CVS commit: pkgsrc/security/libssh

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Fri Dec 27 11:15:39 UTC 2024

Modified Files:
        pkgsrc/security/libssh: Makefile PLIST distinfo

Log Message:
libssh: updated to 0.11.1

version 0.11.1 (released 2024-08-30)
 * Fixed default TTY modes that are set when stdin is not connected to tty
 * Fixed zlib cleanup procedure, which could crash on i386
 * Various test fixes improving their stability
 * Fixed cygwin build

version 0.11.0 (released 2024-07-31)
  * Deprecations and Removals:
    * Dropped support for DSA
    * Deprecated Blowfish cipher (will be removed in next release)
    * Deprecated SSH_BIND_OPTIONS_{RSA,ECDSA}KEY in favor of generic HOSTKEY
    * Removed the usage of deprecated OpenSSL APIs (Note: Minimum supported
      OpenSSL version is 1.1.1)
    * Disabled preauth compression (zlib) by default
    * Support for pkcs#11 engines are deprecated, pkcs11-provider is used instead
    * Deprecation of old async SFTP API
    * libgcrypt cryptographic backend is deprecated
    * Deprecation of knownhosts hashing
  * SFTP Improvements:
    * Added support for async SFTP IO
    * Added support for sftp_limits() and applied capping to SFTP read/write
      operations accordingly
    * Added sftp_home_directory() API support for sftp extension "home-directory"
    * Added sftp_lsetstat() API for lsetstat extensions
    * Added sftp_expand_path() to canonicalize path using expand-path%openssh.com@localhost
      extension
    * Implemented stat and realpath in sftpserver
    * Added sftp_readlink() API to support hardlink%openssh.com@localhost
    * New extensible callback based SFTP server
    * Introduced the posix-rename%openssh.com@localhost extension
  * New functions and features:
    * Added support for PKCS #11 provider for OpenSSL 3.0
    * Added testing for GSSAPI Authentication
    * Implemented proxy jump using libssh
    * Recategorized loglevels to show fatal errors and alignment with OpenSSH
      log levels
    * Added ssh_channel_request_pty_size_modes() API to set terminal modes for
      PTYs
    * Added function to check username syntax
    * Added support to check all keys in authorized_keys instead of one in
      example server implementation
    * Handled hostkey similar to OpenSSH
    * Added ssh_session_socket_close() API in order to not close socket passed
      through options on error conditions
    * Added option SSH_BIND_OPTIONS_IMPORT_KEY_STR to read user-supplied key
      string in ssh_bind_options_set()
    * Improved log handling around ssh_set_callbacks
    * Added ssh_set_error_invalid in ssh_options_set()
    * Prevented signature blob to start with 1 bit in libgcrypt
    * Added support to unbreak key comparison of Ed25519 keys imported from PEM
      or OpenSSH container
    * Added support to calculate missing CRT parameters when building RSA key
    * Added ssh_pki_export_privkey_base64_format() and
      ssh_pki_export_privkey_file_format() to support exporting keys in different
      formats (PEM, OpenSSH)
    * Added support to compare certificates and handle automatic certificate
      authentication
    * Added support to make compile-commands generation conditional
    * Built fuzzers for normal testing
    * Avoided passing other events to callbacks when called recursively
    * Added control master and path options
    * Refactored channel_rcv_data, check for errors and report more useful errors
    * Added support to connect to other host addresses than just the first one
    * Terminated the server properly when the MaxAuthTries is reached
    * Added support for no-more-sessions%openssh.com@localhost request in both client and
      server
    * Added callback to support forwarded-tcpip requests
    * Bumped minimal CMake version to 3.12
    * Added support for MBedTLS 3.6.x
    * Added support for +,-,^ modifiers in front of algorithm lists in options
    * Added callbacks for channel open response, and channel request response
    * Replaced chroot() from chroot_wrapper internal library with chroot()
      from priv_wrapper package
    * Added a placeholder for non-expanded identities
    * Improved handling of channel transfer window sizes


To generate a diff of this commit:
cvs rdiff -u -r1.50 -r1.51 pkgsrc/security/libssh/Makefile
cvs rdiff -u -r1.21 -r1.22 pkgsrc/security/libssh/PLIST
cvs rdiff -u -r1.31 -r1.32 pkgsrc/security/libssh/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/libssh/Makefile
diff -u pkgsrc/security/libssh/Makefile:1.50 pkgsrc/security/libssh/Makefile:1.51
--- pkgsrc/security/libssh/Makefile:1.50        Sun Aug 25 06:19:12 2024
+++ pkgsrc/security/libssh/Makefile     Fri Dec 27 11:15:39 2024
@@ -1,11 +1,11 @@
-# $NetBSD: Makefile,v 1.50 2024/08/25 06:19:12 wiz Exp $
+# $NetBSD: Makefile,v 1.51 2024/12/27 11:15:39 adam Exp $
 #
 # history: upstream renamed 0.11 to 0.1.1;
 # we have to use the old-style convention so that version compares work.
 
-VER=           0.10.6
+VER=           0.11.1
 DISTNAME=      libssh-${VER}
-PKGNAME=       libssh-0.106
+PKGNAME=       libssh-0.111
 CATEGORIES=    security
 MASTER_SITES=  https://www.libssh.org/files/${VER:R}/
 EXTRACT_SUFX=  .tar.xz
@@ -19,8 +19,8 @@ USE_LANGUAGES=                c c++
 PKGCONFIG_OVERRIDE+=   libssh.pc.cmake
 TEST_TARGET=           test
 
-CMAKE_CONFIGURE_ARGS+=         -DUNIT_TESTING=ON
-CMAKE_CONFIGURE_ARGS+=         -DWITH_EXAMPLES=OFF
+CMAKE_CONFIGURE_ARGS+= -DUNIT_TESTING=ON
+CMAKE_CONFIGURE_ARGS+= -DWITH_EXAMPLES=OFF
 
 LDFLAGS.SunOS+=                -lnsl -lsocket
 

Index: pkgsrc/security/libssh/PLIST
diff -u pkgsrc/security/libssh/PLIST:1.21 pkgsrc/security/libssh/PLIST:1.22
--- pkgsrc/security/libssh/PLIST:1.21   Mon Dec 18 17:07:25 2023
+++ pkgsrc/security/libssh/PLIST        Fri Dec 27 11:15:39 2024
@@ -1,4 +1,4 @@
-@comment $NetBSD: PLIST,v 1.21 2023/12/18 17:07:25 wiz Exp $
+@comment $NetBSD: PLIST,v 1.22 2024/12/27 11:15:39 adam Exp $
 include/libssh/callbacks.h
 include/libssh/legacy.h
 include/libssh/libssh.h
@@ -6,11 +6,12 @@ include/libssh/libssh_version.h
 include/libssh/libsshpp.hpp
 include/libssh/server.h
 include/libssh/sftp.h
+include/libssh/sftpserver.h
 include/libssh/ssh2.h
 lib/cmake/libssh/libssh-config-noconfig.cmake
 lib/cmake/libssh/libssh-config-version.cmake
 lib/cmake/libssh/libssh-config.cmake
 lib/libssh.so
 lib/libssh.so.4
-lib/libssh.so.4.9.6
+lib/libssh.so.4.10.1
 lib/pkgconfig/libssh.pc

Index: pkgsrc/security/libssh/distinfo
diff -u pkgsrc/security/libssh/distinfo:1.31 pkgsrc/security/libssh/distinfo:1.32
--- pkgsrc/security/libssh/distinfo:1.31        Mon Dec 18 17:07:25 2023
+++ pkgsrc/security/libssh/distinfo     Fri Dec 27 11:15:39 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.31 2023/12/18 17:07:25 wiz Exp $
+$NetBSD: distinfo,v 1.32 2024/12/27 11:15:39 adam Exp $
 
-BLAKE2s (libssh-0.10.6.tar.xz) = ffb91523c0054afcaeb312463b9527617254b4f3e72d7c0ffd1e376a95a590e5
-SHA512 (libssh-0.10.6.tar.xz) = 40c62d63c44e882999b71552c237d73fc7364313bd00b15a211a34aeff1b73693da441d2c8d4e40108d00fb7480ec7c5b6d472f9c0784b2359a179632ab0d6c1
-Size (libssh-0.10.6.tar.xz) = 561036 bytes
+BLAKE2s (libssh-0.11.1.tar.xz) = 097094811bc8708196c48f9b237d2da6ebd5d3b48cf19d0d6f69e8cec83a5cd9
+SHA512 (libssh-0.11.1.tar.xz) = 284d376ad9ea30b0274b4ac754b27d168286dca862ece43ef15ca6d89e66865ad7a6703cc12dd4a8564a60b8449ae9b36e6496fd51d34cc27ac4030f6cf216d6
+Size (libssh-0.11.1.tar.xz) = 621108 bytes
 SHA1 (patch-examples_sshd__direct-tcpip.c) = 62de8625d58dbc03c38b0eb23f6e7f20a46e91de
 SHA1 (patch-tests_CMakeLists.txt) = 61d9e21d612545766b00f577b3d342eb20a0a9a5
 SHA1 (patch-tests_torture.c) = 2c70e9d827f15ec36a62e0d0f5dd98774f24f79e