Skip to contentSkip to conversation

libssh: upgrade to 0.8.4

PATCH In review Paul Eggleton 2 participants 3 messages Oct 22, 2018 – Oct 27, 2018

lore
Share & tools
lore
#0 lore raw

cover libssh: upgrade to 0.8.4

Upgrade prompted by the recently publicised security issue. (Note: I'm not actually using this, it just didn't seem right to have a stale and vulnerable version of this package sitting around.)

The following changes since commit cdd3e9ab99d4ffda673b564ba802b6bd2d40eabf:

toybox: Fix paths to match OE conventions (2018-10-18 14:19:37 -0700)

are available in the Git repository at:

git://git.openembedded.org/meta-openembedded-contrib paule/libssh
http://cgit.openembedded.org/meta-openembedded-contrib/log/?h=paule/libssh

Paul Eggleton (1):
libssh: upgrade to 0.8.4

 .../libssh/{libssh_0.7.3.bb => libssh_0.8.4.bb}               | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename meta-oe/recipes-support/libssh/{libssh_0.7.3.bb => libssh_0.8.4.bb} (86%)
Signature · 1 line
2.17.2
#1 lore raw

PATCH 1/1 libssh: upgrade to 0.8.4

Notable changes since 0.7.3:
* Fixed CVE-2018-10933 authentication bypass
* Removed support for deprecated SSHv1 protocol
* Added support for OpenSSL 1.1
* Added support for chacha20-poly1305 cipher
* Added ECDSA support with gcrypt backend
* Improved threading support (note: libssh_threads is now gone)

---
 .../libssh/{libssh_0.7.3.bb => libssh_0.8.4.bb}               | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename meta-oe/recipes-support/libssh/{libssh_0.7.3.bb => libssh_0.8.4.bb} (86%)
meta-oe/recipes-support/libssh/libssh_0.8.4.bb renamed from meta-oe/recipes-support/libssh/libssh_0.7.3.bb +2 -2
similarity index 86%
rename from meta-oe/recipes-support/libssh/libssh_0.7.3.bb
rename to meta-oe/recipes-support/libssh/libssh_0.8.4.bb
index 6064969ae..8566741a3 100644
@@ -6,8 +6,8 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=388a4fb1dea8ceae0be78ba9b01fc139"
 
 DEPENDS = "zlib openssl libgcrypt"
 
-SRC_URI = "git://git.libssh.org/projects/libssh.git;branch=v0-7"
-SRCREV = "cdf7690e038230623cbbf6b024ece62f41efa98d"
+SRC_URI = "git://git.libssh.org/projects/libssh.git;branch=stable-0.8"
+SRCREV = "789df0b7d0c7abd6b85db9fc5247e146e3d4ddba"
 
 S = "${WORKDIR}/git"
 
Signature · 1 line
2.17.2
#2 lore raw

Hi Paul

Fails to build with thumb-1

see http://errors.yoctoproject.org/Errors/Details/197582/

TOPDIR/build/tmpfs/work/armv5te-yoe-linux-gnueabi/libssh/0.8.4-r0/git/src/channels.c:2632:1:
sorry, unimplemented: -fstack-check=specific for Thumb-1

I am fine if it was using ARM ISA form armv5

Quoted 41 lines · Paul Eggleton

Notable changes since 0.7.3:
* Fixed CVE-2018-10933 authentication bypass
* Removed support for deprecated SSHv1 protocol
* Added support for OpenSSL 1.1
* Added support for chacha20-poly1305 cipher
* Added ECDSA support with gcrypt backend
* Improved threading support (note: libssh_threads is now gone)

---
 .../libssh/{libssh_0.7.3.bb => libssh_0.8.4.bb}               | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename meta-oe/recipes-support/libssh/{libssh_0.7.3.bb => libssh_0.8.4.bb} (86%)
meta-oe/recipes-support/libssh/libssh_0.8.4.bb renamed from meta-oe/recipes-support/libssh/libssh_0.7.3.bb +2 -3
similarity index 86%
rename from meta-oe/recipes-support/libssh/libssh_0.7.3.bb
rename to meta-oe/recipes-support/libssh/libssh_0.8.4.bb
index 6064969ae..8566741a3 100644
@@ -6,8 +6,8 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=388a4fb1dea8ceae0be78ba9b01fc139"
 
 DEPENDS = "zlib openssl libgcrypt"
 
-SRC_URI = "git://git.libssh.org/projects/libssh.git;branch=v0-7"
-SRCREV = "cdf7690e038230623cbbf6b024ece62f41efa98d"
+SRC_URI = "git://git.libssh.org/projects/libssh.git;branch=stable-0.8"
+SRCREV = "789df0b7d0c7abd6b85db9fc5247e146e3d4ddba"
 
 S = "${WORKDIR}/git"
 
--

2.17.2

--
_______________________________________________
Openembedded-devel mailing list
[email protected]
http://lists.openembedded.org/mailman/listinfo/openembedded-devel