linux/poky.git/meta/recipes-connectivity/openssh, branch hardknott

openssh: fix CVE-2021-41617

2021-11-03T11:19:04+00:00

(From OE-Core rev: b2c329641f91630ecbb225e8cd0cdcaf461d7ef6) Signed-off-by: Changqing Li Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

openssh: Remove temporary keys before generating new ones

2021-07-20T18:05:45+00:00

Key generation may wait for user input, due to the existence of temporary keys resulting from power interruption in the first boot. This prevents users from login via ssh. (From OE-Core rev: dceba60f817c61d36868a2def642fc4164ff53ab) Signed-off-by: Asfak Rahman Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie (cherry picked from commit 3196249a6917a32491be56e70bbf26d3b9818e0e) Signed-off-by: Anuj Mittal Signed-off-by: Richard Purdie

openssh: Exclude CVE-2008-3844 from cve-check

2021-05-22T09:01:02+00:00

CVE only applies to some distributed RHEL binaries so irrelavent to us. (From OE-Core rev: 416230b7236c391e89d0d7941b2d34b6234f993c) Signed-off-by: Richard Purdie

openssh: Exclude CVE-2007-2768 from cve-check

2021-05-22T09:01:02+00:00

We don't build/use the OPIE PAM module, exclude the CVE from this recipe. (From OE-Core rev: a7aba0f1226411f44f316cdced6b2b47621d1d3f) Signed-off-by: Richard Purdie

openssh: Improve LICENSE to show BSD license variants.

2021-03-23T22:51:26+00:00

Update LICENSE to show that BSD-2-Clause, BSD-3-Clause and BSD-4-Clause are all present. (From OE-Core rev: d17938953fc2524bc5f04db4409a47aa400e756a) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

openssh: upgrade 8.4p1 -> 8.5p1

2021-03-23T22:51:25+00:00

0f90440ca70abab947acbd77795e9f130967956c.patch removed since it is included in 8.5p1 License Updated : 2-clause BSD license and 4-clause BSD license added (From OE-Core rev: 60ab470f8759539547a96f1b47299b7b16d6a630) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie

openssh: Backport a fix to fix with glibc 2.33 on some platforms

2021-02-05T12:00:54+00:00

This fixes openssh failing to work on qemux86 with glibc 2.33 due to seccomp and the fact new syscalls are used. Also likely fixes issues on other platforms. (From OE-Core rev: 22f8ce6e6d998c0539a40b2776b1a2abb4f44bb3) Signed-off-by: Richard Purdie

openssh: Disable lastlog on musl

2021-01-03T08:58:26+00:00

(From OE-Core rev: 0e9b2fe106e3c6c0a1f27e7a56a11e86e5de371e) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie

openssh: whitelist CVE-2014-9278

2020-11-11T10:08:12+00:00

The OpenSSH server, as used in Fedora and Red Hat Enterprise Linux 7 and when running in a Kerberos environment, allows remote authenticated users to log in as another user when they are listed in the .k5users file of that user, which might bypass intended authentication requirements that would force a local login. Whitelist the CVE since this issue is Redhat specific. (From OE-Core rev: 309132e50d23b1e3f15ef8db1a101166b35f7ca4) Signed-off-by: Steve Sakoman Signed-off-by: Richard Purdie

openssh: upgrade 8.3p1 -> 8.4p1

2020-11-03T08:21:11+00:00

(From OE-Core rev: fc394ade8a0033bc695d979e592e8e92a882c54d) Signed-off-by: Alexander Kanavin Signed-off-by: Richard Purdie