linux/poky.git/meta/recipes-connectivity/openssh/openssh_9.3p1.bb, branch mickledore-next Mirror of git.yoctoproject.org/poky https://git.enea.com/cgit/linux/poky.git/atom?h=mickledore-next 2023-03-27T14:44:02+00:00 openssh: upgrade 9.2p1 -> 9.3p1 2023-03-27T14:44:02+00:00 Siddharth Doshi sdoshi@mvista.com 2023-03-27T08:36:20+00:00 urn:sha1:e3afe166940686b05626c3298bc4369296b7d8a3 OpenSSH 9.3p1 fixes 1 HIGH level security vulnerability. Upgrade the recipe to point to 9.3p1. CVEs Fixed: 1) CVE-2023-28531 - ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. (From OE-Core rev: ca4b4165f388a8b8bb80c120a2baef00e7e3bcac) Signed-off-by: Siddharth Doshi <sdoshi@mvista.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>