
|
|
Group: System/Shells
|
|
BuildArch: noarch
|
|
Requires: %{name}
|
|
Supplements: (%{name} and fish)
|
|
|
|
%description fish-completion
|
|
The official fish completion script for %{name}, generated during the build.
|
|
|
|
%prep
|
|
%autosetup -a 1
|
|
|
|
%build
|
|
go build \
|
|
-mod=vendor \
|
|
-buildmode=pie
|
|
|
|
%install
|
|
install -D -m 0755 %{name} "%{buildroot}%{_bindir}/%{name}"
|
|
|
|
# Build the shell autocomplete files
|
|
%{buildroot}/%{_bindir}/%{name} completion bash > %{name}-autocomplete.bash
|
|
%{buildroot}/%{_bindir}/%{name} completion zsh > %{name}-autocomplete.zsh
|
|
%{buildroot}/%{_bindir}/%{name} completion fish > %{name}-autocomplete.fish
|
|
|
|
# Install the shell autocomplete files
|
|
install -Dm 644 %{name}-autocomplete.bash %{buildroot}%{_datadir}/bash-completion/completions/%{name}
|
|
install -Dm 644 %{name}-autocomplete.zsh %{buildroot}%{_datadir}/zsh/site-functions/_%{name}
|
|
install -Dm 644 %{name}-autocomplete.fish %{buildroot}%{_datadir}/fish/completions/_%{name}
|
|
|
|
%check
|
|
# execute the binary as a basic check
|
|
%{buildroot}/%{_bindir}/%{name} help
|
|
|
|
%files
|
|
%license LICENSE
|
|
%{_bindir}/%{name}
|
|
# completions
|
|
%files bash-completion
|
|
%{_datadir}/bash-completion
|
|
|
|
%files zsh-completion
|
|
%{_datadir}/zsh
|
|
|
|
%files fish-completion
|
|
%{_datadir}/fish
|
|
|
|
%changelog
|