Subject: CVS commit: pkgsrc/security/openssh
From: Thomas Klausner
Date: 2025-02-18 10:33:07
Message id: 20250218093307.6934CFBE0@cvs.NetBSD.org

Log Message:
openssh: update to 9.9p2.

pkgsrc: fix patch offsets

Changes:

    openssh-9.9p2

    upstream: Fix cases where error codes were not correctly set
    Reported by the Qualys Security Advisory team. ok markus@

    upstream: Don't reply to PING in preauth phase or during KEX
    Reported by the Qualys Security Advisory team. ok markus@

    upstream: fix "Match invalid-user" from incorrectly being activated
    in initial configuration pass when no other predicates were present on the
    match line

    fix uint64_t types; reported by Tom G. Christensen

    htole64() etc for systems without endian.h

    upstream: explicitly include endian.h

    upstream: fix ML-KEM768x25519 KEX on big-endian systems; spotted by
    jsg@ feedback/ok deraadt@

    upstream: fix previous change to ssh_config Match, which broken on
    negated Matches; spotted by phessler@ ok deraadt@

    upstream: fix regression introduced when I switched the "Match"
    criteria tokeniser to a more shell-like one. Apparently the old tokeniser
    (accidentally?) allowed "Match criteria=argument" as well as the \ 
"Match
    criteria argument" syntax that we tested for.
    People were using this syntax so this adds back support for
    "Match criteria=argument"
    bz3739 ok dtucker

    gss-serv.c needs sys/param.h
    From Void Linux

    build construct_utmp() when USE_BTMP is set
    Fixes compile error on Void Linux/Musl

    fix utmpx ifdef
    02e16ad95fb1f56ab004b01a10aab89f7103c55d did a copy-paste for
    utmpx, but forgot to change the ifdef appropriately

    Remove non-9.9 branch statuses.

    Add 9.9 branch to CI status console.

    autogenerated files for release

    update version numbers

Files:
RevisionActionfile
1.287modifypkgsrc/security/openssh/Makefile
1.126modifypkgsrc/security/openssh/distinfo
1.9modifypkgsrc/security/openssh/patches/patch-Makefile.in
1.11modifypkgsrc/security/openssh/patches/patch-configure.ac
1.6modifypkgsrc/security/openssh/patches/patch-defines.h