Oh, hello, you must be new here:
$ git show ba912479e8
That silly person really ought to have added a comment to the code,
shouldn't they? This reverts similar changes made in commit
ec7bcdc35a, and adds one.
The securities fixed did not affect the default installation.
* gnu/packages/ssh.scm (openssh): Update to 8.8p1.
[arguments]: Don't explicitly return #t from phases.
Reported by Marius Bakke.
* gnu/packages/patches/guile-ssh-read-error.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/ssh.scm (guile-ssh)[source]: Use it.
(guile2.0-ssh)[source]: New field.
(guile2.2-ssh)[source]: New field.
* gnu/packages/patches/guile-ssh-fix-test-suite.patch: New file.
* gnu/local.mk: Register it.
* gnu/packages/ssh.scm (guile-ssh)[source]: Use it. Also provide a better
file name than 'git-checkout'.
* gnu/packages/ssh.scm (openssh)[inputs]: Only add linux-pam when not
building for the Hurd.
[arguments]: Adjust configure flag to only use pam when not building for
the Hurd.
* gnu/packages/patches/openssh-fix-ssh-copy-id.patch: New file.
* gnu/local.mk (dist_patch_DATA): Add it.
* gnu/packages/ssh.scm (openssh)[source]: Use it.
Signed-off-by: Leo Famulari <leo@famulari.name>
Upstream is unimpressed: ‘This includes a fix for CVE-2020-16135, however
we do not see how this would be exploitable at all. If you find a
security bug in libssh please don’t just assign a CVE, talk to us first.’
* gnu/packages/ssh.scm (libssh): Update to 0.9.5.
* gnu/packages/ssh.scm (corkscrew)[source]: Use GIT-FETCH and GIT-FILE-NAME.
[arguments]: Adapt to changed README file name.
[home-page]: Switch to a working URI.
