IABSD.fr/ports/security/libssh
Branch :
Log
| Author | Commit | Date | CI | Message |
|---|---|---|---|---|
 |
cb29ea30 | 2026-02-25 11:46:15 | update to libssh-0.12.0 patch to fix broken test (getpw* struct pw reuse issue) | |
|
8776b891 | 2025-09-12 10:07:57 | update to libssh-0.11.3 * Security: * CVE-2025-8114: Fix NULL pointer dereference after allocation failure * CVE-2025-8277: Fix memory leak of ephemeral key pair during repeated wrong KEX * Potential UAF when send() fails during key exchange * Fix possible timeout during KEX if client sends authentication too early (#311) * Cleanup OpenSSL PKCS#11 provider when loaded * Zeroize buffers containing private key blobs during export | |
 |
8cb741b8 | 2025-07-01 20:49:27 | libssh: annotate patch as committed upstream | |
|
1237b634 | 2025-06-27 21:38:41 | libssh: add link to MR, no package change | |
|
7aaa4691 | 2025-06-27 20:51:00 | Update to libssh 11.2 Bugfix and some relatively minor security fixes: https://www.libssh.org/2025/06/24/libssh-0-11-2-security-and-bugfix-release/ Add a patch to work around a regress test failure. | |
|
5a722226 | 2024-12-20 16:11:13 | update to libssh-0.11.1 | |
|
c35880b9 | 2024-11-05 19:00:35 | libssh: enable debug packages from Mikolaj Kucharski (+ revision bump) | |
|
af734957 | 2023-12-18 19:05:47 | update to libssh-0.10.6 CVE-2023-6004: Command injection using malicious hostname in expanded proxy command. CVE-2023-48795: Avoid potential downgrade attacks by implementing strict kex. ("Terrapin") CVE-2023-6918: Avoid potential use of weak keys in low memory conditions by systematically checking return values of MD functions. | |
 |
8ca1dc55 | 2023-09-27 16:34:29 | MASTER_SITES -> SITES | |
|
4bfe1771 | 2023-05-08 13:19:33 | update to libssh-0.10.5, includes fixes for CVE-2023-1667: a NULL dereference during rekeying with algorithm guessing CVE-2023-2283: a possible authorization bypass in pki_verify_data_signature under low-memory conditions. |