pkgsrc/security/libssh/DESCR

libssh is a multiplatform C library implementing the SSHv2 and SSHv1 protocol
on client and server side. With libssh, you can remotely execute programs,
transfer files, use a secure and transparent tunnel for
your remote applications.
fix typo 2013-02-01 22:50:45 +01:00			`libssh is a multiplatform C library implementing the SSHv2 and SSHv1 protocol`
Update libssh to (upstream) 0.5.4 == (our) 0.54. (We need to keep the old numbering syntax to make versions compare correctly.) There are only two consumers in pkgsrc; one of them (remmina and remmina-plugins) actually needed library version 0.4 or later, and didn't build the ssh/sftp/nx plugins without. Hydra is also supposed to build with 0.4.x and later.) Upstream changelogs: 0.5.4: CVE-2013-0176 - NULL dereference leads to denial of service Fixed several NULL pointer dereferences in SSHv1. Fixed a free crash bug in options parsing. and for completeness 0.5.3: This is an important SECURITY and maintenance release in order to address CVE-2012-4559, CVE-2012-4560, CVE-2012-4561 and CVE-2012-4562. CVE-2012-4559 - Fix multiple double free() flaws CVE-2012-4560 - Fix multiple buffer overflow flaws CVE-2012-4561 - Fix multiple invalid free() flaws CVE-2012-4562 - Fix multiple improper overflow checks (...) 2013-02-01 14:33:48 +01:00			`on client and server side. With libssh, you can remotely execute programs,`
			`transfer files, use a secure and transparent tunnel for`
			`your remote applications.`