From unknown Wed Jun 18 00:14:32 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#76397 <76397@debbugs.gnu.org> To: bug#76397 <76397@debbugs.gnu.org> Subject: Status: [PATCH] gnu: openssh: Update to 9.9p2. [security fixes] Reply-To: bug#76397 <76397@debbugs.gnu.org> Date: Wed, 18 Jun 2025 07:14:32 +0000 retitle 76397 [PATCH] gnu: openssh: Update to 9.9p2. [security fixes] reassign 76397 guix-patches submitter 76397 ashish.is@lostca.se severity 76397 normal tag 76397 patch thanks From debbugs-submit-bounces@debbugs.gnu.org Tue Feb 18 11:54:37 2025 Received: (at submit) by debbugs.gnu.org; 18 Feb 2025 16:54:37 +0000 Received: from localhost ([127.0.0.1]:60005 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tkQrk-0003KT-QB for submit@debbugs.gnu.org; Tue, 18 Feb 2025 11:54:37 -0500 Received: from lists.gnu.org ([2001:470:142::17]:57612) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1tkQrh-0003JU-Sr for submit@debbugs.gnu.org; Tue, 18 Feb 2025 11:54:34 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tkQra-0005lm-0h for guix-patches@gnu.org; Tue, 18 Feb 2025 11:54:26 -0500 Received: from anamika.lostca.se ([2a01:4f9:3b:505c::2]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1tkQrY-0003zd-4E for guix-patches@gnu.org; Tue, 18 Feb 2025 11:54:25 -0500 Received: from localhost.localdomain (unknown [IPv6:2a02:9140:3880:f000:3b70:9c88:eeb8:d5f3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: abbe) by anamika.lostca.se (Postfix) with ESMTPSA id E084EA2B2; Tue, 18 Feb 2025 16:54:20 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lostca.se; s=anamika; t=1739897661; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version: content-transfer-encoding:content-transfer-encoding; bh=+Qg14gvCdGbi4TELz5aufSmuy3K93D6/PK38EUg5rc4=; b=mOoytPetfnCjvx6o8bT40poK55VKkAF4NKUHorD+f8KcMpHrwBYDSAgVudFY96QkpH5WgQ XtW0g2YT09XBW2T/AfAuz4OR1Blyqzu271Y6KS8tMvBxUlLN14IE1OSyY+l/di/Q1kV9tJ z2gqhQZMdLuJ0fcV4c/5tywPlYiw7y0= From: ashish.is@lostca.se To: guix-patches@gnu.org Subject: [PATCH] gnu: openssh: Update to 9.9p2. [security fixes] Date: Tue, 18 Feb 2025 17:54:01 +0100 Message-ID: X-Mailer: git-send-email 2.48.1 MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=2a01:4f9:3b:505c::2; envelope-from=ashish.is@lostca.se; helo=anamika.lostca.se X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.9 (/) X-Debbugs-Envelope-To: submit Cc: Ashish SHUKLA X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.1 (/) From: Ashish SHUKLA This release fixes CVE-2025-26465, CVE-2025-26466 vulnerabilities. * gnu/packages/ssh.scm (openssh): Update to 9.9p2. Change-Id: Ic9b3c97b15779f21b1efa4fb5c51e7f16a424ee9 --- gnu/packages/ssh.scm | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/gnu/packages/ssh.scm b/gnu/packages/ssh.scm index c4727b1c51..fecb3a2559 100644 --- a/gnu/packages/ssh.scm +++ b/gnu/packages/ssh.scm @@ -209,7 +209,7 @@ (define-public libssh2 (define-public openssh (package (name "openssh") - (version "9.9p1") + (version "9.9p2") (source (origin (method url-fetch) @@ -217,7 +217,7 @@ (define-public openssh "openssh-" version ".tar.gz")) (patches (search-patches "openssh-trust-guix-store-directory.patch")) (sha256 - (base32 "00kcjs7vm1vha3xvgrkb0qv7v6pwskb1avkfk2qiazzqpz6znhxk")))) + (base32 "0wsn44g75qa1bfp6qkcr9nlmyn02klcy2rgrvmg2ik087rhdpali")))) (build-system gnu-build-system) (arguments (list base-commit: 96fe9adf54772e0824e098a6a089306a75101218 -- 2.48.1 From debbugs-submit-bounces@debbugs.gnu.org Tue Feb 18 23:23:12 2025 Received: (at submit) by debbugs.gnu.org; 19 Feb 2025 04:23:12 +0000 Received: from localhost ([127.0.0.1]:39099 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1tkbc7-0006rA-FA for submit@debbugs.gnu.org; Tue, 18 Feb 2025 23:23:12 -0500 Received: from lists.gnu.org ([2001:470:142::17]:50564) by debbugs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.84_2) (envelope-from ) id 1tkbby-0006oz-Sc for submit@debbugs.gnu.org; Tue, 18 Feb 2025 23:23:05 -0500 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tkbbt-0002h5-8q for guix-patches@gnu.org; Tue, 18 Feb 2025 23:22:57 -0500 Received: from fhigh-a8-smtp.messagingengine.com ([103.168.172.159]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1tkbbr-0002Jf-RO for guix-patches@gnu.org; Tue, 18 Feb 2025 23:22:57 -0500 Received: from phl-compute-11.internal (phl-compute-11.phl.internal [10.202.2.51]) by mailfhigh.phl.internal (Postfix) with ESMTP id 7B995114011A; Tue, 18 Feb 2025 23:22:54 -0500 (EST) Received: from phl-mailfrontend-01 ([10.202.2.162]) by phl-compute-11.internal (MEProxy); Tue, 18 Feb 2025 23:22:54 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=famulari.name; h=cc:cc:content-type:content-type:date:date:from:from :in-reply-to:in-reply-to:message-id:mime-version:references :reply-to:subject:subject:to:to; s=mesmtp; t=1739938974; x= 1740025374; bh=kRUbfRCBMKuVroL2TCPKcIVlBpNf9BG4cXYO6JM3Lps=; b=T SO/leihYQ5eG+ZA+JycZ1mqpK9D79fjvFsn6+80eY7qxeOjRzOZSRng3pSo3yddS IU+HlJZfa7R5tfoOVdlL4Nwd++Qtq1KQZkVZlfdXtDf2ds8rsDdKIMkWYugqb6Pi sSBh2xwIFICM5IlrXZ3sqaHXfkmHOKSlC0TkVsmBEA= DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:cc:content-type:content-type:date:date :feedback-id:feedback-id:from:from:in-reply-to:in-reply-to :message-id:mime-version:references:reply-to:subject:subject:to :to:x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm3; t= 1739938974; x=1740025374; bh=kRUbfRCBMKuVroL2TCPKcIVlBpNf9BG4cXY O6JM3Lps=; b=YCah8OEiOITJ7a6jXcUoSt1eMIr7WoHZYAoGwHWXokk78F/Hqzu yjZvKcQ/K4uiPxhvfN3hcT+U4w/0gddb0B5YwZ22k/h5ZePoCKhKhp93avgm4nNj xdKAv2BVFp4RUNZ8ahCf8I7D21GcDO16jwLFSF1J01g60NdbFs+sHdvonqFcclEa rLUDxXoFLgKaOJEnu3C3ESZLGiW0awSbkMhwISvtElkIC2moZVlpJKOkMNtXnaYe QkIC1B9rGnfYwoAC6ns4YTZMUYqm4g/wDcrQkDtHBKQSJQreKpHTqCSjJW4a0mEc wJ73dEhflOgIG2pxHQbgzaGJUhCTy0Bo6xQ== X-ME-Sender: X-ME-Received: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgdeifedvhecutefuodetggdotefrod ftvfcurfhrohhfihhlvgemucfhrghsthforghilhdpggftfghnshhusghstghrihgsvgdp uffrtefokffrpgfnqfghnecuuegrihhlohhuthemuceftddtnecusecvtfgvtghiphhivg hnthhsucdlqddutddtmdenucfjughrpeffhffvvefukfhfgggtuggjsehttdertddttddv necuhfhrohhmpefnvghoucfhrghmuhhlrghrihcuoehlvghosehfrghmuhhlrghrihdrnh grmhgvqeenucggtffrrghtthgvrhhnpeeiteduheefkeeufeelgeduhfejgfelheefleeu hfeffffgueduleehvdejleeiteenucevlhhushhtvghrufhiiigvpedtnecurfgrrhgrmh epmhgrihhlfhhrohhmpehlvghosehfrghmuhhlrghrihdrnhgrmhgvpdhnsggprhgtphht thhopeefpdhmohguvgepshhmthhpohhuthdprhgtphhtthhopehguhhigidqphgrthgthh gvshesghhnuhdrohhrghdprhgtphhtthhopeejieefleejqdguohhnvgesuggvsggsuhhg shdrghhnuhdrohhrghdprhgtphhtthhopegrshhhihhshhdrihhssehlohhsthgtrgdrsh gv X-ME-Proxy: Feedback-ID: i819c4023:Fastmail Received: by mail.messagingengine.com (Postfix) with ESMTPA; Tue, 18 Feb 2025 23:22:53 -0500 (EST) Date: Tue, 18 Feb 2025 23:22:52 -0500 From: Leo Famulari To: "ashish.is--- via Guix-patches via" Subject: Re: [bug#76397] [PATCH] gnu: openssh: Update to 9.9p2. [security fixes] Message-ID: References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: Received-SPF: pass client-ip=103.168.172.159; envelope-from=leo@famulari.name; helo=fhigh-a8-smtp.messagingengine.com X-Spam_score_int: -27 X-Spam_score: -2.8 X-Spam_bar: -- X-Spam_report: (-2.8 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: 0.9 (/) X-Debbugs-Envelope-To: submit Cc: Ashish SHUKLA , 76397-done@debbugs.gnu.org X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -0.1 (/) On Tue, Feb 18, 2025 at 05:54:01PM +0100, ashish.is--- via Guix-patches via wrote: > From: Ashish SHUKLA > > This release fixes CVE-2025-26465, CVE-2025-26466 vulnerabilities. > > * gnu/packages/ssh.scm (openssh): Update to 9.9p2. Thank you! The equivalent change was already pushed as commit 3dc8026d58f9480547a595450a6483e0f13c1ba4 From unknown Wed Jun 18 00:14:32 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Wed, 19 Mar 2025 11:24:36 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator