Subject: bug#67938: closed (Re: [bug#67938] [PATCH v2] gnu: libssh: Update to 0.10.6 [security-fixes].)

From: [email-masked] (GNU bug Tracking System)
Date: Thu, 21 Dec 2023 19:28:02 +0000

Your bug report

#67938: [PATCH] gnu: libssh: Update to 0.10.6 [security-fixes].

which was filed against the guix-patches package, has been closed.

The explanation is attached below, along with your original report.
If you require more details, please reply to [email-masked].

-- 
67938: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=67938
GNU Bug Tracking System
Contact [email-masked] with problems

Subject: Re: [bug#67938] [PATCH v2] gnu: libssh: Update to 0.10.6 [security-fixes].
From: John Kehayias <[email-masked]>
To: Jack Hill <[email-masked]>
Cc: [email-masked]
Date: Thu, 21 Dec 2023 19:27:27 +0000
List-Id: <debbugs-submit.debbugs.gnu.org>

On Wed, Dec 20, 2023 at 12:51 PM, Jack Hill wrote:

> Fixes CVE-2023-6004, CVE-2023-48795, and CVE-2023-6918.
>
> * gnu/packages/ssh.scm (libssh): Update to 0.10.6.
>
> Change-Id: Ie9d304d78b2629f41af9836e5c7eab5df6f26bb5
> ---
>
> Sending again as I put the wrong branch prefix in the fist mail.
>
>  gnu/packages/ssh.scm | 4 ++--
>  1 file changed, 2 insertions(+), 2 deletions(-)
>
> diff --git a/gnu/packages/ssh.scm b/gnu/packages/ssh.scm
> index 47089b197d..79ec702ebf 100644
> --- a/gnu/packages/ssh.scm
> +++ b/gnu/packages/ssh.scm
> @@ -132,7 +132,7 @@ (define-public hss
>  (define-public libssh
>    (package
>      (name "libssh")
> -    (version "0.10.5")
> +    (version "0.10.6")
>      (source (origin
>                (method url-fetch)
>                (uri (string-append "https://www.libssh.org/files/"
> @@ -140,7 +140,7 @@ (define-public libssh
>                                    "/libssh-" version ".tar.xz"))
>                (sha256
>                 (base32
> -                "0d22gq77ga24ijlgr3d1wvhfvprx61iklkb3npifxfb7ygvjy3mn"))
> +                "1hcxvsb4brznxqq6cjwxkk7yv4c48w4fcwxwd8dp9wdnyncd8q8q"))
>                (modules '((guix build utils)))
>                (snippet
>                 ;; 'PATH_MAX' is undefined on GNU/Hurd; work around it.
>
> base-commit: aa22cdd363d3b2cf64586ccee918531aa53ef365

Thanks! Pushed as 97e517a5682af0fc031a5b7b1abf6d7c6ec2b2c9.

Subject: [PATCH core-updates-frozen] gnu: libssh: Update to 0.10.6 [security-fixes].
From: Jack Hill <[email-masked]>
To: [email-masked]
Date: Wed, 20 Dec 2023 12:47:13 -0500
List-Id: <debbugs-submit.debbugs.gnu.org>

Fixes CVE-2023-6004, CVE-2023-48795, and CVE-2023-6918.

* gnu/packages/ssh.scm (libssh): Update to 0.10.6.

Change-Id: Ie9d304d78b2629f41af9836e5c7eab5df6f26bb5
---
 gnu/packages/ssh.scm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/gnu/packages/ssh.scm b/gnu/packages/ssh.scm
index 47089b197d..79ec702ebf 100644
--- a/gnu/packages/ssh.scm
+++ b/gnu/packages/ssh.scm
@@ -132,7 +132,7 @@ (define-public hss
 (define-public libssh
   (package
     (name "libssh")
-    (version "0.10.5")
+    (version "0.10.6")
     (source (origin
               (method url-fetch)
               (uri (string-append "https://www.libssh.org/files/"
@@ -140,7 +140,7 @@ (define-public libssh
                                   "/libssh-" version ".tar.xz"))
               (sha256
                (base32
-                "0d22gq77ga24ijlgr3d1wvhfvprx61iklkb3npifxfb7ygvjy3mn"))
+                "1hcxvsb4brznxqq6cjwxkk7yv4c48w4fcwxwd8dp9wdnyncd8q8q"))
               (modules '((guix build utils)))
               (snippet
                ;; 'PATH_MAX' is undefined on GNU/Hurd; work around it.

base-commit: aa22cdd363d3b2cf64586ccee918531aa53ef365
-- 
2.41.0