From patchwork Sat Mar 1 11:25:20 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: auh@yoctoproject.org X-Patchwork-Id: 58126 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id DEA4DC28B22 for ; Sat, 1 Mar 2025 11:25:27 +0000 (UTC) Received: from a27-193.smtp-out.us-west-2.amazonses.com (a27-193.smtp-out.us-west-2.amazonses.com [54.240.27.193]) by mx.groups.io with SMTP id smtpd.web11.7048.1740828319010136327 for ; Sat, 01 Mar 2025 03:25:21 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@yoctoproject.org header.s=rnkzp2s7ci3kogmesvov2nwn7wcc2dgx header.b=dzv0zdN/; dkim=pass header.i=@amazonses.com header.s=7v7vs6w47njt4pimodk5mmttbegzsi6n header.b=dqs+oQSB; spf=pass (domain: us-west-2.amazonses.com, ip: 54.240.27.193, mailfrom: 010101955174237b-1ac3d2c7-096c-478c-8527-cb02d3be7d78-000000@us-west-2.amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=rnkzp2s7ci3kogmesvov2nwn7wcc2dgx; d=yoctoproject.org; t=1740828320; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date; bh=PDOeghvwlLcKrs9Wrs5kqZ66fN72xUpgbBiCl8sb8rI=; b=dzv0zdN/KI/NTxQxjbsqPJPCnNxeSKszfw6Fgvtet8zBr8sNoBahMjKFPHKPC/Wd 8ThVdp5+baQZWvMydZPn0oZQVosjQesDIs5dRs0h6ZjTdFshBx66y8P1V+lww57h9Ll UZbSMxmpJYNmNfft2EdVi3ZNakrkBI7KDj5cbtVg= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=7v7vs6w47njt4pimodk5mmttbegzsi6n; d=amazonses.com; t=1740828320; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date:Feedback-ID; bh=PDOeghvwlLcKrs9Wrs5kqZ66fN72xUpgbBiCl8sb8rI=; b=dqs+oQSBwXFV5eL2BMKoQTETqlHOrea71bq7X5n1LqnuPlOdL7bwBX2hpC8UnD8+ UOSsA6/jcc1s0pE9u+3FySmITLtM0vTGcKHWkXKEbJL85u7JOS4Lm9/XE+Y3WIXWyUN vTbe1smRDmZJiSNYqVQHmopz1vO9TR/ObR4A5MKY= MIME-Version: 1.0 From: auh@yoctoproject.org To: openembedded-core@lists.openembedded.org Cc: Subject: [AUH] openssh: upgrading to 9.9p2 SUCCEEDED Message-ID: <010101955174237b-1ac3d2c7-096c-478c-8527-cb02d3be7d78-000000@us-west-2.amazonses.com> Date: Sat, 1 Mar 2025 11:25:20 +0000 Feedback-ID: ::1.us-west-2.9np3MYPs3fEaOBysGKSlUD4KtcmPijcmS9Az2Hwf7iQ=:AmazonSES X-SES-Outgoing: 2025.03.01-54.240.27.193 List-Id: X-Webhook-Received: from li982-79.members.linode.com [45.33.32.79] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Sat, 01 Mar 2025 11:25:27 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/212108 Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *openssh* to *9.9p2* has Succeeded. Next steps: - apply the patch: git am 0001-openssh-upgrade-9.9p1-9.9p2.patch - check the changes to upstream patches and summarize them in the commit message, - compile an image that contains the package - perform some basic sanity tests - amend the patch and sign it off: git commit -s --reset-author --amend - send it to the appropriate mailing list Alternatively, if you believe the recipe should not be upgraded at this time, you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that automatic upgrades would no longer be attempted. Please review the attached files for further information and build/update failures. Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler Regards, The Upgrade Helper -- >8 -- From 27b6b51e78978b249f673814f7d6d11521dc5d82 Mon Sep 17 00:00:00 2001 From: Upgrade Helper Date: Sat, 1 Mar 2025 06:55:23 +0000 Subject: [PATCH] openssh: upgrade 9.9p1 -> 9.9p2 --- ...regress-banner.sh-log-input-and-output-files-on-erro.patch | 2 +- ...regress-test-exec-use-the-absolute-path-in-the-SSH-e.patch | 4 ++-- .../openssh/{openssh_9.9p1.bb => openssh_9.9p2.bb} | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) rename meta/recipes-connectivity/openssh/{openssh_9.9p1.bb => openssh_9.9p2.bb} (99%) diff --git a/meta/recipes-connectivity/openssh/openssh/0001-regress-banner.sh-log-input-and-output-files-on-erro.patch b/meta/recipes-connectivity/openssh/openssh/0001-regress-banner.sh-log-input-and-output-files-on-erro.patch index f424288e37..7f3ca31112 100644 --- a/meta/recipes-connectivity/openssh/openssh/0001-regress-banner.sh-log-input-and-output-files-on-erro.patch +++ b/meta/recipes-connectivity/openssh/openssh/0001-regress-banner.sh-log-input-and-output-files-on-erro.patch @@ -1,4 +1,4 @@ -From 5cc897fe2effe549e1e280c2f606bce8b532b61e Mon Sep 17 00:00:00 2001 +From 0ab56e46904c9703b1320fb29a05ab3270aa6132 Mon Sep 17 00:00:00 2001 From: Mikko Rapeli Date: Mon, 11 Sep 2023 09:55:21 +0100 Subject: [PATCH] regress/banner.sh: log input and output files on error diff --git a/meta/recipes-connectivity/openssh/openssh/0001-regress-test-exec-use-the-absolute-path-in-the-SSH-e.patch b/meta/recipes-connectivity/openssh/openssh/0001-regress-test-exec-use-the-absolute-path-in-the-SSH-e.patch index b90cd2e69d..076ab1384b 100644 --- a/meta/recipes-connectivity/openssh/openssh/0001-regress-test-exec-use-the-absolute-path-in-the-SSH-e.patch +++ b/meta/recipes-connectivity/openssh/openssh/0001-regress-test-exec-use-the-absolute-path-in-the-SSH-e.patch @@ -1,4 +1,4 @@ -From fb762172fb678fe29327b667f8fe7380962a4540 Mon Sep 17 00:00:00 2001 +From 6d232c6ef427ff61b8a52071eb45c1a217508266 Mon Sep 17 00:00:00 2001 From: Jose Quaresma Date: Mon, 15 Jul 2024 18:43:08 +0100 Subject: [PATCH] regress/test-exec: use the absolute path in the SSH env @@ -18,7 +18,7 @@ Signed-off-by: Jose Quaresma 1 file changed, 5 insertions(+) diff --git a/regress/test-exec.sh b/regress/test-exec.sh -index 7afc2807..175f554b 100644 +index 7afc280..175f554 100644 --- a/regress/test-exec.sh +++ b/regress/test-exec.sh @@ -175,6 +175,11 @@ if [ "x$TEST_SSH_OPENSSL" != "x" ]; then diff --git a/meta/recipes-connectivity/openssh/openssh_9.9p1.bb b/meta/recipes-connectivity/openssh/openssh_9.9p2.bb similarity index 99% rename from meta/recipes-connectivity/openssh/openssh_9.9p1.bb rename to meta/recipes-connectivity/openssh/openssh_9.9p2.bb index cb47ae7c07..5191725796 100644 --- a/meta/recipes-connectivity/openssh/openssh_9.9p1.bb +++ b/meta/recipes-connectivity/openssh/openssh_9.9p2.bb @@ -26,7 +26,7 @@ SRC_URI = "https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-${PV}.ta file://0001-regress-banner.sh-log-input-and-output-files-on-erro.patch \ file://0001-regress-test-exec-use-the-absolute-path-in-the-SSH-e.patch \ " -SRC_URI[sha256sum] = "b343fbcdbff87f15b1986e6e15d6d4fc9a7d36066be6b7fb507087ba8f966c02" +SRC_URI[sha256sum] = "91aadb603e08cc285eddf965e1199d02585fa94d994d6cae5b41e1721e215673" CVE_STATUS[CVE-2007-2768] = "not-applicable-config: This CVE is specific to OpenSSH with the pam opie which we don't build/use here."