diff options
| author | Ross Burton <ross.burton@arm.com> | 2023-08-07 18:00:17 +0100 |
|---|---|---|
| committer | Steve Sakoman <steve@sakoman.com> | 2023-08-18 03:57:05 -1000 |
| commit | 032166a2e83fe4c912fc57c8b5eb00efef32927e (patch) | |
| tree | 67fe405b11170904350e69b37805c5f13422393d | |
| parent | f9c58a63f03f19c3e38365657b8110552e7e6c15 (diff) | |
| download | poky-032166a2e83fe4c912fc57c8b5eb00efef32927e.tar.gz | |
openssh: upgrade to 9.3p2
9795c401 (tag: V_9_3_P2) OpenSSH 9.3p2
bde3635f update version in README
f673f2f3 update RPM spec versions
d7790cdc disallow remote addition of FIDO/PKCS11 keys
b23fe83f terminate pkcs11 process for bad libraries
This includes the fix for CVE-2023-38408.
(From OE-Core rev: b76fb3ee4b339cfbbb332ed239826b3efcdb6f1e)
Signed-off-by: Ross Burton <ross.burton@arm.com>
(cherry picked from commit 7ae89bdeaa97c8d6a0b63e92da31290548f03168)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
| -rw-r--r-- | meta/recipes-connectivity/openssh/openssh_9.3p2.bb (renamed from meta/recipes-connectivity/openssh/openssh_9.3p1.bb) | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/meta/recipes-connectivity/openssh/openssh_9.3p1.bb b/meta/recipes-connectivity/openssh/openssh_9.3p2.bb index 42ce814523..558e027f5d 100644 --- a/meta/recipes-connectivity/openssh/openssh_9.3p1.bb +++ b/meta/recipes-connectivity/openssh/openssh_9.3p2.bb | |||
| @@ -26,7 +26,7 @@ SRC_URI = "http://ftp.openbsd.org/pub/OpenBSD/OpenSSH/portable/openssh-${PV}.tar | |||
| 26 | file://add-test-support-for-busybox.patch \ | 26 | file://add-test-support-for-busybox.patch \ |
| 27 | file://7280401bdd77ca54be6867a154cc01e0d72612e0.patch \ | 27 | file://7280401bdd77ca54be6867a154cc01e0d72612e0.patch \ |
| 28 | " | 28 | " |
| 29 | SRC_URI[sha256sum] = "e9baba7701a76a51f3d85a62c383a3c9dcd97fa900b859bc7db114c1868af8a8" | 29 | SRC_URI[sha256sum] = "200ebe147f6cb3f101fd0cdf9e02442af7ddca298dffd9f456878e7ccac676e8" |
| 30 | 30 | ||
| 31 | # This CVE is specific to OpenSSH with the pam opie which we don't build/use here | 31 | # This CVE is specific to OpenSSH with the pam opie which we don't build/use here |
| 32 | CVE_CHECK_IGNORE += "CVE-2007-2768" | 32 | CVE_CHECK_IGNORE += "CVE-2007-2768" |