[meta-oe][master/fido/dizzy][PATCH] libssh2: upgrade to v1.6.0

[meta-oe][master/fido/dizzy][PATCH] libssh2: upgrade to v1.6.0

[Hugo Vasconcelos Saldanha]

Besides new features and improvements, this fixes CVE-2015-1782.

License's md5 changed because of a modified copyright.

Signed-off-by: Hugo Vasconcelos Saldanha <hugo.saldanha@aker.com.br>
---
 .../recipes-support/libssh2/{libssh2_1.4.3.bb => libssh2_1.6.0.bb}  | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)
 rename meta-oe/recipes-support/libssh2/{libssh2_1.4.3.bb => libssh2_1.6.0.bb} (60%)

diff --git a/meta-oe/recipes-support/libssh2/libssh2_1.4.3.bb b/meta-oe/recipes-support/libssh2/libssh2_1.6.0.bb
similarity index 60%
rename from meta-oe/recipes-support/libssh2/libssh2_1.4.3.bb
rename to meta-oe/recipes-support/libssh2/libssh2_1.6.0.bb
index b537663..022482c 100644
--- a/meta-oe/recipes-support/libssh2/libssh2_1.4.3.bb
+++ b/meta-oe/recipes-support/libssh2/libssh2_1.6.0.bb
@@ -5,11 +5,11 @@ SECTION = "libs"
 DEPENDS = "zlib openssl"
 
 LICENSE = "BSD"
-LIC_FILES_CHKSUM = "file://COPYING;md5=d00afe44f336a79a2ca7e1681ce14509"
+LIC_FILES_CHKSUM = "file://COPYING;md5=c5cf34fc0acb44b082ef50ef5e4354ca"
 
 SRC_URI = "http://www.libssh2.org/download/${BP}.tar.gz"
-SRC_URI[md5sum] = "071004c60c5d6f90354ad1b701013a0b"
-SRC_URI[sha256sum] = "eac6f85f9df9db2e6386906a6227eb2cd7b3245739561cad7d6dc1d5d021b96d"
+SRC_URI[md5sum] = "00aabd6e714a5f42a4fb82ace20db1dd"
+SRC_URI[sha256sum] = "5a202943a34a1d82a1c31f74094f2453c207bf9936093867f41414968c8e8215"
 
 inherit autotools pkgconfig
 
-- 
2.4.4

Re: [meta-oe][master/fido/dizzy][PATCH] libssh2: upgrade to v1.6.0

[Martin Jansa]

[-- Attachment #1: Type: text/plain, Size: 2137 bytes --]

On Tue, Jun 23, 2015 at 01:02:04PM -0300, Hugo Vasconcelos Saldanha wrote:
> Besides new features and improvements, this fixes CVE-2015-1782.

Release branches aren't getting new features, new versions unless there
is very good reason to do so.

I'll include this in master-next, but for release branches you should
just add patch for CVE-2015-1782 without the upgrade. (release
maintainers call)

> License's md5 changed because of a modified copyright.
> 
> Signed-off-by: Hugo Vasconcelos Saldanha <hugo.saldanha@aker.com.br>
> ---
>  .../recipes-support/libssh2/{libssh2_1.4.3.bb => libssh2_1.6.0.bb}  | 6 +++---
>  1 file changed, 3 insertions(+), 3 deletions(-)
>  rename meta-oe/recipes-support/libssh2/{libssh2_1.4.3.bb => libssh2_1.6.0.bb} (60%)
> 
> diff --git a/meta-oe/recipes-support/libssh2/libssh2_1.4.3.bb b/meta-oe/recipes-support/libssh2/libssh2_1.6.0.bb
> similarity index 60%
> rename from meta-oe/recipes-support/libssh2/libssh2_1.4.3.bb
> rename to meta-oe/recipes-support/libssh2/libssh2_1.6.0.bb
> index b537663..022482c 100644
> --- a/meta-oe/recipes-support/libssh2/libssh2_1.4.3.bb
> +++ b/meta-oe/recipes-support/libssh2/libssh2_1.6.0.bb
> @@ -5,11 +5,11 @@ SECTION = "libs"
>  DEPENDS = "zlib openssl"
>  
>  LICENSE = "BSD"
> -LIC_FILES_CHKSUM = "file://COPYING;md5=d00afe44f336a79a2ca7e1681ce14509"
> +LIC_FILES_CHKSUM = "file://COPYING;md5=c5cf34fc0acb44b082ef50ef5e4354ca"
>  
>  SRC_URI = "http://www.libssh2.org/download/${BP}.tar.gz"
> -SRC_URI[md5sum] = "071004c60c5d6f90354ad1b701013a0b"
> -SRC_URI[sha256sum] = "eac6f85f9df9db2e6386906a6227eb2cd7b3245739561cad7d6dc1d5d021b96d"
> +SRC_URI[md5sum] = "00aabd6e714a5f42a4fb82ace20db1dd"
> +SRC_URI[sha256sum] = "5a202943a34a1d82a1c31f74094f2453c207bf9936093867f41414968c8e8215"
>  
>  inherit autotools pkgconfig
>  
> -- 
> 2.4.4
> 
> 
> -- 
> _______________________________________________
> Openembedded-devel mailing list
> Openembedded-devel@lists.openembedded.org
> http://lists.openembedded.org/mailman/listinfo/openembedded-devel

-- 
Martin 'JaMa' Jansa     jabber: Martin.Jansa@gmail.com

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 188 bytes --]

Re: [meta-oe][master/fido/dizzy][PATCH] libssh2: upgrade to v1.6.0

[Hugo Vasconcelos Saldanha]

On Thu, Jun 25, 2015 at 11:48:27AM -0300, Martin Jansa wrote:
> On Tue, Jun 23, 2015 at 01:02:04PM -0300, Hugo Vasconcelos Saldanha wrote:
> > Besides new features and improvements, this fixes CVE-2015-1782.
> 
> Release branches aren't getting new features, new versions unless there
> is very good reason to do so.
> 
> I'll include this in master-next, but for release branches you should
> just add patch for CVE-2015-1782 without the upgrade. (release
> maintainers call)
> 

No problem. I'll send another patch for fido/dizzy with the fix applied
to debian.

-- 
		Hugo