From ef93b47d98a2ed0a41b6c45d769acba8a2cb2279 Mon Sep 17 00:00:00 2001 From: Thomas Perale Date: Fri, 29 May 2026 16:31:09 +0200 Subject: [PATCH] package/openssh: add patch trailer Commit [1] introduced a patch to fix CVE-2025-32728. Since [2] the security patches neeed to reference the vulnerability with the `CVE: ` trailer in the patch header. This patch is no longer present on master branch with openssh bump [3] but hasn't been cherry picked to 2025.02.x branch. The 2025.02.x version still had this patch present and thus need to add the trailer to it. [1] 211e822d43 package/openssh: apply security patch for CVE-2025-32728 (sshd) [2] 1167d0ff3d docs/manual: mention CVE trailer [3] a127b7e999 package/openssh: bump to version 10.0p1 Signed-off-by: Thomas Perale --- .../0001-fix-logic-error-in-disableforwarding-option.patch | 1 + 1 file changed, 1 insertion(+) diff --git a/package/openssh/0001-fix-logic-error-in-disableforwarding-option.patch b/package/openssh/0001-fix-logic-error-in-disableforwarding-option.patch index 2c64ec1910..d068002638 100644 --- a/package/openssh/0001-fix-logic-error-in-disableforwarding-option.patch +++ b/package/openssh/0001-fix-logic-error-in-disableforwarding-option.patch @@ -9,6 +9,7 @@ Spotted by Tim Rice. OpenBSD-Commit-ID: fffc89195968f7eedd2fc57f0b1f1ef3193f5ed1 Upstream: https://github.com/openssh/openssh-portable/commit/fc86875e6acb36401dfc1dfb6b628a9d1460f367 +CVE: CVE-2025-32728 Fixes the following CVE: - CVE-2025-32728: In sshd in OpenSSH before 10.0, the DisableForwarding