mbox

[blacksail,0/1] Pull request for CVE-2026-123158

Message ID cover.1793980180.git.yoann.congal@smile.fr
State Not Applicable, archived
Headers show

Pull-request

https://git.openembedded.org/openembedded-core-contrib stable/blacksail-next

Message

Yoann Congal Nov. 6, 2026, 3:53 p.m. UTC 
This is an expedited Pull request to fix CVE-2026-123158 (aka
"sshhole").

Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/?#/builders/29/builds/5069
* qemuarm64 failed due to 16487 – runqemu/oeqa leaks per-instance rootfs
  copies (<image>.<ext4|wic>.<PID>) in /srv/pokybuild/tmp, filling the
  tmpfs mount and breaking ptest builds.
  Retried in https://autobuilder.yoctoproject.org/valkyrie/?#/builders/36/builds/4964

The following changes since commit d3494922ad3e10a8880fa349366eb22e1f9f24ca:

  python3-certifi: upgrade 2026.7.22 -> 2026.10.19 (2026-10-22 11:33:09 +0100)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/blacksail-next
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/blacksail-next

for you to fetch changes up to 3bbd2a4f81f368ae7eac580949e4717f7aeb4f06:

  openssh: fix CVE-2026-123158 (aka "sshhole") (2026-11-06 12:50:38 +0100)

----------------------------------------------------------------

Yoann Congal (1):
  openssh: fix CVE-2026-123158 (aka "sshhole")

 .../openssh/openssh/CVE-2026-123158.patch     | 191 ++++++++++++++++++
 .../openssh/openssh_10.5p1.bb                 |   1 +
 2 files changed, 192 insertions(+)
 create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-123158.patch