[wrynose,0/1] Pull request for CVE-2026-123158

Message ID	cover.1793998796.git.yoann.congal@smile.fr
State	Not Applicable, archived
Headers	show Received: from mail-wm1-f43.google.com (mail-wm1-f43.google.com [209.85.128.43]) by mx.groups.io with SMTP id smtpd.msgproc02-g2.5856.1793999011107871684 for <openembedded-core@lists.openembedded.org>; Fri, 06 Nov 2026 13:03:31 -0800 ip: 209.85.128.43, mailfrom: yoann.congal@smile.fr) From: Yoann Congal <yoann.congal@smile.fr> To: openembedded-core@lists.openembedded.org Cc: Paul Barker <paul@pbarker.dev> Subject: [OE-core][wrynose 0/1] Pull request for CVE-2026-123158 Date: Fri, 6 Nov 2026 22:03:09 +0100 Message-ID: <cover.1793998796.git.yoann.congal@smile.fr> MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="utf-8"

Message ID

cover.1793998796.git.yoann.congal@smile.fr

State

Not Applicable, archived

Headers

From: Yoann Congal <yoann.congal@smile.fr>
To: openembedded-core@lists.openembedded.org
Cc: Paul Barker <paul@pbarker.dev>
Subject: [OE-core][wrynose 0/1] Pull request for CVE-2026-123158
Date: Fri,  6 Nov 2026 22:03:09 +0100
Message-ID: <cover.1793998796.git.yoann.congal@smile.fr>
MIME-Version: 1.0
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="utf-8"

Message

Yoann Congal Nov. 6, 2026, 9:03 p.m. UTC

This is an expedited Pull request to fix CVE-2026-123158 (aka
"sshhole").

Passed a-full on autobuilder:
https://autobuilder.yoctoproject.org/valkyrie/?#/builders/29/builds/5073

The following changes since commit ae5a301091f5b0574ea7444aab40b309b6d9f3f2:

  glib-2.0: upgrade 2.88.3 -> 2.88.4 (2026-10-27 08:03:41 +0100)

are available in the Git repository at:

  https://git.openembedded.org/openembedded-core-contrib stable/wrynose-next
  https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/wrynose-next

for you to fetch changes up to 2285da08068a6d1b4a64c9a52d85a58be50e4679:

  openssh: fix CVE-2026-123158 (aka "sshhole") (2026-11-06 17:15:59 +0100)

----------------------------------------------------------------

Yoann Congal (1):
  openssh: fix CVE-2026-123158 (aka "sshhole")

 .../openssh/openssh/CVE-2026-123158.patch     | 191 ++++++++++++++++++
 .../openssh/openssh_10.3p1.bb                 |   1 +
 2 files changed, 192 insertions(+)
 create mode 100644 meta/recipes-connectivity/openssh/openssh/CVE-2026-123158.patch

[wrynose,0/1] Pull request for CVE-2026-123158

Pull-request

Message