packages/net/openssh/patches, branch master

openssh: bump to 9.9p2

2025-02-20T08:48:21Z

Updated and removed upstreamed patch. Highlights relating to security: * Fix CVE-2025-26465 - ssh(1) in OpenSSH versions 6.8p1 to 9.9p1 (inclusive) contained a logic error that allowed an on-path attacker (a.k.a MITM) to impersonate any server when the VerifyHostKeyDNS option is enabled. This option is off by default. * Fix CVE-2025-26466 - sshd(8) in OpenSSH versions 9.5p1 to 9.9p1 (inclusive) is vulnerable to a memory/CPU denial-of-service related to the handling of SSH2_MSG_PING packets. This condition may be mitigated using the existing PerSourcePenalties feature. Both vulnerabilities were discovered and demonstrated to be exploitable by the Qualys Security Advisory team. We thank them for their detailed review of OpenSSH. Full release notes: https://www.openssh.com/txt/release-9.9p2 Signed-off-by: John Audia

openssh: bump to 9.9p1

2024-09-26T12:15:13Z

Release notes: https://www.openssh.com/txt/release-9.9 Added upstream patch to fix build[1] 1. https://github.com/openssh/openssh-portable/commit/76a618d2842c34c16cd21a4efc7230e2f459008d.patch Build system: x86/64 Build-tested: x86/64/AMD Cezanne Run-tested: x86/64/AMD Cezanne Signed-off-by: John Audia

openssh: fix incompatible ptr type error GCC 14.1

2024-07-05T20:41:33Z

The `ssh_systemd_notify` function is causing compilation errors when built against GCC 14.1. This is due to an incompatible pointer type being passed to the connect function. The connect function expects a pointer to `struct sockaddr`, but was receiving a pointer to `struct sockaddr_un`. Signed-off-by: Sean Khan

openssh: bump to 9.7p1

2024-03-19T22:07:15Z

Release notes: https://www.openssh.com/txt/release-9.7 Removed upstreamed patch: 010-better_fzero-call-detection.patch Build system: x86/64 Build-tested: x86/64/AMD Cezanne Run-tested: x86/64/AMD Cezanne Signed-off-by: John Audia

openssh: fix build failure on powerpc_8548

2024-01-06T21:48:02Z

https://github.com/openssh/openssh-portable/commit/1036d77b34a5fa15e56f516b81b9928006848cbd Signed-off-by: Sibren Vasse

openssh: add server config subdirectory

2023-08-07T23:39:56Z

Most distros allow dropping site configuration files into /etc/sshd_config.d/ so that you don't have to tweak the main server configuration file. Signed-off-by: Philip Prindeville

openssh: update to 9.0p1

2022-04-13T22:46:37Z

Remove upstreamed patches. Signed-off-by: Sibren Vasse

openssh: update to 8.9p1

2022-03-17T02:53:38Z

Signed-off-by: Michal Vasilek

openssh: update to 8.1p1

2019-11-09T14:17:35Z

Signed-off-by: Sibren Vasse

openssh: Fix compilation with -Wimplicit-function

2019-07-21T10:31:31Z

Upstream backport. Signed-off-by: Rosen Penev