Commit 99237c29 authored by Thomas Gerbet's avatar Thomas Gerbet
Browse files

openssh_hpn: 9.5p1 -> 9.7p1 

Includes the mitigation for CVE-2023-48795.

Changes:
https://www.openssh.com/txt/release-9.7
https://www.openssh.com/txt/release-9.6
parent 80226b1d

pkgs/tools/networking/openssh/default.nix

+4 −4
Original line number Diff line number Diff line
@@ -18,15 +18,15 @@ in 


  openssh_hpn = common rec {

    pname = "openssh-with-hpn";

    version = "9.5p1";

    version = "9.7p1";

    extraDesc = " with high performance networking patches";



    src = fetchurl {

      url = "mirror://openbsd/OpenSSH/portable/openssh-${version}.tar.gz";

      hash = "sha256-8Cbnt5un+1QPdRgq+W3IqPHbOV+SK7yfbKYDZyaGCGs=";

      hash = "sha256-SQQm92bYKidj/KzY2D6j1weYdQx70q/y5X3FZg93P/0=";

    };



    extraPatches = let url = "https://raw.githubusercontent.com/freebsd/freebsd-ports/700625bcd86b74cf3fb9536aeea250d7f8cd1fd5/security/openssh-portable/files/extra-patch-hpn"; in

    extraPatches = let url = "https://raw.githubusercontent.com/freebsd/freebsd-ports/b3f86656fc67aa397f60747c85f7f7b967c3279d/security/openssh-portable/files/extra-patch-hpn"; in

    [

      ./ssh-keysign-8.5.patch
@@ -36,7 +36,7 @@ in 
        inherit url;

        stripLen = 1;

        excludes = [ "channels.c" ];

        hash = "sha256-hYB3i0ifNOgGLYwElMJFcT+ktczLKciq3qw1tTHZHcc=";

        hash = "sha256-MydulQvz8sDVQ6Up9U1yrsiyI5EGmyKl/stUk7DvVOU=";

      })



      (fetchpatch {