Debian Patches

Status for libssh2/1.11.0-7

Patch Description Author Forwarded Bugs Origin Last update
ssh2-sh.patch Fix ssh2 test Nicolas Mora <babelouest@debian.org> not-needed
manpage.patch Fix typo Nicolas Mora <babelouest@debian.org> not-needed
0001-Add-lgpg-error-to-.pc-to-facilitate-static-linking.patch [PATCH] Add -lgpg-error to .pc to facilitate static linking
Note that this patch is Debian-specific as we know that libssh2 is linked
to gcrypt.

Patching configure.ac to add gpg-error as a dependent library is not good, as it
would cause overlinking of libssh2, and there is no separate variable for
"static dependencies".

All this mess ought to be solved in gcrypt inself by providing .pc file,
but it is not.
Mikhail Gusarov <dottedmag@dottedmag.net> not-needed 2014-09-03
0001-Do-not-expose-private-libraries-nor-link-flags-to-us.patch [PATCH] Do not expose private libraries nor link flags to users of libssh2

Reported in https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=747417
Mikhail Gusarov <dottedmag@dottedmag.net> not-needed 2014-05-19
PR-1241.patch Backport PR 1241 Nicolas Mora <babelouest@debian.org> yes
CVE-2023-48795.patch [PATCH 1/6] src: fix CVE-2023-48795 Michael Buckley <michael@buckleyisms.com> yes 2023-11-30
maxpathlen.patch [PATCH 01/15] Update srcdir_path to avoid using MAXPATHLEN, which is not present in some systems. Backport from upstream PR #1415,
based on Mattias Ellert's patch in #1068076
Viktor Szakats yes 2024-06-26
openssh-9.8.patch [PATCH] disable DSA by default
Also:
- add `LIBSSH2_DSA_ENABLE` to enable it explicitly.
- test the above option in CI.
- say 'deprecated' in docs and public header.
- disable DSA in the CI server config.
(OpenSSH 9.8 no longer builds with it by default)
https://www.openssh.com/txt/release-9.8
Patch-by: Jose Quaresma
- disable more DSA code when not enabled.

Fixes #1433
Closes #1435
Viktor Szakats <commit@vsz.me> yes 2024-07-30

All known versions for source package 'libssh2'

Links