Message ID | 1426082991-26557-1-git-send-email-gustavo@zacarias.com.ar |
---|---|
State | Accepted |
Commit | 0df6ad5ddb5036dcc7400d79e83a803e1cac9908 |
Headers | show |
>>>>> "Gustavo" == Gustavo Zacarias <gustavo@zacarias.com.ar> writes: > Fixes CVE-2015-1782 - kex: bail out on rubbish in the incoming packet. > Also add hash file. > Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> Committed, thanks.
diff --git a/package/libssh2/libssh2.hash b/package/libssh2/libssh2.hash new file mode 100644 index 0000000..ccc6ed5 --- /dev/null +++ b/package/libssh2/libssh2.hash @@ -0,0 +1,2 @@ +# Locally calculated after checking pgp signature +sha256 83196badd6868f5b926bdac8017a6f90fb8a90b16652d3bf02df0330d573d0fc libssh2-1.5.0.tar.gz diff --git a/package/libssh2/libssh2.mk b/package/libssh2/libssh2.mk index 1a1a06f..3b4df37 100644 --- a/package/libssh2/libssh2.mk +++ b/package/libssh2/libssh2.mk @@ -4,7 +4,7 @@ # ################################################################################ -LIBSSH2_VERSION = 1.4.3 +LIBSSH2_VERSION = 1.5.0 LIBSSH2_SITE = http://www.libssh2.org/download LIBSSH2_LICENSE = BSD LIBSSH2_LICENSE_FILES = COPYING
Fixes CVE-2015-1782 - kex: bail out on rubbish in the incoming packet. Also add hash file. Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> --- package/libssh2/libssh2.hash | 2 ++ package/libssh2/libssh2.mk | 2 +- 2 files changed, 3 insertions(+), 1 deletion(-) create mode 100644 package/libssh2/libssh2.hash