From patchwork Mon Jul 1 19:47:36 2024 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Adolf Belka X-Patchwork-Id: 7901 Return-Path: Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature ECDSA (secp384r1) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by web04.haj.ipfire.org (Postfix) with ESMTPS id 4WCc5d22sKz3wwl for ; Mon, 1 Jul 2024 19:47:49 +0000 (UTC) Received: from mail02.haj.ipfire.org (mail02.haj.ipfire.org [172.28.1.201]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature ECDSA (secp384r1)) (Client CN "mail02.haj.ipfire.org", Issuer "R3" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4WCc5Y69Rbz4RY; Mon, 1 Jul 2024 19:47:45 +0000 (UTC) Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4WCc5Y3wt9z33cr; Mon, 1 Jul 2024 19:47:45 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384 client-signature ECDSA (secp384r1) client-digest SHA384) (Client CN "mail01.haj.ipfire.org", Issuer "R3" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4WCc5V5bhXz33ch for ; Mon, 1 Jul 2024 19:47:42 +0000 (UTC) Received: from [127.0.0.1] (localhost [127.0.0.1]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) server-digest SHA384) (No client certificate requested) by mail01.ipfire.org (Postfix) with ESMTPSA id 4WCc5T3tfvz1ZF; Mon, 1 Jul 2024 19:47:41 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1719863261; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=RAYnjLFyas8l3pw7u0o0kw9O4vWad1a+eXe/x3NpKT8=; b=xvjoVtxUwJJwKQwhJF3S1aPGMJVNyl+vNQgPKQ1nJID0MwOXw9euJb5CRql+zOddv9GiU2 xDZV5C0Mm+i04IBQ== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1719863261; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=RAYnjLFyas8l3pw7u0o0kw9O4vWad1a+eXe/x3NpKT8=; b=m11bDQQ5r3M5PN+sAus4PT+YjX4HKsrDXSDyn38OegbdbbnWrZxkfPZ4e1c/giPKJmj3jt IzDZ8pxGuU1N46Zbt1d5GMYHeT9TaE95mpZ9sLQPbkB0uWTWmqB5Q9ZeD7RVd9kyntFgZg /CkeH3ZZsGVcqMDQbjimnMUDML8tWpC7eYt4Uku7tBvLkRB25Er5xPsOcwFsz2ue3YYlzj YkYiGGVbpKWJJ3vXY40sWVP72YZHhu3lrreO3jEgy3O0neglXklls1UpTYy2K0YkGmbxTa W2Cz1mA9t34P4xdTi4MMSYwcaG0XB+F507rAo2YuyANABUHIvisU8+LH5pICBg== From: Adolf Belka To: development@lists.ipfire.org Subject: [PATCH] openssh: Update to version 9.8p1 Date: Mon, 1 Jul 2024 21:47:36 +0200 Message-ID: <20240701194736.3438006-1-adolf.belka@ipfire.org> MIME-Version: 1.0 Message-ID-Hash: CULZCNW7UNTEOBTEWDX63OD5NZHX5BFN X-Message-ID-Hash: CULZCNW7UNTEOBTEWDX63OD5NZHX5BFN X-MailFrom: adolf.belka@ipfire.org X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header X-Mailman-Version: 3.3.8 Precedence: list List-Id: IPFire development talk Archived-At: List-Archive: List-Help: List-Owner: List-Post: List-Subscribe: List-Unsubscribe: - Update from version 9.7p1 to 9.8p1 - Update of rootfile - Changelog 9.8p1 -There is a fix for CVE-2024-6387 -The number of changes is too large to show all here. As well as the CVE fix and another security related fix there are a log of bug fixes as well. The details can seen at https://www.openssh.com/txt/release-9.8 Signed-off-by: Adolf Belka --- config/rootfiles/common/openssh | 3 +-- lfs/openssh | 4 ++-- 2 files changed, 3 insertions(+), 4 deletions(-) diff --git a/config/rootfiles/common/openssh b/config/rootfiles/common/openssh index c3666d914..93d51714d 100644 --- a/config/rootfiles/common/openssh +++ b/config/rootfiles/common/openssh @@ -1,8 +1,6 @@ #etc/ssh etc/ssh/moduli etc/ssh/ssh_config -#etc/ssh/ssh_host_dsa_key -#etc/ssh/ssh_host_dsa_key.pub #etc/ssh/ssh_host_ecdsa_key #etc/ssh/ssh_host_ecdsa_key.pub #etc/ssh/ssh_host_ed25519_key @@ -22,6 +20,7 @@ usr/lib/openssh/sftp-server #usr/lib/openssh/ssh-keysign usr/lib/openssh/ssh-pkcs11-helper usr/lib/openssh/ssh-sk-helper +#usr/lib/openssh/sshd-session usr/sbin/sshd #usr/share/man/man1/scp.1 #usr/share/man/man1/sftp.1 diff --git a/lfs/openssh b/lfs/openssh index 315b1a70b..036d0bb8e 100644 --- a/lfs/openssh +++ b/lfs/openssh @@ -24,7 +24,7 @@ include Config -VER = 9.7p1 +VER = 9.8p1 THISAPP = openssh-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = 520859fcbdf678808fc8515b64585ab9a90a8055fa869df6fbba3083cb7f73ddb81ed9ea981e131520736a8aed838f85ae68ca63406a410df61039913c5cb48b +$(DL_FILE)_BLAKE2 = 3bf983c4ef5358054ed0104cd51d3e0069fbc2b80d8522d0df644d5508ec1d26a67bf061b1b5698d1cdf0d2cbba16b4cdca12a4ce30da24429094576a075e192 install : $(TARGET)