CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

security/libssh 0.12.2

Library implementing the SSH2 protocol

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 0.12.2
Upstream
up to date
Last update
to 0.12.2 · c638f88329
Quarterly
2026Q4: 0.12.2
WWW
https://www.libssh.org/
Links
cgit · VuXML

Install

Package
# pkg install libssh
installs 0.12.2 from latest; from quarterly (2026Q4) 0.12.2
Port
# cd /usr/ports/security/libssh && make install clean
# make -C /usr/ports/security/libssh config  # change options first
Size
416 KiB download · 2.1 MiB installed
Depends on
nothing
License
LGPL21
Options
3 of 6 on in the package: GSSAPI_BASE OPENSSL STATIC
Show the 3 options that are off
GSSAPI_HEIMDAL GSSAPI_MIT GSSAPI_NONE

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 160.12.20.12.2–
FreeBSD 150.12.20.12.2–
FreeBSD 140.12.20.12.20.12.2

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 150.12.20.12.2–
FreeBSD 140.12.20.12.20.12.2

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 0.12.2.

Fixed (7)

Show 7 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
294286maintainer-feedback? security/libssh: Options are brokenNew2026-08-25

Commits (96)

Johan van Selst (johans) · 0.7.3
Update libssh to 0.7.3 Includes security update: https://www.libssh.org/2016/02/23/libssh-0-7-3-security-and-bugfix-release/
5ceca6f01f
Johan van Selst (johans) · 0.7.2
- Update to 0.7.2 (bugfix release) [1] - Switch MASTER_SITE as the original one is down

PR:		203171 [1]
Submitted by:	rakuco
a31d59a6e8
Johan van Selst (johans) · 0.7.0
Update to libssh 0.7.0
5a9682fc4f
Raphael Kubo da Costa (rakuco) · 0.6.5
Update to 0.6.5 to fix CVE-2015-3146 (null pointer dereference).

This release also fixed the bug in 0.6.4 that prevented the GCRYPT option
from working.

PR:		200106
Approved by:	johans
MFH:		2015Q2
Security:	0b040e24-f751-11e4-b24d-5453ed2e2b49
c864708b25
Johan van Selst (johans) · 0.6.4
- Update to libssh 0.6.4 (security and bugfix release)   https://www.libssh.org/2014/12/19/libssh-0-6-4-security-and-bugfix-release/ - This version does not compile with gcrypt: force use of openssl - Adopt port

MFH:		2015Q2
e50f2a871e
John Marino (marino) · 0.6.3_1
security category: Remove $PTHREAD_LIBS

approved by:	PTHREAD blanket
c55ac89dcd
John Marino (marino) · 0.6.3_1
devel/libssh: Remove -pedantic-error flags and reset port

This port breaks if it violates standards according to the -pedantic flag.
Accord to gcc-5, it indeed does with dozens of warnings like this:

/wrkdirs/security/libssh/work/libssh-0.6.3/include/libssh/priv.h:200:33:
  error: ISO C does not support '__FUNCTION__' predefined identifier
  [-Wpedantic] _ssh_set_error(error, code, __FUNCTION__, __VA_ARGS__)

The maintainer has been MIA for over a year with PRs on 8 ports.  I'm not
waiting for this one to time out too.  While here, reset MAINTAINER.

PR:		197785
Submitted by:	marino
Approved by:	maintainer reset
5a1b18ba2c
Kurt Jaeger (pi) · 0.6.3_1
security/libgcrypt: 1.6.1 -> 1.6.2, bump depends

Changes:
- src/sexp.c (do_vsexp_sscan): Return error for invalid args.
- cipher/md.c (_gcry_md_info): Fix a segv in case of calling
  with wrong parameters.
- cipher/primegen.c (_gcry_generate_elg_prime): Change to return an
  error code, possible NULL deref in call to prime generator.
- cipher/dsa.c (generate): Take care of new return code.
- cipher/elgamal.c (generate): Change to return an error code.  Take
	care of _gcry_generate_elg_prime return code.
- ecc: Support the non-standard 0x40 compression flag for EdDSA.
- mpi: Extend the internal mpi_get_buffer.
- mpi: Fix regression for powerpc-apple-darwin detection.
- Fix bug inhibiting the use of the sentinel attribute in src/gcrypt.h.in
- Fix building for the x32 target without asm modules in
  mpi/generic/mpi-asm-defs.h: Use a fixed value for the x32 ABI.
- Fix ARM assembly when building __PIC__
- mpi: Fix a subtle bug setting spurious bits with in mpi_set_bit.
  * mpi/mpi-bit.c (_gcry_mpi_set_bit, _gcry_mpi_set_highbit): Clear
    allocated but not used bits before resizing.
  * tests/t-mpi-bits.c (set_bit_with_resize): New.
- Use internal malloc function in fips.c.
  * src/fips.c (check_binary_integrity): s/gcry_malloc/xtrymalloc/.
- pubkey: Re-map all deprecated RSA algo numbers.
- cipher: Fix possible NULL dereference in cipher/md.c for being NULL.
- Fix ARMv6 detection when CFLAGS modify target CPU architecture.

PR:		193264
Approved by:	cpm@fbsd.es (maintainer)
cba03c03e1
Raphael Kubo da Costa (rakuco) · 0.6.3
Add USES=cpe, as requested by des and rea.

MFH:		2014Q4
4e8c4a3dfa
Raphael Kubo da Costa (rakuco) · 0.6.3
Update to 0.6.3 to fix CVE-2014-0017.

While here, get rid of a lot of cruft:
- Use an https in MASTER_SITES and stop using a snapshot URL for the
  tarballs.
- Switch to an out-of-source CMake build with USES=cmake:outsource, and get
  rid of all the messing around with CMAKE_SOURCE_PATH and *_WRKSRC.
- Move the LICENSE block to the right place to pet portlint.
- Explicitly set CMAKE_ARGS with some options which we were already
  implicitly assuming to be set.
- Disable examples and tests via CMAKE_ARGS instead of using an ugly sed
  call.
- Do not pass WITH_OPENSSL=ON/OFF to CMake, this has no effect in the build
  system.
- Stop gratuitously including bsd.port.options.mk.
- Remove sed calls and patches related to the libssh_threads. I fixed some
  of the problems a few releases ago upstream, and the things I've removed
  now just look unnecessary.

PR:		187595
Approved by:	fluffy (implicit, and 230 days of timeout)
MFH:		2014Q4
Security:	f8c88d50-5fb3-11e4-81bd-5453ed2e2b49
990677bda1
Raphael Kubo da Costa (rakuco) · 0.6.1_1
Remove @dirrm and @dirrmtry entries.

Approved by:	fluffy (implicit)
4ca4e47574
Tijl Coosemans (tijl) · 0.6.1_1
Bump PORTREVISION on more ports that depend on libgcrypt after the update in r363436 and remove the UPDATING entry because it did not guarantee that all ports were updated nor that they were updated in the right order. Also remove libgcrypt.la again.

PR:		192342
Approved by:	portmgr (implicit, bump unstaged ports)
74a7f8c73c
Adam Weinberger (adamw) · 0.6.1
Convert a bunch of USE_BZIP2 to USES=tar:bzip2

Approved by:	portmgr (not really, but touches unstaged ports)
bbc8c4d740
Dima Panov (fluffy) · 0.6.1
- Update to 0.6.1 maintenance release - Make static libs optional - Remove patch merged upstream
a5c760c189
Dima Panov (fluffy) · 0.6.0
- Make QAT happy with extra @dirrmtry
b723872aaa
Dima Panov (fluffy) · 0.6.0
- Update libssh to 0.6.0 security release - Fix threaded library [1]

Submitted by:	rakuco@ via libssh mailing list [1]
7eb467ab11
Dima Panov (fluffy) · 0.5.5_1
- Install threaded library too..
a862708e7c
Dima Panov (fluffy) · 0.5.5
- Support staging
b7b766243d
Dima Panov (fluffy) · 0.5.5
- Update libssh to 0.5.5 stable release
4373c7f242
Baptiste Daroussin (bapt) · 0.5.2_1
Add NO_STAGE all over the place in preparation for the staging support (cat: security)
a65ed2e51b
Alex Kozlov (ak) · 0.5.2_1
- Remove MAKE_JOBS_SAFE variable

Approved by:	portmgr (bdrewery)
d4041784dc
Emanuel Haupt (ehaupt) · 0.5.2_1
Chase security/libgcrypt update
2898e3fa0c
Carlo Strub (cs) · 0.5.2
- Remove A/An in COMMENT - Trim Header where applicable
f87124df63
Max Brazhnikov (makc) · 0.5.2
- convert USE_CMAKE to USES - while here clean up some ports from CMAKE_VERBOSE, which is intended   for users

Approved by:	portmgr (miwi)
ffd97a0193
Martin Wilke (miwi) · 0.5.2
- Convert to OptionsNG - Trim header

Reviewed by:	beat, bapt, kwm
fb3520254a
Dima Panov (fluffy) · 0.5.2
- Adopt ports from avl@ to myself by his request

Approved by:	maintainer via IM
cbf1ec26a6
Alexander Logvinov (avl) · 0.5.2
- Update to 0.5.2
cb26d6ff9b
Steve Wills (swills) · 0.4.8_1
- Chase the libgcrypt shared lib version
e0755b977d
Alexander Logvinov (avl) · 0.4.8
- Update to 0.4.8 - Remove BSD license, this library is distributed under LGPL21 license

Feature safe:	yes
0bf09d8ebd
Alexander Logvinov (avl) · 0.4.7
- Update to 0.4.7 - The libssh library is distributed under LGPL21 license
a9019a45d2
Alexander Logvinov (avl) · 0.4.6_1
- Install a static version of the library [1] - Fix slow response in Remmina SSH [2] - Remove MD5 checksum from distinfo

PR:		ports/151653 [1]
Submitted by:	Ronald F.Guilmette <rfg AT tristatelogic.com> [1]
Obtained from:	libssh git [2]
515ad9a3e6
Alexander Logvinov (avl) · 0.4.6
- Update to 0.4.6
fd1a846cb6
Alexander Logvinov (avl) · 0.4.5
- Update to 0.4.5 - Add license information
55ce2ad054
Wesley Shields (wxs) · 0.4.4_1
Chase security/libgcrypt shlib bump.

PR:		ports/148755
Submitted by:	Hirohisa Yamaguchi <umq@ueo.co.jp>
15c1551ea3
Alexander Logvinov (avl) · 0.4.4
- Update to 0.4.4
8ffbc9c82c
Alexander Logvinov (avl) · 0.4.2
- Update to 0.4.2 - Add option for SSH1 support
9b16656e24
Alexander Logvinov (avl) · 0.4.1
- Update to 0.4.1
fb89bec1b6
Alexander Logvinov (avl) · 0.4.0
- Update to 0.4.0

Thanks to:	fluffy@
86945a233c
Alexander Logvinov (avl) · 0.3.4
- Update to 0.3.4

Approved by:	tabthorpe, glarkin (mentors, implicit)
Feature safe:	yes
c41f4f6ab4
Alexander Logvinov (avl) · 0.3.3
- Update to 0.3.3

Approved by:	tabthorpe (mentor)
2ad0ba7c82
Thomas Abthorpe (tabthorpe) · 0.3.2
- Update to 0.3.2

PR:		ports/137549
Submitted by:	Sylvio Cesar <scjamorim bsd.com.br>
Approved by:	maintainer implicit
40363873d7
Alexander Logvinov (avl) · 0.3.1
- Attempt to fix build on FreeBSD 8.x

Reported by:	pointyhat via erwin
Approved by:	tabthorpe (mentor)
5a1851f6ef
Alexander Logvinov (avl) · 0.3.1
- Update to 0.3.1

Approved by:	tabthorpe (mentor)
e3725d54a6
Alexander Logvinov (avl) · 0.3.0
- Update to 0.3.0

Approved by:	tabthorpe (mentor)
fb892d7018
Alexander Logvinov (avl) · 0.2
Change MAINTAINER on my ports to my FreeBSD email address

Approved by:	tabthorpe (mentor)
9463ff6e5b
Li-Wen Hsu (lwhsu) · 0.2
Add libssh 0.2, a library implementing the SSH1 and SSH2 protocol.

PR:		ports/133657
Submitted by:	Alexander Logvinov <ports at logvinov.com>
b9bf0908c3