Name	libssh
Description	Library for accessing ssh client services through C libraries
Version	0.11.2-r0
Package Base	libssh
Homepage	https://www.libssh.org/
Maintainers	['Natanael Copa <ncopa@alpinelinux.org>']
Contributors	['Carlo Landmeter <clandmeter@alpinelinux.org>']
Distro-repo	https://gitlab.alpinelinux.org/alpine/aports/-/tree/3.22-stable/community/libssh
Sources	['https://www.libssh.org/files/${pkgver%.*}/libssh-0.11.2-r0.tar.xz']
Dependencies	['libc.musl-x86_64.so.1', 'libcrypto.so.3', 'libz.so.1']
Optional-Dependencies	[]
Build-Dependencies	['$depends_dev', 'cmake', 'samurai']
Provides	['so:libssh.so.4=4.10.2']
Builddate	28-06-2025 00:57:56
Architecture	x86_64
Distro-Version	v3.22
Licenses	['LGPL-2.1-or-later BSD-2-Clause']
Hash	Q16IGyfsUVYVO2PxQaQm84adhZ5Qo=

# Contributor: Carlo Landmeter <clandmeter@alpinelinux.org>
# Maintainer: Natanael Copa <ncopa@alpinelinux.org>
pkgname=libssh
pkgver=0.11.2
pkgrel=0
pkgdesc="Library for accessing ssh client services through C libraries"
options="!check" # Tests require CLIENT_TESTING enabled which needs socket_wrapper
url="https://www.libssh.org/"
arch="all"
license="LGPL-2.1-or-later BSD-2-Clause"
depends_dev="openssl-dev>3 zlib-dev"
makedepends="$depends_dev cmake samurai"
checkdepends="cmocka-dev"
subpackages="$pkgname-dev"
source="https://www.libssh.org/files/${pkgver%.*}/libssh-$pkgver.tar.xz"

# secfixes:
#   0.11.2-r0:
#     - CVE-2025-4877
#     - CVE-2025-4878
#     - CVE-2025-5318
#     - CVE-2025-5351
#     - CVE-2025-5372
#     - CVE-2025-5449
#     - CVE-2025-5987
#   0.10.6-r0:
#     - CVE-2023-6004
#     - CVE-2023-6918
#     - CVE-2023-48795
#   0.9.6-r0:
#     - CVE-2021-3634
#   0.9.5-r0:
#     - CVE-2020-16135
#   0.9.4-r0:
#     - CVE-2020-1730
#   0.9.3-r0:
#     - CVE-2019-14889
#   0.7.6-r0:
#     - CVE-2018-10933

build() {
	CFLAGS="$CFLAGS -flto=auto" \
	cmake -B build -G Ninja \
		-DCMAKE_BUILD_TYPE=None \
		-DCMAKE_INSTALL_PREFIX=/usr \
		-DCMAKE_INSTALL_LIBDIR=lib \
		-DWITH_GSSAPI=OFF \
		-DUNIT_TESTING=OFF
	cmake --build build
}

check() {
	case "$CARCH" in
		s390x) _disabled_tests="-E torture_threads_buffer"
	esac
	cd build
	ctest $_disabled_tests
}

package() {
	DESTDIR="$pkgdir" cmake --install build
}

sha512sums="
15d56c3f82ee81c3ab4af2b17eba054626bb53c3337ef45f829479f8b64c552f6e7cbf307e41c9792bcb3438f282d2690acbe994150bd03a8b6c21ba8b1cfe50  libssh-0.11.2.tar.xz
"