GNU bug report logs - #67938
[PATCH] gnu: libssh: Update to 0.10.6 [security-fixes].

Previous Next

To add a comment to this bug, you must first unarchive it, by sending
a message to control AT debbugs.gnu.org, with unarchive 67938 in the body.
You can then email your comments to 67938 AT debbugs.gnu.org in the normal way.

Toggle the display of automated, internal messages from the tracker.

Message #5 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Jack Hill <jackhill <at> jackhill.us>
To: guix-patches <at> gnu.org
Subject: [PATCH core-updates-frozen] gnu: libssh: Update to 0.10.6
 [security-fixes].
Date: Wed, 20 Dec 2023 12:47:13 -0500

Fixes CVE-2023-6004, CVE-2023-48795, and CVE-2023-6918.

* gnu/packages/ssh.scm (libssh): Update to 0.10.6.

Change-Id: Ie9d304d78b2629f41af9836e5c7eab5df6f26bb5
---
 gnu/packages/ssh.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/ssh.scm b/gnu/packages/ssh.scm
index 47089b197d..79ec702ebf 100644
--- a/gnu/packages/ssh.scm
+++ b/gnu/packages/ssh.scm
@@ -132,7 +132,7 @@ (define-public hss
 (define-public libssh
   (package
     (name "libssh")
-    (version "0.10.5")
+    (version "0.10.6")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://www.libssh.org/files/"
@@ -140,7 +140,7 @@ (define-public libssh
                                   "/libssh-" version ".tar.xz"))
               (sha256
                (base32
-                "0d22gq77ga24ijlgr3d1wvhfvprx61iklkb3npifxfb7ygvjy3mn"))
+                "1hcxvsb4brznxqq6cjwxkk7yv4c48w4fcwxwd8dp9wdnyncd8q8q"))
               (modules '((guix build utils)))
               (snippet
                ;; 'PATH_MAX' is undefined on GNU/Hurd; work around it.

base-commit: aa22cdd363d3b2cf64586ccee918531aa53ef365
-- 
2.41.0

Message #8 received at 67938 <at> debbugs.gnu.org (full text, mbox):

From: Jack Hill <jackhill <at> jackhill.us>
To: 67938 <at> debbugs.gnu.org
Subject: [PATCH v2] gnu: libssh: Update to 0.10.6 [security-fixes].
Date: Wed, 20 Dec 2023 12:51:13 -0500

Fixes CVE-2023-6004, CVE-2023-48795, and CVE-2023-6918.

* gnu/packages/ssh.scm (libssh): Update to 0.10.6.

Change-Id: Ie9d304d78b2629f41af9836e5c7eab5df6f26bb5
---

Sending again as I put the wrong branch prefix in the fist mail.

 gnu/packages/ssh.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/ssh.scm b/gnu/packages/ssh.scm
index 47089b197d..79ec702ebf 100644
--- a/gnu/packages/ssh.scm
+++ b/gnu/packages/ssh.scm
@@ -132,7 +132,7 @@ (define-public hss
 (define-public libssh
   (package
     (name "libssh")
-    (version "0.10.5")
+    (version "0.10.6")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://www.libssh.org/files/"
@@ -140,7 +140,7 @@ (define-public libssh
                                   "/libssh-" version ".tar.xz"))
               (sha256
                (base32
-                "0d22gq77ga24ijlgr3d1wvhfvprx61iklkb3npifxfb7ygvjy3mn"))
+                "1hcxvsb4brznxqq6cjwxkk7yv4c48w4fcwxwd8dp9wdnyncd8q8q"))
               (modules '((guix build utils)))
               (snippet
                ;; 'PATH_MAX' is undefined on GNU/Hurd; work around it.

base-commit: aa22cdd363d3b2cf64586ccee918531aa53ef365
-- 
2.41.0

Message #15 received at 67938-done <at> debbugs.gnu.org (full text, mbox):

From: John Kehayias <john.kehayias <at> protonmail.com>
To: Jack Hill <jackhill <at> jackhill.us>
Cc: 67938-done <at> debbugs.gnu.org
Subject: Re: [bug#67938] [PATCH v2] gnu: libssh: Update to 0.10.6
 [security-fixes].
Date: Thu, 21 Dec 2023 19:27:27 +0000

On Wed, Dec 20, 2023 at 12:51 PM, Jack Hill wrote:

> Fixes CVE-2023-6004, CVE-2023-48795, and CVE-2023-6918.
>
> * gnu/packages/ssh.scm (libssh): Update to 0.10.6.
>
> Change-Id: Ie9d304d78b2629f41af9836e5c7eab5df6f26bb5
> ---
>
> Sending again as I put the wrong branch prefix in the fist mail.
>
>  gnu/packages/ssh.scm | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/gnu/packages/ssh.scm b/gnu/packages/ssh.scm
> index 47089b197d..79ec702ebf 100644
> --- a/gnu/packages/ssh.scm
> +++ b/gnu/packages/ssh.scm
> @@ -132,7 +132,7 @@ (define-public hss
>  (define-public libssh
>    (package
>      (name "libssh")
> -    (version "0.10.5")
> +    (version "0.10.6")
>      (source (origin
>                (method url-fetch)
>                (uri (string-append "https://www.libssh.org/files/"
> @@ -140,7 +140,7 @@ (define-public libssh
>                                    "/libssh-" version ".tar.xz"))
>                (sha256
>                 (base32
> -                "0d22gq77ga24ijlgr3d1wvhfvprx61iklkb3npifxfb7ygvjy3mn"))
> +                "1hcxvsb4brznxqq6cjwxkk7yv4c48w4fcwxwd8dp9wdnyncd8q8q"))
>                (modules '((guix build utils)))
>                (snippet
>                 ;; 'PATH_MAX' is undefined on GNU/Hurd; work around it.
>
> base-commit: aa22cdd363d3b2cf64586ccee918531aa53ef365

Thanks! Pushed as 97e517a5682af0fc031a5b7b1abf6d7c6ec2b2c9.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.