Update libssh to 0.7.3 Includes security update: https://www.libssh.org/2016/02/23/libssh-0-7-3-security-and-bugfix-release/5ceca6f01f
libssh -- possible heap-buffer overflow vulnerabilityentered 2021-09-21
Library implementing the SSH2 protocol
# pkg install libsshinstalls 0.12.2 from latest; from quarterly (2026Q4) 0.12.2# cd /usr/ports/security/libssh && make install clean# make -C /usr/ports/security/libssh config # change options first
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 0.12.2 | 0.12.2 | – |
| FreeBSD 15 | 0.12.2 | 0.12.2 | – |
| FreeBSD 14 | 0.12.2 | 0.12.2 | 0.12.2 |
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 0.12.2 | 0.12.2 | – |
| FreeBSD 14 | 0.12.2 | 0.12.2 | 0.12.2 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
pkg audit for the packaged version 0.12.2.| PR | Summary | Status | Changed |
|---|---|---|---|
| 294286 | maintainer-feedback? security/libssh: Options are broken | New | 2026-08-25 |
Update libssh to 0.7.3 Includes security update: https://www.libssh.org/2016/02/23/libssh-0-7-3-security-and-bugfix-release/5ceca6f01f
- Update to 0.7.2 (bugfix release) [1] - Switch MASTER_SITE as the original one is down PR: 203171 [1] Submitted by: rakucoa31d59a6e8
Update to libssh 0.7.05a9682fc4f
Update to 0.6.5 to fix CVE-2015-3146 (null pointer dereference). This release also fixed the bug in 0.6.4 that prevented the GCRYPT option from working. PR: 200106 Approved by: johans MFH: 2015Q2 Security: 0b040e24-f751-11e4-b24d-5453ed2e2b49c864708b25
- Update to libssh 0.6.4 (security and bugfix release) https://www.libssh.org/2014/12/19/libssh-0-6-4-security-and-bugfix-release/ - This version does not compile with gcrypt: force use of openssl - Adopt port MFH: 2015Q2e50f2a871e
security category: Remove $PTHREAD_LIBS approved by: PTHREAD blanketc55ac89dcd
devel/libssh: Remove -pedantic-error flags and reset port This port breaks if it violates standards according to the -pedantic flag. Accord to gcc-5, it indeed does with dozens of warnings like this: /wrkdirs/security/libssh/work/libssh-0.6.3/include/libssh/priv.h:200:33: error: ISO C does not support '__FUNCTION__' predefined identifier [-Wpedantic] _ssh_set_error(error, code, __FUNCTION__, __VA_ARGS__) The maintainer has been MIA for over a year with PRs on 8 ports. I'm not waiting for this one to time out too. While here, reset MAINTAINER. PR: 197785 Submitted by: marino Approved by: maintainer reset5a1b18ba2c
security/libgcrypt: 1.6.1 -> 1.6.2, bump depends
Changes:
- src/sexp.c (do_vsexp_sscan): Return error for invalid args.
- cipher/md.c (_gcry_md_info): Fix a segv in case of calling
with wrong parameters.
- cipher/primegen.c (_gcry_generate_elg_prime): Change to return an
error code, possible NULL deref in call to prime generator.
- cipher/dsa.c (generate): Take care of new return code.
- cipher/elgamal.c (generate): Change to return an error code. Take
care of _gcry_generate_elg_prime return code.
- ecc: Support the non-standard 0x40 compression flag for EdDSA.
- mpi: Extend the internal mpi_get_buffer.
- mpi: Fix regression for powerpc-apple-darwin detection.
- Fix bug inhibiting the use of the sentinel attribute in src/gcrypt.h.in
- Fix building for the x32 target without asm modules in
mpi/generic/mpi-asm-defs.h: Use a fixed value for the x32 ABI.
- Fix ARM assembly when building __PIC__
- mpi: Fix a subtle bug setting spurious bits with in mpi_set_bit.
* mpi/mpi-bit.c (_gcry_mpi_set_bit, _gcry_mpi_set_highbit): Clear
allocated but not used bits before resizing.
* tests/t-mpi-bits.c (set_bit_with_resize): New.
- Use internal malloc function in fips.c.
* src/fips.c (check_binary_integrity): s/gcry_malloc/xtrymalloc/.
- pubkey: Re-map all deprecated RSA algo numbers.
- cipher: Fix possible NULL dereference in cipher/md.c for being NULL.
- Fix ARMv6 detection when CFLAGS modify target CPU architecture.
PR: 193264
Approved by: cpm@fbsd.es (maintainer)cba03c03e1Add USES=cpe, as requested by des and rea. MFH: 2014Q44e8c4a3dfa
Update to 0.6.3 to fix CVE-2014-0017. While here, get rid of a lot of cruft: - Use an https in MASTER_SITES and stop using a snapshot URL for the tarballs. - Switch to an out-of-source CMake build with USES=cmake:outsource, and get rid of all the messing around with CMAKE_SOURCE_PATH and *_WRKSRC. - Move the LICENSE block to the right place to pet portlint. - Explicitly set CMAKE_ARGS with some options which we were already implicitly assuming to be set. - Disable examples and tests via CMAKE_ARGS instead of using an ugly sed call. - Do not pass WITH_OPENSSL=ON/OFF to CMake, this has no effect in the build system. - Stop gratuitously including bsd.port.options.mk. - Remove sed calls and patches related to the libssh_threads. I fixed some of the problems a few releases ago upstream, and the things I've removed now just look unnecessary. PR: 187595 Approved by: fluffy (implicit, and 230 days of timeout) MFH: 2014Q4 Security: f8c88d50-5fb3-11e4-81bd-5453ed2e2b49990677bda1
Remove @dirrm and @dirrmtry entries. Approved by: fluffy (implicit)4ca4e47574
Bump PORTREVISION on more ports that depend on libgcrypt after the update in r363436 and remove the UPDATING entry because it did not guarantee that all ports were updated nor that they were updated in the right order. Also remove libgcrypt.la again. PR: 192342 Approved by: portmgr (implicit, bump unstaged ports)74a7f8c73c
Convert a bunch of USE_BZIP2 to USES=tar:bzip2 Approved by: portmgr (not really, but touches unstaged ports)bbc8c4d740
- Update to 0.6.1 maintenance release - Make static libs optional - Remove patch merged upstreama5c760c189
- Make QAT happy with extra @dirrmtryb723872aaa
- Update libssh to 0.6.0 security release - Fix threaded library [1] Submitted by: rakuco@ via libssh mailing list [1]7eb467ab11
- Install threaded library too..a862708e7c
- Support stagingb7b766243d
- Update libssh to 0.5.5 stable release4373c7f242
Add NO_STAGE all over the place in preparation for the staging support (cat: security)a65ed2e51b
- Remove MAKE_JOBS_SAFE variable Approved by: portmgr (bdrewery)d4041784dc
Chase security/libgcrypt update2898e3fa0c
- Remove A/An in COMMENT - Trim Header where applicablef87124df63
- convert USE_CMAKE to USES - while here clean up some ports from CMAKE_VERBOSE, which is intended for users Approved by: portmgr (miwi)ffd97a0193
- Convert to OptionsNG - Trim header Reviewed by: beat, bapt, kwmfb3520254a
- Adopt ports from avl@ to myself by his request Approved by: maintainer via IMcbf1ec26a6
- Update to 0.5.2cb26d6ff9b
- Chase the libgcrypt shared lib versione0755b977d
- Update to 0.4.8 - Remove BSD license, this library is distributed under LGPL21 license Feature safe: yes0bf09d8ebd
- Update to 0.4.7 - The libssh library is distributed under LGPL21 licensea9019a45d2
- Install a static version of the library [1] - Fix slow response in Remmina SSH [2] - Remove MD5 checksum from distinfo PR: ports/151653 [1] Submitted by: Ronald F.Guilmette <rfg AT tristatelogic.com> [1] Obtained from: libssh git [2]515ad9a3e6
- Update to 0.4.6fd1a846cb6
- Update to 0.4.5 - Add license information55ce2ad054
Chase security/libgcrypt shlib bump. PR: ports/148755 Submitted by: Hirohisa Yamaguchi <umq@ueo.co.jp>15c1551ea3
- Update to 0.4.48ffbc9c82c
- Update to 0.4.2 - Add option for SSH1 support9b16656e24
- Update to 0.4.1fb89bec1b6
- Update to 0.4.0 Thanks to: fluffy@86945a233c
- Update to 0.3.4 Approved by: tabthorpe, glarkin (mentors, implicit) Feature safe: yesc41f4f6ab4
- Update to 0.3.3 Approved by: tabthorpe (mentor)2ad0ba7c82
- Update to 0.3.2 PR: ports/137549 Submitted by: Sylvio Cesar <scjamorim bsd.com.br> Approved by: maintainer implicit40363873d7
- Attempt to fix build on FreeBSD 8.x Reported by: pointyhat via erwin Approved by: tabthorpe (mentor)5a1851f6ef
- Update to 0.3.1 Approved by: tabthorpe (mentor)e3725d54a6
- Update to 0.3.0 Approved by: tabthorpe (mentor)fb892d7018
Change MAINTAINER on my ports to my FreeBSD email address Approved by: tabthorpe (mentor)9463ff6e5b
Add libssh 0.2, a library implementing the SSH1 and SSH2 protocol. PR: ports/133657 Submitted by: Alexander Logvinov <ports at logvinov.com>b9bf0908c3