poky/meta at 2142f17368af05bda2e77d00faef786da7fff8a2 - poky

mirror of https://git.yoctoproject.org/poky synced 2026-07-27 19:37:10 +00:00

Files

T

David Nyström 2142f17368 openssh: fix CVE-2025-61984

ssh in OpenSSH before 10.1 allows control characters in usernames that
originate from certain possibly untrusted sources, potentially leading
to code execution when a ProxyCommand is used. The untrusted sources
are the command line and %-sequence expansion of a configuration file.

Note:
openssh does not support variable expansion until 10.0, so backport
adapts for this.

Reference:
https://nvd.nist.gov/vuln/detail/CVE-2025-61984

Upstream patch:
https://github.com/openssh/openssh-portable/commit/35d5917652106aede47621bb3f64044604164043

(From OE-Core rev: 717d4c7609cdce2cc3a65b7ba69c316fa86a9333)

Signed-off-by: David Nyström <david.nystrom@est.tech>
Signed-off-by: Steve Sakoman <steve@sakoman.com>

2025-10-24 06:23:40 -07:00

classes

cve-check: Add missing call to exit_if_errors

2025-08-22 05:59:54 -07:00

classes-global

sanity.bbclass: skip check_userns for non-local uid

2025-01-09 06:25:36 -08:00

classes-recipe

uboot: Allow for customizing installed/deployed file names

2025-07-07 07:42:58 -07:00

conf

conf/bitbake.conf: use gnu mirror instead of main server