libssh2-1-1.8.0-lp150.3.9.1<>,F]¨㸋/=„ `@8|!H עrEzKa LnO7=̋WK(ט]i]E d6 (yg6W`&W{4`r#wcZf*,yU^Vz_$b4b9{Ґj7fv]AB}03N=*9=J1v( ."wЗmG6H cŅrGawףm> w`؝mE,Ls8iW>@(T?(Dd   G$(;DQ j      $.8`hQ(x8 9 : >%@%F%,G%@H%HI%PX%TY%`\%]%^%b%c&cd&e&f'l'u'v'w'x'y' z''''(@Clibssh2-11.8.0lp150.3.9.1A library implementing the SSH2 protocollibssh2 is a library implementing the SSH2 protocol as defined by Internet Drafts: SECSH-TRANS, SECSH-USERAUTH, SECSH-CONNECTION, SECSH-ARCH, SECSH-FILEXFER, SECSH-DHGEX, SECSH-NUMBERS, and SECSH-PUBLICKEY.]¨build85openSUSE Leap 15.0openSUSEBSD-3-Clausehttp://bugs.opensuse.orgDevelopment/Libraries/C and C++https://www.libssh2.org/linuxx86_64]¨]¨a5a218de2a0e2cb001fbef312803a430703bcd3c4061397f5b6ecc0855fc89e6libssh2.so.1.0.1rootrootrootrootlibssh2_org-1.8.0-lp150.3.9.1.src.rpmlibssh2-1libssh2-1(x86-64)libssh2.so.1()(64bit)@@@@@@@@@    /sbin/ldconfig/sbin/ldconfiglibc.so.6()(64bit)libc.so.6(GLIBC_2.14)(64bit)libc.so.6(GLIBC_2.2.5)(64bit)libc.so.6(GLIBC_2.3)(64bit)libc.so.6(GLIBC_2.3.4)(64bit)libc.so.6(GLIBC_2.4)(64bit)libcrypto.so.1.1()(64bit)libcrypto.so.1.1(OPENSSL_1_1_0)(64bit)libz.so.1()(64bit)rpmlib(CompressedFileNames)rpmlib(FileDigests)rpmlib(PayloadFilesHavePrefix)rpmlib(PayloadIsXz)3.0.4-14.6.0-14.0-15.2-14.14.1]@\\MZ]@YTYA%@VIUzU.@Q4Pedro Monreal Gonzalez Pedro Monreal Gonzalez Pedro Monreal Gonzalez dimstar@opensuse.orgjengelh@inai.detchvatal@suse.comvcizek@suse.comvcizek@suse.comvcizek@suse.commvyskocil@suse.com- Security fix: [bsc#1154862, CVE-2019-17498] * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in a bounds check that might lead to disclose sensitive information or cause a denial of service * Add patch libssh2_org-CVE-2019-17498.patch- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103] - Added libssh2_org-CVE-2019-3859-fix.patch- Security fixes: * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport read allows out-of-bounds write with specially crafted payload - libssh2_org-CVE-2019-3855.patch * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard interactive handling allows out-of-bounds write with specially crafted payload - libssh2_org-CVE-2019-3856.patch * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to zero-byte allocation and out-of-bounds with specially crafted message channel request SSH packet - libssh2_org-CVE-2019-3857.patch * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading to an out-of-bounds read with a specially crafted SFTP packet - libssh2_org-CVE-2019-3858.patch * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially crafted payloads due to unchecked use of _libssh2_packet_require and _libssh2_packet_requirev - libssh2_org-CVE-2019-3859.patch * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially crafted SFTP packets - libssh2_org-CVE-2019-3860.patch * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially crafted SSH packets - libssh2_org-CVE-2019-3861.patch * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with specially crafted message channel request SSH packet - libssh2_org-CVE-2019-3862.patch * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate keyboard interactive allows out-of-bounds writes with specially crafted keyboard responses - libssh2_org-CVE-2019-3863.patch- Drop openssh BuildRequires: this is only used for one of the minor self-tests.- Remove --with-pic which is only for static libs- Version update to 1.8.0: * support openssl-1.1 * many bugfixes - Fixes bsc#1042660 - Remove obsolete conditionals that are no longer needed- update to 1.7.0 * Fixes CVE-2016-0787 (boo#967026) * Changes: libssh2_session_set_last_error: Add function mac: Add support for HMAC-SHA-256 and HMAC-SHA-512 WinCNG: support for SHA256/512 HMAC kex: Added diffie-hellman-group-exchange-sha256 support OS/400 crypto library QC3 support * and many bugfixes- update to 1.6.0 Changes: Added CMake build system Added libssh2_userauth_publickey_frommemory() Bug fixes: wait_socket: wrong use of difftime() userauth: Fixed prompt text no longer being copied to the prompts struct mingw build: allow to pass custom CFLAGS Let mansyntax.sh work regardless of where it is called from Init HMAC_CTX before using it direct_tcpip: Fixed channel write WinCNG: fixed backend breakage OpenSSL: caused by introducing libssh2_hmac_ctx_init userauth.c: fix possible dereferences of a null pointer wincng: Added explicit clear memory feature to WinCNG backend openssl.c: fix possible segfault in case EVP_DigestInit fails wincng: fix return code of libssh2_md5_init() kex: do not ignore failure of libssh2_sha1_init() scp: fix that scp_send may transmit not initialised memory scp.c: improved command length calculation nonblocking examples: fix warning about unused tvdiff on Mac OS X configure: make clear-memory default but WARN if backend unsupported OpenSSL: Enable use of OpenSSL that doesn't have DSA OpenSSL: Use correct no-blowfish #define kex: fix libgcrypt memory leaks of bignum libssh2_channel_open: more detailed error message wincng: fixed memleak in (block) cipher destructor- update to 1.5.0 * fixes CVE-2015-1782 (bnc#921070) - tarball verification * added libssh2_org.keyring * added libssh2-1.5.0.tar.gz.asc Changes in 1.5.0: Added Windows Cryptography API: Next Generation based backend Bug fixes: Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782 missing _libssh2_error in _libssh2_channel_write knownhost: Fix DSS keys being detected as unknown. knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer. libssh2.h: on Windows, a socket is of type SOCKET, not int libssh2_priv.h: a 1 bit bit-field should be unsigned windows build: do not export externals from static library Fixed two potential use-after-frees of the payload buffer Fixed a few memory leaks in error paths userauth: Fixed an attempt to free from stack on error agent_list_identities: Fixed memory leak on OOM knownhosts: Abort if the hosts buffer is too small sftp_close_handle: ensure the handle is always closed channel_close: Close the channel even in the case of errors docs: added missing libssh2_session_handshake.3 file docs: fixed a bunch of typos userauth_password: pass on the underlying error code _libssh2_channel_forward_cancel: accessed struct after free _libssh2_packet_add: avoid using uninitialized memory _libssh2_channel_forward_cancel: avoid memory leaks on error _libssh2_channel_write: client spins on write when window full windows build: fix build errors publickey_packet_receive: avoid junk in returned pointers channel_receive_window_adjust: store windows size always userauth_hostbased_fromfile: zero assign to avoid uninitialized use configure: change LIBS not LDFLAGS when checking for libs agent_connect_unix: make sure there's a trailing zero MinGW build: Fixed redefine warnings. sftpdir.c: added authentication method detection. Watcom build: added support for WinCNG build. configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS sftp_statvfs: fix for servers not supporting statfvs extension knownhost.c: use LIBSSH2_FREE macro instead of free Fixed compilation using mingw-w64 knownhost.c: fixed that 'key_type_len' may be used uninitialized configure: Display individual crypto backends on separate lines examples on Windows: check for WSAStartup return code examples on Windows: check for socket return code agent.c: check return code of MapViewOfFile kex.c: fix possible NULL pointer de-reference with session->kex packet.c: fix possible NULL pointer de-reference within listen_state tests on Windows: check for WSAStartup return code userauth.c: improve readability and clarity of for-loops examples on Windows: use native SOCKET-type instead of int packet.c: i < 256 was always true and i would overflow to 0 kex.c: make sure mlist is not set to NULL session.c: check return value of session_nonblock in debug mode session.c: check return value of session_nonblock during startup userauth.c: make sure that sp_len is positive and avoid overflows knownhost.c: fix use of uninitialized argument variable wrote openssl: initialise the digest context before calling EVP_DigestInit() libssh2_agent_init: init ->fd to LIBSSH2_INVALID_SOCKET configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib configure.ac: Rework crypto library detection configure.ac: Reorder --with-* options in --help output configure.ac: Call zlib zlib and not libz in text but keep option names Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro sftp: seek: Don't flush buffers on same offset sftp: statvfs: Along error path, reset the correct 'state' variable. sftp: Add support for fsync (OpenSSH extension). _libssh2_channel_read: fix data drop when out of window comp_method_zlib_decomp: Improve buffer growing algorithm _libssh2_channel_read: Honour window_size_initial window_size: redid window handling for flow control reasons knownhosts: handle unknown key types- ignore groff-full to remove factory build cycle - add groff to build requires to make tests passing/sbin/ldconfig/sbin/ldconfigbuild85 15730383071.8.0-lp150.3.9.11.8.0-lp150.3.9.1libssh2.so.1libssh2.so.1.0.1/usr/lib64/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.opensuse.org/openSUSE:Maintenance:11421/openSUSE_Leap_15.0_Update/fe4c539378508a744f5691444bcf5f99-libssh2_org.openSUSE_Leap_15.0_Updatedrpmxz5x86_64-suse-linuxELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=553e32201300605081d3d3245ad1d21794d7e7f2, stripped PRRRRRR RR RlY4dutf-816ff8cacc24fa64d1270ef06f39622d11b51a2f52a4d8d8de9618a8054be01a7?7zXZ !t//^G]"k%{U}d涻eOB`nPzFsvJ|?OtIWijW\ pZFZ'ajSLa{< ܷyc)SR4%ww&ee{01n*Ds @ #BW\ B6 pu% LQ.t? ʽD^  5ptڒ5="hvMڊ3laS.փ $?n_i:qק\7RF=WKH/sxgȇRo6V8*^J¡CTъح^^$/&xߙQJ*&7ڧ")2tF}YP$1۹3f,Ws?3䄃+ʙ W2M H2J_SNi^HKUPnVsH0==l`Z]Q9`'dY4=Z]큇*[qٿ/-#ELƳ\c S2`mlqU*4}p; #G+=HaLZ~10+nʎ<}Wff=GzY^>'N j2b5؎(gg\@t, 1#GM/O~*>h4^hxT$I#y4szOC5.8|qݧ:H>y= /)X#4Q FXjy9U}^k]1,A.A6?X5ۖVWs)+c!s8k P8.ZfȄb7a<>\ UBHС0*jS4>9$67+GDĞ %\*)O$ 'reMi3}TTb] dkNšni2L3KH\ĶsT򈕺L#A5tD}wi maR~djqc!ԴQӊ&Z03%x>{ZzFK5R1 }ZG.L2б&$(7K`y߲[W !0UssJу}"%b7DWZx?)O<lLaƿw2?ˠDnNmkqTzeQ{LK T@=F85v,w6^4NBxl_-ޝ@!GISJV ֊pE;tz͈~:KA`l@.3(|mFOq(3(q 0Ղq:=Jݦ[4 pTy-z6Mm|ŗb}Ne5_7cPBXON@wC: aEm~'ů;_%Iq2gS"dOz_'R͚ v Ey1" .-'٨7'i `+qwT?ϟ ;%K;2[n2$HjQzN?a8YT~FOԍՃ) 0t /70 yBw@J㸧K|Ǖ.c|o9i;y)q \0lOض%=Ѝ2%KÓJPOߜ)e"MG$u-aXD{ܓ2Q:jI=_o<0(HB^Wƶ;WȤ߅b^x`QO{O+ģA(&F;$"|Ɇ9&pұ)N=޳jA[3Ze0q*uM)B=CRlCo w?! -:9\B@ 3' <~%P(ݱl$)%#c喖J 7WR,\^yB@SMium41Z adž$e5#v"r/4>V^s>O](瑓a?nFG!Cm((^̕n\=A`͗bXrvD73_񭽨9cPJՔ B콨q -Hrew`78R̳ Pt!|ƎW<Ҡ!VH wrXiFSE&D)\8)%܍*Wm44565C#w`rza,]4{1UuJ lGVRyALUaDb3fYӶbwm\]FDU! # +ԁ67.\w Np>Y^e@464n ;X :Ucb,(y`x/Otx\Ntge Gijߙe&i4Ji6#}p#I{xKwԳ*nRƞDQDL1s%ٻ F!u\EpEImbl.7/2V%qu/T}}yrĕŕ H6ܔ(!xN>E S9E|?זQ]g'a}_c`( FvkLHK=s3F$_=l?&8'zuS?4}o]|i`~f`qKBc'I~iUum׮z1%o"Rza:è&2!}bT!9M{&_K.JqD^~`kCxKnBA7k7w4in \>C2C9^ \G_NN'^gfiza.M"@5MR.SeNJ M]"Y'6|CW5*߱[턚%WAsWVfSG<ݲlIQ\h,%Dή#UX| tς2vPȉo"h4tis /-\*` XVQ: ~Eg!ql8- Y9#h_gżw!@[eDLf}Q7ۃ^Zg42+TPi l1Fxs?]3EgBp|Z KlOuϑ N7^C>oMbPI351D,Rp_k l܉4r<*mZ3kiez$ˎ/dm{Ǟc>)ʦgE isq7xOɳAk7{6MHIX󦫲aBũR -٠DFj+P#xc?8m.O-p. 4Sh؍C]vd=, w VC6|7т}@Y~79rI5^6 V۽ʜ`g%pMr 0%f;lcBQ<2J8ؖ畺ALboKHw ^/DpV&aPoDy ډ_X?_qQzBd5$%";r:JP4Icsَ?0&TBR[B rk}bݧ?"2>]v4K~,/})!~Nbvȳw Ỳ6tjjLt_1qzD&&|mFenqL"z_pT}@/äXuT}$-QUaa}i@ҏB=Db{߈Qp2auG>Hkطn)ؿ|<_~`{R@pՒa~|jp 4Êb:jv,2l!Ѱ]_%-2r?8Ӻ&_ꦤ\xu~7b=SWWY;Vrp1嶣ӊٻ;OٝnuؾFx%\P-jS;"O٠ C+ 8tCl3lE&T%-Bgԅ}gܵy9 sL1.gjV AW>9\(Zw|)+^9bXፚon]hl\qʹuN4ٞ' zGṇ7Y.xs |[Lrz51 ϐ!D"] wNhf:GL,JW -Ed*z=/ fկ" ,!TG(2Jm#600B|7sTR£t֓ߦnN% [Fta}B  jExsy}q;l{;9 EKLbUu@ABfZd8 ǐ8)76b>Pby `vsrR똲87{P-NOW‘@?>6WLHbTm\' ƖA/(L?SF;sYYW f%zoWUO+DTo 홋+7gζ: -<O.:CjW!f~ygCΆa(.a/^KSR758h4 ! j(+H-~kƉ@.? `39A>%%W7+<|Y4ГK3%'9.Ӓ?Vh-%t&IUEZ?DZ3.ɰdLP) 3cp';. hꋅRݴ>Tqm-~}G6y6 n^IJ+!]{)TkDv΁<!/)$',#['X战B