package/openssh: add patch trailer

Commit [1] introduced a patch to fix CVE-2025-32728.
Since [2] the security patches neeed to reference the vulnerability with
the `CVE: ` trailer in the patch header.

This patch is no longer present on master branch with openssh bump [3]
but hasn't been cherry picked to 2025.02.x branch.

The 2025.02.x version still had this patch present and thus need to add
the trailer to it.

[1] 211e822d43 package/openssh: apply security patch for CVE-2025-32728 (sshd)
[2] 1167d0ff3d docs/manual: mention CVE trailer
[3] a127b7e999 package/openssh: bump to version 10.0p1

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
Thomas Perale
2026-05-29 16:31:09 +02:00
parent 2012b9e4b9
commit ef93b47d98

View File

@@ -9,6 +9,7 @@ Spotted by Tim Rice.
OpenBSD-Commit-ID: fffc89195968f7eedd2fc57f0b1f1ef3193f5ed1
Upstream: https://github.com/openssh/openssh-portable/commit/fc86875e6acb36401dfc1dfb6b628a9d1460f367
CVE: CVE-2025-32728
Fixes the following CVE:
- CVE-2025-32728: In sshd in OpenSSH before 10.0, the DisableForwarding