[PATCH] gnu: OpenSSH: Update to 9.3p1 [security fixes].

  • Done
  • quality assurance status badge
Details
2 participants
  • Efraim Flashner
  • Leo Famulari
Owner
unassigned
Submitted by
Leo Famulari
Severity
normal
L
L
Leo Famulari wrote on 18 Mar 2023 22:31
(address . guix-patches@gnu.org)
67d094d92b14f0265023f94c5d413a9b4407426d.1679175071.git.leo@famulari.name
The release announcement contains more information about the security
vulnerabilities fixed in this update:


* gnu/packages/ssh.scm (openssh): Update to 9.3p1.
---
gnu/packages/ssh.scm | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)

Toggle diff (24 lines)
diff --git a/gnu/packages/ssh.scm b/gnu/packages/ssh.scm
index 886cb74070..b91e70aaed 100644
--- a/gnu/packages/ssh.scm
+++ b/gnu/packages/ssh.scm
@@ -197,7 +197,7 @@ (define-public libssh2
(define-public openssh
(package
(name "openssh")
- (version "9.2p1")
+ (version "9.3p1")
(source (origin
(method url-fetch)
(uri (string-append "mirror://openbsd/OpenSSH/portable/"
@@ -206,7 +206,7 @@ (define-public openssh
"openssh-trust-guix-store-directory.patch"))
(sha256
(base32
- "0ingf6fxzg2fcf6k68bvh0lc460jn0macvf5w585zd2zcpqxnriz"))))
+ "1a7qia3c255igny5kf00m5zxkp69lf1w6qjsv3rm2sm705vvmfp9"))))
(build-system gnu-build-system)
(native-inputs (list groff pkg-config))
(inputs `(("libedit" ,libedit)
--
2.39.1
E
E
Efraim Flashner wrote on 22 Mar 2023 09:29
(name . Leo Famulari)(address . leo@famulari.name)(address . 62266@debbugs.gnu.org)
ZBq8ZSVbEbQLmwA1@3900XT
LGTM!

On Sat, Mar 18, 2023 at 05:31:11PM -0400, Leo Famulari wrote:
Toggle quote (39 lines)
> The release announcement contains more information about the security
> vulnerabilities fixed in this update:
>
> https://www.openssh.com/txt/release-9.3
>
> * gnu/packages/ssh.scm (openssh): Update to 9.3p1.
> ---
> gnu/packages/ssh.scm | 4 ++--
> 1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/gnu/packages/ssh.scm b/gnu/packages/ssh.scm
> index 886cb74070..b91e70aaed 100644
> --- a/gnu/packages/ssh.scm
> +++ b/gnu/packages/ssh.scm
> @@ -197,7 +197,7 @@ (define-public libssh2
> (define-public openssh
> (package
> (name "openssh")
> - (version "9.2p1")
> + (version "9.3p1")
> (source (origin
> (method url-fetch)
> (uri (string-append "mirror://openbsd/OpenSSH/portable/"
> @@ -206,7 +206,7 @@ (define-public openssh
> "openssh-trust-guix-store-directory.patch"))
> (sha256
> (base32
> - "0ingf6fxzg2fcf6k68bvh0lc460jn0macvf5w585zd2zcpqxnriz"))))
> + "1a7qia3c255igny5kf00m5zxkp69lf1w6qjsv3rm2sm705vvmfp9"))))
> (build-system gnu-build-system)
> (native-inputs (list groff pkg-config))
> (inputs `(("libedit" ,libedit)
> --
> 2.39.1
>
>
>
>

--
Efraim Flashner <efraim@flashner.co.il> ????? ?????
GPG key = A28B F40C 3E55 1372 662D 14F7 41AA E7DC CA3D 8351
Confidentiality cannot be guaranteed on emails sent or received unencrypted
-----BEGIN PGP SIGNATURE-----

iQIzBAABCAAdFiEEoov0DD5VE3JmLRT3Qarn3Mo9g1EFAmQavGIACgkQQarn3Mo9
g1FOzA//dvCxmSMGA+xb2AfXgyk6lyrBCYBuiSir023tYdYWb+VPKOGbpmUc8oqP
mtcI+dnUm8BcxZkdNF5y2x1W++A6FZ02woRnBI9GQrXd6LDLC03PxNdF2j/SO4rc
bGgLr4Pon5onQACsrLRBnXxgqLmweo2NTCYTTx3t3isdXM/3sPGxQMnSkX6TT/wB
+FUhRNimXQnSv0fH6XnOIP8o6kiY4C5hsNXqLl7v3RbPiR4eghQtHD5DIpfXmfD4
fOPNlRnOOG2XY2WADPqdLUIzr/8aks0kRjFgBDT6gUiPx6QjZNg+7PnuwiRHo90z
ButFRKzDVCeOUbg7KjuRfrP0afaLCM0SW8E6ALDoKrm7cIC3fBUcqEhTmKGx2Vge
0V+c3UdsbQ2rmSKPGSzosg47gorWA4C9M9y6xKJv+e5AAIYtB7gEA8Wp4c/rKzAT
GMkK5Tz0GedZOyKiPqBMRzHt+v8PPUOfZNPmQM+DIRhCmilm5Z/eAIzTuRS2SCMv
Y/YBj4PFEtkFjIZH8vaHuc2sH6yJTrdgZjWAFOSCF1mUjPvydH04hELW/cBm11Uz
wRxb6iChrmarDJZLV3lCcC49v/y45GvVUc4hGYNBSbxwwhQqgGfiiEk/kWrCdJV1
6rcppchICbOGQXged5PM74j8wCP0kvawEBso2mu5ot+viJwC6Ao=
=6z7e
-----END PGP SIGNATURE-----


L
L
Leo Famulari wrote on 22 Mar 2023 16:58
ZBslp8TqWKoVB4eY@jasmine.lan
On Wed, Mar 22, 2023 at 10:29:25AM +0200, Efraim Flashner wrote:
Toggle quote (2 lines)
> LGTM!

Thanks, Efraim! Pushed as 91f92f32d5a9317dd333d570b54c2ba34c9c14a9
-----BEGIN PGP SIGNATURE-----
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=jvbM
-----END PGP SIGNATURE-----


Closed
?