Changelog for
libssh4-0.10.6-2.1.x86_64.rpm :
* Fri Apr 12 2024 Pedro Monreal
- Don\'t change the path for crypto-policies libssh.config (bsc#1222716)
* Sat Dec 23 2023 Andreas Schneider - Fix regression parsing IPv6 addresses provided as hostname
* Added libssh-fix-ipv6-hostname-regression.patch
* Tue Dec 19 2023 Andreas Schneider - Update to version 0.10.6 https://www.libssh.org/2023/12/18/libssh-0-10-6-and-libssh-0-9-8-security-releases/- Fix CVE-2023-6004: ProxyCommand/ProxyJump features allow injection of malicious code through hostname (bsc#1218209)- Fix CVE-2023-48795: prefix truncation breaking ssh channel integrity (bsc#1218126)- Fix CVE-2023-6918: Added Missing checks for return values for digests (bsc#1218186)
* Mon Sep 25 2023 Pedro Monreal - Enable crypto-policies support: [bsc#1211301]
* Rebase libssh_client.config libssh_server.config
* Fri Aug 04 2023 malcolmlewisAATTopensuse.org- Add fix to spec file for the incorrect include path as a result of the default openSSH move to /usr/etc, (boo#1211718).
* Sat May 06 2023 Dirk Müller - update to 0.10.5:
* Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm guessing
* Fix CVE-2023-2283: a possible authorization bypass in pki_verify_data_signature under low-memory conditions.
* Fix several memory leaks in GSSAPI handling code
* Escape braces in ProxyCommand created from ProxyJump options for zsh compatibility.
* Fix pkg-config path relocation for MinGW
* Improve doxygen documentation
* Fix build with cygwin due to the glob support
* Do not enqueue outgoing packets after sending SSH2_MSG_NEWKEYS
* Add support for SSH_SUPPRESS_DEPRECATED
* Avoid functions declarations without prototype to build with clang 15
* Fix spelling issues
* Avoid expanding KnownHosts, ProxyCommands and IdentityFiles repetitively
* Add support sk-
* keys through configuration
* Improve checking for Argp library
* Log information about received extensions
* Correctly handle rekey with delayed compression
* Move the EC keys handling to OpenSSL 3.0 API
* Record peer disconnect message
* Avoid deadlock when write buffering occurs and we call poll recursively to flush the output buffer
* Disable preauthentication compression by default
* Add accidentally removed default compile flags
* Solve incorrect parsing of ProxyCommand option
* Wed Sep 07 2022 Andreas Schneider - Update to version 0.10.4
* https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.10.4
* Mon Sep 05 2022 Andreas Schneider - Update to version 0.10.3
* https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.10.3
* Fri Sep 02 2022 Andreas Schneider - Update to version 0.10.2
* https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.10.2- Removed libssh-weak-attribute.patch
* Tue Aug 30 2022 Andreas Schneider - Update to version 0.10.1
* https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.10.1- Enable client and server testing
* Added libssh-weak-attribute.patch
* Fri Aug 26 2022 Andreas Schneider - Update to version 0.10.0
* https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.10.0- Removed 0001-Soften-behaviour-of-the-Compression-no-yes-option.patch
* Wed Jan 05 2022 Fabian Vogt - Add patch to make the compression option more compatible (boo#1192731):
* 0001-Soften-behaviour-of-the-Compression-no-yes-option.patch
* Thu Aug 26 2021 Andreas Schneider - Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
* https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6
