From patchwork Wed Nov 5 23:16:14 2025 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: auh@yoctoproject.org X-Patchwork-Id: 73697 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org Received: from aws-us-west-2-korg-lkml-1.web.codeaurora.org (localhost.localdomain [127.0.0.1]) by smtp.lore.kernel.org (Postfix) with ESMTP id 865AECD3429 for ; Wed, 5 Nov 2025 23:16:24 +0000 (UTC) Received: from a27-192.smtp-out.us-west-2.amazonses.com (a27-192.smtp-out.us-west-2.amazonses.com [54.240.27.192]) by mx.groups.io with SMTP id smtpd.msgproc01-g2.2347.1762384575099218238 for ; Wed, 05 Nov 2025 15:16:15 -0800 Authentication-Results: mx.groups.io; dkim=pass header.i=@yoctoproject.org header.s=j46ser6a2yusdzubpv7m7ewqgesde2ie header.b=NZaXq4Z2; dkim=pass header.i=@amazonses.com header.s=gdwg2y3kokkkj5a55z2ilkup5wp5hhxx header.b=QfdqS6GJ; spf=pass (domain: us-west-2.amazonses.com, ip: 54.240.27.192, mailfrom: 0101019a564e785f-bf2155ca-92c1-4ea3-ad8b-173f9639c8b0-000000@us-west-2.amazonses.com) DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=j46ser6a2yusdzubpv7m7ewqgesde2ie; d=yoctoproject.org; t=1762384574; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date; bh=VFrd0dMGnS1cqilj6gRITamj9/t3MKs1Xc+Z0ZR2j08=; b=NZaXq4Z2xJ5biB/yyIUi1GiLkvCL7hINo8vS+qQRcLn1DnlsDTo7LcNYiN1m8+4O Zi8ajIwQtvut3x8mPcX2F8K3IPLPPfp+26Uw1tpvp3QUM6X0hfgwgizjc1Ps+y16/DP ob6l6YWnN4Pkzg0j06zy2fZmN4VHvbGUEXiaTy3U= DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=gdwg2y3kokkkj5a55z2ilkup5wp5hhxx; d=amazonses.com; t=1762384574; h=Content-Type:MIME-Version:From:To:Cc:Subject:Message-Id:Date:Feedback-ID; bh=VFrd0dMGnS1cqilj6gRITamj9/t3MKs1Xc+Z0ZR2j08=; b=QfdqS6GJ0Wgrz2XcN+qVbNl8l0krzh1NKfla25bUDK8/1yVkGAnWkUXKJ2kWKqMw HQZDMUM6vdesZcR6oXJg+czzks09N5VGUFO9nOKmmycjkBoJHA5/P99D9D8MLFcEZcT fA69aKZpckWwEjlxPKnqTXV+LQQKJfTs1ngy80nk= MIME-Version: 1.0 From: auh@yoctoproject.org To: openembedded-core@lists.openembedded.org Cc: Subject: [AUH] openssh: upgrading to 10.2p1 SUCCEEDED Message-ID: <0101019a564e785f-bf2155ca-92c1-4ea3-ad8b-173f9639c8b0-000000@us-west-2.amazonses.com> Date: Wed, 5 Nov 2025 23:16:14 +0000 Feedback-ID: ::1.us-west-2.9np3MYPs3fEaOBysGKSlUD4KtcmPijcmS9Az2Hwf7iQ=:AmazonSES X-SES-Outgoing: 2025.11.05-54.240.27.192 List-Id: X-Webhook-Received: from 45-33-107-173.ip.linodeusercontent.com [45.33.107.173] by aws-us-west-2-korg-lkml-1.web.codeaurora.org with HTTPS for ; Wed, 05 Nov 2025 23:16:24 -0000 X-Groupsio-URL: https://lists.openembedded.org/g/openembedded-core/message/225792 Hello, this email is a notification from the Auto Upgrade Helper that the automatic attempt to upgrade the recipe(s) *openssh* to *10.2p1* has Succeeded. Next steps: - apply the patch: git am 0001-openssh-upgrade-10.1p1-10.2p1.patch - check the changes to upstream patches and summarize them in the commit message, - compile an image that contains the package - perform some basic sanity tests - amend the patch and sign it off: git commit -s --reset-author --amend - send it to the appropriate mailing list Alternatively, if you believe the recipe should not be upgraded at this time, you can fill RECIPE_NO_UPDATE_REASON in respective recipe file so that automatic upgrades would no longer be attempted. Please review the attached files for further information and build/update failures. Any problem please file a bug at https://bugzilla.yoctoproject.org/enter_bug.cgi?product=Automated%20Update%20Handler Regards, The Upgrade Helper -- >8 -- From ca114c86807a03d0497e8fb79b9697de922843fd Mon Sep 17 00:00:00 2001 From: Upgrade Helper Date: Wed, 5 Nov 2025 14:40:25 +0000 Subject: [PATCH] openssh: upgrade 10.1p1 -> 10.2p1 --- ...regress-banner.sh-log-input-and-output-files-on-erro.patch | 2 +- ...regress-test-exec-use-the-absolute-path-in-the-SSH-e.patch | 4 ++-- .../openssh/{openssh_10.1p1.bb => openssh_10.2p1.bb} | 2 +- 3 files changed, 4 insertions(+), 4 deletions(-) rename meta/recipes-connectivity/openssh/{openssh_10.1p1.bb => openssh_10.2p1.bb} (99%) diff --git a/meta/recipes-connectivity/openssh/openssh/0001-regress-banner.sh-log-input-and-output-files-on-erro.patch b/meta/recipes-connectivity/openssh/openssh/0001-regress-banner.sh-log-input-and-output-files-on-erro.patch index f424288e37..609d93a63c 100644 --- a/meta/recipes-connectivity/openssh/openssh/0001-regress-banner.sh-log-input-and-output-files-on-erro.patch +++ b/meta/recipes-connectivity/openssh/openssh/0001-regress-banner.sh-log-input-and-output-files-on-erro.patch @@ -1,4 +1,4 @@ -From 5cc897fe2effe549e1e280c2f606bce8b532b61e Mon Sep 17 00:00:00 2001 +From ae88349411fc39c2efaf119c26c19d6123dd592c Mon Sep 17 00:00:00 2001 From: Mikko Rapeli Date: Mon, 11 Sep 2023 09:55:21 +0100 Subject: [PATCH] regress/banner.sh: log input and output files on error diff --git a/meta/recipes-connectivity/openssh/openssh/0001-regress-test-exec-use-the-absolute-path-in-the-SSH-e.patch b/meta/recipes-connectivity/openssh/openssh/0001-regress-test-exec-use-the-absolute-path-in-the-SSH-e.patch index 360b62af34..80d9b2bf59 100644 --- a/meta/recipes-connectivity/openssh/openssh/0001-regress-test-exec-use-the-absolute-path-in-the-SSH-e.patch +++ b/meta/recipes-connectivity/openssh/openssh/0001-regress-test-exec-use-the-absolute-path-in-the-SSH-e.patch @@ -1,4 +1,4 @@ -From 9dcccafe44ea17e972e7cddea205bbe9fe71d8d6 Mon Sep 17 00:00:00 2001 +From 103d3592f724861484d0199bcedce6f470207066 Mon Sep 17 00:00:00 2001 From: Jose Quaresma Date: Mon, 15 Jul 2024 18:43:08 +0100 Subject: [PATCH] regress/test-exec: use the absolute path in the SSH env @@ -18,7 +18,7 @@ Signed-off-by: Jose Quaresma 1 file changed, 5 insertions(+) diff --git a/regress/test-exec.sh b/regress/test-exec.sh -index 8a00c72..2891f27 100644 +index 34fb58f..0e94fe1 100644 --- a/regress/test-exec.sh +++ b/regress/test-exec.sh @@ -179,6 +179,11 @@ if [ "x$TEST_SSH_OPENSSL" != "x" ]; then diff --git a/meta/recipes-connectivity/openssh/openssh_10.1p1.bb b/meta/recipes-connectivity/openssh/openssh_10.2p1.bb similarity index 99% rename from meta/recipes-connectivity/openssh/openssh_10.1p1.bb rename to meta/recipes-connectivity/openssh/openssh_10.2p1.bb index 83b6183858..5b934d72aa 100644 --- a/meta/recipes-connectivity/openssh/openssh_10.1p1.bb +++ b/meta/recipes-connectivity/openssh/openssh_10.2p1.bb @@ -26,7 +26,7 @@ SRC_URI = "https://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-${PV}.ta file://0001-regress-banner.sh-log-input-and-output-files-on-erro.patch \ file://0001-regress-test-exec-use-the-absolute-path-in-the-SSH-e.patch \ " -SRC_URI[sha256sum] = "b9fc7a2b82579467a6f2f43e4a81c8e1dfda614ddb4f9b255aafd7020bbf0758" +SRC_URI[sha256sum] = "ccc42c0419937959263fa1dbd16dafc18c56b984c03562d2937ce56a60f798b2" CVE_STATUS[CVE-2007-2768] = "not-applicable-config: This CVE is specific to OpenSSH with the pam opie which we don't build/use here."