From unknown Sat Aug 16 23:42:44 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#64764] [PATCH] gnu: openssh: Update to 9.3p2 [fixes CVE-2023-38408]. Resent-From: iyzsong@envs.net Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Fri, 21 Jul 2023 10:28:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 64764 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 64764@debbugs.gnu.org Cc: =?UTF-8?Q?=E5=AE=8B=E6=96=87=E6=AD=A6?= X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.16899352527307 (code B ref -1); Fri, 21 Jul 2023 10:28:02 +0000 Received: (at submit) by debbugs.gnu.org; 21 Jul 2023 10:27:32 +0000 Received: from localhost ([127.0.0.1]:60617 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qMnMC-0001tn-9L for submit@debbugs.gnu.org; Fri, 21 Jul 2023 06:27:32 -0400 Received: from lists.gnu.org ([2001:470:142::17]:35464) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qMnM8-0001tY-R7 for submit@debbugs.gnu.org; Fri, 21 Jul 2023 06:27:30 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qMnLG-0003NV-2y for guix-patches@gnu.org; Fri, 21 Jul 2023 06:26:35 -0400 Received: from mail.envs.net ([5.199.136.28]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qMnLC-0007ZF-H7 for guix-patches@gnu.org; Fri, 21 Jul 2023 06:26:32 -0400 Received: from localhost (mail.envs.net [127.0.0.1]) by mail.envs.net (Postfix) with ESMTP id 6810738A18D5; Fri, 21 Jul 2023 10:26:24 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=envs.net; s=modoboa; t=1689935184; bh=PTjOd2KmM7+k7OT+j5Ml7fyaGLUCKDkq57R9AI9rUd0=; h=From:To:Cc:Subject:Date:From; b=VE7DFKPudeDJp85FWDeJxVVoyAF/L12mC90Wzsk7C+0YbajRwYRY8K7iZFCS+cEp9 aJHxGYrxMPCahZMeDv3HRp/qfZf5pKwd27fV0BY2aBzP9bgVCKOwUfR5f0isiCQ0G3 Eez3gurueI9EfZLxdOueG+XC3OOV4TBVfbgZtYPDkrvlSPPddn+6+D+XljOkivSZX/ /h7GyANPtiMeAHuMc7pRR/SThb4in0/IwUERUJTRzb/BcaBZJ1bz3ybEQD8RDZ08cK xh+lkbta6CD0l9uR0sEhBk8idvts0yxxTz/FZ3Tde/YA+0nUIoJbKkrVgTWABng/wC fHU2neeEqtXynaE/a6FGo6G/5inuUqNNDo0wwFjLcQRl3E18Is/HL4zFRv3MlJp+uB cpNL6gfvgIS02zcSnWWYslETC7JLlRav9FJQgP4PnQGxRgMXKSinE3SqDmQ/Y3nMdb p8kSWq+7qiVKuxiYcVIzTPpnloFGBTjTN+tS+py5sKgq36hYGmDgPHVjNaZZW8SmEO MBrY2IsS2AIfva2Q3z5Iez5RUf9OieWK5vsmA7kffkZhd9YFjeybI0s3pg/xk33Q9Q DUN9B0fmWpZ46JVHSjus0R/KIvkA3yswFi5g/3ydufq/YjoswDQt+YydjaOxRZlLq6 /q8OWMrKtWmcoUtPEcfa2fTw= X-Virus-Scanned: Debian amavisd-new at mail.envs.net Received: from mail.envs.net ([127.0.0.1]) by localhost (mail.envs.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id e7SrpTmyo4_Y; Fri, 21 Jul 2023 10:26:21 +0000 (UTC) Received: from localhost (unknown [117.174.235.109]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mail.envs.net (Postfix) with ESMTPSA; Fri, 21 Jul 2023 10:26:20 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by localhost (OpenSMTPD) with ESMTP id 72236f4d; Fri, 21 Jul 2023 10:26:06 +0000 (UTC) From: iyzsong@envs.net Date: Fri, 21 Jul 2023 18:25:56 +0800 Message-Id: <4b1e567f0cc72b66bba0943c2392d094112ca0b3.1689935147.git.iyzsong@member.fsf.org> X-Mailer: git-send-email 2.40.1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=5.199.136.28; envelope-from=iyzsong@envs.net; helo=mail.envs.net X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=unavailable autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.9 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.1 (/) From: 宋文武 * gnu/packages/ssh.scm (openssh): Update to 9.3p2. --- gnu/packages/ssh.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/ssh.scm b/gnu/packages/ssh.scm index 0ac9d78482..826edb6996 100644 --- a/gnu/packages/ssh.scm +++ b/gnu/packages/ssh.scm @@ -198,7 +198,7 @@ (define-public libssh2 (define-public openssh (package (name "openssh") - (version "9.3p1") + (version "9.3p2") (source (origin (method url-fetch) (uri (string-append "mirror://openbsd/OpenSSH/portable/" @@ -207,7 +207,7 @@ (define-public openssh "openssh-trust-guix-store-directory.patch")) (sha256 (base32 - "1a7qia3c255igny5kf00m5zxkp69lf1w6qjsv3rm2sm705vvmfp9")))) + "1s3nqv57r3l7avsdkzwd575dvxra8h19xpqczl0z3cvcgwabw3i0")))) (build-system gnu-build-system) (native-inputs (list groff pkg-config)) (inputs `(("libedit" ,libedit) base-commit: 182be30fb1a8b847c30492462ec22c08ec7a9849 -- 2.40.1 From unknown Sat Aug 16 23:42:44 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: iyzsong@envs.net Subject: bug#64764: closed (Re: bug#64764: [PATCH] gnu: openssh: Update to 9.3p2 [fixes CVE-2023-38408].) Message-ID: References: <87mszon322.fsf@envs.net> <4b1e567f0cc72b66bba0943c2392d094112ca0b3.1689935147.git.iyzsong@member.fsf.org> X-Gnu-PR-Message: they-closed 64764 X-Gnu-PR-Package: guix-patches X-Gnu-PR-Keywords: patch Reply-To: 64764@debbugs.gnu.org Date: Sat, 22 Jul 2023 01:34:01 +0000 Content-Type: multipart/mixed; boundary="----------=_1689989641-17039-1" This is a multi-part message in MIME format... ------------=_1689989641-17039-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #64764: [PATCH] gnu: openssh: Update to 9.3p2 [fixes CVE-2023-38408]. which was filed against the guix-patches package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 64764@debbugs.gnu.org. --=20 64764: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D64764 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1689989641-17039-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 64764-done) by debbugs.gnu.org; 22 Jul 2023 01:33:09 +0000 Received: from localhost ([127.0.0.1]:35091 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qN1Ub-0004Pn-9m for submit@debbugs.gnu.org; Fri, 21 Jul 2023 21:33:09 -0400 Received: from mail.envs.net ([5.199.136.28]:39714) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qN1UY-0004Pc-1r for 64764-done@debbugs.gnu.org; Fri, 21 Jul 2023 21:33:07 -0400 Received: from localhost (mail.envs.net [127.0.0.1]) by mail.envs.net (Postfix) with ESMTP id F17CA38A18D8; Sat, 22 Jul 2023 01:33:03 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=envs.net; s=modoboa; t=1689989584; bh=Ch4JFtZ41KcfQbdHJcuJWfJlsJLLFNLKbyxaxznFrQ8=; h=From:To:Cc:Subject:References:Date:In-Reply-To:From; b=XsW+cCN0f8O+LRyVcrVhgdKnlYqWq7iWJj/kGmW6F8qOjRkyc2wOSUkm/6RrjGySl fjDvoO/m+klwdQUhEdSCkJrCH61KEZGkfpTEjK5xFEb+gGkIwc2QtC7cmjOrSOZgE0 IYEB4PsMZmd8xxi7dBT7WNoSolF+WMr8l5o0ag3oho2H6xV5q2g4zU5H0w4/9IkLNu TctSTS1Jb+IkZ+qB0Jfr07e56mn3rvzCs/QLJ9DcLj78uH8NsFADYFZ5/4MQGY7DxA 6M635IMFBSbdV75ji72MopJRbMzH9IiloWnJLNiAuo/byYDb+4gimeZSxvzvwNBjyr qPauZlcZ/YTEEcwZVe0N4QuWLU7kubJttKTnkISFeWUzJQ6kvURzjX9KQygZIw1Slq foaC2ph+EN1QW4/ykDXhESbuOb6XbEYF/+om/RGBwa1UI/O8rspNJvPqPszV2D0tCq 7dnyKc0x+E4L0chwQlZvH/NoQrVsozGow51vbatGcKP6BbBfQOC98GmjCL9mXPwyhn pJIzMjluBfNlTVyJ+txBQtnf0tO7StOfcZfstzlU8q1lp0lz0kJivuevmpIxwDybb1 jYSQVZMvXF3PZvOhNxI5tOCNx+5Af9HJa0996TztDSKpqf7OJcDa2WJcrOBjtPNWIF 7v53FxQ/5UyJZtoyv4A+ZCOw= X-Virus-Scanned: Debian amavisd-new at mail.envs.net Received: from mail.envs.net ([127.0.0.1]) by localhost (mail.envs.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id uWM9MRFVXA70; Sat, 22 Jul 2023 01:33:00 +0000 (UTC) Received: from localhost (unknown [117.174.235.109]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mail.envs.net (Postfix) with ESMTPSA; Sat, 22 Jul 2023 01:33:00 +0000 (UTC) Received: from localhost (localhost [local]) by localhost (OpenSMTPD) with ESMTPA id 0e3a33d6; Sat, 22 Jul 2023 01:32:53 +0000 (UTC) From: =?utf-8?B?5a6L5paH5q2m?= To: 64764-done@debbugs.gnu.org Subject: Re: bug#64764: [PATCH] gnu: openssh: Update to 9.3p2 [fixes CVE-2023-38408]. References: <4b1e567f0cc72b66bba0943c2392d094112ca0b3.1689935147.git.iyzsong@member.fsf.org> Date: Sat, 22 Jul 2023 09:32:53 +0800 In-Reply-To: <4b1e567f0cc72b66bba0943c2392d094112ca0b3.1689935147.git.iyzsong@member.fsf.org> (iyzsong@envs.net's message of "Fri, 21 Jul 2023 18:25:56 +0800") Message-ID: <87mszon322.fsf@envs.net> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.2 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -0.0 (/) X-Debbugs-Envelope-To: 64764-done Cc: =?utf-8?B?5a6L5paH5q2m?= X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Closed by commit 43726107316849c258158ceb875d2e20dee35450. ------------=_1689989641-17039-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 21 Jul 2023 10:27:32 +0000 Received: from localhost ([127.0.0.1]:60617 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qMnMC-0001tn-9L for submit@debbugs.gnu.org; Fri, 21 Jul 2023 06:27:32 -0400 Received: from lists.gnu.org ([2001:470:142::17]:35464) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qMnM8-0001tY-R7 for submit@debbugs.gnu.org; Fri, 21 Jul 2023 06:27:30 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qMnLG-0003NV-2y for guix-patches@gnu.org; Fri, 21 Jul 2023 06:26:35 -0400 Received: from mail.envs.net ([5.199.136.28]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qMnLC-0007ZF-H7 for guix-patches@gnu.org; Fri, 21 Jul 2023 06:26:32 -0400 Received: from localhost (mail.envs.net [127.0.0.1]) by mail.envs.net (Postfix) with ESMTP id 6810738A18D5; Fri, 21 Jul 2023 10:26:24 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=envs.net; s=modoboa; t=1689935184; bh=PTjOd2KmM7+k7OT+j5Ml7fyaGLUCKDkq57R9AI9rUd0=; h=From:To:Cc:Subject:Date:From; b=VE7DFKPudeDJp85FWDeJxVVoyAF/L12mC90Wzsk7C+0YbajRwYRY8K7iZFCS+cEp9 aJHxGYrxMPCahZMeDv3HRp/qfZf5pKwd27fV0BY2aBzP9bgVCKOwUfR5f0isiCQ0G3 Eez3gurueI9EfZLxdOueG+XC3OOV4TBVfbgZtYPDkrvlSPPddn+6+D+XljOkivSZX/ /h7GyANPtiMeAHuMc7pRR/SThb4in0/IwUERUJTRzb/BcaBZJ1bz3ybEQD8RDZ08cK xh+lkbta6CD0l9uR0sEhBk8idvts0yxxTz/FZ3Tde/YA+0nUIoJbKkrVgTWABng/wC fHU2neeEqtXynaE/a6FGo6G/5inuUqNNDo0wwFjLcQRl3E18Is/HL4zFRv3MlJp+uB cpNL6gfvgIS02zcSnWWYslETC7JLlRav9FJQgP4PnQGxRgMXKSinE3SqDmQ/Y3nMdb p8kSWq+7qiVKuxiYcVIzTPpnloFGBTjTN+tS+py5sKgq36hYGmDgPHVjNaZZW8SmEO MBrY2IsS2AIfva2Q3z5Iez5RUf9OieWK5vsmA7kffkZhd9YFjeybI0s3pg/xk33Q9Q DUN9B0fmWpZ46JVHSjus0R/KIvkA3yswFi5g/3ydufq/YjoswDQt+YydjaOxRZlLq6 /q8OWMrKtWmcoUtPEcfa2fTw= X-Virus-Scanned: Debian amavisd-new at mail.envs.net Received: from mail.envs.net ([127.0.0.1]) by localhost (mail.envs.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id e7SrpTmyo4_Y; Fri, 21 Jul 2023 10:26:21 +0000 (UTC) Received: from localhost (unknown [117.174.235.109]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mail.envs.net (Postfix) with ESMTPSA; Fri, 21 Jul 2023 10:26:20 +0000 (UTC) Received: from localhost.localdomain (localhost [127.0.0.1]) by localhost (OpenSMTPD) with ESMTP id 72236f4d; Fri, 21 Jul 2023 10:26:06 +0000 (UTC) From: iyzsong@envs.net To: guix-patches@gnu.org Subject: [PATCH] gnu: openssh: Update to 9.3p2 [fixes CVE-2023-38408]. Date: Fri, 21 Jul 2023 18:25:56 +0800 Message-Id: <4b1e567f0cc72b66bba0943c2392d094112ca0b3.1689935147.git.iyzsong@member.fsf.org> X-Mailer: git-send-email 2.40.1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=5.199.136.28; envelope-from=iyzsong@envs.net; helo=mail.envs.net X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001, T_SCC_BODY_TEXT_LINE=-0.01 autolearn=unavailable autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.9 (/) X-Debbugs-Envelope-To: submit Cc: =?UTF-8?q?=E5=AE=8B=E6=96=87=E6=AD=A6?= X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.1 (/) From: 宋文武 * gnu/packages/ssh.scm (openssh): Update to 9.3p2. --- gnu/packages/ssh.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/ssh.scm b/gnu/packages/ssh.scm index 0ac9d78482..826edb6996 100644 --- a/gnu/packages/ssh.scm +++ b/gnu/packages/ssh.scm @@ -198,7 +198,7 @@ (define-public libssh2 (define-public openssh (package (name "openssh") - (version "9.3p1") + (version "9.3p2") (source (origin (method url-fetch) (uri (string-append "mirror://openbsd/OpenSSH/portable/" @@ -207,7 +207,7 @@ (define-public openssh "openssh-trust-guix-store-directory.patch")) (sha256 (base32 - "1a7qia3c255igny5kf00m5zxkp69lf1w6qjsv3rm2sm705vvmfp9")))) + "1s3nqv57r3l7avsdkzwd575dvxra8h19xpqczl0z3cvcgwabw3i0")))) (build-system gnu-build-system) (native-inputs (list groff pkg-config)) (inputs `(("libedit" ,libedit) base-commit: 182be30fb1a8b847c30492462ec22c08ec7a9849 -- 2.40.1 ------------=_1689989641-17039-1--