summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGustavo Zacarias <gustavo@zacarias.com.ar>2016-02-24 09:01:43 -0300
committerPeter Korsgaard <peter@korsgaard.com>2016-02-24 17:36:23 +0100
commitbc86ea3fee44a915b8e29c9a966ebcd8ca46ec7d (patch)
tree168be245419b13797629240287178ebae72c0fdb
parent9431433f01bf239245dd1dd50669ff8d047b25ce (diff)
downloadbuildroot-bc86ea3fee44a915b8e29c9a966ebcd8ca46ec7d.tar.gz
buildroot-bc86ea3fee44a915b8e29c9a966ebcd8ca46ec7d.zip
libssh: security bump to version 0.7.3
Fixes: CVE-2016-0739 - Bits/bytes confusion resulting in truncated Difffie-Hellman secret length. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
-rw-r--r--package/libssh/libssh.hash6
-rw-r--r--package/libssh/libssh.mk4
2 files changed, 5 insertions, 5 deletions
diff --git a/package/libssh/libssh.hash b/package/libssh/libssh.hash
index 49bf6c959f..1eef804e5c 100644
--- a/package/libssh/libssh.hash
+++ b/package/libssh/libssh.hash
@@ -1,4 +1,4 @@
# from https://red.libssh.org/projects/libssh/files/
-md5 5d7d468937649a6dfc6186edfff083db libssh-0.7.2.tar.xz
-# Locally calculated after checking signature on uncompressed libssh-0.7.2.tar
-sha256 a32c45b9674141cab4bde84ded7d53e931076c6b0f10b8fd627f3584faebae62 libssh-0.7.2.tar.xz
+md5 05465da8004f3258db946346213209de libssh-0.7.3.tar.xz
+# Locally calculated after checking signature on uncompressed libssh-0.7.3.tar
+sha256 26ef46be555da21112c01e4b9f5e3abba9194485c8822ab55ba3d6496222af98 libssh-0.7.3.tar.xz
diff --git a/package/libssh/libssh.mk b/package/libssh/libssh.mk
index d425ff0b74..29bbf4e9f2 100644
--- a/package/libssh/libssh.mk
+++ b/package/libssh/libssh.mk
@@ -4,9 +4,9 @@
#
################################################################################
-LIBSSH_VERSION = 0.7.2
+LIBSSH_VERSION = 0.7.3
LIBSSH_SOURCE = libssh-$(LIBSSH_VERSION).tar.xz
-LIBSSH_SITE = https://red.libssh.org/attachments/download/177
+LIBSSH_SITE = https://red.libssh.org/attachments/download/195
LIBSSH_LICENSE = LGPLv2.1
LIBSSH_LICENSE_FILES = COPYING
LIBSSH_INSTALL_STAGING = YES
OpenPOWER on IntegriCloud