CVS commit: pkgsrc/security/openssh

["Thomas Klausner" <wiz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   wiz
Date:           Tue Jun 25 17:38:40 UTC 2024

Modified Files:
        pkgsrc/security/openssh: Makefile distinfo

Log Message:
openssh: update to 9.7p1.

Security fix release.

Changes since OpenSSH 9.6
=========================

This release contains mostly bugfixes.

New features
------------

 * ssh(1), sshd(8): add a "global" ChannelTimeout type that watches
   all open channels and will close all open channels if there is no
   traffic on any of them for the specified interval. This is in
   addition to the existing per-channel timeouts added recently.

   This supports situations like having both session and x11
   forwarding channels open where one may be idle for an extended
   period but the other is actively used. The global timeout could
   close both channels when both have been idle for too long.

 * All: make DSA key support compile-time optional, defaulting to on.

Bugfixes
--------

 * sshd(8): don't append an unnecessary space to the end of subsystem
   arguments (bz3667)

 * ssh(1): fix the multiplexing "channel proxy" mode, broken when
   keystroke timing obfuscation was added. (GHPR#463)

 * ssh(1), sshd(8): fix spurious configuration parsing errors when
   options that accept array arguments are overridden (bz3657).

 * ssh-agent(1): fix potential spin in signal handler (bz3670)

 * Many fixes to manual pages and other documentation, including
   GHPR#462, GHPR#454, GHPR#442 and GHPR#441.

 * Greatly improve interop testing against PuTTY.

Portability
-----------

 * Improve the error message when the autoconf OpenSSL header check
   fails (bz#3668)

 * Improve detection of broken toolchain -fzero-call-used-regs support
   (bz3645).

 * Fix regress/misc/fuzz-harness fuzzers and make them compile without
   warnings when using clang16


To generate a diff of this commit:
cvs rdiff -u -r1.281 -r1.282 pkgsrc/security/openssh/Makefile
cvs rdiff -u -r1.121 -r1.122 pkgsrc/security/openssh/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/openssh/Makefile
diff -u pkgsrc/security/openssh/Makefile:1.281 pkgsrc/security/openssh/Makefile:1.282
--- pkgsrc/security/openssh/Makefile:1.281      Thu Apr 11 05:29:57 2024
+++ pkgsrc/security/openssh/Makefile    Tue Jun 25 17:38:40 2024
@@ -1,7 +1,6 @@
-# $NetBSD: Makefile,v 1.281 2024/04/11 05:29:57 schmonz Exp $
+# $NetBSD: Makefile,v 1.282 2024/06/25 17:38:40 wiz Exp $
 
-DISTNAME=              openssh-9.6p1
-PKGREVISION=           1
+DISTNAME=              openssh-9.7p1
 CATEGORIES=            security
 MASTER_SITES=          ${MASTER_SITE_OPENBSD:=OpenSSH/portable/}
 
@@ -73,7 +72,7 @@ CONFIGURE_ENV+=               LD=${CC:Q}
 .  include "../../security/skey/buildlink3.mk"
 .endif
 
-.if (${OPSYS} == "NetBSD")
+.if ${OPSYS} == "NetBSD"
 .  if exists(/usr/include/utmpx.h)
 # if we have utmpx et al do not try to use login()
 CONFIGURE_ARGS+=       --disable-libutil

Index: pkgsrc/security/openssh/distinfo
diff -u pkgsrc/security/openssh/distinfo:1.121 pkgsrc/security/openssh/distinfo:1.122
--- pkgsrc/security/openssh/distinfo:1.121      Mon Dec 18 15:38:34 2023
+++ pkgsrc/security/openssh/distinfo    Tue Jun 25 17:38:40 2024
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.121 2023/12/18 15:38:34 wiz Exp $
+$NetBSD: distinfo,v 1.122 2024/06/25 17:38:40 wiz Exp $
 
-BLAKE2s (openssh-9.6p1.tar.gz) = 9147a7cdfd66f0840b71561339eaca3e611b7775dce9a83a589175888e55b285
-SHA512 (openssh-9.6p1.tar.gz) = 0ebf81e39914c3a90d7777a001ec7376a94b37e6024baf3e972c58f0982b7ddef942315f5e01d56c00ff95603b4a20ee561ab918ecc55511df007ac138160509
-Size (openssh-9.6p1.tar.gz) = 1857862 bytes
+BLAKE2s (openssh-9.7p1.tar.gz) = cfa9904afcdf9c2b1ff80b4ee1109a2f71bb60daae1669586e4ccb4a10a05f47
+SHA512 (openssh-9.7p1.tar.gz) = 0cafc17d22851605a4a5495a1d82c2b3fbbe6643760aad226dbf2a25b5f49d4375c3172833706ea3cb6c05d5d02a40feb9a7e790eae5c4570dd344a43e94ca55
+Size (openssh-9.7p1.tar.gz) = 1848766 bytes
 SHA1 (patch-Makefile.in) = 70d6ca9c803b6193d0e340cb0518936a00e57492
 SHA1 (patch-clientloop.c) = 4e88fbd14db33f003eb93c30c682a017e102196e
 SHA1 (patch-config.h.in) = 7d1050743da7264763254b57938775c546c3baa5