Daniel Néri 437d795d54 main/openssh: security upgrade to 9.9_p2 ...

- CVE-2025-26465 - ssh(1) in OpenSSH versions 6.8p1 to
9.9p1 (inclusive) contained a logic error that allowed an on-path
attacker (a.k.a MITM) to impersonate any server when the
VerifyHostKeyDNS option is enabled. This option is off by default.

- CVE-2025-26466 - sshd(8) in OpenSSH versions 9.5p1 to
9.9p1 (inclusive) is vulnerable to a memory/CPU denial-of-service
related to the handling of SSH2_MSG_PING packets. This condition may
be mitigated using the existing PerSourcePenalties feature.

https://openwall.com/lists/oss-security/2025/02/18/1

2025-02-18 19:20:31 +00:00

..

APKBUILD

…

avoid-redefined-warnings-when-building-with-utmps.patch

…

default-internal-sftp.patch

…

disable-forwarding-by-default.patch

…

disable-fzero-call-used-regs-used-on-ppc64le.patch

…

fix-utmp.patch

…

include-config-dir.patch

…

openssh-server.post-upgrade

…

sshd-session-flavor.patch

…

sshd.confd

…

sshd.initd

…

sshd.pam

…