linux/poky.git/meta/recipes-support/libssh2, branch walnascar

libssh2: remove status for CVE-2023-48795

2024-12-09T15:23:28+00:00

Entry for this CVE was corrected in NVD DB, we no longer need to set status for it. (From OE-Core rev: 459f9ebc0695f44bc6d45f62c89f504a0bfa21ee) Signed-off-by: Peter Marko Signed-off-by: Richard Purdie

libssh2: mark CVE-2023-48795 as fixed

2024-11-28T12:27:12+00:00

NVD DB has typo in version (1.11.10 instead of 1.11.1) Version 1.11.1 is the currently the latest one, there is no .10 (From OE-Core rev: 92886f91dc6ed3f41771bc984aa11269bd68abe0) Signed-off-by: Peter Marko Signed-off-by: Mathieu Dubois-Briand Signed-off-by: Richard Purdie

libssh2: upgrade 1.11.0 -> 1.11.1

2024-10-24T14:18:54+00:00

Changelog: https://github.com/libssh2/libssh2/releases/tag/libssh2-1.11.1 Patches '0001-disable-DSA-by-default.patch' and 'CVE-2023-48795.patch' were both dropped as they're included in version 1.11.1. License-Update: Copyright symbols were changed from (C) to lowercase (c) ptest results: |root@qemux86-64:~# ptest-runner libssh2 |START: ptest-runner |2024-10-22T20:15 |BEGIN: /usr/lib/libssh2/ptest |PASS: mansyntax.sh |PASS: test_simple |PASS: test_sshd.test |DURATION: 3 |END: /usr/lib/libssh2/ptest |2024-10-22T20:15 |STOP: ptest-runner |TOTAL: 1 FAIL: 0 (From OE-Core rev: bcd178082a50b81405019699d5acc3cd8273b732) Signed-off-by: Trevor Gamblin Signed-off-by: Richard Purdie

libssh2: disable-DSA-by-default

2024-08-03T06:47:36+00:00

Backport the merged solution and drop the submited patch. (From OE-Core rev: f099cc0782db9c726eff151a11c1c59a1a22b3d7) Signed-off-by: Jose Quaresma Signed-off-by: Richard Purdie

libssh2: fix ptest regression with openssh 9.8p1

2024-07-26T11:28:42+00:00

(From OE-Core rev: 1a2fef1d70c8083e65325dfa8a5cae7d8443951b) Signed-off-by: Jose Quaresma Signed-off-by: Richard Purdie

libssh2: remove util-linux-col from ptest dependencies

2024-07-13T22:28:30+00:00

After util-linux upgrade to 2.40.1, we got the following QA issue on musl: WARNING: libssh2-1.11.0-r0 do_package_qa: QA Issue: libssh2-ptest rdepends on util-linux-col, but it isn't a build dependency? [build-deps] The issue appeared because new version util-linux has disabled building out col on musl[1]. In short, the reason is that col in util-linux requires something that musl does not provide. This 'util-linux-col' dependency was added in 2021, at that time the libssh2's version is 1.9.0. Now the version is 1.11.0 and I tested its ptest, it does not require util-linux-col to succeed. [1] https://github.com/util-linux/util-linux/commit/8886d84e25a457702b45194d69a47313f76dc6bc (From OE-Core rev: 9007de7e388e269028c7c1722f0d7ee76bc5d251) Signed-off-by: Chen Qi Signed-off-by: Richard Purdie

libssh2: backport fix for CVE-2023-48795

2024-01-24T15:46:19+00:00

Backport the upstream fix for CVE-2023-48795. (From OE-Core rev: 314fa19c5e07fa632ff0434a6adbb97de1319a02) Signed-off-by: Ross Burton Signed-off-by: Richard Purdie

libssh2: disable rpath to fix curl-native build

2023-07-10T10:36:34+00:00

When curl is built with PACKAGECONFIG:append = " libssh2", the build fails with the error: gcc: error: unrecognized command-line option '-R' It was trying to set the rpath for libssh2. (From OE-Core rev: c213d8579951e168a19231cf5b2f81d55e059a22) Signed-off-by: Sudip Mukherjee Signed-off-by: Richard Purdie

libssh2: update 1.10.0 -> 1.11.0

2023-06-27T15:23:40+00:00

License-update: copyright years Enable static libs as some tests need them. Fix up ptests; the set being run is the same. test_simple is statically linked, hence DISABLE_STATIC is overriden. (From OE-Core rev: c3c5b74e428a13335f8c09bf4cc74dd009c8bc06) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

libssh2: Clean up ptest patch/coverage

2023-02-17T18:01:01+00:00

Martin Jansa spotted patchreview.py reports Malformed Upstream-Status in a patch in this recipe. The patch is not being applied since there is no ptest override. The test in question was also disabled due to an issue with new versions of openssh. Add a workaround for the broken test, enable it, drop the broken patch. (From OE-Core rev: e9f2cc084638ce9cb5339df611e473c30f0e40b1) Signed-off-by: Richard Purdie