pkgsrc-Bugs archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

Re: pkg/60563: exposed sshd w/o password-login causes sshd-auth looping



The following reply was made to PR pkg/60563; it has been noted by GNATS.

From: Havard Eidnes <he%NetBSD.org@localhost>
To: gnats-bugs%NetBSD.org@localhost
Cc: 
Subject: Re: pkg/60563: exposed sshd w/o password-login causes sshd-auth
 looping
Date: Tue, 22 Sep 2026 13:02:51 +0200 (CEST)

 ----Next_Part(Tue_Sep_22_13_02_51_2026_679)--
 Content-Type: Text/Plain; charset=us-ascii
 Content-Transfer-Encoding: 7bit
 
 This fix (plus Thomas' following removal of my accidntal commit
 of the CFLAGS steting) appear to fix the mild DoS-aspect of this
 issue.
 
 Regards,
 
 - Havard
 
 ----Next_Part(Tue_Sep_22_13_02_51_2026_679)--
 Content-Type: Message/Rfc822
 Content-Transfer-Encoding: 7bit
 Content-Disposition: inline
 
 Delivery-Date: Tue, 22 Sep 2026 10:32:44 +0200
 Return-Path: <bounces-pkgsrc-changes-owner-he=uninett.no%NetBSD.org@localhost>
 X-Original-To: he@localhost
 Delivered-To: he@localhost
 Received: from smistad.uninett.no (localhost [IPv6:::1])
 	by smistad.uninett.no (Postfix) with ESMTP id 212D743FB71
 	for <he@localhost>; Tue, 22 Sep 2026 10:32:41 +0200 (CEST)
 Authentication-Results: smistad.uninett.no;
 	dkim=fail reason="signature verification failed" (1024-bit key) header.d=netbsd.org header.i=@netbsd.org header.b=vkIirM6l;
 	dkim=fail reason="signature verification failed" (1024-bit key) header.d=netbsd.org header.i=@netbsd.org header.b=GvbrGTKy
 MIME-Version: 1.0
 Received: from shed.outlook.acdc.tm.svc.cloud.microsoft [2603:1026:c0f:14::2]
 	by smistad.uninett.no with IMAP (fetchmail-7.0.0-alpha10)
 	for <he@localhost> (single-drop); Tue, 22 Sep 2026 10:32:41 +0200 (CEST)
 Received: from MIWP192MB730602.EURP192.PROD.OUTLOOK.COM (2603:10a6:290:e3::10)
  by AM8P192MB1059.EURP192.PROD.OUTLOOK.COM with HTTPS; Tue, 22 Sep 2026
  08:04:46 +0000
 Received: from OS6P279CA0086.NORP279.PROD.OUTLOOK.COM (2603:10a6:e10:3e::8) by
  MIWP192MB730602.EURP192.PROD.OUTLOOK.COM (2603:10a6:290:e3::10) with
  Microsoft SMTP Server (version=TLS1_2,
  cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.428.15; Tue, 22 Sep
  2026 08:04:43 +0000
 Received: from OSL0EPF000004EA.NORP279.PROD.OUTLOOK.COM
  (2603:10a6:e10:3e:cafe::71) by OS6P279CA0086.outlook.office365.com
  (2603:10a6:e10:3e::8) with Microsoft SMTP Server (version=TLS1_3,
  cipher=TLS_AES_256_GCM_SHA384) id 15.21.451.14 via Frontend Transport; Tue,
  22 Sep 2026 08:04:43 +0000
 Authentication-Results: spf=neutral (sender IP is
  2a05:d016:ec8:1e00:a8f7:fc41:f32f:af8c) smtp.mailfrom=NetBSD.org; dkim=pass
  (signature was verified) header.d=netbsd.org;dkim=pass (signature was
  verified) header.d=netbsd.org;dmarc=pass action=none header.from=netbsd.org;
 Received-SPF: Neutral (protection.outlook.com:
  2a05:d016:ec8:1e00:a8f7:fc41:f32f:af8c is neither permitted nor denied by
  domain of NetBSD.org)
 Received: from onprem-mailgw.it.sikt.no
  (2a05:d016:ec8:1e00:a8f7:fc41:f32f:af8c) by
  OSL0EPF000004EA.mail.protection.outlook.com (2603:10a6:e18::7) with Microsoft
  SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
  15.21.451.8 via Frontend Transport; Tue, 22 Sep 2026 08:04:43 +0000
 Received: from GV1PR07CU001.outbound.protection.outlook.com (mail-gv1pr07cu00103.outbound.protection.outlook.com [IPv6:2a01:111:f403:c202::b])
 	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 	(No client certificate requested)
 	by onprem-mailgw.it.sikt.no (Postfix) with ESMTPS id C82231016211
 	for <he%uninett.no@localhost>; Tue, 22 Sep 2026 10:04:42 +0200 (CEST)
 ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
  b=Y2N7RwUY/2yc7Rsr5XwL4j9bUi2fgiq5KMlyl568N94ijH0KZlOfjZJ+Mmyd34+SX6iMG7cPlubEZvk/OZ+VR8IHOhu7r9xqxe5i+NIPv8qlc32nZl2pXHZ3OjaPsXV/XNK9id773DsGZOBr7brjWdFvxfLG9yoTN6RtNsRzlLpIqBA+vyuf5l7dkunp8ig1rnJK/cDGyFxrOOmgR7FXxXWG6CnMfurO1re63VQpcnzKeZOnD3hJi1TfJ7eEqGO70ZPo9TNGEsT3sPfZVnSeWIWrGIUpKQdImH6w+zCK1jfOp+BiJT5t25zlWNGqpoqBGo0WcRAbpSLojfATC5LR/Q==
 ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
  s=arcselector10001;
  h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
  bh=/MdKuxiekkS2qne8EaxI4gkRL3lLlSbzGE2ejXZGxx4=;
  b=G0i36nJZ6JIE8SjhkBPAMvPw5iaDIuH+pCmXQU/QkkI3LADqfExKzjDUKSikDECazrvTnRxTntILQm2Z7pFTpq+5buGqhylhj9c7ezawwBoamH9yL0NcUWIc05sPwb1jk/2bpCkcaGuBGVF8frWe783GY2t0l7HiZQ2P9a4vvrJTc11TTT/jXwZP0nB3N0G8R0tME+IIGd+mfm4ZZpe9ub2gANUyq7lJ27VglV5Xymv2/MqqtvaA12q6kuubdu/PK4INIERmYAKa870gJz7HWAB+yXM35bqVFT0gNjjR4zwzseWh/IyPrML87AYuZCDK2EYIgH5NJS8N5wSIe5qnHg==
 ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
  2001:470:a085:999::25) smtp.rcpttodomain=uninett.no smtp.mailfrom=netbsd.org;
  dmarc=pass (p=none sp=none pct=100) action=none header.from=netbsd.org;
  dkim=pass (signature was verified) header.d=netbsd.org; dkim=pass (signature
  was verified) header.d=netbsd.org; arc=none (0)
 Received: from OS6P279CA0082.NORP279.PROD.OUTLOOK.COM (2603:10a6:e10:3e::10)
  by DB5P192MB3400.EURP192.PROD.OUTLOOK.COM (2603:10a6:10:64b::21) with
  Microsoft SMTP Server (version=TLS1_2,
  cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.428.14; Tue, 22 Sep
  2026 08:04:10 +0000
 Received: from OSL0EPF000004EA.NORP279.PROD.OUTLOOK.COM
  (2603:10a6:e10:3e:cafe::6) by OS6P279CA0082.outlook.office365.com
  (2603:10a6:e10:3e::10) with Microsoft SMTP Server (version=TLS1_3,
  cipher=TLS_AES_256_GCM_SHA384) id 15.21.451.13 via Frontend Transport; Tue,
  22 Sep 2026 08:04:10 +0000
 Authentication-Results-Original: spf=pass (sender IP is 2001:470:a085:999::25)
  smtp.mailfrom=NetBSD.org; dkim=pass (signature was verified)
  header.d=netbsd.org;dkim=pass (signature was verified)
  header.d=netbsd.org;dmarc=pass action=none
  header.from=netbsd.org;compauth=pass reason=100
 Received-SPF: Pass (protection.outlook.com: domain of NetBSD.org designates
  2001:470:a085:999::25 as permitted sender) receiver=protection.outlook.com;
  client-ip=2001:470:a085:999::25; helo=mail.netbsd.org; pr=C
 Received: from mail.netbsd.org (2001:470:a085:999::25) by
  OSL0EPF000004EA.mail.protection.outlook.com (2603:10a6:e18::7) with Microsoft
  SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.451.8
  via Frontend Transport; Tue, 22 Sep 2026 08:04:08 +0000
 Received: by mail.netbsd.org (Postfix, from userid 605)
 	id 9D93485784; Tue, 22 Sep 2026 08:04:01 +0000 (UTC)
 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netbsd.org;
 	s=20240131; t=1790064241;
 	bh=/MdKuxiekkS2qne8EaxI4gkRL3lLlSbzGE2ejXZGxx4=;
 	h=Date:From:Subject:To:Reply-To:List-Id:List-Unsubscribe;
 	b=vkIirM6l8yQVRnTFtgKS63jUMAJsCkjPMuXgYz6J7Hc8sbdfNvox2eyHEwcYvwjMC
 	 qR1TFz/HLWTdQCQy6nEpn7mq0ULT53D6BX1nCfqVVTlyec5NEUWXrIYM8ImeWO3i3C
 	 r+RPLd0OfMSh+hxyg+DWPSzGTxV/ylAqiG/TVNgI=
 Delivered-To: pkgsrc-changes%NetBSD.org@localhost
 Received: from localhost (localhost [127.0.0.1])
 	by mail.netbsd.org (Postfix) with ESMTP id A97B484E61
 	for <pkgsrc-changes%NetBSD.org@localhost>; Tue, 22 Sep 2026 08:04:00 +0000 (UTC)
 X-Virus-Scanned: amavisd-new at netbsd.org
 Authentication-Results-Original: mail.netbsd.org (amavisd-new);	dkim=pass
  (1024-bit key) header.d=netbsd.org
 Received: from mail.netbsd.org ([IPv6:::1])
 	by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025)
 	with ESMTP id BLW4s3RWcJuK for <pkgsrc-changes%netbsd.org@localhost>;
 	Tue, 22 Sep 2026 08:03:59 +0000 (UTC)
 Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197])
 	by mail.netbsd.org (Postfix) with ESMTP id BC71A84D7C
 	for <pkgsrc-changes%NetBSD.org@localhost>; Tue, 22 Sep 2026 08:03:59 +0000 (UTC)
 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netbsd.org;
 	s=20240131; t=1790064239;
 	bh=/MdKuxiekkS2qne8EaxI4gkRL3lLlSbzGE2ejXZGxx4=;
 	h=Date:From:Subject:To:Reply-To;
 	b=GvbrGTKy5VlFxp2F4ahZ5ad5LPJDQ0J3xfW7rN7h3sIr3z8DZDal8KH6BoGBXUOrH
 	 5RJmL2+9a2vEOYSopsO0LMtSBWqKE2h+eGP9fhJ+acLPnrOYun/6ssH/KyfLsSL4Ol
 	 QAVzvLsLOlZpZLvm9klL9R+E/7F3n/OImgIis2to=
 Received: by cvs.NetBSD.org (Postfix, from userid 500)
 	id B2A8AFA2D; Tue, 22 Sep 2026 08:03:59 +0000 (UTC)
 Content-Transfer-Encoding: 7bit
 Content-Type: multipart/mixed; boundary="_----------=_1790064239251930"
 Date: Tue, 22 Sep 2026 08:03:59 +0000
 From: "Havard Eidnes" <he%netbsd.org@localhost>
 Subject: CVS commit: pkgsrc/security/openssh
 To: pkgsrc-changes%NetBSD.org@localhost
 Reply-To: he%netbsd.org@localhost
 X-Mailer: log_accum
 Message-Id: <20260922080359.B2A8AFA2D%cvs.NetBSD.org@localhost>
 Sender: pkgsrc-changes-owner%NetBSD.org@localhost
 List-Id: <pkgsrc-changes.NetBSD.org>
 Precedence: bulk
 List-Unsubscribe: <mailto:majordomo%NetBSD.org@localhost?subject=Unsubscribe%20pkgsrc-changes&body=unsubscribe%20pkgsrc-changes>
 X-EOPAttributedMessage: 1
 X-MS-TrafficTypeDiagnostic: OSL0EPF000004EA:EE_|DB5P192MB3400:EE_|OSL0EPF000004EA:EE_|MIWP192MB730602:EE_|AM8P192MB1059:EE_
 X-MS-Office365-Filtering-Correlation-Id: 4053a895-925a-4208-e905-08df188028eb
 X-MS-Exchange-AtpMessageProperties: SA
 X-Microsoft-Antispam-Untrusted: BCL:0;ARA:13230040|704162011799003|4022899009|6049299003|260918215300599003|260918224100599003|4053099003|13003099007|19002099009|6133799003|10067099003|56012099006|11063799006|5063699009|18002099003|16102099003|21082099003|3113699003|55112099003|5113699003;
 X-Microsoft-Antispam-Message-Info-Original: =?us-ascii?Q?Wz5lZLLG8pEfCI4AFu5cyFeFLER+RLr5qpuCsNAsw46HCmB8BkcJi4DTljmN?=
  =?us-ascii?Q?VTkTDkysQFcOg+vl9YplTxL/7GkkpUjGp5YNJxqd/36rCnmF7J63/7c9M+zG?=
  =?us-ascii?Q?kHO8PkmOwcdspHQs3vGNXROf2dAIt89joMVVOAld+GGvkArPs3SWlIeyVwch?=
  =?us-ascii?Q?YPM1/z1GLXzZDR+4KiSo5ztHRrwx+T26bmySBALY6DBSEQvqbhvPb1L2mIOV?=
  =?us-ascii?Q?WSzRkmkA/EVzIe1VItNwg+7dhQCkyzL+lR802gCAQj9I8xhxOp81KVCkLbOJ?=
  =?us-ascii?Q?BN0mZNnsuXNyPIXlRdnc9OOcZvAXUIK0cfp33oOi8MWe4aZ/fXfyM9J7MoaD?=
  =?us-ascii?Q?OUY3xkV0Bun2M/7vxAIEDesjfcKR5emjXTG8si32ZuPTgiPVu9BBb3al9/Ld?=
  =?us-ascii?Q?pZpLmQ75JQsb34k2Jt4gjExJmXYMHduu/VHSd8Gjgs75jk057R1epq1a2mFY?=
  =?us-ascii?Q?u/wZ3WUcQjuIBaKqHlW/kS8MnvZfMhjW+MfqNltwinA1reSP1jvAAG8+R+EI?=
  =?us-ascii?Q?w6H2fpVNVnz6Zak1OjXuQxh4gWwpplH28jD9DmRhDW2ZqSHuFzp8HMvHYvPz?=
  =?us-ascii?Q?1iHhbu0+IpPUFS37NvafoG/+Eowmg7v3A8CMHzS5+yyEC+vCbvsIzreQ0ebw?=
  =?us-ascii?Q?0hAaF+JVAUkcMPJBtG3Os6jdT4PncOD/Osq86zWHeP/CYE96bZbaCPvpupUs?=
  =?us-ascii?Q?cC1K5pWTXw/h0jf42owXRXU1gdMVN9p57XlMtgrSLbm6Xv7HF01qaCl5nYex?=
  =?us-ascii?Q?9qOFSOOjmQMGVvAi+Y96gzrZnuMQIomZUauendDAq7tsmhwcwjC1EW4eLjxv?=
  =?us-ascii?Q?aabEBcqOn9byI2yxMzTWHE9s1btLLOjwtQv4DURJkfvaZpfUTZq8Eq90uAkW?=
  =?us-ascii?Q?eM/D4WtJqcPLrDe5sdBqDSxG0NDEalElrQXOV8kCKFloP5FgUUl6AGN0F5wP?=
  =?us-ascii?Q?wPhxbe6lQ2+f8I5LaJzklz6DArlq+0ayspr8K35CxeU+xrfOArnNmQlVGfPX?=
  =?us-ascii?Q?8Ss1K+tYqVqJDnv7V4gm4k9+sbwmMEvhyVJk5lMdhvlEU2DIjYwZdddNTPhx?=
  =?us-ascii?Q?YH2K8n1LTSIzkXyIhFgd+5lBYnWE0wfbZIQXaLxg3/mdi/2N2sJZ1J+oxI+m?=
  =?us-ascii?Q?mtTXJ7r9FuenXzxuTnyDTkzRWEesm4v+9AAdzcqhwn90MBo5MRyuNpIxnR8b?=
  =?us-ascii?Q?AOCVw1ALM7K5OBy1N6doLDJONVOBUMTKmYbO6iEGmomBxsElTlweq6OF3Kxc?=
  =?us-ascii?Q?VNw2fPsYT1FHj156Hena0UUdGLmcmPvImkpP5nhp33MFxO1MOX0kkXxH6XU1?=
  =?us-ascii?Q?TqoXbh+xltxJbjgno4hrE1FeXMtWsrx2Jdj0FpKN2eUYYrx5220dVXCPC85P?=
  =?us-ascii?Q?zVYQ5f9c/iLoUA1W+z+KIiqM8ogTl5ykaNFq+gpZVjHp/iY6y+/qrstMPFms?=
  =?us-ascii?Q?3Jl5XOhLhrw2qJkG93L/W4wk8SPtfgf6xuP+WLmYyZmulpIFBbva47R9A//t?=
  =?us-ascii?Q?Yg+NStDVbppU3hpDrgQdsGlaR8qxJFSn35JlXYnvQs30wXF1QcT04Njh9iQw?=
  =?us-ascii?Q?B7OkqxgYSODM6DJGctWp8JqFE6GoR69FXgIuNbAg2DJrqyfbO5jF+01khMfe?=
  =?us-ascii?Q?RGlaLosBOq9w0HrjVDnI+ESKLqTW7pbGDu2BnSiPW2ILmgE8K/V61VMfhuBx?=
  =?us-ascii?Q?EIT2E4bZY89P+di4njv6V7zj8IkHDUgze7SVDEBcjVlwtbT++9KoZPWHrCAe?=
  =?us-ascii?Q?g61exHUxLoLH3TC4e76As3Pd77PCksycuj/l6jbORR2zYNh7k8AGAHJog+rv?=
  =?us-ascii?Q?couSeBRVFZPueAE7GfnHCRlVuaXBFXkO74To995Xi0/Du9t4Nwaep2z5qG/p?=
  =?us-ascii?Q?PiS5ve/mfRLDnzf83yFFxUTOen3IO9d6fbKpK9GTq3ocrgQ+TIQVPh1h2PwW?=
  =?us-ascii?Q?82Dx04khtXnKjOLreM04Y81yNm/cNs/B5MFiJT27zOYeSTA/SUZng2OAC6l+?=
  =?us-ascii?Q?ZqJkY+oDamHsK33BXDRkq1gHS6l6FcJyFyLGjiRC3+sq7om5Ca+q0H93saMp?=
  =?us-ascii?Q?bhyxu16/g3ecn0dV102hdEyoZcsU4gR7bvqbHFOk2eBy9QYn2caP4l4LHNBV?=
  =?us-ascii?Q?nqHisG9/6ztF0LFK+TYjyb15kfLg2sOX9FIBA7py1BqoW4065vx/2LSCtHBS?=
  =?us-ascii?Q?axB51UotVOPs371SUyRAOjo2qkML8PuKzEYTVhfW72GpoPzQUBI3oBnLgDem?=
  =?us-ascii?Q?EnUQUaIOLkiVH0HbVKfZaMuMgeUwYLfYDkDFSshVOhK0LHd97BX38LyiHqF1?=
  =?us-ascii?Q?KWaQoybQ7l/DBQpSAE8Af8s/4DJkamV/OC5LYnPK6swhsKcPVz82vYP0MT6e?=
  =?us-ascii?Q?bdPK3PMK7hvQF1zBKaNJPyQaZSjjJtHEw+RriIC1+5ZPE3tWNg=3D=3D?=
 X-Forefront-Antispam-Report-Untrusted: CIP:2001:470:a085:999::25;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.netbsd.org;PTR:mail.NetBSD.org;CAT:NONE;SFS:(13230040)(704162011799003)(4022899009)(6049299003)(260918215300599003)(260918224100599003)(4053099003)(13003099007)(19002099009)(6133799003)(10067099003)(56012099006)(11063799006)(5063699009)(18002099003)(16102099003)(21082099003)(3113699003)(55112099003)(5113699003);DIR:INB;
 X-Exchange-RoutingPolicyChecked: ncjMWj6ezn5NZJwqaWb1tbA4qkgsuNboVHoDBFGoZxPSVFOKCKYr9FWF+g3srwm2OWO7a2cOTwlOYDoNWjfFxXmnnRrvu4ta+5QuSmC0L/ACRNvNuZUxErd4TNPwMaQh9mHEfn2d5PElhQxua+T2indOTT0hU6V0pBfQJPwW+ABAnHhMUnoxjEiPFnXY5fjnEjgpGEPZr08Ggw7cCv4RPq71/wfoiwpyL2p7d6Oo4IGXlEFeQJlBbe6SClUidrFob8bo53ZCM4MRjFv4ZV8qvbsZ5jjo9zpTMpUa/zILU/bc2k2g54wCXGIYI0fKsfdBbbRYQmIXU1+05fpNX7EitA==
 X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5P192MB3400
 X-OrganizationHeadersPreserved: DB5P192MB3400.EURP192.PROD.OUTLOOK.COM
 X-MS-Exchange-Organization-ExpirationStartTime: 22 Sep 2026 08:04:43.1329
  (UTC)
 X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
 X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
 X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
 X-MS-Exchange-Organization-Network-Message-Id: 4053a895-925a-4208-e905-08df188028eb
 X-MS-Exchange-Organization-MessageDirectionality: Originating
 X-MS-Exchange-Organization-SCL: 1
 X-CrossPremisesHeadersPromoted: OSL0EPF000004EA.NORP279.PROD.OUTLOOK.COM
 X-CrossPremisesHeadersFiltered: OSL0EPF000004EA.NORP279.PROD.OUTLOOK.COM
 X-MS-Exchange-Transport-CrossTenantHeadersStripped: OSL0EPF000004EA.NORP279.PROD.OUTLOOK.COM
 X-MS-PublicTrafficType: Email
 X-MS-Exchange-Organization-AuthSource: OSL0EPF000004EA.NORP279.PROD.OUTLOOK.COM
 X-MS-Exchange-Organization-AuthAs: Anonymous
 X-OriginatorOrg: sikt.no
 X-MS-Office365-Filtering-Correlation-Id-Prvs: 146580a7-311c-41fc-a469-08df1880153d
 X-Microsoft-Antispam: BCL:0;ARA:13230040|82310400026|260918224100599003|4022899009|260918215300599003|35042699022|6049299003|10067099003|11063799006|3113699003|19002099009|5113699003|6133799003|21082099003|57112099003|18002099003|55112099003|16102099003|4053099003;
 X-Forefront-Antispam-Report: CIP:2a05:d016:ec8:1e00:a8f7:fc41:f32f:af8c;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:onprem-mailgw.it.sikt.no;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(82310400026)(260918224100599003)(4022899009)(260918215300599003)(35042699022)(6049299003)(10067099003)(11063799006)(3113699003)(19002099009)(5113699003)(6133799003)(21082099003)(57112099003)(18002099003)(55112099003)(16102099003)(4053099003);DIR:INB;
 X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Sep 2026 08:04:43.0540
  (UTC)
 X-MS-Exchange-CrossTenant-Network-Message-Id: 4053a895-925a-4208-e905-08df188028eb
 X-MS-Exchange-CrossTenant-Id: cb342146-7965-425e-83ab-88f8ecb99e0d
 X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=cb342146-7965-425e-83ab-88f8ecb99e0d;Ip=[2a05:d016:ec8:1e00:a8f7:fc41:f32f:af8c];Helo=[onprem-mailgw.it.sikt.no]
 X-MS-Exchange-CrossTenant-AuthSource: OSL0EPF000004EA.NORP279.PROD.OUTLOOK.COM
 X-MS-Exchange-CrossTenant-AuthAs: Anonymous
 X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
 X-MS-Exchange-Transport-CrossTenantHeadersStamped: MIWP192MB730602
 X-MS-Exchange-Transport-EndToEndLatency: 00:00:03.0290406
 X-MS-Exchange-Processed-By-BccFoldering: 15.21.0451.004
 X-Microsoft-Antispam-Mailbox-Delivery:
 	ucf:0;jmr:0;auth:0;dest:I;ENG:(910005)(944506478)(944626604)(920097)(930201)(20251009189)(140003);
 X-Microsoft-Antispam-Message-Info:
 	=?us-ascii?Q?3otJC/uxdpnAesjkkhZcy3wpxlYyTJvNkFcmpJsF7n6zDR7IeOty8O53PBmy?=
  =?us-ascii?Q?fmK/CFdo0FZ5JtLUoX2NoEq//TLhUij05s4bkmtrL9Tw5T8wUnTK+NJMId/6?=
  =?us-ascii?Q?SFQm/KgQTI4/p1Wsd0Un4kYI94eacToVGMTLli4FLnTak0L5l1lgXoRGqjNk?=
  =?us-ascii?Q?t3c8CSyyQTFs8ILPJN8F2iogE15OVN/9psTh2Cv/GCfoZR86Zh+63rV9CVqD?=
  =?us-ascii?Q?qhV/L4Uw6ebKbR1R3ywnVmHJmxfhcpDjw9zRyNaRT7RLjD6T61pbZE7py0J3?=
  =?us-ascii?Q?tjASdgGffx1T0HSDKhLqt/308OEcoTPjsQFtMuAIINZqodnZLRVqXH3YMfax?=
  =?us-ascii?Q?ZqGUJ4uWTzfP5aK6JvF1lGH5J82AiHMp8+lH/lvEb4kdwsaMqUPih8IxLd80?=
  =?us-ascii?Q?qlHjzzKdx3pFxkBS/Q1qH8/OorfMMe+ONOnFMhS2Ia/oAPKrW5cMaWezp5VL?=
  =?us-ascii?Q?5HBmArvjXhx1zfLrO9vPjfAuZl2LnvDGpuPu4tNqnKh1SiiNyu8GOpcnY4Kg?=
  =?us-ascii?Q?WTOXnDSPv/rknjTAmZhichNZ4PFrSQbPZTsCzamE922fF+4bT3o369fL+vV+?=
  =?us-ascii?Q?N8LjxrPhlVAm9bRnW/EKySi8WhcuikVSfdzKf6MoigY8TaEfY3WzBHuUveoe?=
  =?us-ascii?Q?CEI4hnLlEnR9q0W1hESM876QLVY73tADWx97K+LpD0zyckqX2mqiyZmb2iX4?=
  =?us-ascii?Q?eczIWk4Um80qaWF9QDmTpgI/dM7zp1P1qHM6Ug4ChXCJ/FZ5R6NE51ZD72rJ?=
  =?us-ascii?Q?qurajQIKGmCeSmqZi10/M43INGJ2j+o3yxCewNPrNIRJPBm4tAMBNktWqCcQ?=
  =?us-ascii?Q?WqS8Ucn6CjgwNCjCtWBWhyajnesIyAVG46qPr2waafUU/W4mB1FIetpeDUaF?=
  =?us-ascii?Q?vtIdLYzy8kmv8p8ugLb26LVPq7bw/w3RD5xHknmlr1cdvdCV0ExtopVYPrew?=
  =?us-ascii?Q?bxM5dzdaN/b/Se1n1fdjsKhUqmZqjnsft1WMfHiW25RglpX2ekNDgGG7Rtx+?=
  =?us-ascii?Q?oLIhOqHglwuyRZEELw6dHNtC95R7JXnPgoQp0YuMZrrWoIPvPbxda4/L2vEI?=
  =?us-ascii?Q?xCiJiCrTrfNqr2/tmbLUj2LGk63mp27Dr7p/qws9Qu5sI6JLXJP73FQ/qK2C?=
  =?us-ascii?Q?vLYuY2cBzy9V+7tmVbmlo+pNzHk2+PqWOfxftAxhfJ6hXdyMoktfvpgLshNC?=
  =?us-ascii?Q?OP8QGYwUKqvJBE/Lh+HIvpjJiKK7Vku+golWFrzcjqQpt/zQ3b9ObhnPE0zB?=
  =?us-ascii?Q?einTTm98FrzfDFeYsJwubIz5AzMgi7fc2/uD7LC5G8woxbi563d2oknnOle8?=
  =?us-ascii?Q?6/y5926CMifsiXstcL1jyEMzOVYsZnLlbBxR6U4bGOTPgpnhvPw4CkSwWhll?=
  =?us-ascii?Q?BoSVsx9DeD4vKBCRin1ZkpwHk3Tm+xYN3dMFRFVu1xropen+6gGTwrT+sHp7?=
  =?us-ascii?Q?iDQqH0qRB8nG+uGMerTcaieCMqi6GS9P73OLAyBL3AuysTP8ZqwVrNkDfn9W?=
  =?us-ascii?Q?6Hz9+Xn9QDNnhTOcmq4U1wYMjohrNBaZyLciHHOUHkoOqnWJBGuX+L6Hh/f+?=
  =?us-ascii?Q?r/TQX4xM0/Rp+uhgWw7UBPA7JbeIUqGj+n+XEmXSpC1XeVM0CjTVzlLVnAVe?=
  =?us-ascii?Q?5EZzZPhPN5KD+BSkOCvUIOUeMX2T0OySDLOyQH3z3b+BZFmMDpIJeFHmKRm5?=
  =?us-ascii?Q?ArM/ud5vImdDx1Yer3pgj7mbfV7oLzjrW1CpvWbGkjX7d8LoKOdezFa38bP6?=
  =?us-ascii?Q?al6mitOxO41l0ZPVqIS+3aKTvGOgsGCkeFdOIAjGcXSJ5DtN1sb53LuELDr9?=
  =?us-ascii?Q?Lnhsd3oj2WKNJiaHhVm2yvU55zYzEWQPnP+m41HgMXmfn1EVkeGi6WEFvA6z?=
  =?us-ascii?Q?+5DOMGSLB7JxaUOkN5D+BpU0EnsEvJNCp5eE91b7yJBg9aaZmrqLKCPGWadi?=
  =?us-ascii?Q?E1zifxjf087Q8RJLmRedMhLNJp3XIEXUH6H1RrlVGvU0+IWs5WGvSZS2BW/Z?=
  =?us-ascii?Q?/aLztz3UCSHw2PKSanpoy6tQ+gtXYm+1lLnLd3yvOlZBpkFyz4jK6c2ZU21u?=
  =?us-ascii?Q?92bROyJYa2/RzU1gOiLJgOyBkFOC41QyYFre32yFKfutcJ/WJqE=3D?=
 
 --_----------=_1790064239251930
 Content-Disposition: inline
 Content-Transfer-Encoding: 8bit
 Content-Type: text/plain; charset="US-ASCII"
 
 Module Name:	pkgsrc
 Committed By:	he
 Date:		Tue Sep 22 08:03:59 UTC 2026
 
 Modified Files:
 	pkgsrc/security/openssh: Makefile distinfo
 	pkgsrc/security/openssh/patches: patch-configure.ac
 Added Files:
 	pkgsrc/security/openssh/patches: patch-atomicio.c
 
 Log Message:
 security/openssh: remove no-longer-needed BROKEN_READ_COMPARISON code.
 
 This mirrors upstream change:
 
   https://github.com/openssh/openssh-portable/commit/a765b86d
 
 ref. mailing list thread at
 
   https://lists.mindrot.org/pipermail/openssh-unix-dev/2026-September/042758.html
 
 Bump PKGREVISION.
 
 
 To generate a diff of this commit:
 cvs rdiff -u -r1.294 -r1.295 pkgsrc/security/openssh/Makefile
 cvs rdiff -u -r1.132 -r1.133 pkgsrc/security/openssh/distinfo
 cvs rdiff -u -r0 -r1.4 pkgsrc/security/openssh/patches/patch-atomicio.c
 cvs rdiff -u -r1.11 -r1.12 pkgsrc/security/openssh/patches/patch-configure.ac
 
 Please note that diffs are not public domain; they are subject to the
 copyright notices on the relevant files.
 
 
 --_----------=_1790064239251930
 Content-Disposition: inline
 Content-Length: 4950
 Content-Transfer-Encoding: binary
 Content-Type: text/x-diff; charset=us-ascii
 
 Modified files:
 
 Index: pkgsrc/security/openssh/Makefile
 diff -u pkgsrc/security/openssh/Makefile:1.294 pkgsrc/security/openssh/Makefile:1.295
 --- pkgsrc/security/openssh/Makefile:1.294	Tue Aug 11 07:16:40 2026
 +++ pkgsrc/security/openssh/Makefile	Tue Sep 22 08:03:59 2026
 @@ -1,6 +1,7 @@
 -# $NetBSD: Makefile,v 1.294 2026/08/11 07:16:40 wiz Exp $
 +# $NetBSD: Makefile,v 1.295 2026/09/22 08:03:59 he Exp $
  
  DISTNAME=		openssh-10.5p1
 +PKGREVISION=		1
  CATEGORIES=		security
  MASTER_SITES=		${MASTER_SITE_OPENBSD:=OpenSSH/portable/}
  
 @@ -19,6 +20,8 @@ BROKEN_ON_PLATFORM+=	OpenBSD-*-*
  USE_GCC_RUNTIME=	yes
  USE_TOOLS+=		autoconf perl
  
 +CFLAGS+=		-g
 +
  # retain the following line, for IPv6-ready pkgsrc webpage
  BUILD_DEFS+=		IPV6_READY
  
 
 Index: pkgsrc/security/openssh/distinfo
 diff -u pkgsrc/security/openssh/distinfo:1.132 pkgsrc/security/openssh/distinfo:1.133
 --- pkgsrc/security/openssh/distinfo:1.132	Tue Aug 11 07:16:40 2026
 +++ pkgsrc/security/openssh/distinfo	Tue Sep 22 08:03:59 2026
 @@ -1,9 +1,10 @@
 -$NetBSD: distinfo,v 1.132 2026/08/11 07:16:40 wiz Exp $
 +$NetBSD: distinfo,v 1.133 2026/09/22 08:03:59 he Exp $
  
  BLAKE2s (openssh-10.5p1.tar.gz) = 0a7483f05aa98e39cd4c7c8f2c259a3f5dd96d784e8934f6a7e94d6bf0a47c83
  SHA512 (openssh-10.5p1.tar.gz) = 5336c1945527b29ed59cc500fa8bfbd918f5ba97e85512daad9ab7241418929bf7152d300e5f3c5f9a8c8d699dfde5a64c5faa4fc33b2758ab52dd04040d6284
  Size (openssh-10.5p1.tar.gz) = 2333659 bytes
  SHA1 (patch-Makefile.in) = d58adac52e169f25f0b0c3a321f154b44b0475e6
 -SHA1 (patch-configure.ac) = 10894c1b98298a1672ec151a223f6180bf841fa4
 +SHA1 (patch-atomicio.c) = cfb54868643d946cded4f2f5d6054bc26d299290
 +SHA1 (patch-configure.ac) = ea50059cf979d5c00f8beae027e0419fbd68cdb2
  SHA1 (patch-defines.h) = c1dbb18076b4fa399b0f791bb543ef1e5cb0408e
  SHA1 (patch-sshkey.h) = aaaf622f377e455c49683fcc2ca42576ccd097bb
 
 Index: pkgsrc/security/openssh/patches/patch-configure.ac
 diff -u pkgsrc/security/openssh/patches/patch-configure.ac:1.11 pkgsrc/security/openssh/patches/patch-configure.ac:1.12
 --- pkgsrc/security/openssh/patches/patch-configure.ac:1.11	Tue Feb 18 09:33:07 2025
 +++ pkgsrc/security/openssh/patches/patch-configure.ac	Tue Sep 22 08:03:59 2026
 @@ -1,8 +1,13 @@
 -$NetBSD: patch-configure.ac,v 1.11 2025/02/18 09:33:07 wiz Exp $
 +$NetBSD: patch-configure.ac,v 1.12 2026/09/22 08:03:59 he Exp $
 +
 +Remove no-longer-needed BROKEN_READ_COMPARISON, ref.
 +   https://github.com/openssh/openssh-portable/commit/a765b86d
 +
 +Tweak for wtmpx location probing.
  
  --- configure.ac.orig	2024-07-01 04:36:28.000000000 +0000
  +++ configure.ac
 -@@ -380,6 +380,9 @@ AC_ARG_WITH([rpath],
 +@@ -388,6 +388,9 @@ AC_ARG_WITH([rpath],
   	]
   )
   
 @@ -12,7 +17,16 @@ $NetBSD: patch-configure.ac,v 1.11 2025/
   # Allow user to specify flags
   AC_ARG_WITH([cflags],
   	[  --with-cflags           Specify additional flags to pass to compiler],
 -@@ -5568,9 +5571,17 @@ AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
 +@@ -1144,8 +1147,6 @@ mips-sony-bsd|mips-sony-newsos4)
 + 	AC_DEFINE([SSH_TUN_PREPEND_AF], [1],
 + 	    [Prepend the address family to IP tunnel traffic])
 + 	TEST_MALLOC_OPTIONS="AJRX"
 +-	AC_DEFINE([BROKEN_READ_COMPARISON], [1],
 +-	    [NetBSD read function is sometimes redirected, breaking atomicio comparisons against it])
 + 	;;
 + *-*-freebsd*)
 + 	AC_DEFINE([LOCKED_PASSWD_PREFIX], ["*LOCKED*"], [Account locked with pw(1)])
 +@@ -5742,9 +5743,17 @@ AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
   ])
   if test -z "$conf_wtmpx_location"; then
   	if test x"$system_wtmpx_path" = x"no" ; then
 @@ -32,7 +46,7 @@ $NetBSD: patch-configure.ac,v 1.11 2025/
   	AC_DEFINE_UNQUOTED([CONF_WTMPX_FILE], ["$conf_wtmpx_location"],
   		[Define if you want to specify the path to your wtmpx file])
   fi
 -@@ -5677,7 +5688,7 @@ echo "OpenSSH has been configured with t
 +@@ -5853,7 +5862,7 @@ echo "OpenSSH has been configured with t
   echo "                     User binaries: $B"
   echo "                   System binaries: $C"
   echo "               Configuration files: $D"
 
 Added files:
 
 Index: pkgsrc/security/openssh/patches/patch-atomicio.c
 diff -u /dev/null pkgsrc/security/openssh/patches/patch-atomicio.c:1.4
 --- /dev/null	Tue Sep 22 08:03:59 2026
 +++ pkgsrc/security/openssh/patches/patch-atomicio.c	Tue Sep 22 08:03:59 2026
 @@ -0,0 +1,24 @@
 +$NetBSD: patch-atomicio.c,v 1.4 2026/09/22 08:03:59 he Exp $
 +
 +Remove no-longer-needed BROKEN_READ_COMPARISON code, to mirror
 +
 +  https://github.com/openssh/openssh-portable/commit/a765b86d
 +
 +ref. mailing list thread at
 +
 +  https://lists.mindrot.org/pipermail/openssh-unix-dev/2026-September/042758.html
 +
 +--- atomicio.c.orig	2026-09-22 07:42:45.683284535 +0000
 ++++ atomicio.c
 +@@ -51,11 +51,7 @@ atomicio6(ssize_t (*f) (int, void *, siz
 + 	struct pollfd pfd;
 + 
 + 	pfd.fd = fd;
 +-#ifndef BROKEN_READ_COMPARISON
 + 	pfd.events = f == read ? POLLIN : POLLOUT;
 +-#else
 +-	pfd.events = POLLIN|POLLOUT;
 +-#endif
 + 	while (n > pos) {
 + 		res = (f) (fd, s + pos, n - pos);
 + 		switch (res) {
 
 
 --_----------=_1790064239251930--
 
 ----Next_Part(Tue_Sep_22_13_02_51_2026_679)----
 



Home | Main Index | Thread Index | Old Index