libssh2.yaml

package:
  name: libssh2
  version: 1.11.0 # Remove CVE-2023-48795.patch when upgrading to 1.11.1
  epoch: 3
  description: "A library implementing the SSH2 protocol as defined by Internet Drafts"
  copyright:
    - license: BSD-3-Clause

environment:
  contents:
    packages:
      - build-base
      - busybox
      - ca-certificates-bundle
      - openssl-dev
      - wolfi-baselayout

pipeline:
  - uses: fetch
    with:
      uri: https://www.libssh2.org/download/libssh2-${{package.version}}.tar.gz
      expected-sha256: 3736161e41e2693324deb38c26cfdc3efe6209d634ba4258db1cecff6a5ad461

  - uses: patch
    with:
      # Source CVE-2023-48795: https://github.com/libssh2/libssh2/commit/d34d9258b8420b19ec3f97b4cc5bf7aa7d98e35a
      patches: CVE-2023-48795.patch

  - uses: autoconf/configure

  - uses: autoconf/make

  - uses: autoconf/make-install

  - uses: strip

subpackages:
  - name: "libssh2-dev"
    description: "headers for libssh2"
    pipeline:
      - uses: split/dev

update:
  enabled: true
  release-monitor:
    identifier: 1730