[ol7_u7_base] libssh2-1.8.0-3.el7.aarch64

Name:	libssh2
Version:	1.8.0
Release:	3.el7
Architecture:	aarch64
Group:	System Environment/Libraries
Size:	207808
License:	BSD
RPM:	libssh2-1.8.0-3.el7.aarch64.rpm
Source RPM:	libssh2-1.8.0-3.el7.src.rpm
Build Date:	Sun Jun 09 2019
Build Host:	ca-buildarm02.us.oracle.com
Vendor:	Oracle America
URL:	http://www.libssh2.org/
Summary:	A library implementing the SSH2 protocol
Description:	libssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS(22), SECSH-USERAUTH(25), SECSH-CONNECTION(23), SECSH-ARCH(20), SECSH-FILEXFER(06)*, SECSH-DHGEX(04), and SECSH-NUMBERS(10).

Changelog (Show File list) (Show related packages)

Wed Mar 20 2019 Kamil Dudka <kdudka@redhat.com> 1.8.0-3
```
- sanitize public header file (detected by rpmdiff)
```

Tue Mar 19 2019 Kamil Dudka <kdudka@redhat.com> 1.8.0-2

- fix integer overflow in keyboard interactive handling that allows out-of-bounds writes (CVE-2019-3863)
- fix out-of-bounds memory comparison with specially crafted message channel request (CVE-2019-3862)
- fix out-of-bounds reads with specially crafted SSH packets (CVE-2019-3861)
- fix zero-byte allocation in SFTP packet processing resulting in out-of-bounds read (CVE-2019-3858)
- fix integer overflow in SSH packet processing channel resulting in out of bounds write (CVE-2019-3857)
- fix integer overflow in keyboard interactive handling resulting in out of bounds write (CVE-2019-3856)
- fix integer overflow in transport read resulting in out of bounds write (CVE-2019-3855)

Wed Nov 21 2018 Kamil Dudka <kdudka@redhat.com> 1.8.0-1
```
- rebase to 1.8.0 (#1592784)
```

Tue Sep 26 2017 Kamil Dudka <kdudka@redhat.com> 1.4.3-12

- session: avoid printing misleading debug messages (#1503294)
- scp: send valid commands for remote execution (#1489733)

Fri Feb 19 2016 Kamil Dudka <kdudka@redhat.com> 1.4.3-11

- use secrects of the appropriate length in Diffie-Hellman (CVE-2016-0787)

Mon Jun 01 2015 Kamil Dudka <kdudka@redhat.com> 1.4.3-10

- check length of data extracted from the SSH_MSG_KEXINIT packet (CVE-2015-1782)

Tue May 05 2015 Kamil Dudka <kdudka@redhat.com> 1.4.3-9

- curl consumes too much memory during scp download (#1080459)
- prevent a not-connected agent from closing STDIN (#1147717)

Fri Jan 24 2014 Daniel Mach <dmach@redhat.com> - 1.4.3-8
```
- Mass rebuild 2014-01-24
```
Fri Dec 27 2013 Daniel Mach <dmach@redhat.com> - 1.4.3-7
```
- Mass rebuild 2013-12-27
```

Wed Aug 14 2013 Kamil Dudka <kdudka@redhat.com> 1.4.3-6

- fix very slow sftp upload to localhost
- fix a use after free in channel.c

Tue Apr 09 2013 Richard W.M. Jones <rjones@redhat.com> 1.4.3-5

- Add three patches from upstream git required for qemu ssh block driver.

Wed Apr 03 2013 Paul Howarth <paul@city-fan.org> 1.4.3-4

- Avoid polluting libssh2.pc with linker options (#947813)

Tue Mar 26 2013 Kamil Dudka <kdudka@redhat.com> 1.4.3-3

- Avoid collisions between 32-bit and 64-bit builds running on a single build
  host

Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.3-2
```
- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild
```

Wed Nov 28 2012 Paul Howarth <paul@city-fan.org> 1.4.3-1

- Update to 1.4.3
  - compression: add support for zlib@openssh.com
  - sftp_read: return error if a too large package arrives
  - libssh2_hostkey_hash.3: update the description of return value
  - Fixed MSVC NMakefile
  - examples: use stderr for messages, stdout for data
  - openssl: do not leak memory when handling errors
  - improved handling of disabled MD5 algorithm in OpenSSL
  - known_hosts: Fail when parsing unknown keys in known_hosts file
  - configure: gcrypt doesn't come with pkg-config support
  - session_free: wrong variable used for keeping state
  - libssh2_userauth_publickey_fromfile_ex.3: mention publickey == NULL
  - comp_method_zlib_decomp: handle Z_BUF_ERROR when inflating
- Drop upstreamed patches

Wed Nov 07 2012 Kamil Dudka <kdudka@redhat.com> 1.4.2-4

- examples: use stderr for messages, stdout for data (upstream commit b31e35ab)
- Update libssh2_hostkey_hash(3) man page (upstream commit fe8f3deb)

Wed Sep 26 2012 Kamil Dudka <kdudka@redhat.com> 1.4.2-3

- Fix basic functionality of libssh2 in FIPS mode
- Skip SELinux-related quirks on recent distros to prevent a test-suite failure

Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.4.2-2
```
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
```

Sun May 20 2012 Paul Howarth <paul@city-fan.org> 1.4.2-1

- Update to 1.4.2
  - Return LIBSSH2_ERROR_SOCKET_DISCONNECT on EOF when reading banner
  - userauth.c: fread() from public key file to correctly detect any errors
  - configure.ac: add option to disable build of the example applications
  - added 'Requires.private:' line to libssh2.pc
  - SFTP: filter off incoming "zombie" responses
  - gettimeofday: no need for a replacement under cygwin
  - SSH_MSG_CHANNEL_REQUEST: default to want_reply
  - win32/libssh2_config.h: remove hardcoded #define LIBSSH2_HAVE_ZLIB

Fri Apr 27 2012 Paul Howarth <paul@city-fan.org> 1.4.1-2
```
- Fix multi-arch conflict again (#816969)
```

Thu Apr 05 2012 Paul Howarth <paul@city-fan.org> 1.4.1-1

- Update to 1.4.1
  - Build error with gcrypt backend
  - Always do "forced" window updates to avoid corner case stalls
  - aes: the init function fails when OpenSSL has AES support
  - transport_send: finish in-progress key exchange before sending data
  - channel_write: acknowledge transport errors
  - examples/x11.c: make sure sizeof passed to read operation is correct
  - examples/x11.c: fix suspicious sizeof usage
  - sftp_packet_add: verify the packet before accepting it
  - SFTP: preserve the original error code more
  - sftp_packet_read: adjust window size as necessary
  - Use safer snprintf rather then sprintf in several places
  - Define and use LIBSSH2_INVALID_SOCKET instead of INVALID_SOCKET
  - sftp_write: cannot return acked data *and* EAGAIN
  - sftp_read: avoid data *and* EAGAIN
  - libssh2.h: add missing prototype for libssh2_session_banner_set()
- Drop upstream patches now included in release tarball

Mon Mar 19 2012 Kamil Dudka <kdudka@redhat.com> 1.4.0-4

- Don't ignore transport errors when writing to channel (#804150)

Sun Mar 18 2012 Paul Howarth <paul@city-fan.org> 1.4.0-3

- Don't try to use openssl's AES-CTR functions
  (http://www.libssh2.org/mail/libssh2-devel-archive-2012-03/0111.shtml)

Fri Mar 16 2012 Paul Howarth <paul@city-fan.org> 1.4.0-2

- fix libssh2 failing key re-exchange when write channel is saturated (#804156)
- drop %defattr, redundant since rpm 4.4

Wed Feb 01 2012 Paul Howarth <paul@city-fan.org> 1.4.0-1

- update to 1.4.0
  - added libssh2_session_supported_algs()
  - added libssh2_session_banner_get()
  - added libssh2_sftp_get_channel()
  - libssh2.h: bump the default window size to 256K
  - sftp-seek: clear EOF flag
  - userauth: provide more informations if ssh pub key extraction fails
  - ssh2_exec: skip error outputs for EAGAIN
  - LIBSSH2_SFTP_PACKET_MAXLEN: increase to 80000
  - knownhost_check(): don't dereference ext if NULL is passed
  - knownhost_add: avoid dereferencing uninitialized memory on error path
  - OpenSSL EVP: fix threaded use of structs
  - _libssh2_channel_read: react on errors from receive_window_adjust
  - sftp_read: cap the read ahead maximum amount
  - _libssh2_channel_read: fix non-blocking window adjusting 
- add upstream patch fixing undefined function reference in libgcrypt backend
- BR: /usr/bin/man for test suite

Sun Jan 15 2012 Peter Robinson <pbrobinson@fedoraproject.org> 1.3.0-4
```
- skip the ssh test on ARM too
```

Fri Jan 13 2012 Paul Howarth <paul@city-fan.org> 1.3.0-3

- make docs package noarch where possible
- example includes arch-specific bits, so move to devel package
- use patch rather than scripted iconv to fix character encoding
- don't make assumptions about SELinux context types used for the ssh server
  in the test suite
- skip the ssh test if /dev/tty isn't present, as in some versions of mock
- make the %files list more explicit
- use tabs for indentation

Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> 1.3.0-2
```
- rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild
```
Thu Sep 08 2011 Kamil Dudka <kdudka@redhat.com> 1.3.0-1
```
- update to 1.3.0
```
Sat Jun 25 2011 Dennis Gilmore <dennis@ausil.us> 1.2.7-2
```
- sshd/loopback test fails in the sparc buildsystem
```

Tue Oct 12 2010 Kamil Dudka <kdudka@redhat.com> 1.2.7-1

- update to 1.2.7 (#632916)
- avoid multilib conflict on libssh2-docs
- avoid build failure in mock with SELinux in the enforcing mode (#558964)

Fri Mar 12 2010 Chris Weyl <cweyl@alumni.drew.edu> 1.2.4-1

- update to 1.2.4
- drop old patch0
- be more aggressive about keeping .deps from intruding into -docs

Wed Jan 20 2010 Chris Weyl <cweyl@alumni.drew.edu> 1.2.2-5
```
- pkgconfig dep should be with -devel, not -docs
```

Mon Jan 18 2010 Chris Weyl <cweyl@alumni.drew.edu> 1.2.2-4

- enable tests; conditionalize sshd test, which fails with a funky SElinux
  error when run locally

Mon Jan 18 2010 Chris Weyl <cweyl@alumni.drew.edu> 1.2.2-3

- patch w/1aba38cd7d2658146675ce1737e5090f879f306; not yet in a GA release

Thu Jan 14 2010 Chris Weyl <cweyl@alumni.drew.edu> 1.2.2-2
```
- correct bad file entry under -devel
```

Thu Jan 14 2010 Chris Weyl <cweyl@alumni.drew.edu> 1.2.2-1

- update to 1.2.2
- drop old patch now in upstream
- add new pkgconfig file to -devel

Mon Sep 21 2009 Chris Weyl <cweyl@alumni.drew.edu> 1.2-2

- patch based on 683aa0f6b52fb1014873c961709102b5006372fc
- disable tests (*sigh*)

Tue Aug 25 2009 Chris Weyl <cweyl@alumni.drew.edu> 1.2-1
```
- update to 1.2
```
Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 1.0-4
```
- rebuilt with new openssl
```
Sat Jul 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0-3
```
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
```
Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 1.0-2
```
- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild
```
Mon Feb 16 2009 Chris Weyl <cweyl@alumni.drew.edu> 1.0-1
```
- update to 1.0
```
Sat Jan 17 2009 Tomas Mraz <tmraz@redhat.com> - 0.18-8
```
- rebuild with new openssl
```
Mon Feb 18 2008 Fedora Release Engineering <rel-eng@fedoraproject.org> - 0.18-7
```
- Autorebuild for GCC 4.3
```
Wed Dec 05 2007 Chris Weyl <cweyl@alumni.drew.edu> 0.18-6
```
- rebuild for new openssl...
```
Tue Nov 27 2007 Chris Weyl <cweyl@alumni.drew.edu> 0.18-5
```
- bump
```
Tue Nov 27 2007 Chris Weyl <cweyl@alumni.drew.edu> 0.18-4
```
- add INSTALL arg to make install vs env. var
```
Mon Nov 26 2007 Chris Weyl <cweyl@alumni.drew.edu> 0.18-3
```
- run tests; don't package test
```
Sun Nov 18 2007 Chris Weyl <cweyl@alumni.drew.edu> 0.18-2
```
- split docs into -docs (they seemed... large.)
```
Tue Nov 13 2007 Chris Weyl <cweyl@alumni.drew.edu> 0.18-1
```
- update to 0.18
```
Sun Oct 14 2007 Chris Weyl <cweyl@alumni.drew.edu> 0.17-1
```
- update to 0.17
- many spec file changes
```

Wed May 23 2007 Sindre Pedersen Bjørdal <foolish[AT]guezz.net> - 0.15-0.2.20070506

- Fix release tag
- Move manpages to -devel package
- Add Examples dir to -devel package

Sun May 06 2007 Sindre Pedersen Bjørdal <foolish[AT]guezz.net> - 0.15-0.20070506.1
```
- Initial build
```