Update to version 0.9.5

Fixes CVE-2020-16135

Resolves: #1862457

.gitignore

@@ -52,3 +52,5 @@ libssh-0.4.4.tar.gz.asc
 /libssh-0.9.3.tar.xz.asc
 /libssh-0.9.4.tar.xz
 /libssh-0.9.4.tar.xz.asc
+/libssh-0.9.5.tar.xz
+/libssh-0.9.5.tar.xz.asc

libssh.spec

@@ -1,6 +1,6 @@
 Name:           libssh
-Version:        0.9.4
-Release:        5%{?dist}
+Version:        0.9.5
+Release:        1%{?dist}
 Summary:        A library implementing the SSH protocol
 License:        LGPLv2+
 URL:            http://www.libssh.org
@@ -11,12 +11,6 @@ Source2:        https://cryptomilk.org/gpgkey-8DFF53E18F2ABC8D8F3C92237EE0FC4DCC
 Source3:        libssh_client.config
 Source4:        libssh_server.config
 
-Patch0:         libssh-0.9.4-enable-sshd-sha1-algorithms.patch
-Patch1:         libssh-0.9.4-fix-version.patch
-Patch2:         libssh-0.9.4-do-not-return-error-server-closed-channel.patch
-Patch3:         libssh-0.9.4-add-cve-2019-14889-test.patch
-Patch4:         libssh-0.9.4-do-not-parse-config-during-tests.patch
-
 BuildRequires:  cmake
 BuildRequires:  gcc-c++
 BuildRequires:  gnupg2
@@ -133,6 +127,13 @@ popd
 %attr(0644,root,root) %config(noreplace) %{_sysconfdir}/libssh/libssh_server.config
 
 %changelog
+* Thu Sep 10 2020 Anderson Sasaki <ansasaki@redhat.com> - 0.9.5-1
+- Update to version 0.9.5
+  https://www.libssh.org/2020/09/10/libssh-0-9-5/
+- Removed patch to re-enable algorithms using sha1 in sshd for testing
+- The algorithms supported by sshd are now automatically detected for testing
+- Resolves: #1862457 - CVE-2020-16135
+
 * Sat Aug 01 2020 Fedora Release Engineering <releng@fedoraproject.org> - 0.9.4-5
 - Second attempt - Rebuilt for
   https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild

sources

@@ -1,2 +1,2 @@
-SHA512 (libssh-0.9.4.tar.xz) = 38705c19c293ea5e6d286d22eb17021dbe58d88c1e647b699933aa0db9ca1174d43d1ff76c1a1b17bf2cc1a8297ec02f1a67dd9e969676dd69cf6fbdae9bc8d4
-SHA512 (libssh-0.9.4.tar.xz.asc) = a64e0bd0cc821206359c0b57b97457306cdab92999083800e089aecffbbd251728537264eac55ca69a70a8345ca71db9e3462fa450bb01919f670738eb8ebd7e
+SHA512 (libssh-0.9.5.tar.xz) = 64e692a0bfa7f73585ea7b7b8b1d4c9a7f9be59565bfd4de32ca8cd9db121f87e7ad51f5c80269fbd99545af34dcf1894374ed8a6d6c1ac5f8601c026572ac18
+SHA512 (libssh-0.9.5.tar.xz.asc) = f0b76cdccf26144b9cc9ad3f7e1605b50473fc5c686d0d9a2419b13382440776c09428d717253a918f7347b90e4a562fd88d8ea85a6e54f06b149826295b4f8e