mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-06 07:34:01 -09:00
93e7a673e8
https://gitlab.com/libssh/libssh-mirror/-/tags/libssh-0.12.1 https://www.libssh.org/2026/07/21/libssh-0-12-1-and-0-11-5-security-releases/ Fixes the following security problems: CVE-2026-15370: Stack buffer overflow in SFTP server longname construction CVE-2026-59842: Information disclosure via short GSSAPI Curve25519 public key CVE-2026-59843: Denial of service via zero advertised channel packet size CVE-2026-59844: Denial of service via oversized SFTP read length CVE-2026-59845: Denial of service via unchecked ProxyCommand fork() failure CVE-2026-59846: Information disclosure via ProxyCommand %r username expansion CVE-2026-59847: Integrity downgrade via OpenSSL AES-GCM tag verification CVE-2026-59848: Denial of service via SFTP responses with unknown request IDs CVE-2026-59849: Denial of service via automatic certificate authentication loop CVE-2026-59850: Use-after-free via data callbacks on closed channels CVE-2026-59851: Authentication bypass via missing GSSAPI principal check Zero-initialize every ssh_string Signed-off-by: Bernd Kuhls <bernd@kuhls.net> Signed-off-by: Julien Olivain <ju.o@free.fr>
48 lines
1.3 KiB
Makefile
48 lines
1.3 KiB
Makefile
################################################################################
|
|
#
|
|
# libssh
|
|
#
|
|
################################################################################
|
|
|
|
LIBSSH_VERSION_MAJOR = 0.12
|
|
LIBSSH_VERSION = $(LIBSSH_VERSION_MAJOR).1
|
|
LIBSSH_SOURCE = libssh-$(LIBSSH_VERSION).tar.xz
|
|
LIBSSH_SITE = https://www.libssh.org/files/$(LIBSSH_VERSION_MAJOR)
|
|
LIBSSH_LICENSE = LGPL-2.1
|
|
LIBSSH_LICENSE_FILES = COPYING
|
|
LIBSSH_CPE_ID_VENDOR = libssh
|
|
LIBSSH_INSTALL_STAGING = YES
|
|
LIBSSH_SUPPORTS_IN_SOURCE_BUILD = NO
|
|
LIBSSH_CONF_OPTS = \
|
|
-DWITH_STACK_PROTECTOR=OFF \
|
|
-DWITH_EXAMPLES=OFF
|
|
|
|
ifeq ($(BR2_ARM_INSTRUCTIONS_THUMB),y)
|
|
LIBSSH_CONF_OPTS += -DWITH_STACK_CLASH_PROTECTION=OFF
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBSSH_SERVER),y)
|
|
LIBSSH_CONF_OPTS += -DWITH_SERVER=ON
|
|
else
|
|
LIBSSH_CONF_OPTS += -DWITH_SERVER=OFF
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_ZLIB),y)
|
|
LIBSSH_CONF_OPTS += -DWITH_ZLIB=ON
|
|
LIBSSH_DEPENDENCIES += zlib
|
|
else
|
|
LIBSSH_CONF_OPTS += -DWITH_ZLIB=OFF
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBSSH_MBEDTLS),y)
|
|
LIBSSH_CONF_OPTS += -DWITH_MBEDTLS=ON
|
|
LIBSSH_DEPENDENCIES += mbedtls
|
|
else ifeq ($(BR2_PACKAGE_LIBSSH_LIBGCRYPT),y)
|
|
LIBSSH_CONF_OPTS += -DWITH_GCRYPT=ON
|
|
LIBSSH_DEPENDENCIES += libgcrypt
|
|
else ifeq ($(BR2_PACKAGE_LIBSSH_OPENSSL),y)
|
|
LIBSSH_DEPENDENCIES += openssl
|
|
endif
|
|
|
|
$(eval $(cmake-package))
|