From unknown Tue Jun 17 01:41:50 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#76397] [PATCH] gnu: openssh: Update to 9.9p2. [security fixes] Resent-From: ashish.is@lostca.se Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Tue, 18 Feb 2025 16:55:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 76397 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 76397@debbugs.gnu.org Cc: Ashish SHUKLA X-Debbugs-Original-To: guix-patches@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.173989767712810 (code B ref -1); Tue, 18 Feb 2025 16:55:01 +0000 Received: (at submit) by debbugs.gnu.org; 18 Feb 2025 16:54:37 +0000 Received: from localhost ([127.0.0.1]:60005 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tkQrk-0003KT-QB for submit@debbugs.gnu.org; Tue, 18 Feb 2025 11:54:37 -0500 Received: from lists.gnu.org ([2001:470:142::17]:57612) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1tkQrh-0003JU-Sr for submit@debbugs.gnu.org; Tue, 18 Feb 2025 11:54:34 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tkQra-0005lm-0h for guix-patches@gnu.org; Tue, 18 Feb 2025 11:54:26 -0500 Received: from anamika.lostca.se ([2a01:4f9:3b:505c::2]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1tkQrY-0003zd-4E for guix-patches@gnu.org; Tue, 18 Feb 2025 11:54:25 -0500 Received: from localhost.localdomain (unknown [IPv6:2a02:9140:3880:f000:3b70:9c88:eeb8:d5f3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: abbe) by anamika.lostca.se (Postfix) with ESMTPSA id E084EA2B2; Tue, 18 Feb 2025 16:54:20 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lostca.se; s=anamika; t=1739897661; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=+Qg14gvCdGbi4TELz5aufSmuy3K93D6/PK38EUg5rc4=; b=mOoytPetfnCjvx6o8bT40poK55VKkAF4NKUHorD+f8KcMpHrwBYDSAgVudFY96QkpH5WgQ XtW0g2YT09XBW2T/AfAuz4OR1Blyqzu271Y6KS8tMvBxUlLN14IE1OSyY+l/di/Q1kV9tJ z2gqhQZMdLuJ0fcV4c/5tywPlYiw7y0= From: ashish.is@lostca.se Date: Tue, 18 Feb 2025 17:54:01 +0100 Message-ID: X-Mailer: git-send-email 2.48.1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=2a01:4f9:3b:505c::2; envelope-from=ashish.is@lostca.se; helo=anamika.lostca.se X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.9 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.1 (/) From: Ashish SHUKLA This release fixes CVE-2025-26465, CVE-2025-26466 vulnerabilities. * gnu/packages/ssh.scm (openssh): Update to 9.9p2. Change-Id: Ic9b3c97b15779f21b1efa4fb5c51e7f16a424ee9 --- gnu/packages/ssh.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/ssh.scm b/gnu/packages/ssh.scm index c4727b1c51..fecb3a2559 100644 --- a/gnu/packages/ssh.scm +++ b/gnu/packages/ssh.scm @@ -209,7 +209,7 @@ (define-public libssh2 (define-public openssh (package (name "openssh") - (version "9.9p1") + (version "9.9p2") (source (origin (method url-fetch) @@ -217,7 +217,7 @@ (define-public openssh "openssh-" version ".tar.gz")) (patches (search-patches "openssh-trust-guix-store-directory.patch")) (sha256 - (base32 "00kcjs7vm1vha3xvgrkb0qv7v6pwskb1avkfk2qiazzqpz6znhxk")))) + (base32 "0wsn44g75qa1bfp6qkcr9nlmyn02klcy2rgrvmg2ik087rhdpali")))) (build-system gnu-build-system) (arguments (list base-commit: 96fe9adf54772e0824e098a6a089306a75101218 -- 2.48.1 From unknown Tue Jun 17 01:41:50 2025 X-Loop: help-debbugs@gnu.org Subject: [bug#76397] [PATCH] gnu: openssh: Update to 9.9p2. [security fixes] Resent-From: Leo Famulari Original-Sender: "Debbugs-submit" Resent-CC: guix-patches@gnu.org Resent-Date: Wed, 19 Feb 2025 04:24:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 76397 X-GNU-PR-Package: guix-patches X-GNU-PR-Keywords: patch To: 76397@debbugs.gnu.org Cc: Ashish SHUKLA , 76397-done@debbugs.gnu.org X-Debbugs-Original-To: "ashish.is--- via Guix-patches via" Received: via spool by submit@debbugs.gnu.org id=B.173993899226371 (code B ref -1); Wed, 19 Feb 2025 04:24:02 +0000 Received: (at submit) by debbugs.gnu.org; 19 Feb 2025 04:23:12 +0000 Received: from localhost ([127.0.0.1]:39099 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tkbc7-0006rA-FA for submit@debbugs.gnu.org; Tue, 18 Feb 2025 23:23:12 -0500 Received: from lists.gnu.org ([2001:470:142::17]:50564) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1tkbby-0006oz-Sc for submit@debbugs.gnu.org; Tue, 18 Feb 2025 23:23:05 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tkbbt-0002h5-8q for guix-patches@gnu.org; Tue, 18 Feb 2025 23:22:57 -0500 Received: from fhigh-a8-smtp.messagingengine.com ([103.168.172.159]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tkbbr-0002Jf-RO for guix-patches@gnu.org; Tue, 18 Feb 2025 23:22:57 -0500 Received: from phl-compute-11.internal (phl-compute-11.phl.internal [10.202.2.51]) by mailfhigh.phl.internal (Postfix) with ESMTP id 7B995114011A; Tue, 18 Feb 2025 23:22:54 -0500 (EST) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-11.internal (MEProxy); Tue, 18 Feb 2025 23:22:54 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:cc:content-type:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=mesmtp; t=1739938974; x= 1740025374; bh=kRUbfRCBMKuVroL2TCPKcIVlBpNf9BG4cXYO6JM3Lps=; b=T SO/leihYQ5eG+ZA+JycZ1mqpK9D79fjvFsn6+80eY7qxeOjRzOZSRng3pSo3yddS IU+HlJZfa7R5tfoOVdlL4Nwd++Qtq1KQZkVZlfdXtDf2ds8rsDdKIMkWYugqb6Pi sSBh2xwIFICM5IlrXZ3sqaHXfkmHOKSlC0TkVsmBEA= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1739938974; x=1740025374; bh=kRUbfRCBMKuVroL2TCPKcIVlBpNf9BG4cXY O6JM3Lps=; b=YCah8OEiOITJ7a6jXcUoSt1eMIr7WoHZYAoGwHWXokk78F/Hqzu yjZvKcQ/K4uiPxhvfN3hcT+U4w/0gddb0B5YwZ22k/h5ZePoCKhKhp93avgm4nNj xdKAv2BVFp4RUNZ8ahCf8I7D21GcDO16jwLFSF1J01g60NdbFs+sHdvonqFcclEa rLUDxXoFLgKaOJEnu3C3ESZLGiW0awSbkMhwISvtElkIC2moZVlpJKOkMNtXnaYe QkIC1B9rGnfYwoAC6ns4YTZMUYqm4g/wDcrQkDtHBKQSJQreKpHTqCSjJW4a0mEc wJ73dEhflOgIG2pxHQbgzaGJUhCTy0Bo6xQ== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdeifedvhecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpggftfghnshhusghstghrihgsvgdp uffrtefokffrpgfnqfghnecuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivg hnthhsucdlqddutddtmdenucfjughrpeffhffvvefukfhfgggtuggjsehttdertddttddv necuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnh grmhgvqeenucggtffrrghtthgvrhhnpeeiteduheefkeeufeelgeduhfejgfelheefleeu hfeffffgueduleehvdejleeiteenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmh epmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgvpdhnsggprhgtphht thhopeefpdhmohguvgepshhmthhpohhuthdprhgtphhtthhopehguhhigidqphgrthgthh gvshesghhnuhdrohhrghdprhgtphhtthhopeejieefleejqdguohhnvgesuggvsggsuhhg shdrghhnuhdrohhrghdprhgtphhtthhopegrshhhihhshhdrihhssehlohhsthgtrgdrsh gv X-ME-Proxy: Feedback-ID: i819c4023:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 18 Feb 2025 23:22:53 -0500 (EST) Date: Tue, 18 Feb 2025 23:22:52 -0500 From: Leo Famulari Message-ID: References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Received-SPF: pass client-ip=103.168.172.159; envelope-from=leo@famulari.name; helo=fhigh-a8-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.9 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.1 (/) On Tue, Feb 18, 2025 at 05:54:01PM +0100, ashish.is--- via Guix-patches via wrote: > From: Ashish SHUKLA > > This release fixes CVE-2025-26465, CVE-2025-26466 vulnerabilities. > > * gnu/packages/ssh.scm (openssh): Update to 9.9p2. Thank you! The equivalent change was already pushed as commit 3dc8026d58f9480547a595450a6483e0f13c1ba4 From unknown Tue Jun 17 01:41:50 2025 MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) X-Loop: help-debbugs@gnu.org From: help-debbugs@gnu.org (GNU bug Tracking System) To: ashish.is@lostca.se Subject: bug#76397: closed (Re: [bug#76397] [PATCH] gnu: openssh: Update to 9.9p2. [security fixes]) Message-ID: References: X-Gnu-PR-Message: they-closed 76397 X-Gnu-PR-Package: guix-patches X-Gnu-PR-Keywords: patch Reply-To: 76397@debbugs.gnu.org Date: Wed, 19 Feb 2025 04:24:03 +0000 Content-Type: multipart/mixed; boundary="----------=_1739939043-26698-1" This is a multi-part message in MIME format... ------------=_1739939043-26698-1 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8" Your bug report #76397: [PATCH] gnu: openssh: Update to 9.9p2. [security fixes] which was filed against the guix-patches package, has been closed. The explanation is attached below, along with your original report. If you require more details, please reply to 76397@debbugs.gnu.org. --=20 76397: https://debbugs.gnu.org/cgi/bugreport.cgi?bug=3D76397 GNU Bug Tracking System Contact help-debbugs@gnu.org with problems ------------=_1739939043-26698-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at 76397-done) by debbugs.gnu.org; 19 Feb 2025 04:23:04 +0000 Received: from localhost ([127.0.0.1]:39094 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tkbby-0006pq-JW for submit@debbugs.gnu.org; Tue, 18 Feb 2025 23:23:03 -0500 Received: from fhigh-a8-smtp.messagingengine.com ([103.168.172.159]:58023) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1tkbbv-0006oj-RW for 76397-done@debbugs.gnu.org; Tue, 18 Feb 2025 23:23:00 -0500 Received: from phl-compute-11.internal (phl-compute-11.phl.internal [10.202.2.51]) by mailfhigh.phl.internal (Postfix) with ESMTP id 7B995114011A; Tue, 18 Feb 2025 23:22:54 -0500 (EST) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-11.internal (MEProxy); Tue, 18 Feb 2025 23:22:54 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:cc:content-type:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=mesmtp; t=1739938974; x= 1740025374; bh=kRUbfRCBMKuVroL2TCPKcIVlBpNf9BG4cXYO6JM3Lps=; b=T SO/leihYQ5eG+ZA+JycZ1mqpK9D79fjvFsn6+80eY7qxeOjRzOZSRng3pSo3yddS IU+HlJZfa7R5tfoOVdlL4Nwd++Qtq1KQZkVZlfdXtDf2ds8rsDdKIMkWYugqb6Pi sSBh2xwIFICM5IlrXZ3sqaHXfkmHOKSlC0TkVsmBEA= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1739938974; x=1740025374; bh=kRUbfRCBMKuVroL2TCPKcIVlBpNf9BG4cXY O6JM3Lps=; b=YCah8OEiOITJ7a6jXcUoSt1eMIr7WoHZYAoGwHWXokk78F/Hqzu yjZvKcQ/K4uiPxhvfN3hcT+U4w/0gddb0B5YwZ22k/h5ZePoCKhKhp93avgm4nNj xdKAv2BVFp4RUNZ8ahCf8I7D21GcDO16jwLFSF1J01g60NdbFs+sHdvonqFcclEa rLUDxXoFLgKaOJEnu3C3ESZLGiW0awSbkMhwISvtElkIC2moZVlpJKOkMNtXnaYe QkIC1B9rGnfYwoAC6ns4YTZMUYqm4g/wDcrQkDtHBKQSJQreKpHTqCSjJW4a0mEc wJ73dEhflOgIG2pxHQbgzaGJUhCTy0Bo6xQ== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdeifedvhecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpggftfghnshhusghstghrihgsvgdp uffrtefokffrpgfnqfghnecuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivg hnthhsucdlqddutddtmdenucfjughrpeffhffvvefukfhfgggtuggjsehttdertddttddv necuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnh grmhgvqeenucggtffrrghtthgvrhhnpeeiteduheefkeeufeelgeduhfejgfelheefleeu hfeffffgueduleehvdejleeiteenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmh epmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgvpdhnsggprhgtphht thhopeefpdhmohguvgepshhmthhpohhuthdprhgtphhtthhopehguhhigidqphgrthgthh gvshesghhnuhdrohhrghdprhgtphhtthhopeejieefleejqdguohhnvgesuggvsggsuhhg shdrghhnuhdrohhrghdprhgtphhtthhopegrshhhihhshhdrihhssehlohhsthgtrgdrsh gv X-ME-Proxy: Feedback-ID: i819c4023:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 18 Feb 2025 23:22:53 -0500 (EST) Date: Tue, 18 Feb 2025 23:22:52 -0500 From: Leo Famulari To: "ashish.is--- via Guix-patches via" Subject: Re: [bug#76397] [PATCH] gnu: openssh: Update to 9.9p2. [security fixes] Message-ID: References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: X-Spam-Score: -0.7 (/) X-Debbugs-Envelope-To: 76397-done Cc: Ashish SHUKLA , 76397-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.7 (-) On Tue, Feb 18, 2025 at 05:54:01PM +0100, ashish.is--- via Guix-patches via wrote: > From: Ashish SHUKLA > > This release fixes CVE-2025-26465, CVE-2025-26466 vulnerabilities. > > * gnu/packages/ssh.scm (openssh): Update to 9.9p2. Thank you! The equivalent change was already pushed as commit 3dc8026d58f9480547a595450a6483e0f13c1ba4 ------------=_1739939043-26698-1 Content-Type: message/rfc822 Content-Disposition: inline Content-Transfer-Encoding: 7bit Received: (at submit) by debbugs.gnu.org; 18 Feb 2025 16:54:37 +0000 Received: from localhost ([127.0.0.1]:60005 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tkQrk-0003KT-QB for submit@debbugs.gnu.org; Tue, 18 Feb 2025 11:54:37 -0500 Received: from lists.gnu.org ([2001:470:142::17]:57612) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1tkQrh-0003JU-Sr for submit@debbugs.gnu.org; Tue, 18 Feb 2025 11:54:34 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tkQra-0005lm-0h for guix-patches@gnu.org; Tue, 18 Feb 2025 11:54:26 -0500 Received: from anamika.lostca.se ([2a01:4f9:3b:505c::2]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1tkQrY-0003zd-4E for guix-patches@gnu.org; Tue, 18 Feb 2025 11:54:25 -0500 Received: from localhost.localdomain (unknown [IPv6:2a02:9140:3880:f000:3b70:9c88:eeb8:d5f3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: abbe) by anamika.lostca.se (Postfix) with ESMTPSA id E084EA2B2; Tue, 18 Feb 2025 16:54:20 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lostca.se; s=anamika; t=1739897661; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=+Qg14gvCdGbi4TELz5aufSmuy3K93D6/PK38EUg5rc4=; b=mOoytPetfnCjvx6o8bT40poK55VKkAF4NKUHorD+f8KcMpHrwBYDSAgVudFY96QkpH5WgQ XtW0g2YT09XBW2T/AfAuz4OR1Blyqzu271Y6KS8tMvBxUlLN14IE1OSyY+l/di/Q1kV9tJ z2gqhQZMdLuJ0fcV4c/5tywPlYiw7y0= From: ashish.is@lostca.se To: guix-patches@gnu.org Subject: [PATCH] gnu: openssh: Update to 9.9p2. [security fixes] Date: Tue, 18 Feb 2025 17:54:01 +0100 Message-ID: X-Mailer: git-send-email 2.48.1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=2a01:4f9:3b:505c::2; envelope-from=ashish.is@lostca.se; helo=anamika.lostca.se X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.9 (/) X-Debbugs-Envelope-To: submit Cc: Ashish SHUKLA X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.1 (/) From: Ashish SHUKLA This release fixes CVE-2025-26465, CVE-2025-26466 vulnerabilities. * gnu/packages/ssh.scm (openssh): Update to 9.9p2. Change-Id: Ic9b3c97b15779f21b1efa4fb5c51e7f16a424ee9 --- gnu/packages/ssh.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/ssh.scm b/gnu/packages/ssh.scm index c4727b1c51..fecb3a2559 100644 --- a/gnu/packages/ssh.scm +++ b/gnu/packages/ssh.scm @@ -209,7 +209,7 @@ (define-public libssh2 (define-public openssh (package (name "openssh") - (version "9.9p1") + (version "9.9p2") (source (origin (method url-fetch) @@ -217,7 +217,7 @@ (define-public openssh "openssh-" version ".tar.gz")) (patches (search-patches "openssh-trust-guix-store-directory.patch")) (sha256 - (base32 "00kcjs7vm1vha3xvgrkb0qv7v6pwskb1avkfk2qiazzqpz6znhxk")))) + (base32 "0wsn44g75qa1bfp6qkcr9nlmyn02klcy2rgrvmg2ik087rhdpali")))) (build-system gnu-build-system) (arguments (list base-commit: 96fe9adf54772e0824e098a6a089306a75101218 -- 2.48.1 ------------=_1739939043-26698-1--