pkgsrc-Bugs archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: pkg/60563: exposed sshd w/o password-login causes sshd-auth looping
The following reply was made to PR pkg/60563; it has been noted by GNATS.
From: Havard Eidnes <he%NetBSD.org@localhost>
To: gnats-bugs%NetBSD.org@localhost
Cc:
Subject: Re: pkg/60563: exposed sshd w/o password-login causes sshd-auth
looping
Date: Tue, 22 Sep 2026 13:02:51 +0200 (CEST)
----Next_Part(Tue_Sep_22_13_02_51_2026_679)--
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
This fix (plus Thomas' following removal of my accidntal commit
of the CFLAGS steting) appear to fix the mild DoS-aspect of this
issue.
Regards,
- Havard
----Next_Part(Tue_Sep_22_13_02_51_2026_679)--
Content-Type: Message/Rfc822
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
Delivery-Date: Tue, 22 Sep 2026 10:32:44 +0200
Return-Path: <bounces-pkgsrc-changes-owner-he=uninett.no%NetBSD.org@localhost>
X-Original-To: he@localhost
Delivered-To: he@localhost
Received: from smistad.uninett.no (localhost [IPv6:::1])
by smistad.uninett.no (Postfix) with ESMTP id 212D743FB71
for <he@localhost>; Tue, 22 Sep 2026 10:32:41 +0200 (CEST)
Authentication-Results: smistad.uninett.no;
dkim=fail reason="signature verification failed" (1024-bit key) header.d=netbsd.org header.i=@netbsd.org header.b=vkIirM6l;
dkim=fail reason="signature verification failed" (1024-bit key) header.d=netbsd.org header.i=@netbsd.org header.b=GvbrGTKy
MIME-Version: 1.0
Received: from shed.outlook.acdc.tm.svc.cloud.microsoft [2603:1026:c0f:14::2]
by smistad.uninett.no with IMAP (fetchmail-7.0.0-alpha10)
for <he@localhost> (single-drop); Tue, 22 Sep 2026 10:32:41 +0200 (CEST)
Received: from MIWP192MB730602.EURP192.PROD.OUTLOOK.COM (2603:10a6:290:e3::10)
by AM8P192MB1059.EURP192.PROD.OUTLOOK.COM with HTTPS; Tue, 22 Sep 2026
08:04:46 +0000
Received: from OS6P279CA0086.NORP279.PROD.OUTLOOK.COM (2603:10a6:e10:3e::8) by
MIWP192MB730602.EURP192.PROD.OUTLOOK.COM (2603:10a6:290:e3::10) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.428.15; Tue, 22 Sep
2026 08:04:43 +0000
Received: from OSL0EPF000004EA.NORP279.PROD.OUTLOOK.COM
(2603:10a6:e10:3e:cafe::71) by OS6P279CA0086.outlook.office365.com
(2603:10a6:e10:3e::8) with Microsoft SMTP Server (version=TLS1_3,
cipher=TLS_AES_256_GCM_SHA384) id 15.21.451.14 via Frontend Transport; Tue,
22 Sep 2026 08:04:43 +0000
Authentication-Results: spf=neutral (sender IP is
2a05:d016:ec8:1e00:a8f7:fc41:f32f:af8c) smtp.mailfrom=NetBSD.org; dkim=pass
(signature was verified) header.d=netbsd.org;dkim=pass (signature was
verified) header.d=netbsd.org;dmarc=pass action=none header.from=netbsd.org;
Received-SPF: Neutral (protection.outlook.com:
2a05:d016:ec8:1e00:a8f7:fc41:f32f:af8c is neither permitted nor denied by
domain of NetBSD.org)
Received: from onprem-mailgw.it.sikt.no
(2a05:d016:ec8:1e00:a8f7:fc41:f32f:af8c) by
OSL0EPF000004EA.mail.protection.outlook.com (2603:10a6:e18::7) with Microsoft
SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
15.21.451.8 via Frontend Transport; Tue, 22 Sep 2026 08:04:43 +0000
Received: from GV1PR07CU001.outbound.protection.outlook.com (mail-gv1pr07cu00103.outbound.protection.outlook.com [IPv6:2a01:111:f403:c202::b])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by onprem-mailgw.it.sikt.no (Postfix) with ESMTPS id C82231016211
for <he%uninett.no@localhost>; Tue, 22 Sep 2026 10:04:42 +0200 (CEST)
ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;
b=Y2N7RwUY/2yc7Rsr5XwL4j9bUi2fgiq5KMlyl568N94ijH0KZlOfjZJ+Mmyd34+SX6iMG7cPlubEZvk/OZ+VR8IHOhu7r9xqxe5i+NIPv8qlc32nZl2pXHZ3OjaPsXV/XNK9id773DsGZOBr7brjWdFvxfLG9yoTN6RtNsRzlLpIqBA+vyuf5l7dkunp8ig1rnJK/cDGyFxrOOmgR7FXxXWG6CnMfurO1re63VQpcnzKeZOnD3hJi1TfJ7eEqGO70ZPo9TNGEsT3sPfZVnSeWIWrGIUpKQdImH6w+zCK1jfOp+BiJT5t25zlWNGqpoqBGo0WcRAbpSLojfATC5LR/Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector10001;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=/MdKuxiekkS2qne8EaxI4gkRL3lLlSbzGE2ejXZGxx4=;
b=G0i36nJZ6JIE8SjhkBPAMvPw5iaDIuH+pCmXQU/QkkI3LADqfExKzjDUKSikDECazrvTnRxTntILQm2Z7pFTpq+5buGqhylhj9c7ezawwBoamH9yL0NcUWIc05sPwb1jk/2bpCkcaGuBGVF8frWe783GY2t0l7HiZQ2P9a4vvrJTc11TTT/jXwZP0nB3N0G8R0tME+IIGd+mfm4ZZpe9ub2gANUyq7lJ27VglV5Xymv2/MqqtvaA12q6kuubdu/PK4INIERmYAKa870gJz7HWAB+yXM35bqVFT0gNjjR4zwzseWh/IyPrML87AYuZCDK2EYIgH5NJS8N5wSIe5qnHg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
2001:470:a085:999::25) smtp.rcpttodomain=uninett.no smtp.mailfrom=netbsd.org;
dmarc=pass (p=none sp=none pct=100) action=none header.from=netbsd.org;
dkim=pass (signature was verified) header.d=netbsd.org; dkim=pass (signature
was verified) header.d=netbsd.org; arc=none (0)
Received: from OS6P279CA0082.NORP279.PROD.OUTLOOK.COM (2603:10a6:e10:3e::10)
by DB5P192MB3400.EURP192.PROD.OUTLOOK.COM (2603:10a6:10:64b::21) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.21.428.14; Tue, 22 Sep
2026 08:04:10 +0000
Received: from OSL0EPF000004EA.NORP279.PROD.OUTLOOK.COM
(2603:10a6:e10:3e:cafe::6) by OS6P279CA0082.outlook.office365.com
(2603:10a6:e10:3e::10) with Microsoft SMTP Server (version=TLS1_3,
cipher=TLS_AES_256_GCM_SHA384) id 15.21.451.13 via Frontend Transport; Tue,
22 Sep 2026 08:04:10 +0000
Authentication-Results-Original: spf=pass (sender IP is 2001:470:a085:999::25)
smtp.mailfrom=NetBSD.org; dkim=pass (signature was verified)
header.d=netbsd.org;dkim=pass (signature was verified)
header.d=netbsd.org;dmarc=pass action=none
header.from=netbsd.org;compauth=pass reason=100
Received-SPF: Pass (protection.outlook.com: domain of NetBSD.org designates
2001:470:a085:999::25 as permitted sender) receiver=protection.outlook.com;
client-ip=2001:470:a085:999::25; helo=mail.netbsd.org; pr=C
Received: from mail.netbsd.org (2001:470:a085:999::25) by
OSL0EPF000004EA.mail.protection.outlook.com (2603:10a6:e18::7) with Microsoft
SMTP Server (version=TLS1_3, cipher=TLS_AES_256_GCM_SHA384) id 15.21.451.8
via Frontend Transport; Tue, 22 Sep 2026 08:04:08 +0000
Received: by mail.netbsd.org (Postfix, from userid 605)
id 9D93485784; Tue, 22 Sep 2026 08:04:01 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netbsd.org;
s=20240131; t=1790064241;
bh=/MdKuxiekkS2qne8EaxI4gkRL3lLlSbzGE2ejXZGxx4=;
h=Date:From:Subject:To:Reply-To:List-Id:List-Unsubscribe;
b=vkIirM6l8yQVRnTFtgKS63jUMAJsCkjPMuXgYz6J7Hc8sbdfNvox2eyHEwcYvwjMC
qR1TFz/HLWTdQCQy6nEpn7mq0ULT53D6BX1nCfqVVTlyec5NEUWXrIYM8ImeWO3i3C
r+RPLd0OfMSh+hxyg+DWPSzGTxV/ylAqiG/TVNgI=
Delivered-To: pkgsrc-changes%NetBSD.org@localhost
Received: from localhost (localhost [127.0.0.1])
by mail.netbsd.org (Postfix) with ESMTP id A97B484E61
for <pkgsrc-changes%NetBSD.org@localhost>; Tue, 22 Sep 2026 08:04:00 +0000 (UTC)
X-Virus-Scanned: amavisd-new at netbsd.org
Authentication-Results-Original: mail.netbsd.org (amavisd-new); dkim=pass
(1024-bit key) header.d=netbsd.org
Received: from mail.netbsd.org ([IPv6:::1])
by localhost (mail.netbsd.org [IPv6:::1]) (amavisd-new, port 10025)
with ESMTP id BLW4s3RWcJuK for <pkgsrc-changes%netbsd.org@localhost>;
Tue, 22 Sep 2026 08:03:59 +0000 (UTC)
Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197])
by mail.netbsd.org (Postfix) with ESMTP id BC71A84D7C
for <pkgsrc-changes%NetBSD.org@localhost>; Tue, 22 Sep 2026 08:03:59 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=netbsd.org;
s=20240131; t=1790064239;
bh=/MdKuxiekkS2qne8EaxI4gkRL3lLlSbzGE2ejXZGxx4=;
h=Date:From:Subject:To:Reply-To;
b=GvbrGTKy5VlFxp2F4ahZ5ad5LPJDQ0J3xfW7rN7h3sIr3z8DZDal8KH6BoGBXUOrH
5RJmL2+9a2vEOYSopsO0LMtSBWqKE2h+eGP9fhJ+acLPnrOYun/6ssH/KyfLsSL4Ol
QAVzvLsLOlZpZLvm9klL9R+E/7F3n/OImgIis2to=
Received: by cvs.NetBSD.org (Postfix, from userid 500)
id B2A8AFA2D; Tue, 22 Sep 2026 08:03:59 +0000 (UTC)
Content-Transfer-Encoding: 7bit
Content-Type: multipart/mixed; boundary="_----------=_1790064239251930"
Date: Tue, 22 Sep 2026 08:03:59 +0000
From: "Havard Eidnes" <he%netbsd.org@localhost>
Subject: CVS commit: pkgsrc/security/openssh
To: pkgsrc-changes%NetBSD.org@localhost
Reply-To: he%netbsd.org@localhost
X-Mailer: log_accum
Message-Id: <20260922080359.B2A8AFA2D%cvs.NetBSD.org@localhost>
Sender: pkgsrc-changes-owner%NetBSD.org@localhost
List-Id: <pkgsrc-changes.NetBSD.org>
Precedence: bulk
List-Unsubscribe: <mailto:majordomo%NetBSD.org@localhost?subject=Unsubscribe%20pkgsrc-changes&body=unsubscribe%20pkgsrc-changes>
X-EOPAttributedMessage: 1
X-MS-TrafficTypeDiagnostic: OSL0EPF000004EA:EE_|DB5P192MB3400:EE_|OSL0EPF000004EA:EE_|MIWP192MB730602:EE_|AM8P192MB1059:EE_
X-MS-Office365-Filtering-Correlation-Id: 4053a895-925a-4208-e905-08df188028eb
X-MS-Exchange-AtpMessageProperties: SA
X-Microsoft-Antispam-Untrusted: BCL:0;ARA:13230040|704162011799003|4022899009|6049299003|260918215300599003|260918224100599003|4053099003|13003099007|19002099009|6133799003|10067099003|56012099006|11063799006|5063699009|18002099003|16102099003|21082099003|3113699003|55112099003|5113699003;
X-Microsoft-Antispam-Message-Info-Original: =?us-ascii?Q?Wz5lZLLG8pEfCI4AFu5cyFeFLER+RLr5qpuCsNAsw46HCmB8BkcJi4DTljmN?=
=?us-ascii?Q?VTkTDkysQFcOg+vl9YplTxL/7GkkpUjGp5YNJxqd/36rCnmF7J63/7c9M+zG?=
=?us-ascii?Q?kHO8PkmOwcdspHQs3vGNXROf2dAIt89joMVVOAld+GGvkArPs3SWlIeyVwch?=
=?us-ascii?Q?YPM1/z1GLXzZDR+4KiSo5ztHRrwx+T26bmySBALY6DBSEQvqbhvPb1L2mIOV?=
=?us-ascii?Q?WSzRkmkA/EVzIe1VItNwg+7dhQCkyzL+lR802gCAQj9I8xhxOp81KVCkLbOJ?=
=?us-ascii?Q?BN0mZNnsuXNyPIXlRdnc9OOcZvAXUIK0cfp33oOi8MWe4aZ/fXfyM9J7MoaD?=
=?us-ascii?Q?OUY3xkV0Bun2M/7vxAIEDesjfcKR5emjXTG8si32ZuPTgiPVu9BBb3al9/Ld?=
=?us-ascii?Q?pZpLmQ75JQsb34k2Jt4gjExJmXYMHduu/VHSd8Gjgs75jk057R1epq1a2mFY?=
=?us-ascii?Q?u/wZ3WUcQjuIBaKqHlW/kS8MnvZfMhjW+MfqNltwinA1reSP1jvAAG8+R+EI?=
=?us-ascii?Q?w6H2fpVNVnz6Zak1OjXuQxh4gWwpplH28jD9DmRhDW2ZqSHuFzp8HMvHYvPz?=
=?us-ascii?Q?1iHhbu0+IpPUFS37NvafoG/+Eowmg7v3A8CMHzS5+yyEC+vCbvsIzreQ0ebw?=
=?us-ascii?Q?0hAaF+JVAUkcMPJBtG3Os6jdT4PncOD/Osq86zWHeP/CYE96bZbaCPvpupUs?=
=?us-ascii?Q?cC1K5pWTXw/h0jf42owXRXU1gdMVN9p57XlMtgrSLbm6Xv7HF01qaCl5nYex?=
=?us-ascii?Q?9qOFSOOjmQMGVvAi+Y96gzrZnuMQIomZUauendDAq7tsmhwcwjC1EW4eLjxv?=
=?us-ascii?Q?aabEBcqOn9byI2yxMzTWHE9s1btLLOjwtQv4DURJkfvaZpfUTZq8Eq90uAkW?=
=?us-ascii?Q?eM/D4WtJqcPLrDe5sdBqDSxG0NDEalElrQXOV8kCKFloP5FgUUl6AGN0F5wP?=
=?us-ascii?Q?wPhxbe6lQ2+f8I5LaJzklz6DArlq+0ayspr8K35CxeU+xrfOArnNmQlVGfPX?=
=?us-ascii?Q?8Ss1K+tYqVqJDnv7V4gm4k9+sbwmMEvhyVJk5lMdhvlEU2DIjYwZdddNTPhx?=
=?us-ascii?Q?YH2K8n1LTSIzkXyIhFgd+5lBYnWE0wfbZIQXaLxg3/mdi/2N2sJZ1J+oxI+m?=
=?us-ascii?Q?mtTXJ7r9FuenXzxuTnyDTkzRWEesm4v+9AAdzcqhwn90MBo5MRyuNpIxnR8b?=
=?us-ascii?Q?AOCVw1ALM7K5OBy1N6doLDJONVOBUMTKmYbO6iEGmomBxsElTlweq6OF3Kxc?=
=?us-ascii?Q?VNw2fPsYT1FHj156Hena0UUdGLmcmPvImkpP5nhp33MFxO1MOX0kkXxH6XU1?=
=?us-ascii?Q?TqoXbh+xltxJbjgno4hrE1FeXMtWsrx2Jdj0FpKN2eUYYrx5220dVXCPC85P?=
=?us-ascii?Q?zVYQ5f9c/iLoUA1W+z+KIiqM8ogTl5ykaNFq+gpZVjHp/iY6y+/qrstMPFms?=
=?us-ascii?Q?3Jl5XOhLhrw2qJkG93L/W4wk8SPtfgf6xuP+WLmYyZmulpIFBbva47R9A//t?=
=?us-ascii?Q?Yg+NStDVbppU3hpDrgQdsGlaR8qxJFSn35JlXYnvQs30wXF1QcT04Njh9iQw?=
=?us-ascii?Q?B7OkqxgYSODM6DJGctWp8JqFE6GoR69FXgIuNbAg2DJrqyfbO5jF+01khMfe?=
=?us-ascii?Q?RGlaLosBOq9w0HrjVDnI+ESKLqTW7pbGDu2BnSiPW2ILmgE8K/V61VMfhuBx?=
=?us-ascii?Q?EIT2E4bZY89P+di4njv6V7zj8IkHDUgze7SVDEBcjVlwtbT++9KoZPWHrCAe?=
=?us-ascii?Q?g61exHUxLoLH3TC4e76As3Pd77PCksycuj/l6jbORR2zYNh7k8AGAHJog+rv?=
=?us-ascii?Q?couSeBRVFZPueAE7GfnHCRlVuaXBFXkO74To995Xi0/Du9t4Nwaep2z5qG/p?=
=?us-ascii?Q?PiS5ve/mfRLDnzf83yFFxUTOen3IO9d6fbKpK9GTq3ocrgQ+TIQVPh1h2PwW?=
=?us-ascii?Q?82Dx04khtXnKjOLreM04Y81yNm/cNs/B5MFiJT27zOYeSTA/SUZng2OAC6l+?=
=?us-ascii?Q?ZqJkY+oDamHsK33BXDRkq1gHS6l6FcJyFyLGjiRC3+sq7om5Ca+q0H93saMp?=
=?us-ascii?Q?bhyxu16/g3ecn0dV102hdEyoZcsU4gR7bvqbHFOk2eBy9QYn2caP4l4LHNBV?=
=?us-ascii?Q?nqHisG9/6ztF0LFK+TYjyb15kfLg2sOX9FIBA7py1BqoW4065vx/2LSCtHBS?=
=?us-ascii?Q?axB51UotVOPs371SUyRAOjo2qkML8PuKzEYTVhfW72GpoPzQUBI3oBnLgDem?=
=?us-ascii?Q?EnUQUaIOLkiVH0HbVKfZaMuMgeUwYLfYDkDFSshVOhK0LHd97BX38LyiHqF1?=
=?us-ascii?Q?KWaQoybQ7l/DBQpSAE8Af8s/4DJkamV/OC5LYnPK6swhsKcPVz82vYP0MT6e?=
=?us-ascii?Q?bdPK3PMK7hvQF1zBKaNJPyQaZSjjJtHEw+RriIC1+5ZPE3tWNg=3D=3D?=
X-Forefront-Antispam-Report-Untrusted: CIP:2001:470:a085:999::25;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:mail.netbsd.org;PTR:mail.NetBSD.org;CAT:NONE;SFS:(13230040)(704162011799003)(4022899009)(6049299003)(260918215300599003)(260918224100599003)(4053099003)(13003099007)(19002099009)(6133799003)(10067099003)(56012099006)(11063799006)(5063699009)(18002099003)(16102099003)(21082099003)(3113699003)(55112099003)(5113699003);DIR:INB;
X-Exchange-RoutingPolicyChecked: ncjMWj6ezn5NZJwqaWb1tbA4qkgsuNboVHoDBFGoZxPSVFOKCKYr9FWF+g3srwm2OWO7a2cOTwlOYDoNWjfFxXmnnRrvu4ta+5QuSmC0L/ACRNvNuZUxErd4TNPwMaQh9mHEfn2d5PElhQxua+T2indOTT0hU6V0pBfQJPwW+ABAnHhMUnoxjEiPFnXY5fjnEjgpGEPZr08Ggw7cCv4RPq71/wfoiwpyL2p7d6Oo4IGXlEFeQJlBbe6SClUidrFob8bo53ZCM4MRjFv4ZV8qvbsZ5jjo9zpTMpUa/zILU/bc2k2g54wCXGIYI0fKsfdBbbRYQmIXU1+05fpNX7EitA==
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5P192MB3400
X-OrganizationHeadersPreserved: DB5P192MB3400.EURP192.PROD.OUTLOOK.COM
X-MS-Exchange-Organization-ExpirationStartTime: 22 Sep 2026 08:04:43.1329
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id: 4053a895-925a-4208-e905-08df188028eb
X-MS-Exchange-Organization-MessageDirectionality: Originating
X-MS-Exchange-Organization-SCL: 1
X-CrossPremisesHeadersPromoted: OSL0EPF000004EA.NORP279.PROD.OUTLOOK.COM
X-CrossPremisesHeadersFiltered: OSL0EPF000004EA.NORP279.PROD.OUTLOOK.COM
X-MS-Exchange-Transport-CrossTenantHeadersStripped: OSL0EPF000004EA.NORP279.PROD.OUTLOOK.COM
X-MS-PublicTrafficType: Email
X-MS-Exchange-Organization-AuthSource: OSL0EPF000004EA.NORP279.PROD.OUTLOOK.COM
X-MS-Exchange-Organization-AuthAs: Anonymous
X-OriginatorOrg: sikt.no
X-MS-Office365-Filtering-Correlation-Id-Prvs: 146580a7-311c-41fc-a469-08df1880153d
X-Microsoft-Antispam: BCL:0;ARA:13230040|82310400026|260918224100599003|4022899009|260918215300599003|35042699022|6049299003|10067099003|11063799006|3113699003|19002099009|5113699003|6133799003|21082099003|57112099003|18002099003|55112099003|16102099003|4053099003;
X-Forefront-Antispam-Report: CIP:2a05:d016:ec8:1e00:a8f7:fc41:f32f:af8c;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:onprem-mailgw.it.sikt.no;PTR:InfoDomainNonexistent;CAT:NONE;SFS:(13230040)(82310400026)(260918224100599003)(4022899009)(260918215300599003)(35042699022)(6049299003)(10067099003)(11063799006)(3113699003)(19002099009)(5113699003)(6133799003)(21082099003)(57112099003)(18002099003)(55112099003)(16102099003)(4053099003);DIR:INB;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 22 Sep 2026 08:04:43.0540
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 4053a895-925a-4208-e905-08df188028eb
X-MS-Exchange-CrossTenant-Id: cb342146-7965-425e-83ab-88f8ecb99e0d
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=cb342146-7965-425e-83ab-88f8ecb99e0d;Ip=[2a05:d016:ec8:1e00:a8f7:fc41:f32f:af8c];Helo=[onprem-mailgw.it.sikt.no]
X-MS-Exchange-CrossTenant-AuthSource: OSL0EPF000004EA.NORP279.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: MIWP192MB730602
X-MS-Exchange-Transport-EndToEndLatency: 00:00:03.0290406
X-MS-Exchange-Processed-By-BccFoldering: 15.21.0451.004
X-Microsoft-Antispam-Mailbox-Delivery:
ucf:0;jmr:0;auth:0;dest:I;ENG:(910005)(944506478)(944626604)(920097)(930201)(20251009189)(140003);
X-Microsoft-Antispam-Message-Info:
=?us-ascii?Q?3otJC/uxdpnAesjkkhZcy3wpxlYyTJvNkFcmpJsF7n6zDR7IeOty8O53PBmy?=
=?us-ascii?Q?fmK/CFdo0FZ5JtLUoX2NoEq//TLhUij05s4bkmtrL9Tw5T8wUnTK+NJMId/6?=
=?us-ascii?Q?SFQm/KgQTI4/p1Wsd0Un4kYI94eacToVGMTLli4FLnTak0L5l1lgXoRGqjNk?=
=?us-ascii?Q?t3c8CSyyQTFs8ILPJN8F2iogE15OVN/9psTh2Cv/GCfoZR86Zh+63rV9CVqD?=
=?us-ascii?Q?qhV/L4Uw6ebKbR1R3ywnVmHJmxfhcpDjw9zRyNaRT7RLjD6T61pbZE7py0J3?=
=?us-ascii?Q?tjASdgGffx1T0HSDKhLqt/308OEcoTPjsQFtMuAIINZqodnZLRVqXH3YMfax?=
=?us-ascii?Q?ZqGUJ4uWTzfP5aK6JvF1lGH5J82AiHMp8+lH/lvEb4kdwsaMqUPih8IxLd80?=
=?us-ascii?Q?qlHjzzKdx3pFxkBS/Q1qH8/OorfMMe+ONOnFMhS2Ia/oAPKrW5cMaWezp5VL?=
=?us-ascii?Q?5HBmArvjXhx1zfLrO9vPjfAuZl2LnvDGpuPu4tNqnKh1SiiNyu8GOpcnY4Kg?=
=?us-ascii?Q?WTOXnDSPv/rknjTAmZhichNZ4PFrSQbPZTsCzamE922fF+4bT3o369fL+vV+?=
=?us-ascii?Q?N8LjxrPhlVAm9bRnW/EKySi8WhcuikVSfdzKf6MoigY8TaEfY3WzBHuUveoe?=
=?us-ascii?Q?CEI4hnLlEnR9q0W1hESM876QLVY73tADWx97K+LpD0zyckqX2mqiyZmb2iX4?=
=?us-ascii?Q?eczIWk4Um80qaWF9QDmTpgI/dM7zp1P1qHM6Ug4ChXCJ/FZ5R6NE51ZD72rJ?=
=?us-ascii?Q?qurajQIKGmCeSmqZi10/M43INGJ2j+o3yxCewNPrNIRJPBm4tAMBNktWqCcQ?=
=?us-ascii?Q?WqS8Ucn6CjgwNCjCtWBWhyajnesIyAVG46qPr2waafUU/W4mB1FIetpeDUaF?=
=?us-ascii?Q?vtIdLYzy8kmv8p8ugLb26LVPq7bw/w3RD5xHknmlr1cdvdCV0ExtopVYPrew?=
=?us-ascii?Q?bxM5dzdaN/b/Se1n1fdjsKhUqmZqjnsft1WMfHiW25RglpX2ekNDgGG7Rtx+?=
=?us-ascii?Q?oLIhOqHglwuyRZEELw6dHNtC95R7JXnPgoQp0YuMZrrWoIPvPbxda4/L2vEI?=
=?us-ascii?Q?xCiJiCrTrfNqr2/tmbLUj2LGk63mp27Dr7p/qws9Qu5sI6JLXJP73FQ/qK2C?=
=?us-ascii?Q?vLYuY2cBzy9V+7tmVbmlo+pNzHk2+PqWOfxftAxhfJ6hXdyMoktfvpgLshNC?=
=?us-ascii?Q?OP8QGYwUKqvJBE/Lh+HIvpjJiKK7Vku+golWFrzcjqQpt/zQ3b9ObhnPE0zB?=
=?us-ascii?Q?einTTm98FrzfDFeYsJwubIz5AzMgi7fc2/uD7LC5G8woxbi563d2oknnOle8?=
=?us-ascii?Q?6/y5926CMifsiXstcL1jyEMzOVYsZnLlbBxR6U4bGOTPgpnhvPw4CkSwWhll?=
=?us-ascii?Q?BoSVsx9DeD4vKBCRin1ZkpwHk3Tm+xYN3dMFRFVu1xropen+6gGTwrT+sHp7?=
=?us-ascii?Q?iDQqH0qRB8nG+uGMerTcaieCMqi6GS9P73OLAyBL3AuysTP8ZqwVrNkDfn9W?=
=?us-ascii?Q?6Hz9+Xn9QDNnhTOcmq4U1wYMjohrNBaZyLciHHOUHkoOqnWJBGuX+L6Hh/f+?=
=?us-ascii?Q?r/TQX4xM0/Rp+uhgWw7UBPA7JbeIUqGj+n+XEmXSpC1XeVM0CjTVzlLVnAVe?=
=?us-ascii?Q?5EZzZPhPN5KD+BSkOCvUIOUeMX2T0OySDLOyQH3z3b+BZFmMDpIJeFHmKRm5?=
=?us-ascii?Q?ArM/ud5vImdDx1Yer3pgj7mbfV7oLzjrW1CpvWbGkjX7d8LoKOdezFa38bP6?=
=?us-ascii?Q?al6mitOxO41l0ZPVqIS+3aKTvGOgsGCkeFdOIAjGcXSJ5DtN1sb53LuELDr9?=
=?us-ascii?Q?Lnhsd3oj2WKNJiaHhVm2yvU55zYzEWQPnP+m41HgMXmfn1EVkeGi6WEFvA6z?=
=?us-ascii?Q?+5DOMGSLB7JxaUOkN5D+BpU0EnsEvJNCp5eE91b7yJBg9aaZmrqLKCPGWadi?=
=?us-ascii?Q?E1zifxjf087Q8RJLmRedMhLNJp3XIEXUH6H1RrlVGvU0+IWs5WGvSZS2BW/Z?=
=?us-ascii?Q?/aLztz3UCSHw2PKSanpoy6tQ+gtXYm+1lLnLd3yvOlZBpkFyz4jK6c2ZU21u?=
=?us-ascii?Q?92bROyJYa2/RzU1gOiLJgOyBkFOC41QyYFre32yFKfutcJ/WJqE=3D?=
--_----------=_1790064239251930
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset="US-ASCII"
Module Name: pkgsrc
Committed By: he
Date: Tue Sep 22 08:03:59 UTC 2026
Modified Files:
pkgsrc/security/openssh: Makefile distinfo
pkgsrc/security/openssh/patches: patch-configure.ac
Added Files:
pkgsrc/security/openssh/patches: patch-atomicio.c
Log Message:
security/openssh: remove no-longer-needed BROKEN_READ_COMPARISON code.
This mirrors upstream change:
https://github.com/openssh/openssh-portable/commit/a765b86d
ref. mailing list thread at
https://lists.mindrot.org/pipermail/openssh-unix-dev/2026-September/042758.html
Bump PKGREVISION.
To generate a diff of this commit:
cvs rdiff -u -r1.294 -r1.295 pkgsrc/security/openssh/Makefile
cvs rdiff -u -r1.132 -r1.133 pkgsrc/security/openssh/distinfo
cvs rdiff -u -r0 -r1.4 pkgsrc/security/openssh/patches/patch-atomicio.c
cvs rdiff -u -r1.11 -r1.12 pkgsrc/security/openssh/patches/patch-configure.ac
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.
--_----------=_1790064239251930
Content-Disposition: inline
Content-Length: 4950
Content-Transfer-Encoding: binary
Content-Type: text/x-diff; charset=us-ascii
Modified files:
Index: pkgsrc/security/openssh/Makefile
diff -u pkgsrc/security/openssh/Makefile:1.294 pkgsrc/security/openssh/Makefile:1.295
--- pkgsrc/security/openssh/Makefile:1.294 Tue Aug 11 07:16:40 2026
+++ pkgsrc/security/openssh/Makefile Tue Sep 22 08:03:59 2026
@@ -1,6 +1,7 @@
-# $NetBSD: Makefile,v 1.294 2026/08/11 07:16:40 wiz Exp $
+# $NetBSD: Makefile,v 1.295 2026/09/22 08:03:59 he Exp $
DISTNAME= openssh-10.5p1
+PKGREVISION= 1
CATEGORIES= security
MASTER_SITES= ${MASTER_SITE_OPENBSD:=OpenSSH/portable/}
@@ -19,6 +20,8 @@ BROKEN_ON_PLATFORM+= OpenBSD-*-*
USE_GCC_RUNTIME= yes
USE_TOOLS+= autoconf perl
+CFLAGS+= -g
+
# retain the following line, for IPv6-ready pkgsrc webpage
BUILD_DEFS+= IPV6_READY
Index: pkgsrc/security/openssh/distinfo
diff -u pkgsrc/security/openssh/distinfo:1.132 pkgsrc/security/openssh/distinfo:1.133
--- pkgsrc/security/openssh/distinfo:1.132 Tue Aug 11 07:16:40 2026
+++ pkgsrc/security/openssh/distinfo Tue Sep 22 08:03:59 2026
@@ -1,9 +1,10 @@
-$NetBSD: distinfo,v 1.132 2026/08/11 07:16:40 wiz Exp $
+$NetBSD: distinfo,v 1.133 2026/09/22 08:03:59 he Exp $
BLAKE2s (openssh-10.5p1.tar.gz) = 0a7483f05aa98e39cd4c7c8f2c259a3f5dd96d784e8934f6a7e94d6bf0a47c83
SHA512 (openssh-10.5p1.tar.gz) = 5336c1945527b29ed59cc500fa8bfbd918f5ba97e85512daad9ab7241418929bf7152d300e5f3c5f9a8c8d699dfde5a64c5faa4fc33b2758ab52dd04040d6284
Size (openssh-10.5p1.tar.gz) = 2333659 bytes
SHA1 (patch-Makefile.in) = d58adac52e169f25f0b0c3a321f154b44b0475e6
-SHA1 (patch-configure.ac) = 10894c1b98298a1672ec151a223f6180bf841fa4
+SHA1 (patch-atomicio.c) = cfb54868643d946cded4f2f5d6054bc26d299290
+SHA1 (patch-configure.ac) = ea50059cf979d5c00f8beae027e0419fbd68cdb2
SHA1 (patch-defines.h) = c1dbb18076b4fa399b0f791bb543ef1e5cb0408e
SHA1 (patch-sshkey.h) = aaaf622f377e455c49683fcc2ca42576ccd097bb
Index: pkgsrc/security/openssh/patches/patch-configure.ac
diff -u pkgsrc/security/openssh/patches/patch-configure.ac:1.11 pkgsrc/security/openssh/patches/patch-configure.ac:1.12
--- pkgsrc/security/openssh/patches/patch-configure.ac:1.11 Tue Feb 18 09:33:07 2025
+++ pkgsrc/security/openssh/patches/patch-configure.ac Tue Sep 22 08:03:59 2026
@@ -1,8 +1,13 @@
-$NetBSD: patch-configure.ac,v 1.11 2025/02/18 09:33:07 wiz Exp $
+$NetBSD: patch-configure.ac,v 1.12 2026/09/22 08:03:59 he Exp $
+
+Remove no-longer-needed BROKEN_READ_COMPARISON, ref.
+ https://github.com/openssh/openssh-portable/commit/a765b86d
+
+Tweak for wtmpx location probing.
--- configure.ac.orig 2024-07-01 04:36:28.000000000 +0000
+++ configure.ac
-@@ -380,6 +380,9 @@ AC_ARG_WITH([rpath],
+@@ -388,6 +388,9 @@ AC_ARG_WITH([rpath],
]
)
@@ -12,7 +17,16 @@ $NetBSD: patch-configure.ac,v 1.11 2025/
# Allow user to specify flags
AC_ARG_WITH([cflags],
[ --with-cflags Specify additional flags to pass to compiler],
-@@ -5568,9 +5571,17 @@ AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
+@@ -1144,8 +1147,6 @@ mips-sony-bsd|mips-sony-newsos4)
+ AC_DEFINE([SSH_TUN_PREPEND_AF], [1],
+ [Prepend the address family to IP tunnel traffic])
+ TEST_MALLOC_OPTIONS="AJRX"
+- AC_DEFINE([BROKEN_READ_COMPARISON], [1],
+- [NetBSD read function is sometimes redirected, breaking atomicio comparisons against it])
+ ;;
+ *-*-freebsd*)
+ AC_DEFINE([LOCKED_PASSWD_PREFIX], ["*LOCKED*"], [Account locked with pw(1)])
+@@ -5742,9 +5743,17 @@ AC_COMPILE_IFELSE([AC_LANG_PROGRAM([[
])
if test -z "$conf_wtmpx_location"; then
if test x"$system_wtmpx_path" = x"no" ; then
@@ -32,7 +46,7 @@ $NetBSD: patch-configure.ac,v 1.11 2025/
AC_DEFINE_UNQUOTED([CONF_WTMPX_FILE], ["$conf_wtmpx_location"],
[Define if you want to specify the path to your wtmpx file])
fi
-@@ -5677,7 +5688,7 @@ echo "OpenSSH has been configured with t
+@@ -5853,7 +5862,7 @@ echo "OpenSSH has been configured with t
echo " User binaries: $B"
echo " System binaries: $C"
echo " Configuration files: $D"
Added files:
Index: pkgsrc/security/openssh/patches/patch-atomicio.c
diff -u /dev/null pkgsrc/security/openssh/patches/patch-atomicio.c:1.4
--- /dev/null Tue Sep 22 08:03:59 2026
+++ pkgsrc/security/openssh/patches/patch-atomicio.c Tue Sep 22 08:03:59 2026
@@ -0,0 +1,24 @@
+$NetBSD: patch-atomicio.c,v 1.4 2026/09/22 08:03:59 he Exp $
+
+Remove no-longer-needed BROKEN_READ_COMPARISON code, to mirror
+
+ https://github.com/openssh/openssh-portable/commit/a765b86d
+
+ref. mailing list thread at
+
+ https://lists.mindrot.org/pipermail/openssh-unix-dev/2026-September/042758.html
+
+--- atomicio.c.orig 2026-09-22 07:42:45.683284535 +0000
++++ atomicio.c
+@@ -51,11 +51,7 @@ atomicio6(ssize_t (*f) (int, void *, siz
+ struct pollfd pfd;
+
+ pfd.fd = fd;
+-#ifndef BROKEN_READ_COMPARISON
+ pfd.events = f == read ? POLLIN : POLLOUT;
+-#else
+- pfd.events = POLLIN|POLLOUT;
+-#endif
+ while (n > pos) {
+ res = (f) (fd, s + pos, n - pos);
+ switch (res) {
--_----------=_1790064239251930--
----Next_Part(Tue_Sep_22_13_02_51_2026_679)----
Home |
Main Index |
Thread Index |
Old Index