Changeset bc35d57 for general/genlib

Timestamp:

12/27/2023 04:06:42 AM (5 months ago)

Author:

Douglas R. Reno <renodr@…>

Branches:

12.1, ken/TL2024, lazarus, plabs/newcss, rahul/power-profiles-daemon, trunk, xry111/llvm18

Children:

b0f39cc

Parents:

41557a5

Message:

Add a security patch to libssh2 to guard it against the Terrapin attack.

File:

• general/genlib/libssh2.xml (modified) (3 diffs)

general/genlib/libssh2.xml

@@ -67 +67 @@
     </itemizedlist>
 
-<!--
+
     <bridgehead renderas="sect3">Additional Downloads</bridgehead>
     <itemizedlist spacing="compact">
@@ -73 +73 @@
         <para>
           Required patch:
-          <ulink url="&patch-root;/libssh2-&libssh2-version;-upstream_fix-1.patch"/>
+          <ulink url="&patch-root;/libssh2-&libssh2-version;-security_fixes-1.patch"/>
         </para>
       </listitem>
     </itemizedlist>
--->
 
     <bridgehead renderas="sect3">libssh2 Dependencies</bridgehead>
@@ -94 +93 @@
   <sect2 role="installation">
     <title>Installation of libssh2</title>
+
+    <para>
+      <!-- the Terrapin attack -->
+      First, fix a critical security vulnerability in libssh2:
+    </para>
+
+<screen><userinput remap="pre">patch -Np1 -i ../libssh2-&libssh2-version;-security_fixes-1.patch</userinput></screen>
 
     <para>