From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Wed, 30 Mar 2022 22:10:41 +0200 Received: from metis.ext.pengutronix.de ([2001:67c:670:201:290:27ff:fe1d:cc33]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1nZeeL-00BgHg-9g for lore@lore.pengutronix.de; Wed, 30 Mar 2022 22:10:41 +0200 Received: from localhost ([127.0.0.1] helo=metis.ext.pengutronix.de) by metis.ext.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1nZeeN-00065H-VY; Wed, 30 Mar 2022 22:10:39 +0200 Received: from mail-eopbgr60063.outbound.protection.outlook.com ([40.107.6.63] helo=EUR04-DB3-obe.outbound.protection.outlook.com) by metis.ext.pengutronix.de with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1nZedm-000658-Mi for ptxdist@pengutronix.de; Wed, 30 Mar 2022 22:10:03 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=GYL/aMmppJxzr1cCxke/0gZ2+V5guSBOZId09EAwKAjUVkPQc+gBFzntD/PvcuYhsdqCW3AaPwtQS9K3WB64hboJpFILHFejNI13KJuyz9VuRZ+Nf4ptDdWz0WTiJde2XMcl/G5iR+49gKM8Einz9mTDOtH7+AAsVU1eJhevmxEumJ5pkAZGQSBY4LVCfqV4YhiG6/PknBVpA2CzUnLehCArGItwJex/tif7G2fTUpbHKjbSRszUfiaNzOD4vo0kM3LPFfc05qMtEcT6zY/o9n0uLKx9m8btxjz3pXbgEViJIl0SuaFtIQEYIh8qzC7RWjBJWo8Bi9ATXchjR5snzQ== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=uX0utCxMAKwaOagVcyRc+60o9MpeYt76WxJhwXzFpNg=; b=JwjbM/STrvE3LnOVk1fKT/IAuseq17oeqenLaL8FvtFDAU8/dSGyuosdbSErzEgZcP/sN0jpNl3j4bB2SqiPS2aTDz6OjgOjIIV53J7jmdGzl5ZTlNVoYVbA14nJdo4czPHRD86Qw5oYGH35yU9CfZ94HfeMfepMfz73mZB5uMRt8EXNuN7yqbL7iYzX7JPcDfBuAoF7wmLC6TO4cDxMXHi/4LozKzGC8k3leo6aJzio6Eu4snqutq5ClIYkGgrZxM63jAQk9HopZQR0UPCcnPLWU8VeI8lCtslJJnRumgUVoch96EvWS7pivQ/anUbw1xMqex0WB3ArcUQaNSWTuw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=uX0utCxMAKwaOagVcyRc+60o9MpeYt76WxJhwXzFpNg=; b=ld+FJ3JnnX2GlS6dHv/rVtUioilYNPTyUcWpMbwfU0ltFBk6fPljPuKiaUa6RNscph+lN+YGOjgTMRKSEPCpecmYAE541zJEY4noqscB6ubUNYJjkqgMaO6LPsw4ZBZibx7bzOuwxCIW9ht6ZBbYqtJwWsuBijKLb+Y7TcnGoMw= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=t2data.com; Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by DB9P251MB0048.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:2c7::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5123.19; Wed, 30 Mar 2022 20:10:00 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::3ded:58a4:e21d:33db]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::3ded:58a4:e21d:33db%3]) with mapi id 15.20.5123.016; Wed, 30 Mar 2022 20:09:59 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Wed, 30 Mar 2022 22:09:53 +0200 Message-Id: <20220330200953.1000655-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.32.0 X-ClientProxiedBy: GV3P280CA0115.SWEP280.PROD.OUTLOOK.COM (2603:10a6:150:8::18) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 4bf3048d-b2c7-45ec-86d1-08da128944a3 X-MS-TrafficTypeDiagnostic: DB9P251MB0048:EE_ X-Microsoft-Antispam-PRVS: X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; X-Microsoft-Antispam-Message-Info: OmLHkEtPrr8c3W24/FkKJ+UwBjZGQjPg/fX3fMhrR/F0VOYPhmJ57vUbn4z9bN35Ho51P8RoZxqbg+ddpNmLjMImLYUImL2Ymk/gFx+YqCi8tlvXvkKu9nHmMN8g9ghRESh8dug+EODf21JDCDdemLgXAEQBLLV/Xl1oIEVZ+YCCjY8rOHNCXhgpV2kbih5S015w4UzAssEyW4FWox81ST5PGGq+fEX8+cEmYzjf4RzQlGPr8/wtGCu+SBJ8XyqUxMPrlWlMvn8A5yZTKAhSKEIGTPLhymr1knx2HnbXdh2j+kWHW+sQbso9vOAD4AzfASwkM61d+JwsAfhVyFW+Q+WnEiE32qWsmAhRPph71vFu2yYov7iFh6o5GqoGsb7XbCUlb5rIJr7cASaEii/Cjf/Rzh49Wi9U2FtZFu3XtiruGBcRg57WtEtto5wZKpfLVqxXjx5hd7qYvdScHyaV9YZkEMLovPTmbValuU/ObPuUNEWlaOjfraQs63qjtA8uHaRlO3ogrSNdJawRMmck19oTqTwLvE05p04E50WTBSzezF+hSI1qVyabieaoPrnzbbxrxgNslkGR7KKyjXW6yJfftco6MO6p2JpTJ/BMd0iy0E/lUmvRLY3oBssj0xnchSs32HBl3zC4HMiFAAYqOzruTQVBfnMeJTKd8qNDAvvFitSSSqIQ9Q4PcxzKW6wFO9BAsrDHQq8zlUUjyNhjMg== X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230001)(366004)(136003)(396003)(346002)(376002)(39830400003)(2906002)(6916009)(86362001)(38100700002)(38350700002)(66556008)(6666004)(316002)(44832011)(36756003)(8676002)(66946007)(6486002)(66476007)(508600001)(186003)(6512007)(6506007)(52116002)(83380400001)(26005)(5660300002)(1076003)(8936002)(2616005); DIR:OUT; SFP:1101; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?Eve9JYXsV3ZZpZRGyZWszqz/PoCPxTcG2St8M9YrDbVy9BK69SA70ZVt6Ew7?= =?us-ascii?Q?9qlK/Ebr63YFutn8hblRxR5J4vGt8vc/0qmQoFWszSaxUK1jz8eXPgb0I/tm?= =?us-ascii?Q?hQciBtGKiEBkxzB7BnbE8d1h/CwydaOrX7ztwMxd89lCNCXykEQUmnFRLBbU?= =?us-ascii?Q?VkPsQzoJ7ZUPnx7ieU8ons6r9oWMqglSMNbYFlGzCEVshzOaY0qZo921OWcV?= =?us-ascii?Q?uP6dh4z3pFcdmy47AsNVd3WjJm9oNYC8Z+UxUNetC5AGEcRX2jXmDvC/ICWT?= =?us-ascii?Q?LVTPmgsEMJ4+c4PJToueMNUncdYcI8S+W44Qde1XPknVy+dLR6/rEo3kwMUn?= =?us-ascii?Q?dMV0zW876N09vB/8Bp6l+nQfbkqD76ZOsnMHm8Y7gV+ryNPs0a3rMcdS4O8U?= =?us-ascii?Q?dG/vwaKSbrE6NuZGg18ubs4CRsg9rX4BUBa/VAFTIhnyMh9Sb3wyyXMG/pfL?= =?us-ascii?Q?7ima+lVD2cQ5poiZmtsIKUYK1gaTgJnQlohfEuaLnVnoNZTyIyChepzYaCnN?= =?us-ascii?Q?ckDvkCCLgCTq6Op9l/Krf35nWYA4dlPJen4hVHZLh++8vJmMnqovYuOcTvdu?= =?us-ascii?Q?GWHtA3afdHHZknJD6iPKuuH1FpKKssJUGGjpukX1aIiFFBrzrujxhmV/dALt?= =?us-ascii?Q?ya2R9vlTTT6Xghs8ZOv1Wn3qq4qN4GdWYxuNC/GEoUodkn2P5bEUDfkKoDeL?= =?us-ascii?Q?8Dx3qBvcxjmpWnWb58pKk4XEf2Z7EJbl0EEKlkg7m8KK2/iXzfhhVQkMXtZM?= =?us-ascii?Q?pz9G8TYrUKVHi6rtgDk1xD3xxDiPxFQwN2xafo8sFm210CWxpz6z+uyuR6qA?= =?us-ascii?Q?iNAEwBRRTMMAtetX+t+DUe4F6IF3nSRtA3AJ7CNoU91cXEQcf5anfDaLHLcI?= =?us-ascii?Q?H6l7QkGJIbB7uObTRwlUUvGo2/YnpAW54zb45AgxbszuBQpMLwJ5e9vmhOe8?= =?us-ascii?Q?JHmSns6+jFc4PPFLnUonTrh48yyszdgejA0Bcmm4sG4FJz508nXfv/Wzsm87?= =?us-ascii?Q?XdyrWDuI/w8PUOJlgv4qrUGgm/CBRzLSAnUOgPKu/PA09wMaNbbeYcYDTQQ4?= =?us-ascii?Q?EJ8RWa5bEn+1dOjwXhVtKtE3TnP+8a8FE5tZp1fTLTAdFuc2/zktbNyWr/hC?= =?us-ascii?Q?gh8zQHIARYyvUh5g17NszDXm0bMyOlmJE5Lrwigy16f41aG+MCOmwIyR+Srh?= =?us-ascii?Q?y5m9JdOgiw0AyiQfZHytjRd3m7dAnxsL3AryVeTc0btE9QQzrl9QzGsxaGOY?= =?us-ascii?Q?xWg9jrTcOYoUDkrjIocBnZRF1OjYHWWPv20/0VDx4hVlZHfC2Q1uqDjlruqs?= =?us-ascii?Q?fcSDJFTts6w5GC/SIrEVj1wpWyGb3L8yL69fxT8tqqK5Gmk9TrlhVGoq06fC?= =?us-ascii?Q?dVH4ZwUBfKOSxGECkz8siQ+TQu8w+GdDpHKRS+IDzVTRW38Oli5GOGglxd/C?= =?us-ascii?Q?bxuN08kpKhEt6eX3/lFM2gv3zRwGduniAUt6aHe21IrH8lpMdee45wH29CQH?= =?us-ascii?Q?swgxnICVbXOgKaKJEKjIu0jJ8FDgmw/RMPVg9xIYz1xsu0wicm99xvOw319r?= =?us-ascii?Q?MCWAYlQHEqVvqjOSUFoGDGPtl2EBmYe+c1q7RyrU1z5No7/Y5w11Uy16++qB?= =?us-ascii?Q?05D8qKZMGDvkykQ98rL18qVuDOTnfDc/IxezR+hxPQAvQaeeC2KkYUyQyHG2?= =?us-ascii?Q?aB9dHXHo+A5/WyXSZrfPkNAOt42X6I4n57uKuW+KO6N8m51+V2AXOCPb1/LA?= =?us-ascii?Q?zLbXLzkvubDPtpCJazN/lbVNWiAsToo=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: 4bf3048d-b2c7-45ec-86d1-08da128944a3 X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 30 Mar 2022 20:09:59.8983 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: pgMUYkdDEkekpiP4IEJ+dVoAH5MI1b3DbuRuuvjUfadoSHT4LfkAfWFjLf/uaDhj7wqifaBxpb0O45gggF4i8fltIBzPEuGJ8lLfJUYmq8A= X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9P251MB0048 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.ext.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_PASS,SPF_PASS, T_SCC_BODY_TEXT_LINE autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH v2] openssh: Version bump. v8.8p1 -> v8.9p1 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.ext.pengutronix.de); SAEximRunCond expanded to false Security miss, integer overflow in the user auth path. Not exploitable due to privsep. * Update license. md5crypt removed, bcrypt relicensed. 4-Clause license removed. * Minor spelling fixes in the license file. * Remove configure option due to the removal of md5crypt. * Add patch to improve detection of -fzero-call-used-regs=all on arm. Signed-off-by: Christian Melki --- ...n-of-fzero-call-used-regs-all-suppor.patch | 31 +++++++++++++++++++ patches/openssh-8.9p1/series | 4 +++ rules/openssh.make | 11 +++---- 3 files changed, 40 insertions(+), 6 deletions(-) create mode 100644 patches/openssh-8.9p1/0001-Improve-detection-of-fzero-call-used-regs-all-suppor.patch create mode 100644 patches/openssh-8.9p1/series diff --git a/patches/openssh-8.9p1/0001-Improve-detection-of-fzero-call-used-regs-all-suppor.patch b/patches/openssh-8.9p1/0001-Improve-detection-of-fzero-call-used-regs-all-suppor.patch new file mode 100644 index 000000000..70b075ae7 --- /dev/null +++ b/patches/openssh-8.9p1/0001-Improve-detection-of-fzero-call-used-regs-all-suppor.patch @@ -0,0 +1,31 @@ +From: Colin Watson +Date: Thu, 24 Feb 2022 16:04:18 +0000 +Subject: [PATCH] Improve detection of -fzero-call-used-regs=all support + +GCC doesn't tell us whether this option is supported unless it runs into +the situation where it would need to emit corresponding code. +--- + m4/openssh.m4 | 3 +++ + 1 file changed, 3 insertions(+) + +diff --git a/m4/openssh.m4 b/m4/openssh.m4 +index 4f9c3792dc17..8c33c701b8b4 100644 +--- a/m4/openssh.m4 ++++ b/m4/openssh.m4 +@@ -14,6 +14,8 @@ AC_DEFUN([OSSH_CHECK_CFLAG_COMPILE], [{ + AC_COMPILE_IFELSE([AC_LANG_SOURCE([[ + #include + #include ++/* Trivial function to help test for -fzero-call-used-regs */ ++void f(int n) {} + int main(int argc, char **argv) { + (void)argv; + /* Some math to catch -ftrapv problems in the toolchain */ +@@ -21,6 +23,7 @@ int main(int argc, char **argv) { + float l = i * 2.1; + double m = l / 0.5; + long long int n = argc * 12345LL, o = 12345LL * (long long int)argc; ++ f(0); + printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o); + /* + * Test fallthrough behaviour. clang 10's -Wimplicit-fallthrough does diff --git a/patches/openssh-8.9p1/series b/patches/openssh-8.9p1/series new file mode 100644 index 000000000..eb319a82b --- /dev/null +++ b/patches/openssh-8.9p1/series @@ -0,0 +1,4 @@ +# generated by git-ptx-patches +#tag:base --start-number 1 +0001-Improve-detection-of-fzero-call-used-regs-all-suppor.patch +# 35e561a03b8e1fd58ce4b40b565cdd3f - git-ptx-patches magic diff --git a/rules/openssh.make b/rules/openssh.make index c801d8a6a..8f48e426e 100644 --- a/rules/openssh.make +++ b/rules/openssh.make @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_OPENSSH) += openssh # # Paths and names # -OPENSSH_VERSION := 8.8p1 -OPENSSH_MD5 := 8ce5f390958baeeab635aafd0ef41453 +OPENSSH_VERSION := 8.9p1 +OPENSSH_MD5 := f33910174f0af52491277211e2b105bb OPENSSH := openssh-$(OPENSSH_VERSION) OPENSSH_SUFFIX := tar.gz OPENSSH_URL := \ @@ -25,8 +25,8 @@ OPENSSH_URL := \ OPENSSH_SOURCE := $(SRCDIR)/$(OPENSSH).$(OPENSSH_SUFFIX) OPENSSH_DIR := $(BUILDDIR)/$(OPENSSH) -OPENSSH_LICENSE := BSD AND BSD-2-Clause AND BSD-3-Clause AND BSD-4-Clause AND MIT AND Beerware AND ISC -OPENSSH_LICENSE_FILES := file://LICENCE;md5=d9d2753bdef9f19466dc7bc959114b11 +OPENSSH_LICENSE := BSD AND BSD-2-Clause AND BSD-3-Clause AND MIT AND Beerware AND ISC +OPENSSH_LICENSE_FILES := file://LICENCE;md5=8baf365614c9bdd63705f298c9afbfb9 # ---------------------------------------------------------------------------- # Prepare @@ -78,8 +78,7 @@ OPENSSH_CONF_OPT := \ --with-privsep-user=sshd \ --with-sandbox=$(OPENSSH_SANDBOX-y) \ --$(call ptx/wwo, PTXCONF_GLOBAL_SELINUX)-selinux \ - --with-privsep-path=/var/run/sshd \ - --without-md5-passwords + --with-privsep-path=/var/run/sshd # ---------------------------------------------------------------------------- # Target-Install -- 2.32.0 _______________________________________________ ptxdist mailing list ptxdist@pengutronix.de To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de