1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
|
libssh (0.7.3-2+deb9u2) stretch; urgency=medium
* Non-maintainer upload.
* Fix broken server-side keyboard-interactive authentication.
Thanks to Martin Pitt (Closes: #913870)
-- Salvatore Bonaccorso <carnil@debian.org> Mon, 31 Dec 2018 14:47:15 +0100
libssh (0.7.3-2+deb9u1) stretch-security; urgency=high
* Non-maintainer upload by the Security Team.
* Authentication bypass vulnerability (CVE-2018-10933) (Closes: #911149)
-- Salvatore Bonaccorso <carnil@debian.org> Tue, 16 Oct 2018 21:18:05 +0200
libssh (0.7.3-2) unstable; urgency=medium
* debian/control: Explicitly build against openssl1.0 for now as libssh
doesn't support 1.1 yet (Closes: #828413, #845197)
* debian/copyright: Fix short licence for files in the public domain.
* debian/copyright: More fixes to the copyright file
* debian/rules: Enable all hardening flags
-- Laurent Bigonville <bigon@debian.org> Tue, 29 Nov 2016 15:58:36 +0100
libssh (0.7.3-1) unstable; urgency=medium
* New upstream release. (Closes: #805030)
- debian/control: Bump build-dependencies
- Update the .symbols files, add the new exported symbols
- Drop 0001_CVE-2014-8132.patch, 0002_CVE-2015-3146.patch,
0003_CVE-2016-0739.patch: Applied upstream
- 1003-custom-lib-names.patch, 2003-disable-expand_tilde_unix-test.patch:
Refreshed
- Drop 2002-fix-html-doc-generation.patch, gcc-5.diff: Not needed anymore
* Drop -dbg package and rely on the automatically built -dbgsym ones
* debian/control: Bump Standards-Version to 3.9.8 (no further changes)
* debian/control: Use https URL's for Vcs-* and Homepage fields
* debian/copyright: Updated
-- Laurent Bigonville <bigon@debian.org> Fri, 10 Jun 2016 00:27:07 +0200
libssh (0.6.3-4.3) unstable; urgency=medium
* Non-maintainer upload.
* CVE-2016-0739: Truncated Diffie-Hellman secret length (Closes: #815663)
-- Salvatore Bonaccorso <carnil@debian.org> Tue, 23 Feb 2016 19:54:04 +0100
libssh (0.6.3-4.2) unstable; urgency=medium
* Non-maintainer upload.
* debian/patches: Add 0002_CVE-2015-3146.patch from 0.6.5 release upstream
(Closes: #784404)
-- Christopher Knadle <Chris.Knadle@coredump.us> Mon, 16 Nov 2015 04:26:51 -0500
libssh (0.6.3-4.1) unstable; urgency=medium
* Non-maintainer upload.
* Fix "ftbfs with GCC-5": add patch from Matthias Klose/Ubuntu:
add __extension__ to __FUNCTION__.
(Closes: #777975)
-- gregor herrmann <gregoa@debian.org> Sat, 18 Jul 2015 20:38:30 +0200
libssh (0.6.3-4) unstable; urgency=medium
* Add debian/patches/0001_CVE-2014-8132.patch: Fixup error path in
ssh_packet_kexinit() (Closes: #773577, CVE-2014-8132)
-- Laurent Bigonville <bigon@debian.org> Tue, 27 Jan 2015 00:28:01 +0100
libssh (0.6.3-3) unstable; urgency=low
[ Sebastian Ramacher ]
* Build gcrypt flavor. (Closes: #676650)
* d/control:
- Add Build-Dep on libgcrypt-dev.
- Bump Build-Dep on debhelper to >= 9 and remove cdbs.
- Add libssh-gcrypt-dev and libssh-gcrypt-4 packages.
- Add Conflicts to libssh-dev and libssh-gcrypt-dev against each other.
- Add Depends on libssh-gcrypt-4 to libssh-dbg and break incompatible
versions.
- Update libssh-4 and libssh-dev Description.
* d/compat: Bump to 9.
* d/rules: Convert to dh and build gcrypt flavor.
* d/libssh-doc.docs: Update location of documentation.
+ d/patches/1003-custom-lib-names.patch: Allow to overwrite libssh's
OUTPUT_NAME.
[ Laurent Bigonville ]
* debian/libssh-gcrypt-4.lintian-overrides: Add an override for
the dev-pkg-without-shlib-symlink lintian warning
* debian/control, debian/rules: Enable the tests at build time, really
(Closes: #744403)
* debian/control: Add pkg-config to the build-dependencies
* d/p/2003-disable-expand_tilde_unix-test.patch: Disable
torture_path_expand_tilde_unix it's not working well on the buildd
* d/p/0007-security-fix-for-vulnerability-CVE-2014-0017.patch: Drop obsolete
patch, merged upstream in 0.6.3
* debian/rules: Pass -Wl,-z,defs -Wl,-O1 -Wl,--as-needed to the LDFLAGS
* Enable GSSAPI support
- debian/control: Add libkrb5-dev | heimdal-dev to the build-dependencies
- debian/rules: Pass -DWITH_GSSAPI=ON to the CMake flags
- Adjust the .symbols file
-- Laurent Bigonville <bigon@debian.org> Sat, 30 Aug 2014 17:31:14 +0200
libssh (0.6.3-2) unstable; urgency=low
[ Mike Gabriel ]
* debian/rules:
+ Enable tests during package build. (Closes: #744403).
-- Mike Gabriel <sunweaver@debian.org> Wed, 14 May 2014 10:19:23 +0200
libssh (0.6.3-1) unstable; urgency=low
* Upload to unstable without changes.
-- Mike Gabriel <sunweaver@debian.org> Wed, 14 May 2014 09:43:04 +0200
libssh (0.6.3-1~exp1) experimental; urgency=medium
* New upstream release.
- Reset the PRNG state after accepting a new connection (CVE-2014-0017)
-- Laurent Bigonville <bigon@debian.org> Wed, 05 Mar 2014 23:02:10 +0100
libssh (0.6.1-1~exp1) experimental; urgency=low
* New upstream release.
* debian/control:
+ Bump Standards: to 3.9.5. No changes needed.
* debian/patches:
+ Remove obsolete patches (all applied upstream).
+ Add patch for fixing typos in upstream error messages.
* Provide upstream signing key in package.
* Update debian/libssh-4.symbols file.
* Update debian/copyright.in file.
* Update debian/copyright file.
-- Mike Gabriel <sunweaver@debian.org> Wed, 19 Feb 2014 12:54:32 +0100
libssh (0.5.4-3) unstable; urgency=high
[ Mike Gabriel ]
* debian/rules:
+ Add get-orig-source rule.
* debian/watch:
+ Handle tar.gz and tar.xz upstream tarballs alike.
* debian/copyright.in:
+ Ship auto-generated copyright file in debian/ folder.
[ Laurent Bigonville ]
* debian/patches/0007-security-fix-for-vulnerability-CVE-2014-0017.patch:
Reset the PRNG state after accepting a new connection (CVE-2014-0017)
-- Laurent Bigonville <bigon@debian.org> Wed, 05 Mar 2014 22:42:19 +0100
libssh (0.5.4-2) unstable; urgency=low
* debian/control:
+ Add myself to Uploaders: field as discussed with current
maintainer on IRC (#debian-devel) on 2014-02-17.
+ Alioth-canonicalize Vcs-* fields.
* debian/copyright:
+ Make copyright file DEP-5 compliant.
+ Relicense debian/* files under all licenses used by upstream.
Copyright holders' agreements can be found in the related
bug report in Debian BTS. (Closes: #739372).
* debian/patches:
+ Add patch 0004-reset-global-request-status.patch: Allow requesting
more than one channel per session.
+ Add patch 0005-multi-reverse-fwd.patch: Ease handling of multiple
reverse port forwarding requests per session. (Closes: #736231).
+ Add patch 0006-ssh-handle-package-zero-timeouts.patch: Handle
zero timeouts as such. Improves speed on libssh issued
connections. (Closes: #738667).
* Update libssh-4.symbols file with new symbol introduced by patch
0005-multi-reverse-fwd.patch.
-- Mike Gabriel <sunweaver@debian.org> Tue, 18 Feb 2014 13:34:13 +0100
libssh (0.5.4-1) unstable; urgency=low
* New upstream security release
- Fix NULL dereference leads to denial of service
(Closes: #698963, CVE-2013-0176)
* debian/patches/0003-fix-typo.patch: Fix typo in error message
-- Laurent Bigonville <bigon@debian.org> Tue, 05 Feb 2013 01:06:40 +0100
libssh (0.5.3-1) unstable; urgency=high
* New upstream security release
- Fixes CVE-2012-4559, CVE-2012-4560, CVE-2012-4561, CVE-2012-4562
- Fix regression in pre-connected socket setting (Closes: #688700)
-- Laurent Bigonville <bigon@debian.org> Wed, 21 Nov 2012 13:53:14 +0100
libssh (0.5.2-1) unstable; urgency=low
* New upstream release
- Fix bug with ssh_channel_write (Closes: #631950)
* debian/watch: Use new tarball location
-- Laurent Bigonville <bigon@debian.org> Mon, 19 Sep 2011 12:01:26 +0200
libssh (0.5.1-1) unstable; urgency=low
* New upstream release (Closes: #637445)
* debian/patches/0001-rename-threads-static.patch,
debian/patches/0002-Check-for-NULL-pointers-in-string-c.patch: Dropped
* debian/rules:
- Adjust rule that build documentation
* debian/patches/0001-disable-latex-documentation.patch: Disable LaTeX
documentation generation (Closes: #622108)
* debian/control: Drop texlive-fonts-recommended build-dependency
* debian/patches/0002-fix-html-doc-generation.patch: Fix HTML doc generation
(LP: #821437)
* debian/libssh-doc.doc-base: Refine Title and Files glob
-- Laurent Bigonville <bigon@debian.org> Fri, 19 Aug 2011 00:46:48 +0200
libssh (0.5.0-2) unstable; urgency=low
* debian/patches/0002-Check-for-NULL-pointers-in-string-c.patch:
Consolidate patch (Should fix previous REJECT)
* Support multiarch spec
-- Laurent Bigonville <bigon@debian.org> Wed, 15 Jun 2011 15:48:07 +0200
libssh (0.5.0-1) unstable; urgency=low
* New upstream release
* debian/control:
- Bump Standards-Version to 3.9.2 (no further changes)
- Fix short description to please lintian
* debian/libssh-dev.install:
- Remove "static" from the static library name
- Install pkg-config file
* debian/libssh-4.symbols: Add new symbols to .symbols file
* debian/patch/0001-rename-threads-static.patch:
Rename libssh_threads_static.so to libssh_threads.so
* debian/libssh-4.install, debian/libssh-dev.install, debian/libssh-4.symbols,
debian/libssh-4.lintian-overrides: Install libssh_threads library
* debian/patches/0002-Check-for-NULL-pointers-in-string-c.patch:
Check if string is NULL.
-- Laurent Bigonville <bigon@debian.org> Fri, 10 Jun 2011 22:47:54 +0200
libssh (0.4.8-2) unstable; urgency=low
* Upload to unstable
* debian/control: Add texlive-fonts-recommended to Build-Depends-Indep
(Closes: #608319)
-- Laurent Bigonville <bigon@debian.org> Sun, 13 Mar 2011 22:06:00 +0100
libssh (0.4.8-1) experimental; urgency=low
* New upstream release
* Bump debhelper compatibility to 8
-- Laurent Bigonville <bigon@debian.org> Mon, 17 Jan 2011 19:31:47 +0100
libssh (0.4.7-1) experimental; urgency=low
* New upstream release
- Drop all patches, applied upstream
* debian/watch: Fix URL regex
-- Laurent Bigonville <bigon@debian.org> Tue, 04 Jan 2011 21:24:34 +0100
libssh (0.4.6-1) experimental; urgency=low
* New upstream release
-- Laurent Bigonville <bigon@debian.org> Mon, 13 Dec 2010 23:30:03 +0100
libssh (0.4.5-3) unstable; urgency=low
* d/p/0002-socket-Fixed-uninitialized-fd-revents-member.patch:
Fix uninitialized memory use (Closes: #606347)
-- Laurent Bigonville <bigon@debian.org> Sat, 11 Dec 2010 01:33:45 +0100
libssh (0.4.5-2) unstable; urgency=low
* Add d/p/0001-socket.c-Fixed-setting-max_fd-which-breaks-ssh_selec.patch:
Fix slow response in Remmina SSH (Closes: #599687, LP: #663777)
* debian/control: Bump Standards-Version to 3.9.1 (no futher changes)
* debian/copyright: Update copyright file to please lintian
-- Laurent Bigonville <bigon@debian.org> Wed, 20 Oct 2010 20:45:48 +0200
libssh (0.4.5-1) unstable; urgency=low
* New upstream release
* Bump Standards-Version to 3.9.0 (no further changes)
* Move doxygen to Build-Depends-Indep
-- Laurent Bigonville <bigon@debian.org> Sun, 18 Jul 2010 22:48:10 +0200
libssh (0.4.4-1) unstable; urgency=low
* New upstream release
- Should fix ~/.ssh directory access (Closes: #582461)
-- Laurent Bigonville <bigon@debian.org> Mon, 31 May 2010 20:10:56 +0200
libssh (0.4.3-1) unstable; urgency=low
* New upstream release
- Drop 0001-Fix-symbols-visibility.patch, applied upstream
- Update debian/libssh-4.symbols: Add new symbol
-- Laurent Bigonville <bigon@debian.org> Tue, 18 May 2010 21:06:33 +0200
libssh (0.4.2-1) unstable; urgency=low
* New upstream release
- 0001-Fix-symbols-visibility.patch: Only export needed symbols
- debian/libssh-4.symbols: Update symbols file
-- Laurent Bigonville <bigon@debian.org> Thu, 25 Mar 2010 13:38:35 +0100
libssh (0.4.1-1) unstable; urgency=low
* New upstream release
* debian/control: Bump Standards-Version (no further changes)
* Use new source package format '3.0 (quilt)'
-- Laurent Bigonville <bigon@debian.org> Sat, 13 Feb 2010 20:18:18 +0100
libssh (0.4.0-1) unstable; urgency=low
* New upstream release.
- Bump soname
- Adjust .symbols file
* Readd static library in -dev package
* Let dh_lintian install override file
* debian/README.Debian: Update file
* debian/rules: Add list-missing rule
-- Laurent Bigonville <bigon@debian.org> Sat, 12 Dec 2009 14:29:12 +0100
libssh (0.3.4-3) unstable; urgency=low
* Add correct Conflicts/Replaces for -dev and -doc packages
(Closes: #550996)
-- Laurent Bigonville <bigon@debian.org> Thu, 15 Oct 2009 09:59:57 +0200
libssh (0.3.4-2) unstable; urgency=low
* debian/watch: Update the URL
* debian/copyright: Add missing licence for some cmake/Modules files
-- Laurent Bigonville <bigon@debian.org> Mon, 12 Oct 2009 09:37:03 +0200
libssh (0.3.4-1) unstable; urgency=low
* New upstream release (Closes: #467284).
- Adjust build-deps and use cmake
- Bump soname and adjust .symbols file
* debian/control:
- Use my debian.org address in Uploaders and takeover the package
with Jean-Philippe permission
- Use now official Vcs-* field
- Use new Homepage field instead of old pseudo-field
- Bump Standards-Version to 3.8.3 (no further changes)
- Use debug section for -dbg package
- Add ${misc:Depends} to please lintian
- Remove duplicate section to please lintian
* debian/libssh-2-doc.doc-base: Fix doc-base-uses-applications-section
* Bump debhelper version to 7
* debian/libssh-dev.install: do not install .la file and static
library anymore
* debian/libssh-3.lintian-overrides: Update override
* debian/copyright: Update copyright file
* debian/libssh-3.symbols: Add initial symbols file
-- Laurent Bigonville <bigon@debian.org> Fri, 09 Oct 2009 21:21:16 +0200
libssh (0.2+svn20070321-4) unstable; urgency=low
* debian/control:
- Add XS-Vcs-Svn and XS-Vcs-Browser fields.
- Change to ${binary:Version} for versionized dependencies.
* Add debian/README.Debian to disambiguate the package name
-- Laurent Bigonville <bigon@bigon.be> Fri, 27 Jul 2007 15:00:06 +0200
libssh (0.2+svn20070321-3) unstable; urgency=low
* Fix wrong versionized Replaces for -doc package
-- Laurent Bigonville <bigon@bigon.be> Thu, 5 Apr 2007 17:58:27 +0200
libssh (0.2+svn20070321-2) unstable; urgency=low
* Split devel package into devel and documentation packages
-- Laurent Bigonville <bigon@bigon.be> Mon, 26 Mar 2007 15:29:51 +0200
libssh (0.2+svn20070321-1) unstable; urgency=low
* New svn snapshot:
- Fix broken include in include/libssh/server.h (Closes: #410020)
- Fix nasty bug in server side code
-- Laurent Bigonville <bigon@bigon.be> Mon, 26 Mar 2007 15:06:40 +0200
libssh (0.2-1) unstable; urgency=low
* New upstream release.
-- Laurent Bigonville <bigon@bigon.be> Fri, 29 Dec 2006 07:40:20 +0100
libssh (0.2~rc-1) unstable; urgency=low
* Initial release (Closes: #316872)
-- Jean-Philippe Garcia Ballester <giga@le-pec.org> Wed, 20 Dec 2006 23:56:50 +0100
|
