[ptxdist] [PATCH] openssh: Version bump. 10.0p2 -> 10.1p1

[ptxdist] [PATCH] openssh: Version bump. 10.0p2 -> 10.1p1

[Christian Melki]

(openssh.com seems swamped).
https://www.openssh.com/txt/release-10.1
Most interesting bits seems to be the moving of the
sockets used by agent and forwarded sockets from sshd
from /tmp to ~/.ssh/agent.
This could mean a few changes for home directories for
embedded machines. Plus the typical cleanup would
now fall to the agent.

Plugs CVE:
2025-61984: Control characters in usernames when expanding the ProxyCommand string

Signed-off-by: Christian Melki <christian.melki@t2data.com>
---
 rules/openssh.make | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/rules/openssh.make b/rules/openssh.make
index 4eb9448fd..f6abc9b66 100644
--- a/rules/openssh.make
+++ b/rules/openssh.make
@@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_OPENSSH) += openssh
 #
 # Paths and names
 #
-OPENSSH_VERSION	:= 10.0p2
-OPENSSH_MD5	:= 689148621a2eaa734497b12bed1c5202
+OPENSSH_VERSION	:= 10.1p1
+OPENSSH_MD5	:= 80dd9bb00a86519934710d05903fdf07
 OPENSSH		:= openssh-$(OPENSSH_VERSION)
 OPENSSH_SUFFIX	:= tar.gz
 OPENSSH_URL	:= \
-- 
2.43.0

Re: [ptxdist] [APPLIED] openssh: Version bump. 10.0p2 -> 10.1p1

[Michael Olbrich]

Thanks, applied as d0dff9b0a7369e28df1122972e63aa2028aecde7.

Michael

[sent from post-receive hook]

On Fri, 17 Oct 2025 10:20:28 +0200, Christian Melki <christian.melki@t2data.com> wrote:
> (openssh.com seems swamped).
> https://www.openssh.com/txt/release-10.1
> Most interesting bits seems to be the moving of the
> sockets used by agent and forwarded sockets from sshd
> from /tmp to ~/.ssh/agent.
> This could mean a few changes for home directories for
> embedded machines. Plus the typical cleanup would
> now fall to the agent.
> 
> Plugs CVE:
> 2025-61984: Control characters in usernames when expanding the ProxyCommand string
> 
> Signed-off-by: Christian Melki <christian.melki@t2data.com>
> Message-Id: <20251007165623.260039-1-christian.melki@t2data.com>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
> 
> diff --git a/rules/openssh.make b/rules/openssh.make
> index 4eb9448fd28d..f6abc9b66132 100644
> --- a/rules/openssh.make
> +++ b/rules/openssh.make
> @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_OPENSSH) += openssh
>  #
>  # Paths and names
>  #
> -OPENSSH_VERSION	:= 10.0p2
> -OPENSSH_MD5	:= 689148621a2eaa734497b12bed1c5202
> +OPENSSH_VERSION	:= 10.1p1
> +OPENSSH_MD5	:= 80dd9bb00a86519934710d05903fdf07
>  OPENSSH		:= openssh-$(OPENSSH_VERSION)
>  OPENSSH_SUFFIX	:= tar.gz
>  OPENSSH_URL	:= \