%define _hardened_build 1

Name:           libssh

Version:        0.7.1

Release:        7%{?dist}

Summary:        A library implementing the SSH protocol

License:        LGPLv2+

URL:            http://www.libssh.org

Group:          System Environment/Libraries

BuildRoot:      %{_tmppath}/%{name}-%{version}-%{release}-root-%(%{__id_u} -n)

Source0:        https://red.libssh.org/attachments/download/154/libssh-0.7.1.tar.xz

Patch1:         libssh-CVE-2016-0739.patch

Patch2:         libssh-0.7.1-fix_agent_bigendian.patch

Patch3:         libssh-CVE-2018-10933.patch

Patch4:         libssh-SHA256.patch

Patch5:         libssh-fix-kbdint.patch

BuildRequires:  cmake

BuildRequires:  doxygen

BuildRequires:  openssl-devel

BuildRequires:  pkgconfig

BuildRequires:  zlib-devel

%description

The ssh library was designed to be used by programmers needing a working SSH

implementation by the mean of a library. The complete control of the client is

made by the programmer. With libssh, you can remotely execute programs, transfer

files, use a secure and transparent tunnel for your remote programs. With its

Secure FTP implementation, you can play with remote files easily, without

third-party programs others than libcrypto (from openssl).

%package devel

Summary:        Development files for %{name}

Group:          Development/Libraries

Requires:       %{name}%{?_isa} = %{version}-%{release}

Requires:       pkgconfig

Requires:       cmake

%description devel

The %{name}-devel package contains libraries and header files for developing

applications that use %{name}.

%prep

%setup -q

%patch1 -p1

%patch2 -p1 -b .libssh-0.7.2-fix_agent_bigendian.patch

%patch3 -p1 -b .libssh-CVE-2018-10933.patch

%patch4 -p1 -b .libssh-SHA256.patch

%patch5 -p1 -b .libssh-fix-kbdint.patch

# Remove examples, they are not packaged and do not build on EPEL 5

sed -i -e 's|add_subdirectory(examples)||g' CMakeLists.txt

rm -rf examples

sed -i -e 's| -pedantic-errors||g' cmake/Modules/DefineCompilerFlags.cmake

%build

if test ! -e "obj"; then

  mkdir obj

fi

pushd obj

%cmake \

    %{_builddir}/%{name}-%{version}

make %{?_smp_mflags} VERBOSE=1 CFLAGS="-no-pedantic-errors"

make doc

popd

%install

pushd obj

make DESTDIR=%{buildroot} install

popd

%post -p /sbin/ldconfig

%postun -p /sbin/ldconfig

%clean

rm -rf %{buildroot}

%files

%doc AUTHORS BSD ChangeLog COPYING README

%{_libdir}/libssh.so.*

%{_libdir}/libssh_threads.so.*

%files devel

%doc obj/doc/html

%{_includedir}/libssh/callbacks.h

%{_includedir}/libssh/legacy.h

%{_includedir}/libssh/libssh.h

%{_includedir}/libssh/libsshpp.hpp

%{_includedir}/libssh/server.h

%{_includedir}/libssh/sftp.h

%{_includedir}/libssh/ssh2.h

%dir  %{_libdir}/cmake/libssh

%{_libdir}/cmake/libssh/libssh-config-version.cmake

%{_libdir}/cmake/libssh/libssh-config.cmake

%{_libdir}/pkgconfig/libssh.pc

%{_libdir}/pkgconfig/libssh_threads.pc

%{_libdir}/libssh.so

%{_libdir}/libssh_threads.so

%changelog

* Sun Oct 28 2018 Martin Pitt <mpitt@redhat.com> - 0.7.1-7

- resolves: #1637182 - Add SHA256 fingerprint support

- Fix regression with keyboard interactive authentication introduced in

  previous update

* Tue Oct 09 2018 Andreas Schneider <asn@redhat.com> - 0.7.1-6

- resolves: #1637257 - Fix CVE-2018-10933

* Thu May 03 2018 - Lokesh Mandvekar <lsm5@redhat.com> - 0.7.1-5

- correct bogus date annoyance

* Thu May 03 2018 - Lokesh Mandvekar <lsm5@redhat.com> - 0.7.1-4

- Resolves: #1574670 - bump release tag to have build shipped to

client/workstation repos

* Wed Mar 22 2017 - Dominik Perpeet <dperpeet@redhat.com> - 0.7.1-3

- Fix agent auth on big endian machines

* Mon Feb 22 2016 - Stef Walter <stefw@redhat.com> - 0.7.1-2

- Security fix for CVE-2016-0739 rhbz#1305971

* Mon Jul 06 2015 - Stef Walter <stefw@redhat.com> - 0.7.1-1

- Updated to 0.7.1 release rhbz#1239085

* Wed Apr 22 2015 - Stef Walter <stefw@redhat.com> - 0.6.4-4

- Updated patch for CVE-2015-3146

* Wed Apr 22 2015 - Stef Walter <stefw@redhat.com> - 0.6.4-3

- Enable _hardened_build

* Tue Apr 21 2015 - Stef Walter <stefw@redhat.com> - 0.6.4-2

- Security fix for CVE-2015-3145.

* Wed Apr 01 2015 - Stef Walter <stefw@redhat.com> - 0.6.4-1

- Security fix for CVE-2014-8132.

* Tue Mar 04 2014 - Andreas Schneider <asn@redhat.com> - 0.6.3-1

- Fix CVE-2014-0017.

* Mon Feb 10 2014 - Andreas Schneider <asn@redhat.com> - 0.6.1-1

- Update to version 0.6.1.

- resolves: #1056757 - Fix scp mode.

- resolves: #1053305 - Fix known_hosts heuristic.

* Wed Jan 08 2014 - Andreas Schneider <asn@redhat.com> - 0.6.0-1

- Update to 0.6.0

* Fri Jul 26 2013 - Andreas Schneider <asn@redhat.com> - 0.5.5-1

- Update to 0.5.5.

- Clenup the spec file.

* Thu Jul 18 2013 Simone Caronni <negativo17@gmail.com> - 0.5.4-5

- Add EPEL 5 support.

- Add Debian patches to enable Doxygen documentation.

* Tue Jul 16 2013 Simone Caronni <negativo17@gmail.com> - 0.5.4-4

- Add patch for #982685.

* Mon Jun 10 2013 Simone Caronni <negativo17@gmail.com> - 0.5.4-3

- Clean up SPEC file and fix rpmlint complaints.

* Thu Feb 14 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.5.4-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

* Wed Jan 23 2013 Petr Lautrbach <plautrba@redhat.com> 0.5.4-1

- update to security 0.5.4 release

- CVE-2013-0176 (#894407)

* Tue Nov 20 2012 Petr Lautrbach <plautrba@redhat.com> 0.5.3-1

- update to security 0.5.3 release (#878465)

* Thu Jul 19 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.5.2-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

* Thu Feb 02 2012 Petr Lautrbach <plautrba@redhat.com> 0.5.2-1

- update to 0.5.2 version (#730270)

* Fri Jan 13 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.5.0-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

* Wed Jun  1 2011 Jan F. Chadima <jchadima@redhat.com> - 0.5.0-1

- bounce versionn to 0.5.0 (#709785)

- the support for protocol v1 is disabled

* Tue Feb 08 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.4.8-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

* Wed Jan 19 2011 Jan F. Chadima <jchadima@redhat.com> - 0.4.8-1

- bounce versionn to 0.4.8 (#670456)

* Mon Sep  6 2010 Jan F. Chadima <jchadima@redhat.com> - 0.4.6-1

- bounce versionn to 0.4.6 (#630602)

* Thu Jun  3 2010 Jan F. Chadima <jchadima@redhat.com> - 0.4.4-1

- bounce versionn to 0.4.4 (#598592)

* Wed May 19 2010 Jan F. Chadima <jchadima@redhat.com> - 0.4.3-1

- bounce versionn to 0.4.3 (#593288)

* Tue Mar 16 2010 Jan F. Chadima <jchadima@redhat.com> - 0.4.2-1

- bounce versionn to 0.4.2 (#573972)

* Tue Feb 16 2010 Jan F. Chadima <jchadima@redhat.com> - 0.4.1-1

- bounce versionn to 0.4.1 (#565870)

* Fri Dec 11 2009 Jan F. Chadima <jchadima@redhat.com> - 0.4.0-1

- bounce versionn to 0.4.0 (#541010)

* Thu Nov 26 2009 Jan F. Chadima <jchadima@redhat.com> - 0.3.92-2

- typo in spec file

* Thu Nov 26 2009 Jan F. Chadima <jchadima@redhat.com> - 0.3.92-1

- bounce versionn to 0.3.92 (0.4 beta2) (#541010)

* Fri Aug 21 2009 Tomas Mraz <tmraz@redhat.com> - 0.2-4

- rebuilt with new openssl

* Sat Jul 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 0.2-3

- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

* Tue Jun 02 2009 Jan F. Chadima <jchadima@redhat.com> - 0.2-2

- Small changes during review

* Mon Jun 01 2009 Jan F. Chadima <jchadima@redhat.com> - 0.2-1

- Initial build