[meta-oe][PATCH 0/1] libssh: upgrade to 0.8.4

[meta-oe][PATCH 0/1] libssh: upgrade to 0.8.4

[Paul Eggleton]

Upgrade prompted by the recently publicised security issue. (Note: I'm
not actually using this, it just didn't seem right to have a stale and
vulnerable version of this package sitting around.)


The following changes since commit cdd3e9ab99d4ffda673b564ba802b6bd2d40eabf:

  toybox: Fix paths to match OE conventions (2018-10-18 14:19:37 -0700)

are available in the Git repository at:

  git://git.openembedded.org/meta-openembedded-contrib paule/libssh
  http://cgit.openembedded.org/meta-openembedded-contrib/log/?h=paule/libssh

Paul Eggleton (1):
  libssh: upgrade to 0.8.4

 .../libssh/{libssh_0.7.3.bb => libssh_0.8.4.bb}               | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename meta-oe/recipes-support/libssh/{libssh_0.7.3.bb => libssh_0.8.4.bb} (86%)

-- 
2.17.2

[meta-oe][PATCH 1/1] libssh: upgrade to 0.8.4

[Paul Eggleton]

Notable changes since 0.7.3:
  * Fixed CVE-2018-10933 authentication bypass
  * Removed support for deprecated SSHv1 protocol
  * Added support for OpenSSL 1.1
  * Added support for chacha20-poly1305 cipher
  * Added ECDSA support with gcrypt backend
  * Improved threading support (note: libssh_threads is now gone)

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
---
 .../libssh/{libssh_0.7.3.bb => libssh_0.8.4.bb}               | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)
 rename meta-oe/recipes-support/libssh/{libssh_0.7.3.bb => libssh_0.8.4.bb} (86%)

diff --git a/meta-oe/recipes-support/libssh/libssh_0.7.3.bb b/meta-oe/recipes-support/libssh/libssh_0.8.4.bb
similarity index 86%
rename from meta-oe/recipes-support/libssh/libssh_0.7.3.bb
rename to meta-oe/recipes-support/libssh/libssh_0.8.4.bb
index 6064969ae..8566741a3 100644
--- a/meta-oe/recipes-support/libssh/libssh_0.7.3.bb
+++ b/meta-oe/recipes-support/libssh/libssh_0.8.4.bb
@@ -6,8 +6,8 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=388a4fb1dea8ceae0be78ba9b01fc139"
 
 DEPENDS = "zlib openssl libgcrypt"
 
-SRC_URI = "git://git.libssh.org/projects/libssh.git;branch=v0-7"
-SRCREV = "cdf7690e038230623cbbf6b024ece62f41efa98d"
+SRC_URI = "git://git.libssh.org/projects/libssh.git;branch=stable-0.8"
+SRCREV = "789df0b7d0c7abd6b85db9fc5247e146e3d4ddba"
 
 S = "${WORKDIR}/git"
 
-- 
2.17.2

Re: [meta-oe][PATCH 1/1] libssh: upgrade to 0.8.4

[Khem Raj]

Hi Paul

Fails to build with thumb-1

see http://errors.yoctoproject.org/Errors/Details/197582/

TOPDIR/build/tmpfs/work/armv5te-yoe-linux-gnueabi/libssh/0.8.4-r0/git/src/channels.c:2632:1:
sorry, unimplemented: -fstack-check=specific for Thumb-1

I am fine if it was using ARM ISA form armv5

On Mon, Oct 22, 2018 at 2:20 PM Paul Eggleton
<paul.eggleton@linux.intel.com> wrote:
>
> Notable changes since 0.7.3:
>   * Fixed CVE-2018-10933 authentication bypass
>   * Removed support for deprecated SSHv1 protocol
>   * Added support for OpenSSL 1.1
>   * Added support for chacha20-poly1305 cipher
>   * Added ECDSA support with gcrypt backend
>   * Improved threading support (note: libssh_threads is now gone)
>
> Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
> ---
>  .../libssh/{libssh_0.7.3.bb => libssh_0.8.4.bb}               | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
>  rename meta-oe/recipes-support/libssh/{libssh_0.7.3.bb => libssh_0.8.4.bb} (86%)
>
> diff --git a/meta-oe/recipes-support/libssh/libssh_0.7.3.bb b/meta-oe/recipes-support/libssh/libssh_0.8.4.bb
> similarity index 86%
> rename from meta-oe/recipes-support/libssh/libssh_0.7.3.bb
> rename to meta-oe/recipes-support/libssh/libssh_0.8.4.bb
> index 6064969ae..8566741a3 100644
> --- a/meta-oe/recipes-support/libssh/libssh_0.7.3.bb
> +++ b/meta-oe/recipes-support/libssh/libssh_0.8.4.bb
> @@ -6,8 +6,8 @@ LIC_FILES_CHKSUM = "file://COPYING;md5=388a4fb1dea8ceae0be78ba9b01fc139"
>
>  DEPENDS = "zlib openssl libgcrypt"
>
> -SRC_URI = "git://git.libssh.org/projects/libssh.git;branch=v0-7"
> -SRCREV = "cdf7690e038230623cbbf6b024ece62f41efa98d"
> +SRC_URI = "git://git.libssh.org/projects/libssh.git;branch=stable-0.8"
> +SRCREV = "789df0b7d0c7abd6b85db9fc5247e146e3d4ddba"
>
>  S = "${WORKDIR}/git"
>
> --
> 2.17.2
>
> --
> _______________________________________________
> Openembedded-devel mailing list
> Openembedded-devel@lists.openembedded.org
> http://lists.openembedded.org/mailman/listinfo/openembedded-devel