From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Tue, 07 Oct 2025 18:57:11 +0200 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1v6Azv-005JWr-1K for lore@lore.pengutronix.de; Tue, 07 Oct 2025 18:57:11 +0200 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1v6Azv-0003gn-38; Tue, 07 Oct 2025 18:57:11 +0200 Received: from mail-northeuropeazon11022124.outbound.protection.outlook.com ([52.101.66.124] helo=DUZPR83CU001.outbound.protection.outlook.com) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1v6Azi-0003ge-4b for ptxdist@pengutronix.de; Tue, 07 Oct 2025 18:56:58 +0200 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=J0U0zbiIfmXoAabDBr6Grsrkk5yQjUI2L/DXMrVadEeb01VQUq60bB+JjC/CypWanTVrFGAmQ8oMEegycQ5FjX7NbvteRTqVQyE0A9U/0VtLqESoaMXoyTVSMxgQHDMd69oes9JwnUf1LiAYXDkA5rWD+QmLwEPzJtKenj0utZrC1jI1rx1d0qVWvuAVkK+TEr8Hj37N/osUgQdZRz75C3IwwxycPqo9LnQvDra5oKtfXqc7PcrRA9QH8ii1ceW2J28I8fgKyABP0es0o26uWTp8TArAw0mZvzruJ9biNHa3hF2Q23XCiqhi0E4n/0gmrml6PU3+TsGz2MBdMIgYHg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=7YaqNey9ErD2fo8+qe5ZZnp94TV7VrXRV/5rzKt/Xh4=; b=QU+vhrBPAgffOhlHqL0zrPSw9uIV6GkySEDzBEu99WofTieJxQ9EgnfdMsR7Ycxh5avgDYTLQpBpHtZTo4EDdevKgHrfb2v3IGPro0QMs2vSDobvf1+CAKA6nzX+ImYDNBrJ9NRXhLyzFcpSxQBTBrFxtiffT7EBWtjZp3k8VZ0eX3SIQK8TiYAxpSZi6OI0o5cNaiFA4PsVmhHpks/dzqRl6YcoTWewBvKLu+EyD/bvhRjmY4AYJuxit3ge3C2F+balC0MjhCGfJ/2/H6Gkp/YIJl9fCpg1uL113w3qumTPh8209kZAUzaYfRiJzC5psDvEdTuJ403K0LEn4+P5qQ== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=t2data.com; dmarc=pass action=none header.from=t2data.com; dkim=pass header.d=t2data.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=t2datacom.onmicrosoft.com; s=selector1-t2datacom-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=7YaqNey9ErD2fo8+qe5ZZnp94TV7VrXRV/5rzKt/Xh4=; b=hQLWTXToeEiyNNRBbFLGvE7kgr+OdxgE+U9kbqHO4kI+xkpOq+YGBLsrXz1UqpajYmFx6WoTxtyUBXVC+VS2vhCTSxbTumtQROxTCWdlUWJbZcnUXnHm3Dq010j5qA4xls+8W31NaqoTrBr5HncUwvEs/uLHOi6do1yxBP24vsw= Authentication-Results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=t2data.com; Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) by AS8P251MB1030.EURP251.PROD.OUTLOOK.COM (2603:10a6:20b:54b::5) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.9203.9; Tue, 7 Oct 2025 16:56:54 +0000 Received: from DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19]) by DB9P251MB0618.EURP251.PROD.OUTLOOK.COM ([fe80::a4b2:58d7:8549:4b19%5]) with mapi id 15.20.9203.007; Tue, 7 Oct 2025 16:56:54 +0000 From: Christian Melki To: ptxdist@pengutronix.de Date: Tue, 7 Oct 2025 18:56:23 +0200 Message-ID: <20251007165623.260039-1-christian.melki@t2data.com> X-Mailer: git-send-email 2.43.0 Content-Transfer-Encoding: 8bit Content-Type: text/plain X-ClientProxiedBy: GVX0EPF00011B5D.SWEP280.PROD.OUTLOOK.COM (2603:10a6:144:1:0:8:0:15) To DB9P251MB0618.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:334::22) MIME-Version: 1.0 X-MS-PublicTrafficType: Email X-MS-TrafficTypeDiagnostic: DB9P251MB0618:EE_|AS8P251MB1030:EE_ X-MS-Office365-Filtering-Correlation-Id: caaf66d7-655d-46cd-d8e4-08de05c2844b X-MS-Exchange-SenderADCheck: 1 X-MS-Exchange-AntiSpam-Relay: 0 X-Microsoft-Antispam: BCL:0; ARA:13230040|366016|52116014|376014|1800799024|38350700014; X-Microsoft-Antispam-Message-Info: =?us-ascii?Q?YJt5XOgdg7UQESOlvoqeDR8U97tNxmTC2/pmBf+an4XZtyXflkf89rZTfIB9?= =?us-ascii?Q?VXrcRDEK5H526LLhpOdD2VNbvb4Fu2uybF6uBZlVEu76P2FgUbJGmow3yOFa?= =?us-ascii?Q?6zQtpAls+2G7ErOpyt4BxixrjZEPKPRPpImEaX7JQ+Y6HhQ9Wy47lxdbvxW7?= =?us-ascii?Q?rxtUlhrGZHFfwF3U+Vi3Tpe3zor/SEpbaz1a3VHA6THINlxTk2Jn/n9DYBlB?= =?us-ascii?Q?e5u97Ywf7sGhDeYpylJxZeHBRSenSlXE0WmP6E3f1wL2ksQdDcEmgCSXfUgj?= =?us-ascii?Q?MolwfADZGnQ55/qP5M9SPef/X/jZSEDavD3IOadL+/jdEeSCu9r2qvsedF7L?= =?us-ascii?Q?xRAAk5GvVqk3wAnUX4VRsg+aPMLaf+Q7M73dPJgqHmdgFoD/6Ek38lY/PRvs?= =?us-ascii?Q?4Wh9j+hOkru7DHjrR0Z6urCA+w2bfanuHUA3M00cnDOo/95X8QLTcvFbtUeZ?= =?us-ascii?Q?8BC6W2YGG4MIPHh3UEZ2EO0OqhugWy6rTGEynmFhoJgXWUjctB7zrGid4xpk?= =?us-ascii?Q?PivJRSHeMHRUD/rk6cVc3oTQzqXNj21qIyKG57deeA14Vk9e+GVEecJGWqQM?= =?us-ascii?Q?lNv5EXq2Wu2wmduf2js+zqgxRF9z9yld0S9WskKrMPc38D0FpiyWJagrGMDI?= =?us-ascii?Q?NBC/X2szWFDy0o8JFUnf7FnePULu4SaS43HxiLR9q9DYot6riOVqonT3KHOX?= =?us-ascii?Q?lg1LI7wjWk3vlqfJbIL+s1e0O3vOTR1PwySavClNwKS/VngX0W0Fi+4tyhQN?= =?us-ascii?Q?NfPaLc5x3UwLjtvOcEmvGjZW7xMz+ehOM2apFLxL419X17n0CUxW480OS7S6?= =?us-ascii?Q?lS16bjMGrYGoByfk9E4Ktfar79BU6ivefOdV8JQHExq6dMIDBw1LCAOqWYAv?= =?us-ascii?Q?Q3RZibq/FjOMxvrVzT8uIbjmiv+WQsNjSW9CMFVf6VAl+0cS3bZxGxCBJjZZ?= =?us-ascii?Q?wK//H9htXLmQujuBn6o53LYZ49kWkX6Z+6zSMx8syGy7JkCkJHi6VyQhAWR8?= =?us-ascii?Q?ABrx+HqJvn93oNlH+0VD+Pz1Qq7sxX/JcYDb1c+w3BSIurvJvoAxCxxIc8TF?= =?us-ascii?Q?eqVqV6A3bfRniER1weqxqsUm6AfReYTmyxgBIt2zeg90uW65rMVTr4S3igZ+?= =?us-ascii?Q?CSSuKBZ9m+Eg3R68ujsdKHrQk34+cbSxg7rEtjyJzctQDoyrs3yA6gmB1ji7?= =?us-ascii?Q?7WY+z1tVIB2VLKI4GpwjsblhZN9Jlf52sl9FzEMfOjW3bbGaBrBpkTDRapKJ?= =?us-ascii?Q?rByY7HGevUB8FLbCV/6wDz4Jolv/pb8eNjMN9vvvCBwQjkanuDys11cCEK8U?= =?us-ascii?Q?40g+yh0Z9/NG4DowAsJjMHSEq1UbCHdT9eIEzlCsPntT9EsTW66+obVVX6aW?= =?us-ascii?Q?ZSX+zIFXYBOlWMWgaw+QgJY94MtDO6Oc3GsgI3xIBpnt00KVFWlJziDeukiT?= =?us-ascii?Q?5+m5vHX0Z87fe8iTXdev2JdMemhteyCj2wpTUdRzTuwDU/L81MbX7g=3D=3D?= X-Forefront-Antispam-Report: CIP:255.255.255.255; CTRY:; LANG:en; SCL:1; SRV:; IPV:NLI; SFV:NSPM; H:DB9P251MB0618.EURP251.PROD.OUTLOOK.COM; PTR:; CAT:NONE; SFS:(13230040)(366016)(52116014)(376014)(1800799024)(38350700014); DIR:OUT; SFP:1102; X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1 X-MS-Exchange-AntiSpam-MessageData-0: =?us-ascii?Q?xosahwc054Ey2eortjZwt+CMkLz/eFY6g8hqfKhTO1BJOyEYgxKJpVm4nDxW?= =?us-ascii?Q?9YALQw1Xdb+T+p11CkxwcP5mMI7LvQnsWQ58iKoDZEM1nmVIb0WYkVRwH/0v?= =?us-ascii?Q?EPwUWpERmpj5NpLc2nizhe0zyfKdXVUSARksa3lSGn3OY0UUbCrK0+W2iz7d?= =?us-ascii?Q?5YX5StKruAsLYnJVHEqXFGOEdCeR11DA2RqgUpMdsZBphumhxCerpa31rBM0?= =?us-ascii?Q?ZKszNDkgguHhmvaEhUgh5Vd8zrZw5qYB9eSI6eY6P2MTuxwI2sMOKf31eU7v?= =?us-ascii?Q?0oqNyqo5mzpOpOuZPUaOYkukiOBXJjvBiwoPOxiyW/9iCBqP5gWOgb7CALZP?= =?us-ascii?Q?jWLRBrjRQoBo8fqqNToAIM3A/pKIgTiA6Qqbpdfov1g6fpf6Z9fGuPar0UMO?= =?us-ascii?Q?VkAFYtv65TTxJLUq9JZ+L3k1NHh0xSu5Lem2i1fqR9oFhLe01PgWGxrYEVKl?= =?us-ascii?Q?kUk81JsqLA3/oqJwB9seScJs4DJcHubiJOzwteRBJlJ6Ht1NHM/F3yiR5nzG?= =?us-ascii?Q?ye6EpmsZCbQ47AOzSUdwXh2q6Q8JE95MyGJfqb7UnKHw5UUuKi1IW6O5dFVJ?= =?us-ascii?Q?jtI1afF5AhEgAnSu1tRCo+akNXjZOS2En+gELqTFMxjjl92+nC4uo02eZjyv?= =?us-ascii?Q?mOGf1Bt1fvnN5Hi5I9K314jbGQeRDCRL6e7oAw5vbsjlES8oudF0nzctjx44?= =?us-ascii?Q?+L7bDTU17PTRmkrHeFh8Tjt2JY21VIT5aqU+48PtuaVfP3HoxjOXf+qwGRdM?= =?us-ascii?Q?GAUIWwQTYZC+i2Z4r5yqNwF0Az4Bi3DWEUltmvFhXZ8gFgdMdQ0zUQk/VPYZ?= =?us-ascii?Q?Ebs9SqJxiluNk7m+I82vvbrGptKHYWx4uOGmO2tH+6ynUTSvT32lX+wY0E1o?= =?us-ascii?Q?R8jk/qZtg/56M7edId2QjktWEc7+VUyLZSNF5LMs+X88pKUttTbp1kbq7gV1?= =?us-ascii?Q?9cN6bVveaGg/sxuwJx9PUCQH6E5uuqz9o9VloTf5fhwPoeI4X+3kMQL6c8Bj?= =?us-ascii?Q?+xQ0KL6mt5xs05KtRXbjHuyF+2Oc5BSnnA00SuEBSKzhYF5p0jgSkMw80xX8?= =?us-ascii?Q?BJJ+bKuVhglOMMnkjf4RjJ6FtnctSVoKVup8x023nxbBEnczakLWPq/K56dF?= =?us-ascii?Q?CW/bdcMvmi/EPVzxVdDos6whUgapri10qZLuOsHP/W+r/SszgCB7ChCm39PM?= =?us-ascii?Q?/otmTsNKXKskLnUBlOnsZIx4gK1dsLgTzVibkn5juA/En1w1KStYc7prPtZW?= =?us-ascii?Q?E2AiN1+5fC+NDnfx74XOOmRzR2Np5SDBFQJEKTgjzJ6ny4u5xslSU7qAM/NJ?= =?us-ascii?Q?SdeJnKGHPqQEQ/3hQlIfOt3n+smDUyy5/umIOuvV3ymJTCHv+FxJ1OdbR6zA?= =?us-ascii?Q?bLxrJ6VKrTT+MLKgD2z8qRpuenL880LhhFFJgMGZ1GigBpOFokZ3SFs7zmLG?= =?us-ascii?Q?q6wh4NszLggw/tIscl89jwWYYzFDV/P9hCUj2/fGQUS0UseV2PCySwBZDbHd?= =?us-ascii?Q?EgbK+JZBa3eMHdSb3N3I4hcQ10UyBqQfuOmAjznlcz7crL00B2hzSmw85irq?= =?us-ascii?Q?ynDbG0B1KBAzAYM+ZAkKf+S5GGjHoO7r+6NA1eFKzHVvjRNlg685QfFs2V/J?= =?us-ascii?Q?1w=3D=3D?= X-OriginatorOrg: t2data.com X-MS-Exchange-CrossTenant-Network-Message-Id: caaf66d7-655d-46cd-d8e4-08de05c2844b X-MS-Exchange-CrossTenant-AuthSource: DB9P251MB0618.EURP251.PROD.OUTLOOK.COM X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-OriginalArrivalTime: 07 Oct 2025 16:56:53.9246 (UTC) X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted X-MS-Exchange-CrossTenant-Id: 27928da5-aacd-4ba1-9566-c748a6863e6c X-MS-Exchange-CrossTenant-MailboxType: HOSTED X-MS-Exchange-CrossTenant-UserPrincipalName: MjxfeAXC/Ga/ul2Zz6zOWEpt3j5Q61CTHmR5ngQQ6jvNa5G5jA9IGu7HGgb8NmPe3n2I0OItYh6U+pfcJyRy0WB+TM47zZ5KINHaZnc9Hlo= X-MS-Exchange-Transport-CrossTenantHeadersStamped: AS8P251MB1030 X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-2.1 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED, SPF_HELO_PASS,SPF_PASS autolearn=ham autolearn_force=no version=3.4.2 Subject: [ptxdist] [PATCH] openssh: Version bump. 10.0p2 -> 10.1p1 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false (openssh.com seems swamped). https://www.openssh.com/txt/release-10.1 Most interesting bits seems to be the moving of the sockets used by agent and forwarded sockets from sshd from /tmp to ~/.ssh/agent. This could mean a few changes for home directories for embedded machines. Plus the typical cleanup would now fall to the agent. Plugs CVE: 2025-61984: Control characters in usernames when expanding the ProxyCommand string Signed-off-by: Christian Melki --- rules/openssh.make | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/rules/openssh.make b/rules/openssh.make index 4eb9448fd..f6abc9b66 100644 --- a/rules/openssh.make +++ b/rules/openssh.make @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_OPENSSH) += openssh # # Paths and names # -OPENSSH_VERSION := 10.0p2 -OPENSSH_MD5 := 689148621a2eaa734497b12bed1c5202 +OPENSSH_VERSION := 10.1p1 +OPENSSH_MD5 := 80dd9bb00a86519934710d05903fdf07 OPENSSH := openssh-$(OPENSSH_VERSION) OPENSSH_SUFFIX := tar.gz OPENSSH_URL := \ -- 2.43.0