CVS commit: pkgsrc/security/libssh

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Mon Dec 18 17:07:25 UTC 2023

Modified Files:
        pkgsrc/security/libssh: Makefile PLIST distinfo

Log Message:
libssh: update to 0.106.

version 0.10.6 (released 2023-12-18)
 * Fix CVE-2023-6004: Command injection using proxycommand
 * Fix CVE-2023-48795: Potential downgrade attack using strict kex
 * Fix CVE-2023-6918: Missing checks for return values of MD functions
 * Fix ssh_send_issue_banner() for CMD(PowerShell)
 * Avoid passing other events to callbacks when poll is called recursively (#202)
 * Allow @ in usernames when parsing from URI composes


To generate a diff of this commit:
cvs rdiff -u -r1.48 -r1.49 pkgsrc/security/libssh/Makefile
cvs rdiff -u -r1.20 -r1.21 pkgsrc/security/libssh/PLIST
cvs rdiff -u -r1.30 -r1.31 pkgsrc/security/libssh/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/libssh/Makefile
diff -u pkgsrc/security/libssh/Makefile:1.48 pkgsrc/security/libssh/Makefile:1.49
--- pkgsrc/security/libssh/Makefile:1.48        Tue Oct 24 22:10:51 2023
+++ pkgsrc/security/libssh/Makefile     Mon Dec 18 17:07:25 2023
@@ -1,12 +1,11 @@
-# $NetBSD: Makefile,v 1.48 2023/10/24 22:10:51 wiz Exp $
+# $NetBSD: Makefile,v 1.49 2023/12/18 17:07:25 wiz Exp $
 #
 # history: upstream renamed 0.11 to 0.1.1;
 # we have to use the old-style convention so that version compares work.
 
-VER=           0.10.5
+VER=           0.10.6
 DISTNAME=      libssh-${VER}
-PKGNAME=       libssh-0.105
-PKGREVISION=   2
+PKGNAME=       libssh-0.106
 CATEGORIES=    security
 MASTER_SITES=  https://www.libssh.org/files/${VER:R}/
 EXTRACT_SUFX=  .tar.xz

Index: pkgsrc/security/libssh/PLIST
diff -u pkgsrc/security/libssh/PLIST:1.20 pkgsrc/security/libssh/PLIST:1.21
--- pkgsrc/security/libssh/PLIST:1.20   Sun May  7 10:21:56 2023
+++ pkgsrc/security/libssh/PLIST        Mon Dec 18 17:07:25 2023
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.20 2023/05/07 10:21:56 wiz Exp $
+@comment $NetBSD: PLIST,v 1.21 2023/12/18 17:07:25 wiz Exp $
 include/libssh/callbacks.h
 include/libssh/legacy.h
 include/libssh/libssh.h
@@ -12,5 +12,5 @@ lib/cmake/libssh/libssh-config-version.c
 lib/cmake/libssh/libssh-config.cmake
 lib/libssh.so
 lib/libssh.so.4
-lib/libssh.so.4.9.5
+lib/libssh.so.4.9.6
 lib/pkgconfig/libssh.pc

Index: pkgsrc/security/libssh/distinfo
diff -u pkgsrc/security/libssh/distinfo:1.30 pkgsrc/security/libssh/distinfo:1.31
--- pkgsrc/security/libssh/distinfo:1.30        Sun May  7 10:21:56 2023
+++ pkgsrc/security/libssh/distinfo     Mon Dec 18 17:07:25 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.30 2023/05/07 10:21:56 wiz Exp $
+$NetBSD: distinfo,v 1.31 2023/12/18 17:07:25 wiz Exp $
 
-BLAKE2s (libssh-0.10.5.tar.xz) = dbb5ff76c2c8d9aef1dedd268ed9c7c3277fc8a6b25137abb4167ebeddcc0fb2
-SHA512 (libssh-0.10.5.tar.xz) = 2b758f9df2b5937865d4aee775ffeafafe3ae6739a89dfc470e38c7394e3c3cb5fcf8f842fdae04929890ee7e47bf8f50e3a38e82dfd26a009f3aae009d589e0
-Size (libssh-0.10.5.tar.xz) = 557776 bytes
+BLAKE2s (libssh-0.10.6.tar.xz) = ffb91523c0054afcaeb312463b9527617254b4f3e72d7c0ffd1e376a95a590e5
+SHA512 (libssh-0.10.6.tar.xz) = 40c62d63c44e882999b71552c237d73fc7364313bd00b15a211a34aeff1b73693da441d2c8d4e40108d00fb7480ec7c5b6d472f9c0784b2359a179632ab0d6c1
+Size (libssh-0.10.6.tar.xz) = 561036 bytes
 SHA1 (patch-examples_sshd__direct-tcpip.c) = 62de8625d58dbc03c38b0eb23f6e7f20a46e91de
 SHA1 (patch-tests_CMakeLists.txt) = 61d9e21d612545766b00f577b3d342eb20a0a9a5
 SHA1 (patch-tests_torture.c) = 2c70e9d827f15ec36a62e0d0f5dd98774f24f79e