Your message dated Wed, 18 Nov 2020 10:05:08 +0000
with message-id <[email protected]>
and subject line Bug#964134: fixed in libssh 0.9.5-1
has caused the Debian Bug report #964134,
regarding Building with nacl is not useful
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
964134: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=964134
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: libssh
Version: 0.9.4-1
Currently libssh is built with nacl in Debian but that's not useful. I
came to the issue from the angle than Ubuntu has nacl in universe and
that's our only delta, our MIR team recommended trying building with
libsodium which is so I reported a bug upstream about that [1] and got
that reply
> I do not think nacl is used for anything at this moment when libssh is
built against current openssl, which already supports X25519 curve for
all we need. At least in Fedora, nacl is not listed as dependency of
libssh at all.
>
> When nacl is not found (and old openssl or lobgcrypt/mbedtls is used),
the local implementation (copied from nacl?) is used for x25519
implementation to have matching support.
Since Debian builds with openssl it sounds like the nacl Build-Depends
is not needed, I'm adding a debdiff to remove it, thanks for considering.
Chezers,
[1] https://bugs.libssh.org/T235
--- End Message ---
--- Begin Message ---
Source: libssh
Source-Version: 0.9.5-1
Done: Laurent Bigonville <[email protected]>
We believe that the bug you reported is fixed in the latest version of
libssh, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Laurent Bigonville <[email protected]> (supplier of updated libssh package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 18 Nov 2020 10:01:23 +0100
Source: libssh
Architecture: source
Version: 0.9.5-1
Distribution: unstable
Urgency: medium
Maintainer: Laurent Bigonville <[email protected]>
Changed-By: Laurent Bigonville <[email protected]>
Closes: 964134 966560
Changes:
libssh (0.9.5-1) unstable; urgency=medium
.
[ Laurent Bigonville ]
* New upstream version 0.9.5
- Fix a NULL pointer dereference in tftpserver.c if ssh_buffer_new returns
NULL. (Closes: #966560 CVE-2020-16135)
* Drop d/p/1004-hurd-ftbfs.patch, applied upstream
* Drop d/p/1005-reproducible-doc.patch, applied upstream
* debian/control: Add openssh-server to the BD
.
[ Sebastien Bacher ]
* debian/control: don't build with nacl, it's not needed when building
openssl, see https://bugs.libssh.org/T235 (Closes: #964134)
Checksums-Sha1:
f9a63611e1c446c7afdde1443fdb926c4e4de888 2364 libssh_0.9.5-1.dsc
cac8772e6bea068e4defea067d4290991d566964 502876 libssh_0.9.5.orig.tar.xz
6d7ec8cce3e6d4fc6a4cb399ea4cd2580e6b0640 833 libssh_0.9.5.orig.tar.xz.asc
d74203df8d8470bc80e5aecca2d28540fdabc4c1 27056 libssh_0.9.5-1.debian.tar.xz
aeaf04a4895b1f3971ddfb6931ae192b8509291a 6873 libssh_0.9.5-1_source.buildinfo
Checksums-Sha256:
325cc551e407bc0cc55c884a4116b5c2e819ed865647f482dbb246fa0d8fe992 2364
libssh_0.9.5-1.dsc
acffef2da98e761fc1fd9c4fddde0f3af60ab44c4f5af05cd1b2d60a3fa08718 502876
libssh_0.9.5.orig.tar.xz
e8b6141b7370ea08f83b5d78233e4ab0789a7dab8a11561accf36fb18544fae7 833
libssh_0.9.5.orig.tar.xz.asc
18edae0b55baa68c126bdb82958c86160e5f8d29361f154dc53637377792d404 27056
libssh_0.9.5-1.debian.tar.xz
ebbe15fe910e75e3cda6880ffd42784244702b8636c27127f3cceba5e7493128 6873
libssh_0.9.5-1_source.buildinfo
Files:
b1f4797387d4806107c13a8009c703d0 2364 libs optional libssh_0.9.5-1.dsc
6211e47ba4dfd7f7e9f8a17a601245f4 502876 libs optional libssh_0.9.5.orig.tar.xz
49564e894ab537b4fdd323dc945ff473 833 libs optional libssh_0.9.5.orig.tar.xz.asc
6752de4a4014d3bf7849998ff98553d1 27056 libs optional
libssh_0.9.5-1.debian.tar.xz
a50087afb48630ed8a3fbd4974cf98e7 6873 libs optional
libssh_0.9.5-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQFFBAEBCAAvFiEEmRrdqQAhuF2x31DwH8WJHrqwQ9UFAl+06rARHGJpZ29uQGRl
Ymlhbi5vcmcACgkQH8WJHrqwQ9X6TggAhZ8vhkAoc6DN/4sGz+CZb+Mf9XdHvL6a
gTs+VirRIDSPPQAp1mzriew5OPR+ErWipsyHqXVEBAuw8Cw4TwNloV0m8+BRjake
GCRt80n0lZ/Kglex+ERnYe4h6Nb+oV8lRa608hWRHK1rNSxo/C5LrPhZTVBJBBip
+jY+YNN8Jh/fr/SPH1LTA+rgc/AEEFCwYhCX0oPNwBFPUeZc0b1ujquAtMswgU8h
bxnX6jQPN0Bdyr3u29WSRmKsh2v4g6ghCcYaxW9zmnyXS8bY1OnOZd8gNV5ph59O
t0Dyo73qzbiyVPh28nfhmwSQOFk0/PoyHFkl13VwkZ+wTYkTBKgJrQ==
=x5bV
-----END PGP SIGNATURE-----
--- End Message ---
