CVS commit: [pkgsrc-2026Q3] pkgsrc/security/ruby-net-ssh

To: pkgsrc-changes%NetBSD.org@localhost
Subject: CVS commit: [pkgsrc-2026Q3] pkgsrc/security/ruby-net-ssh
From: "Maya Rashish" <maya%netbsd.org@localhost>
Date: Wed, 11 Nov 2026 10:40:11 +0000

Module Name:    pkgsrc
Committed By:   maya
Date:           Wed Nov 11 10:40:11 UTC 2026

Modified Files:
        pkgsrc/security/ruby-net-ssh [pkgsrc-2026Q3]: Makefile PLIST distinfo

Log Message:
Pullup ticket #7363 - requested by taca
security/ruby-net-ssh: Security fix

Revisions pulled up:
- security/ruby-net-ssh/Makefile                                1.32-1.34
- security/ruby-net-ssh/PLIST                                   1.22
- security/ruby-net-ssh/distinfo                                1.34-1.36

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Thu Nov  5 15:29:47 UTC 2026

   Modified Files:
        pkgsrc/security/ruby-net-ssh: Makefile PLIST distinfo

   Log Message:
   security/ruby-net-scp: update to 8.1.0

   8.1.0 (2026-11-02)

   Changes from version 7.3.3 are too many to write here, please refer
   <https://github.com/net-ssh/net-ssh/blob/715ecd8b0767b4f1b495fe7b61c04b591cf5abb8/CHANGES.txt> in detail.

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sat Nov  7 14:27:34 UTC 2026

   Modified Files:
        pkgsrc/security/ruby-net-ssh: Makefile distinfo

   Log Message:
   security/ruby-net-ssh: update to 8.1.1

   8.1.1 (2026-11-06)

   * Security: refuse host keys marked `@revoked` in known_hosts, and
     certificates of such a key or signed by it, by raising the new
     `Net::SSH::HostKeyRevoked`, which `remember_host!` can't override; these
     lines were loaded as trusted keys, so every verifier except `:never`
     accepted the revoked key [GHSA-hjwv-j52r-xcg7]

---
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Sun Nov  8 16:28:57 UTC 2026

   Modified Files:
        pkgsrc/security/ruby-net-ssh: Makefile distinfo

   Log Message:
   security/ruby-net-ssh: update to 8.1.2

   8.1.2 (2026-11-08)

   * Security: verify the proxy's certificate and hostname in
     `Net::SSH::Proxy::HTTPS` by default, and the hostname with any verifying
     `:ssl_context`; any certificate was accepted, exposing the proxy
     credentials to a man-in-the-middle.  A self-signed or private CA proxy now
     needs an `:ssl_context` that trusts it, or one with `verify_mode =
     OpenSSL::SSL::VERIFY_NONE` to skip verification.  Thanks @fuzzyrichie
     [GHSA-qcf4-j55x-72hv]


To generate a diff of this commit:
cvs rdiff -u -r1.31 -r1.31.2.1 pkgsrc/security/ruby-net-ssh/Makefile
cvs rdiff -u -r1.21 -r1.21.4.1 pkgsrc/security/ruby-net-ssh/PLIST
cvs rdiff -u -r1.33 -r1.33.2.1 pkgsrc/security/ruby-net-ssh/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/ruby-net-ssh/Makefile
diff -u pkgsrc/security/ruby-net-ssh/Makefile:1.31 pkgsrc/security/ruby-net-ssh/Makefile:1.31.2.1
--- pkgsrc/security/ruby-net-ssh/Makefile:1.31  Sun Jun 28 15:00:12 2026
+++ pkgsrc/security/ruby-net-ssh/Makefile       Wed Nov 11 10:40:11 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.31 2026/06/28 15:00:12 taca Exp $
+# $NetBSD: Makefile,v 1.31.2.1 2026/11/11 10:40:11 maya Exp $
 
-DISTNAME=      net-ssh-7.3.3
+DISTNAME=      net-ssh-8.1.2
 CATEGORIES=    security
 
 MAINTAINER=    pkgsrc-users%NetBSD.org@localhost

Index: pkgsrc/security/ruby-net-ssh/PLIST
diff -u pkgsrc/security/ruby-net-ssh/PLIST:1.21 pkgsrc/security/ruby-net-ssh/PLIST:1.21.4.1
--- pkgsrc/security/ruby-net-ssh/PLIST:1.21     Sun Mar 29 13:13:41 2026
+++ pkgsrc/security/ruby-net-ssh/PLIST  Wed Nov 11 10:40:11 2026
@@ -1,31 +1,8 @@
-@comment $NetBSD: PLIST,v 1.21 2026/03/29 13:13:41 taca Exp $
+@comment $NetBSD: PLIST,v 1.21.4.1 2026/11/11 10:40:11 maya Exp $
 ${GEM_HOME}/cache/${GEM_NAME}.gem
-${GEM_LIBDIR}/.dockerignore
-${GEM_LIBDIR}/.github/FUNDING.yml
-${GEM_LIBDIR}/.github/config/rubocop_linter_action.yml
-${GEM_LIBDIR}/.github/workflows/ci-with-docker.yml
-${GEM_LIBDIR}/.github/workflows/ci.yml
-${GEM_LIBDIR}/.github/workflows/rubocop.yml
-${GEM_LIBDIR}/.gitignore
-${GEM_LIBDIR}/.rubocop.yml
-${GEM_LIBDIR}/.rubocop_todo.yml
 ${GEM_LIBDIR}/CHANGES.txt
-${GEM_LIBDIR}/DEVELOPMENT.md
-${GEM_LIBDIR}/Dockerfile
-${GEM_LIBDIR}/Dockerfile.openssl3
-${GEM_LIBDIR}/Dockerfile.zlib_ng
-${GEM_LIBDIR}/Gemfile
-${GEM_LIBDIR}/Gemfile.noed25519
-${GEM_LIBDIR}/Gemfile.norbnacl
-${GEM_LIBDIR}/ISSUE_TEMPLATE.md
 ${GEM_LIBDIR}/LICENSE.txt
-${GEM_LIBDIR}/Manifest
 ${GEM_LIBDIR}/README.md
-${GEM_LIBDIR}/Rakefile
-${GEM_LIBDIR}/SECURITY.md
-${GEM_LIBDIR}/THANKS.txt
-${GEM_LIBDIR}/appveyor.yml
-${GEM_LIBDIR}/docker-compose.yml
 ${GEM_LIBDIR}/lib/net/ssh.rb
 ${GEM_LIBDIR}/lib/net/ssh/authentication/agent.rb
 ${GEM_LIBDIR}/lib/net/ssh/authentication/certificate.rb
@@ -41,6 +18,7 @@ ${GEM_LIBDIR}/lib/net/ssh/authentication
 ${GEM_LIBDIR}/lib/net/ssh/authentication/methods/publickey.rb
 ${GEM_LIBDIR}/lib/net/ssh/authentication/pageant.rb
 ${GEM_LIBDIR}/lib/net/ssh/authentication/pub_key_fingerprint.rb
+${GEM_LIBDIR}/lib/net/ssh/authentication/security_key.rb
 ${GEM_LIBDIR}/lib/net/ssh/authentication/session.rb
 ${GEM_LIBDIR}/lib/net/ssh/buffer.rb
 ${GEM_LIBDIR}/lib/net/ssh/buffered_io.rb
@@ -55,6 +33,10 @@ ${GEM_LIBDIR}/lib/net/ssh/errors.rb
 ${GEM_LIBDIR}/lib/net/ssh/key_factory.rb
 ${GEM_LIBDIR}/lib/net/ssh/known_hosts.rb
 ${GEM_LIBDIR}/lib/net/ssh/loggable.rb
+${GEM_LIBDIR}/lib/net/ssh/multiplex.rb
+${GEM_LIBDIR}/lib/net/ssh/multiplex/client.rb
+${GEM_LIBDIR}/lib/net/ssh/multiplex/control_path.rb
+${GEM_LIBDIR}/lib/net/ssh/multiplex/proxy_transport.rb
 ${GEM_LIBDIR}/lib/net/ssh/packet.rb
 ${GEM_LIBDIR}/lib/net/ssh/prompt.rb
 ${GEM_LIBDIR}/lib/net/ssh/proxy/command.rb
@@ -91,6 +73,7 @@ ${GEM_LIBDIR}/lib/net/ssh/transport/hmac
 ${GEM_LIBDIR}/lib/net/ssh/transport/hmac/ripemd160.rb
 ${GEM_LIBDIR}/lib/net/ssh/transport/hmac/sha1.rb
 ${GEM_LIBDIR}/lib/net/ssh/transport/hmac/sha1_96.rb
+${GEM_LIBDIR}/lib/net/ssh/transport/hmac/sha1_etm.rb
 ${GEM_LIBDIR}/lib/net/ssh/transport/hmac/sha2_256.rb
 ${GEM_LIBDIR}/lib/net/ssh/transport/hmac/sha2_256_96.rb
 ${GEM_LIBDIR}/lib/net/ssh/transport/hmac/sha2_256_etm.rb
@@ -123,7 +106,4 @@ ${GEM_LIBDIR}/lib/net/ssh/verifiers/acce
 ${GEM_LIBDIR}/lib/net/ssh/verifiers/always.rb
 ${GEM_LIBDIR}/lib/net/ssh/verifiers/never.rb
 ${GEM_LIBDIR}/lib/net/ssh/version.rb
-${GEM_LIBDIR}/net-ssh-public_cert.pem
-${GEM_LIBDIR}/net-ssh.gemspec
-${GEM_LIBDIR}/support/ssh_tunnel_bug.rb
 ${GEM_HOME}/specifications/${GEM_NAME}.gemspec

Index: pkgsrc/security/ruby-net-ssh/distinfo
diff -u pkgsrc/security/ruby-net-ssh/distinfo:1.33 pkgsrc/security/ruby-net-ssh/distinfo:1.33.2.1
--- pkgsrc/security/ruby-net-ssh/distinfo:1.33  Sun Jun 28 15:00:12 2026
+++ pkgsrc/security/ruby-net-ssh/distinfo       Wed Nov 11 10:40:11 2026
@@ -1,5 +1,5 @@
-$NetBSD: distinfo,v 1.33 2026/06/28 15:00:12 taca Exp $
+$NetBSD: distinfo,v 1.33.2.1 2026/11/11 10:40:11 maya Exp $
 
-BLAKE2s (net-ssh-7.3.3.gem) = 8e05ab478650d642237284190d6e0f3b994e42c1707e7ef780e689d150b6e783
-SHA512 (net-ssh-7.3.3.gem) = 71d693cc088702c7e42653309561876932d3fcc66e192fcb47fac408d19e1aa03ad415ba4760cc84d04bed617127cfaf1cc2b862e241724b39e1f959534e5e86
-Size (net-ssh-7.3.3.gem) = 145920 bytes
+BLAKE2s (net-ssh-8.1.2.gem) = ca14e146cdfb8d5f062e0ee8362c5162eb55380f68aa3ec7b44f8a32834d72c7
+SHA512 (net-ssh-8.1.2.gem) = ed8b99eb5e4441190b86e829e2a3533ed3c8448ce8f6ea0a36030a55439b42a107544427b665ddc6b9268cd7819001531768809b771de864310e9670362f3c61
+Size (net-ssh-8.1.2.gem) = 158720 bytes

Prev by Date: CVS commit: [pkgsrc-2026Q3] pkgsrc/graphics/libheif
Next by Date: CVS commit: pkgsrc/audio/fasttracker2
Previous by Thread: CVS commit: [pkgsrc-2026Q3] pkgsrc/graphics/libheif
Next by Thread: CVS commit: pkgsrc/audio/fasttracker2
Indexes:

Home | Main Index | Thread Index | Old Index