mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-09 17:03:35 -09:00
package/openssh: add patch trailer
Commit [1] introduced a patch to fix CVE-2025-32728. Since [2] the security patches neeed to reference the vulnerability with the `CVE: ` trailer in the patch header. This patch is no longer present on master branch with openssh bump [3] but hasn't been cherry picked to 2025.02.x branch. The 2025.02.x version still had this patch present and thus need to add the trailer to it. [1]211e822d43package/openssh: apply security patch for CVE-2025-32728 (sshd) [2]1167d0ff3ddocs/manual: mention CVE trailer [3]a127b7e999package/openssh: bump to version 10.0p1 Signed-off-by: Thomas Perale <thomas.perale@mind.be>
This commit is contained in:
@@ -9,6 +9,7 @@ Spotted by Tim Rice.
|
||||
OpenBSD-Commit-ID: fffc89195968f7eedd2fc57f0b1f1ef3193f5ed1
|
||||
|
||||
Upstream: https://github.com/openssh/openssh-portable/commit/fc86875e6acb36401dfc1dfb6b628a9d1460f367
|
||||
CVE: CVE-2025-32728
|
||||
|
||||
Fixes the following CVE:
|
||||
- CVE-2025-32728: In sshd in OpenSSH before 10.0, the DisableForwarding
|
||||
|
||||
Reference in New Issue
Block a user