linux/meta-openembedded.git/meta-oe/recipes-support/libssh/libssh_0.11.2.bb, branch masterMirror of git.openembedded.org/meta-openembeddedhttps://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=master2025-09-16T16:59:16+00:00libssh: upgrade 0.11.2 -> 0.11.32025-09-16T16:59:16+00:00Wang Mingyuwangmy@fujitsu.com2025-09-16T09:41:21+00:00urn:sha1:6332f221dde08ea56919cee2e7496c67c427a160
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>
libssh: upgrade 0.11.1 -> 0.11.22025-07-09T06:40:29+00:00Wang Mingyuwangmy@fujitsu.com2025-07-07T09:06:35+00:00urn:sha1:ac8a50c92de1e70296103c6388508a9cbdf1cb01
* Security:
* CVE-2025-4877 - Write beyond bounds in binary to base64 conversion
* CVE-2025-4878 - Use of uninitialized variable in privatekey_from_file()
* CVE-2025-5318 - Likely read beyond bounds in sftp server handle management
* CVE-2025-5351 - Double free in functions exporting keys
* CVE-2025-5372 - ssh_kdf() returns a success code on certain failures
* CVE-2025-5449 - Likely read beyond bounds in sftp server message decoding
* CVE-2025-5987 - Invalid return code for chacha20 poly1305 with OpenSSL
* Compatibility
* Fixed compatibility with CPM.cmake
* Compatibility with OpenSSH 10.0
* Tests compatibility with new Dropbear releases
* Removed p11-kit remoting from the pkcs11 testsuite
* Bugfixes
* Implement missing packet filter for DH GEX
* Properly process the SSH2_MSG_DEBUG message
* Allow escaping quotes in quoted arguments to ssh configuration
* Do not fail with unknown match keywords in ssh configuration
* Process packets before selecting signature algorithm during authentication
* Do not fail hard when the SFTP status message is not sent by noncompliant
servers
Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <raj.khem@gmail.com>