libssh2: security bump to version 1.7.0
authorGustavo Zacarias <gustavo@zacarias.com.ar>
Wed, 24 Feb 2016 12:01:44 +0000 (09:01 -0300)
committerPeter Korsgaard <peter@korsgaard.com>
Wed, 24 Feb 2016 16:36:35 +0000 (17:36 +0100)
Fixes:
CVE-2016-0787 - diffie_hellman_sha256: convert bytes to bits.

Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
package/libssh2/libssh2.hash
package/libssh2/libssh2.mk

index 3bf75620bf2799d8f7b8ab8eff51218d17c4c2cf..8f6268f3d35f04894c39d4d46300b7612fe8f572 100644 (file)
@@ -1,2 +1,2 @@
 # Locally calculated after checking pgp signature
-sha256 5a202943a34a1d82a1c31f74094f2453c207bf9936093867f41414968c8e8215        libssh2-1.6.0.tar.gz
+sha256 e4561fd43a50539a8c2ceb37841691baf03ecb7daf043766da1b112e4280d584        libssh2-1.7.0.tar.gz
index 51dcf0e722d0b92c71f8a187c19fa7d3d1593a2f..221fac473c677842fc7c120c1ddeb167ce3a0a84 100644 (file)
@@ -4,7 +4,7 @@
 #
 ################################################################################
 
-LIBSSH2_VERSION = 1.6.0
+LIBSSH2_VERSION = 1.7.0
 LIBSSH2_SITE = http://www.libssh2.org/download
 LIBSSH2_LICENSE = BSD
 LIBSSH2_LICENSE_FILES = COPYING