Morgan Jones
270ca47688
openssh_hpn: 10.3p1 -> 10.5p1
2026-08-13 00:26:46 -07:00
Morgan Jones
b350ef752a
openssh: 10.4p1 -> 10.5p1
2026-08-13 00:26:43 -07:00
Morgan Jones
d9c82adcfb
openssh_gssapi: 10.3p1 -> 10.4p1
2026-07-07 20:22:15 -07:00
Morgan Jones
fe385d83f2
openssh: 10.3p1 -> 10.4p1
2026-07-07 20:15:46 -07:00
Tristan Ross
f4df4db3be
openssh_hpn: 10.2p1 -> 10.3p1 ( #513862 )
2026-05-21 03:49:40 +00:00
Morgan Jones
826411906e
openssh_hpn: 10.2p1 -> 10.3p1
2026-05-18 20:15:58 -07:00
Morgan Jones
52b76ad35e
openssh_gssapi: 10.2p1 -> 10.3p1
2026-04-19 16:45:03 -07:00
Morgan Jones
aa13fbfb81
openssh_gssapi: update patch to latest
2026-04-05 21:09:57 -07:00
Morgan Jones
625b040143
openssh: 10.2p1 -> 10.3p1
2026-04-05 21:09:56 -07:00
Wolfgang Walther
550ed29363
teams/helsinki-systems: drop
2026-01-14 09:46:22 +01:00
Alois Wohlschlager
6301423f62
openssh_10_2: drop
...
The main openssh package has already been updated in [1].
[1] https://github.com/NixOS/nixpkgs/pull/450658
This reverts commit 249e1f9730
2025-10-28 08:37:57 +01:00
nixpkgs-ci[bot]
6a088f5b69
Merge staging-next into staging
2025-10-28 00:17:14 +00:00
Alois Wohlschlager
249e1f9730
openssh_10_2: init at 10.2p1
...
OpenSSH 10.1 contains a bug that makes it totally unusable with ControlPersist,
which is fixed in 10.2. Temporarily make the latter available as an option
while the rebuilds go through staging.
2025-10-27 18:29:41 +01:00
Morgan Jones
aec6faf4d4
openssh: remove special-casing for 10.0p2 version
2025-10-24 23:09:54 -07:00
nixpkgs-ci[bot]
202e16ba65
Merge staging-next into staging
2025-10-11 12:06:23 +00:00
nixpkgs-ci[bot]
e55c47d481
Merge master into staging-next
2025-10-11 12:05:40 +00:00
Thomas Gerbet
0014656c61
openssh_gssapi: 10.1p1 -> 10.2p1
...
Changes:
https://www.openssh.com/releasenotes.html#10.2p1
2025-10-10 20:16:55 +02:00
Thomas Gerbet
3953af8272
openssh_hpn: 10.1p1 -> 10.2p1
...
Changes:
https://www.openssh.com/releasenotes.html#10.2p1
2025-10-10 20:16:55 +02:00
Thomas Gerbet
94830c05ed
openssh: 10.1p1 -> 10.2p1
...
Changes:
https://www.openssh.com/releasenotes.html#10.2p1
2025-10-10 14:14:26 +02:00
nixpkgs-ci[bot]
7e9e7583ef
Merge master into staging-next
2025-10-10 00:16:30 +00:00
Thomas Gerbet
0a512b2cba
openssh_gssapi: 10.0p2 -> 10.1p1
...
Fixes CVE-2025-61984 and CVE-2025-61985.
https://www.openssh.com/txt/release-10.1
2025-10-08 08:23:23 +02:00
Thomas Gerbet
5edafc5d28
openssh_hpn: 10.0p2 -> 10.1p1
...
Fixes CVE-2025-61984 and CVE-2025-61985.
https://www.openssh.com/txt/release-10.1
2025-10-08 08:23:04 +02:00
Janne Heß
70b1318702
openssh: 10.0p2 -> 10.1p1
2025-10-06 12:10:23 +02:00
Morgan Jones
6b961cfe30
openssh: re-add numinit as maintainer
...
Got deleted in a treewide merge conflict resolution:
- Originally added: ef4ac4cc7bf96ac2dcd6
2025-05-28 01:15:07 -07:00
Aleksana
3a82036d0a
openssh: Add patch notes ( #402820 )
2025-05-26 20:31:12 +08:00
Morgan Jones
2ea08893b0
openssh_gssapi: correct Debian patch URL
...
Upstream version is 10.0p2 but Debian cut it at 10.0p1.
See the note about the error in the release process:
https://www.openwall.com/lists/oss-security/2025/04/09/6
2025-05-04 23:50:22 -07:00
Silvan Mosberger
0d3967d62c
openssh: Add ssh-keysign patch note
...
Copied from 9fe10288f0
2025-04-29 15:47:54 +02:00
K900
f96ac2dcd6
Merge remote-tracking branch 'origin/master' into staging-next
2025-04-26 09:07:48 +03:00
Fernando Rodrigues
05580f4b44
treewide: switch instances of lib.teams.*.members to the new meta.teams attribute
...
Follow-up to #394797 .
Signed-off-by: Fernando Rodrigues <alpha@sigmasquadron.net >
2025-04-25 22:20:17 -03:00
Morgan Jones
ef4ac4cc7b
openssh: add numinit as maintainer
...
I've found issues in other distros' deployments of SSH daemons before
(e.g. CVE-2025-30095) -- happy to help make sure NixOS' is properly
maintained. If there's something wrong with OpenSSH, I'd like to
help triage and support whatever remediations I need to.
Discussed with Philip already to confirm over Discourse, prior to making
this commit the first time. :-)
2025-04-15 01:22:41 -07:00
Morgan Jones
c722a57712
openssh{,_hpn,_gssapi}: 10.0p1 -> 10.0p2
...
See: https://www.openwall.com/lists/oss-security/2025/04/09/6
10.0p1 was accidentally released as 10.0p2, with 10.0p1 in the URL.
Add a `urlFor` function to sort this out. It can be removed at a
later date.
2025-04-15 01:04:34 -07:00
Morgan Jones
9f415e8b6a
openssh_gssapi: 9.9p2 -> 10.0p1
2025-04-15 01:04:34 -07:00
Morgan Jones
2bf69c2b8e
openssh_hpn: 9.9p2 -> 10.0p1
2025-04-15 01:04:33 -07:00
Morgan Jones
2bfcec5213
openssh: 9.9p2 -> 10.0p1
...
https://www.openwall.com/lists/oss-security/2025/04/09/1
2025-04-15 01:04:32 -07:00
Aneesh Agrawal
aded50da10
openssh_gssapi, openssh_hpn: remove self (aneeshusa) from maintainers
...
I've never used either of these and I no longer have spare time to maintain these.
Add Philip Taron as maintainer per an in-person conversation at Planet Nix 2025.
Co-authored-by: Philip Taron <philip.taron@gmail.com >
2025-03-07 12:11:27 -08:00
Thomas Gerbet
1d4b238173
openssh, openssh_hpn, openssh_gssapi: 9.9p1 -> 9.9p2
...
Fixes CVE-2025-26465 and CVE-2025-26466.
https://www.qualys.com/2025/02/18/openssh-mitm-dos.txt
https://www.openssh.com/releasenotes.html#9.9p2
2025-02-18 13:46:49 +01:00
Silvan Mosberger
4f0dadbf38
treewide: format all inactive Nix files
...
After final improvements to the official formatter implementation,
this commit now performs the first treewide reformat of Nix files using it.
This is part of the implementation of RFC 166.
Only "inactive" files are reformatted, meaning only files that
aren't being touched by any PR with activity in the past 2 months.
This is to avoid conflicts for PRs that might soon be merged.
Later we can do a full treewide reformat to get the rest,
which should not cause as many conflicts.
A CI check has already been running for some time to ensure that new and
already-formatted files are formatted, so the files being reformatted here
should also stay formatted.
This commit was automatically created and can be verified using
nix-build a08b3a4d19b32a094368
2024-12-10 20:26:33 +01:00
Thomas Gerbet
f108380db7
openssh, openssh_hpn, openssh_gssapi: 9.8p1 -> 9.9p1 ( #350699 )
...
* openssh: 9.8p1 -> 9.9p1
Changes: https://www.openssh.com/releasenotes.html#9.9p1
* openssh_hpn: 9.8p1 -> 9.9p1
Changes: https://www.openssh.com/releasenotes.html#9.9p1
* openssh_gssapi: 9.8p1 -> 9.9p1
Changes:
https://www.openssh.com/releasenotes.html#9.9p1
---------
Co-authored-by: Ashish SHUKLA <ashish.is@lostca.se >
2024-10-25 18:06:31 +02:00
Thomas Gerbet
3caaa2f748
Merge pull request #335479 from knl/fix-openssh-hpn-on-darwin
...
openssh_hpn: update patch to fix aarch64-darwin build
2024-08-22 21:16:27 +02:00
Nikola Knezevic
c37b77008b
openssh_hpn: update patch to fix aarch64-darwin build
...
This change uses the new patch for HPN from FreeBSD project that adds a
missing include to `sshd.c` (for `channels.h`, that includes the
definition of `channel_set_hpn`).
2024-08-22 14:14:30 +02:00
Thomas Gerbet
68c2966218
openssh_gssapi: 9.7p1 -> 9.8p1
...
https://www.openssh.com/txt/release-9.8
2024-08-17 00:45:52 +02:00
Thomas Gerbet
2efa5e16a2
openssh_hpn: 9.7p1 -> 9.8p1
...
Changes:
https://www.openssh.com/txt/release-9.8
2024-07-13 14:28:56 +02:00
Emily
e328c86314
openssh_{hpn,gssapi}: add backported security fix patches
...
Fixes a critical security bug allowing remote code execution as root:
<https://www.openssh.com/txt/release-9.8 >
This may be CVE-2024-6387 (currently embargoed):
<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6387 >
Thanks to upstream and Sam James <sam@gentoo.org > for the backport:
<1633ef4547
2024-07-01 13:06:28 +02:00
Emily
7f993cdf26
openssh: 9.7p1 -> 9.8p1
...
Fixes a critical security bug allowing remote code execution as root:
<https://www.openssh.com/txt/release-9.8 >
This may be CVE-2024-6387 (currently embargoed):
<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6387 >
2024-07-01 11:00:38 +02:00
Thomas Gerbet
1a462800bf
openssh_gssapi: 9.6p1 -> 9.7p1
...
This is a follow up to #295133 now that the GSSAPI patch has been updated.
Upstream changes:
https://www.openssh.com/txt/release-9.7
2024-04-27 23:01:20 +10:00
Robert Scott
a963a86e5c
Merge pull request #295142 from LeSuisse/openssh_gssapi-9.6p1
...
openssh_gssapi: 9.5p1 -> 9.6p1
2024-03-15 18:57:08 +00:00
Fabián Heredia Montiel
98114f7271
Merge pull request #295133 from LeSuisse/openssh-9.7p1
...
openssh: 9.6p1 -> 9.7p1
2024-03-12 14:43:43 -06:00
Thomas Gerbet
e2bac969aa
openssh_gssapi: 9.5p1 -> 9.6p1
...
Includes the mitigation for CVE-2023-48795.
Changes:
https://www.openssh.com/txt/release-9.6
2024-03-11 23:26:46 +01:00
Thomas Gerbet
41ba7c816b
openssh: 9.6p1 -> 9.7p1
...
Changes:
https://www.openssh.com/txt/release-9.7
2024-03-11 22:55:15 +01:00
Thomas Gerbet
99237c2958
openssh_hpn: 9.5p1 -> 9.7p1
...
Includes the mitigation for CVE-2023-48795.
Changes:
https://www.openssh.com/txt/release-9.7
https://www.openssh.com/txt/release-9.6
2024-03-11 22:39:46 +01:00
