From 961968d3204eb68b1b03182884feed0e9901485e Mon Sep 17 00:00:00 2001 From: "Tom G. Christensen" Date: Sat, 6 Aug 2016 15:18:19 +0200 Subject: [PATCH] openssh: update to 7.3p1 --- openssh/build.sh | 4 +-- openssh/meta/ChangeLog | 5 ++++ openssh/src/0001-upstream-commit.patch | 38 ++++++++++++++++++++++++++ 3 files changed, 45 insertions(+), 2 deletions(-) create mode 100644 openssh/src/0001-upstream-commit.patch diff --git a/openssh/build.sh b/openssh/build.sh index cba1a4f..2787eef 100755 --- a/openssh/build.sh +++ b/openssh/build.sh @@ -6,11 +6,11 @@ ########################################################### # Check the following 4 variables before running the script topdir=openssh -version=7.2p2 +version=7.3p1 pkgver=1 source[0]=ftp://ftp.heanet.ie/pub/OpenBSD/OpenSSH/portable/$topdir-$version.tar.gz # If there are no patches, simply comment this -#patch[0]= +patch[0]=0001-upstream-commit.patch # Source function library . ${BUILDPKG_SCRIPTS}/buildpkg.functions diff --git a/openssh/meta/ChangeLog b/openssh/meta/ChangeLog index cd86646..3ee3b7b 100644 --- a/openssh/meta/ChangeLog +++ b/openssh/meta/ChangeLog @@ -1,5 +1,10 @@ CHANGELOG --------- +* Wed Aug 03 2016 Tom G. Christensen - 7.3p1-1 +- Update to 7.3p1 +- Include upstream patch to fix issue when ssh1 support is enabled + but no ssh1 hostkey is specified + * Thu Mar 10 2016 Tom G. Christensen - 7.2p2-1 - Update to 7.2p2 diff --git a/openssh/src/0001-upstream-commit.patch b/openssh/src/0001-upstream-commit.patch new file mode 100644 index 0000000..331cd7c --- /dev/null +++ b/openssh/src/0001-upstream-commit.patch @@ -0,0 +1,38 @@ +From e600348a7afd6325cc5cd783cb424065cbc20434 Mon Sep 17 00:00:00 2001 +From: "dtucker@openbsd.org" +Date: Wed, 3 Aug 2016 04:23:55 +0000 +Subject: [PATCH] upstream commit + +Fix bug introduced in rev 1.467 which causes +"buffer_get_bignum_ret: incomplete message" errors when built with WITH_SSH1 +and run such that no Protocol 1 ephemeral host key is generated (eg "Protocol +2", no SSH1 host key supplied). Reported by rainer.laatsch at t-online.de, +ok deraadt@ + +Upstream-ID: aa6b132da5c325523aed7989cc5a320497c919dc +--- + sshd.c | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/sshd.c b/sshd.c +index 799c771..9fc829a 100644 +--- a/sshd.c ++++ b/sshd.c +@@ -1,4 +1,4 @@ +-/* $OpenBSD: sshd.c,v 1.470 2016/05/24 04:43:45 dtucker Exp $ */ ++/* $OpenBSD: sshd.c,v 1.471 2016/08/03 04:23:55 dtucker Exp $ */ + /* + * Author: Tatu Ylonen + * Copyright (c) 1995 Tatu Ylonen , Espoo, Finland +@@ -1071,7 +1071,7 @@ send_rexec_state(int fd, struct sshbuf *conf) + fatal("%s: buffer error: %s", __func__, ssh_err(r)); + } else + #endif +- if ((r = sshbuf_put_u32(m, 1)) != 0) ++ if ((r = sshbuf_put_u32(m, 0)) != 0) + fatal("%s: buffer error: %s", __func__, ssh_err(r)); + + #if defined(WITH_OPENSSL) && !defined(OPENSSL_PRNG_ONLY) +-- +2.8.3 +