Skip to contentSkip to conversation

libssh2: security bump to version 1.5.0

PATCH New Gustavo Zacarias 2 participants 2 messages Mar 11, 2015

lore
Share & tools
lore

Gustavo Zacarias

author
#0 lore raw

PATCH 1/1 libssh2: security bump to version 1.5.0

Fixes CVE-2015-1782 - kex: bail out on rubbish in the incoming packet.

Also add hash file.

Signed-off-by Gustavo Zacarias <[email protected]>
---
 package/libssh2/libssh2.hash | 2 ++
 package/libssh2/libssh2.mk   | 2 +-
 2 files changed, 3 insertions(+), 1 deletion(-)
 create mode 100644 package/libssh2/libssh2.hash
package/libssh2/libssh2.hash new file +2 -0
new file mode 100644
index 0000000..ccc6ed5
@@ -0,0 +1,2 @@
+# Locally calculated after checking pgp signature
+sha256	83196badd6868f5b926bdac8017a6f90fb8a90b16652d3bf02df0330d573d0fc	libssh2-1.5.0.tar.gz
package/libssh2/libssh2.mk +1 -1
index 1a1a06f..3b4df37 100644
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBSSH2_VERSION = 1.4.3
+LIBSSH2_VERSION = 1.5.0
 LIBSSH2_SITE = http://www.libssh2.org/download
 LIBSSH2_LICENSE = BSD
 LIBSSH2_LICENSE_FILES = COPYING
Signature · 1 line
2.0.5
#1 lore raw

PATCH 1/1 libssh2: security bump to version 1.5.0

Quoted 6 lines
Quoted 1 line
Quoted 1 line
Quoted 1 line
Quoted 1 line

"Gustavo" == Gustavo Zacarias <[email protected]> writes:

Fixes CVE-2015-1782 - kex: bail out on rubbish in the incoming packet. Also add hash file.

Signed-off-by Gustavo Zacarias <[email protected]>

Committed, thanks.

Signature · 1 line
Bye, Peter Korsgaard