mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-30 05:51:45 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/openssh: security bump to version 9.8p1

Browse Source 
Fixes CVE-2024-6387: Unauthenticated root login because of signal
handler race condition.

Drop upstream patch and autoreconf.

Signed-off-by: Baruch Siach <baruch@tkos.co.il>
Signed-off-by: Arnout Vandecappelle <arnout@mind.be>
(cherry picked from commit 4ac2cc5bee)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Baruch Siach
2024-07-02 06:44:01 +03:00
committed by Peter Korsgaard
parent 7c69185b20
commit 3a863002bd
3 changed files with 3 additions and 38 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
package/openssh/0001-Improve-detection-of-fzero-call-used-regs-used.patch
View File

@@ -1,32 +0,0 @@
From f9193f03db0029fc9c31fbdb5c66a2737446bd8f Mon Sep 17 00:00:00 2001
From: Darren Tucker <dtucker@dtucker.net>
Date: Mon, 25 Mar 2024 09:28:02 +1100
Subject: [PATCH] Improve detection of -fzero-call-used-regs=used.
Should better detect problems with gcc 13 on m68k. bz#3673 from Colin
Watson via bz#3673 and https://gcc.gnu.org/bugzilla/show_bug.cgi?id=110934
Signed-off-by: Darren Tucker <dtucker@dtucker.net>
Upstream: https://github.com/openssh/openssh-portable/commit/f9193f03db0029fc9c31fbdb5c66a2737446bd8f
---
m4/openssh.m4 | 3 +++
1 file changed, 3 insertions(+)
diff --git a/m4/openssh.m4 b/m4/openssh.m4
index 033df501c3d8..176a8d1c9282 100644
--- a/m4/openssh.m4
+++ b/m4/openssh.m4
@@ -20,7 +20,10 @@ char *f2(char *s, ...) {
va_end(args);
return strdup(ret);
}
+int i;
+double d;
const char *f3(int s) {
+ i = (int)d;
return s ? "good" : "gooder";
}
int main(int argc, char **argv) {
--
2.43.0

4
package/openssh/openssh.hash
View File

@@ -1,4 +1,4 @@
# From https://www.openssh.com/txt/release-9.7 # From https://www.openssh.com/txt/release-9.8
sha256 490426f766d82a2763fcacd8d83ea3d70798750c7bd2aff2e57dc5660f773ffd openssh-9.7p1.tar.gz sha256 dd8bd002a379b5d499dfb050dd1fa9af8029e80461f4bb6c523c49973f5a39f3 openssh-9.8p1.tar.gz
# Locally calculated # Locally calculated
sha256 05c30446ba738934b3f1efa965b454c122ca26cc4b268e5ae6843f58ccd1b16d LICENCE sha256 05c30446ba738934b3f1efa965b454c122ca26cc4b268e5ae6843f58ccd1b16d LICENCE

5
package/openssh/openssh.mk
View File

@@ -4,7 +4,7 @@
# #
################################################################################ ################################################################################
OPENSSH_VERSION_MAJOR = 9.7 OPENSSH_VERSION_MAJOR = 9.8
OPENSSH_VERSION_MINOR = p1 OPENSSH_VERSION_MINOR = p1
OPENSSH_VERSION = $(OPENSSH_VERSION_MAJOR)$(OPENSSH_VERSION_MINOR) OPENSSH_VERSION = $(OPENSSH_VERSION_MAJOR)$(OPENSSH_VERSION_MINOR)
OPENSSH_CPE_ID_VERSION = $(OPENSSH_VERSION_MAJOR) OPENSSH_CPE_ID_VERSION = $(OPENSSH_VERSION_MAJOR)
@@ -13,9 +13,6 @@ OPENSSH_SITE = http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable
OPENSSH_LICENSE = BSD-3-Clause, BSD-2-Clause, Public Domain OPENSSH_LICENSE = BSD-3-Clause, BSD-2-Clause, Public Domain
OPENSSH_LICENSE_FILES = LICENCE OPENSSH_LICENSE_FILES = LICENCE
# 0001-Improve-detection-of-fzero-call-used-regs-used.patch
OPENSSH_AUTORECONF = YES
OPENSSH_CONF_ENV = \ OPENSSH_CONF_ENV = \
LD="$(TARGET_CC)" \ LD="$(TARGET_CC)" \
LDFLAGS="$(TARGET_CFLAGS)" \ LDFLAGS="$(TARGET_CFLAGS)" \