1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
|
libssh2 (1.11.1-1) unstable; urgency=medium
[ Nicolas Mora ]
* New upstream release
* d/libssh2-1t64.symbols: Add new symbols
* d/libssh2-1t64.lintian-overrides remove override file
* d/patches: Disable all patches but
0001-Add-lgpg-error-to-.pc-to-facilitate-static-linking.patch
which is refreshed
* d/tests: Add test to check that 'pkg-config --libs libssh2'
does not return private libs
[ Simon Josefsson ]
* d/control: Drop unnecessary chrpath
* d/tests/control: Drop unnecessary chrpath
-- Nicolas Mora <babelouest@debian.org> Wed, 16 Oct 2024 07:36:53 -0400
libssh2 (1.11.0-7) unstable; urgency=medium
* d/patches: openssh-9.8.patch
Disable DSA by default (closes: #1077735)
-- Nicolas Mora <babelouest@debian.org> Fri, 02 Aug 2024 13:32:00 -0400
libssh2 (1.11.0-6) unstable; urgency=medium
* d/patches: Add maxpathlen.patch (Closes: #1068076)
-- Nicolas Mora <babelouest@debian.org> Thu, 04 Jul 2024 07:41:06 -0400
libssh2 (1.11.0-5) unstable; urgency=medium
* Mark builddep openssh-server with <!nocheck> (Closes: #1066111)
* d/copyright add missing license and author in src/bcrypt_pbkdf.c
and add missing author in src/blowfish.c (Closes: #1071566)
* d/control: upgrade standards version to 4.7.0
* d/patches: Add mention Forwarded to patches
-- Nicolas Mora <babelouest@debian.org> Thu, 25 Apr 2024 07:35:58 -0400
libssh2 (1.11.0-4.1) unstable; urgency=medium
* Non-maintainer upload.
* Rename libraries for 64-bit time_t transition. Closes: #1062637
-- Graham Inggs <ginggs@debian.org> Wed, 28 Feb 2024 19:03:07 +0000
libssh2 (1.11.0-4) unstable; urgency=medium
* d/patch: Add patch for Terrapin attack
Fixes CVE-2023-48795 (Closes: #1059005)
* d/copyright: Update copyright years
-- Nicolas Mora <babelouest@debian.org> Tue, 19 Dec 2023 17:33:18 -0500
libssh2 (1.11.0-3) unstable; urgency=medium
* d/patch: Backport PR-1241 from upstream (Closes: #1056348)
-- Nicolas Mora <babelouest@debian.org> Tue, 28 Nov 2023 13:12:56 -0500
libssh2 (1.11.0-2) unstable; urgency=medium
* upload to unstable
* d/patch: re-enable sshd tests (Thanks Paul Howarth)
-- Nicolas Mora <babelouest@debian.org> Fri, 09 Jun 2023 07:36:08 -0400
libssh2 (1.11.0-1) experimental; urgency=medium
* New upstream release
* d/watch: Add gpg signature verification
* d/control: upgrade standards version to 4.6.2
* d/patches: remove ssh2-sh.patch
* d/patches: Update manpage.patch
* d/symbols: Update symbols
* d/tests: update unit-tests
* d/gitlab-ci.yml: Add salsa CI/CD script
-- Nicolas Mora <babelouest@debian.org> Wed, 31 May 2023 10:00:05 -0400
libssh2 (1.10.0-3) unstable; urgency=medium
* d/patches: Fix ssh2.sh test (Closes: #1006379)
* d/control: Add openssh-server in Build-Depends
* d/tests/control: Add openssh-server in Depends
* d/copyright: Update copyright years
-- Nicolas Mora <babelouest@debian.org> Tue, 01 Mar 2022 19:23:12 -0500
libssh2 (1.10.0-2) unstable; urgency=medium
* Upload to unstable
* d/control: upgrade standards version to 4.6.0
-- Nicolas Mora <babelouest@debian.org> Sat, 25 Sep 2021 08:43:37 -0400
libssh2 (1.10.0-1) experimental; urgency=medium
* New upstream release
* d/patches: remove CVE-2019-17498.patch
* d/libssh2-1.symbols: add new symbol
-- Nicolas Mora <babelouest@debian.org> Sun, 29 Aug 2021 17:21:29 -0400
libssh2 (1.9.0-3) unstable; urgency=medium
* d/rules: Build with openssl instead of libgcrypt (Closes: #668271)
* d/tests: Build with openssl instead of libgcrypt
-- Nicolas Mora <babelouest@debian.org> Sat, 27 Mar 2021 08:21:05 -0400
libssh2 (1.9.0-2) unstable; urgency=medium
* d/control: Fix VCS URIs
* d/control: add zlib1g-dev as dependency for libssh2-1-dev
-- Nicolas Mora <babelouest@debian.org> Mon, 14 Dec 2020 10:02:16 -0500
libssh2 (1.9.0-1) unstable; urgency=low
[ Mikhail Gusarov ]
* New upstream release (1.9.0) (Closes: #887976 #959881)
- Drop patches applied upstream:
- ced924b78a40126606797ef57a74066eb3b4b83f.patch
- CVE-2019-3855.patch
- CVE-2019-3856.patch
- CVE-2019-3857.patch
- CVE-2019-3858.patch
- CVE-2019-3859.patch
- CVE-2019-3860.patch
- CVE-2019-3861.patch
- CVE-2019-3862.patch
- CVE-2019-3863.patch
- Fixed-misapplied-patch-327.patch
- moved-MAX-size-declarations-330.patch
- Fixes CVE-2019-13115 (Closes: #932329).
* Acknowledge NMU 1.8.0-2.1, thanks to carnil@.
* Add debian/patches/CVE-2019-17498.patch, fixing CVE-2019-17498
(Closes: #943562).
* debian/copyright: Update upstream link to be https (Closes: #923088)
[ Nicolas Mora ]
* New maintainer (Closes: #975617)
* d/control: Update Standards-Version to 4.5.1
* d/control: Uses debhelper-compat to version 13
* d/control: Adds Rules-Requires-Root: no
* d/watch : upgrade version to 4 (no changes)
* d/upstream: Add metadata file
* d/tests: add autopkgtests
* d/control: Add VCS URIs
-- Nicolas Mora <babelouest@debian.org> Sat, 05 Dec 2020 16:15:24 -0500
libssh2 (1.8.0-2.1) unstable; urgency=high
* Non-maintainer upload.
* Possible integer overflow in transport read allows out-of-bounds write
(CVE-2019-3855) (Closes: #924965)
* Possible integer overflow in keyboard interactive handling allows
out-of-bounds write (CVE-2019-3856) (Closes: #924965)
* Possible integer overflow leading to zero-byte allocation and
out-of-bounds write (CVE-2019-3857) (Closes: #924965)
* Possible zero-byte allocation leading to an out-of-bounds read
(CVE-2019-3858) (Closes: #924965)
* Out-of-bounds reads with specially crafted payloads due to unchecked use
of _libssh2_packet_require and _libssh2_packet_requirev (CVE-2019-3859)
(Closes: #924965)
* Out-of-bounds reads with specially crafted SFTP packets (CVE-2019-3860)
(Closes: #924965)
* Out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
(Closes: #924965)
* Out-of-bounds memory comparison (CVE-2019-3862) (Closes: #924965)
* Integer overflow in user authenicate keyboard interactive allows
out-of-bounds writes (CVE-2019-3863) (Closes: #924965)
* Fixed misapplied patch for user auth.
* moved MAX size declarations
-- Salvatore Bonaccorso <carnil@debian.org> Sun, 31 Mar 2019 16:06:20 +0200
libssh2 (1.8.0-2) unstable; urgency=low
* Add missing zlib1g-dev dependency (Closes: #900558).
* Remove manual -dbg package and corresponding override in d/rules.
* Update Homepage, copyright and tarball download URL to use https.
* Clean spurious EOL whitespace from d/changelog.
* Add signature check to debian/watch.
* Update debhelper compatibility (and dependency).
* Remove no longer needed explicit dh --parallel flag
* Enable full hardening mode.
* Update packaging copyright years.
* Bump Standards-Version.
-- Mikhail Gusarov <dottedmag@debian.org> Sat, 23 Jun 2018 21:45:38 +0200
libssh2 (1.8.0-1) unstable; urgency=low
* New upstream release.
- Refresh 0001-Add-lgpg-error-to-.pc-to-facilitate-static-linking.patch
- Refresh 0001-Do-not-expose-private-libraries-nor-link-flags-to-us.patch
- Take ced924b78a40126606797ef57a74066eb3b4b83f.patch from upstream
* Do not build against OpenSSL even if libssl-dev is installed
(Closes: #857793).
-- Mikhail Gusarov <dottedmag@debian.org> Thu, 16 Mar 2017 00:56:58 +0100
libssh2 (1.7.0-1) unstable; urgency=low
* New upstream release(Closes: #825097).
- Refresh patches.
* Bump Standards-Version, no changes required.
-- Mikhail Gusarov <dottedmag@debian.org> Fri, 22 Jul 2016 09:05:27 +0200
libssh2 (1.5.0-1) unstable; urgency=low
* New upstream release.
- Drop 0003-CVE-2015-1782.patch, included upstream.
* Acknowledge 1.4.3-4.1 NMU. Thanks, Salvatore!
-- Mikhail Gusarov <dottedmag@debian.org> Thu, 19 Mar 2015 07:39:43 +0100
libssh2 (1.4.3-4.1) unstable; urgency=high
* Non-maintainer upload by the Security Team.
* Add 0003-CVE-2015-1782.patch.
CVE-2015-1782: Using SSH_MSG_KEXINIT data unbounded. (Closes: #780249)
-- Salvatore Bonaccorso <carnil@debian.org> Wed, 11 Mar 2015 12:08:30 +0100
libssh2 (1.4.3-4) unstable; urgency=low
* Update description to mention SFTPv5 support
(Closes: #671199).
* Add -lgpg-error to .pc file to fix static linking against libgcrypt
(Closes: #760359).
-- Mikhail Gusarov <dottedmag@debian.org> Wed, 03 Sep 2014 15:49:23 +0200
libssh2 (1.4.3-3) unstable; urgency=low
* Do not expose private libraries nor link flags to users of libssh2
(Closes: #747417).
* Rebuild with libgcrypt20 (Closes: #744829).
* Fix typos in manpages.
* Bump Standards-Version, no changes required.
-- Mikhail Gusarov <dottedmag@debian.org> Mon, 19 May 2014 10:23:27 +0200
libssh2 (1.4.3-2) unstable; urgency=medium
* Make package multi-arch-aware (Closes: #731310).
* Bump Standards-Version, no changes required.
-- Mikhail Gusarov <dottedmag@debian.org> Wed, 04 Dec 2013 21:29:00 +0100
libssh2 (1.4.3-1) unstable; urgency=low
* New upstream release.
- Drop debian/patches/with-gcrypt.patch, applied upstream.
* Incorporate 1.4.2-1.1 NMU by Dmitry. Thanks!
-- Mikhail Gusarov <dottedmag@debian.org> Tue, 21 May 2013 12:09:00 +0200
libssh2 (1.4.2-1.1) unstable; urgency=medium
* Non-maintainer upload.
* Added patch to fix pkg-config/libgcrypt dependency (Closes: #675785).
* Install upstream ChangeLog (Closes: #675782).
* debian/control:
+ libssh2-1-dev to depend on libgcrypt11-dev.
+ added Homepage field.
-- Dmitry Smirnov <onlyjob@member.fsf.org> Sat, 04 Aug 2012 19:13:21 +1000
libssh2 (1.4.2-1) unstable; urgency=low
* New upstream release.
-- Mikhail Gusarov <dottedmag@debian.org> Mon, 28 May 2012 17:41:48 +0200
libssh2 (1.4.1-1) unstable; urgency=low
* New upstream release.
- Drop debian/patches/undefined-libssh-error.patch, upstream.
-- Mikhail Gusarov <dottedmag@debian.org> Sun, 08 Apr 2012 16:39:12 +0200
libssh2 (1.4.0-1) unstable; urgency=low
* New upstream release.
- Drop debian/patches/fix-version-in-pc.patch taken from git.
- Drop debian/patches/mang-wrong-nf-macro.patch, applied upstream.
- Update libssh2-1.symbols for new upstream release.
- Add debian/patches/undefined-libssh-error.patch, necessary to
facilitate compilation with GnuTLS.
* Drop Conflicts/Replaces for packages no longer in archive.
* Use dh(7) for packaging.
* Use dh-autoreconf instead of manually stashing changed files and
moving them back.
* Do not run test 'mansyntax.sh', it requires specific locale to be
available, and in general is a duplicate of lintian check.
* Update debian/copyright to version 1.0 of machine-parseable format.
* Enable multiarch, based on patch by Johannes Cloos (Closes: #663751).
* Bump Standards-Version, no changes needed.
-- Mikhail Gusarov <dottedmag@debian.org> Mon, 19 Mar 2012 17:53:21 +0100
libssh2 (1.2.8-2) unstable; urgency=low
* Fix version in pkg-config file (Closes: #637670).
-- Mikhail Gusarov <dottedmag@debian.org> Sun, 14 Aug 2011 21:42:38 +0200
libssh2 (1.2.8-1) unstable; urgency=low
* New upstream release.
-- Mikhail Gusarov <dottedmag@debian.org> Sat, 09 Apr 2011 16:20:20 +0200
libssh2 (1.2.7-1) unstable; urgency=low
* New upstream release.
* Bump Standards-Version, no changes needed.
-- Mikhail Gusarov <dottedmag@debian.org> Mon, 28 Mar 2011 21:03:51 +0200
libssh2 (1.2.6-1) unstable; urgency=low
* New upstream release.
- Update symbols file. libssh2_error and libssh2_kex_exchange symbols
were unexported, being private.
* Simplify package description (Closes: #580325).
* Update Maintainer field to use my @debian.org address.
* Convert debian/copyright to machine-readable format.
-- Mikhail Gusarov <dottedmag@debian.org> Thu, 10 Jun 2010 17:33:32 +0700
libssh2 (1.2.5-1) unstable; urgency=low
* New upstream release.
- Update symbols file.
* Convert to source format 3.0 (quilt)
* Bump Standards-Version to 3.8.4, no changes needed.
-- Mikhail Gusarov <dottedmag@dottedmag.net> Thu, 01 Apr 2010 21:46:07 +0700
libssh2 (1.2.4-1) unstable; urgency=low
* New upstream release.
- Adjust list of files to stash before build and to restore later.
- Update symbols file.
-- Mikhail Gusarov <dottedmag@dottedmag.net> Sun, 28 Feb 2010 13:11:14 +0600
libssh2 (1.2.2-1) unstable; urgency=low
* New upstream release.
* Run autoreconf during build to update libtool/automake/autoconf
generated files (Closes: #558523).
- Expand list of files to stash before build and to restore after.
* Remove disable_example_compilation.patch, example compilation does not
hurt anyone.
- Remove quilt from Build-Depends,
- Stop call patch/unpatch in debian/rules,
- Remove README.source.
-- Mikhail Gusarov <dottedmag@dottedmag.net> Sun, 29 Nov 2009 18:45:58 +0600
libssh2 (1.2.1-2) unstable; urgency=low
* Install libssh2.pc (Closes: #554437)
-- Mikhail Gusarov <dottedmag@dottedmag.net> Wed, 04 Nov 2009 23:48:29 +0600
libssh2 (1.2.1-1) unstable; urgency=low
* debian/watch:
- update to match changed upstream download location.
* debian/rules:
- adjust "keep files" list in order to produce clean .diff.gz
- avoid installing .gitignore alongside the examples
- stylistic fixes
* debian/control:
- bump Standards-Version, no changes required.
-- Mikhail Gusarov <dottedmag@dottedmag.net> Mon, 28 Sep 2009 19:10:36 +0700
libssh2 (1.2-1) unstable; urgency=low
* New upstream release.
- updated debian/libssh2-1.symbols.
* debian/rules: config.sub, config.guess, ChangeLog and
win32/libssh2.dsp from tarball are preserved, due to being deleted by
`make distclean'.
* Standards-Version updated to 3.8.2, no changes required.
-- Mikhail Gusarov <dottedmag@dottedmag.net> Thu, 13 Aug 2009 02:28:57 +0700
libssh2 (1.1-1) unstable; urgency=low
* New upstream release.
- Dropped unexport-private-symbols.patch, applied upstream.
- Dropped fix_manpage.patch, applied upstream.
- Lots of private symbols were un-exported, adjusting
libssh2-1.symbols
* Updating Standards-Version to 3.8.1, no changes required.
-- Mikhail Gusarov <dottedmag@dottedmag.net> Thu, 02 Apr 2009 16:20:42 +0700
libssh2 (1.0-1) unstable; urgency=low
* New upstream release (Closes: #514225).
* Replaced fix_manpage.patch with new set of manpages' fixes.
* debian/patches/disable_example_compilation.patch:
- added description, as suggested by Lintian,
- refreshed.
* debian/patches/unexport-private-symbols.patch:
- new patch, disabling export of _libssh2_* private symbols.
* debian/libssh2-1.symbols:
- added symbols file.
* debian/control:
- removed duplicate Section: libs from binary package,
- bumped Standards-Version to 3.8.0:
+ debian/README.source added.
* debian/rules:
- clean target now unpatches the source,
- no longer reconfigures package twice: fixed quilt patch target,
- simplified configure target,
- deprecated dh_clean -k replaced with dh_prep.
* debhelper compat bumped to 7.
-- Mikhail Gusarov <dottedmag@dottedmag.net> Tue, 17 Feb 2009 22:50:14 +0600
libssh2 (0.18-1) unstable; urgency=low
* New upstream release
- Removed 'CVS directories in tarball' lintian override.
- Added patch fixing the syntactic errors in manpages.
-- Mikhail Gusarov <dottedmag@dottedmag.net> Sun, 11 Nov 2007 17:16:34 +0600
libssh2 (0.17-1) unstable; urgency=low
* New upstream release (Closes: #409362, #430569):
* ABI change: soname changed (adding Conflicts and Replaces to new
-dev package)
* installing more documentation.
* added lintian override: CVS directory accidentally went in release
tarball.
* Build using libgcrypt, not OpenSSL (Closes: #409362).
* Quilt introduced to manage patches:
* Added patch disabling compilation of example.
* Watch file added.
* ${Source-Version} changed to ${binary:Version}: makes lintian happy
and allows binNMUs.
-- Mikhail Gusarov <dottedmag@dottedmag.net> Wed, 04 Jul 2007 15:21:46 +0700
libssh2 (0.14+20070102-1) unstable; urgency=low
* Initial release (Closes: #403446).
-- Mikhail Gusarov <dottedmag@dottedmag.net> Tue, 2 Jan 2007 03:17:15 +0600
|
