Notable changes:
The hybrid Streamlined NTRU Prime + x25519 key exchange method
(introduced a while ago) is now default ("[email protected]").
Believed to better resist attacks by future quantum computers.
(Foiling capture now, decrypt later).
An interesting read for the curious.
https://en.wikipedia.org/wiki/NTRU
Non portable changelog: https://www.openssh.com/releasenotes.html* Remove patch for improved detection of -fzero-call-used-regs. Signed-off-by: Christian Melki <[email protected]> --- ...n-of-fzero-call-used-regs-all-suppor.patch | 31 ------------------- patches/openssh-8.9p1/autogen.sh | 1 - patches/openssh-8.9p1/series | 4 --- rules/openssh.make | 4 +-- 4 files changed, 2 insertions(+), 38 deletions(-) delete mode 100644 patches/openssh-8.9p1/0001-Improve-detection-of-fzero-call-used-regs-all-suppor.patch delete mode 120000 patches/openssh-8.9p1/autogen.sh delete mode 100644 patches/openssh-8.9p1/series diff --git a/patches/openssh-8.9p1/0001-Improve-detection-of-fzero-call-used-regs-all-suppor.patch b/patches/openssh-8.9p1/0001-Improve-detection-of-fzero-call-used-regs-all-suppor.patch deleted file mode 100644 index 70b075ae7..000000000 --- a/patches/openssh-8.9p1/0001-Improve-detection-of-fzero-call-used-regs-all-suppor.patch +++ /dev/null @@ -1,31 +0,0 @@ -From: Colin Watson <[email protected]> -Date: Thu, 24 Feb 2022 16:04:18 +0000 -Subject: [PATCH] Improve detection of -fzero-call-used-regs=all support - -GCC doesn't tell us whether this option is supported unless it runs into -the situation where it would need to emit corresponding code. ---- - m4/openssh.m4 | 3 +++ - 1 file changed, 3 insertions(+) - -diff --git a/m4/openssh.m4 b/m4/openssh.m4 -index 4f9c3792dc17..8c33c701b8b4 100644 ---- a/m4/openssh.m4 -+++ b/m4/openssh.m4 -@@ -14,6 +14,8 @@ AC_DEFUN([OSSH_CHECK_CFLAG_COMPILE], [{ - AC_COMPILE_IFELSE([AC_LANG_SOURCE([[ - #include <stdlib.h> - #include <stdio.h> -+/* Trivial function to help test for -fzero-call-used-regs */ -+void f(int n) {} - int main(int argc, char **argv) { - (void)argv; - /* Some math to catch -ftrapv problems in the toolchain */ -@@ -21,6 +23,7 @@ int main(int argc, char **argv) { - float l = i * 2.1; - double m = l / 0.5; - long long int n = argc * 12345LL, o = 12345LL * (long long int)argc; -+ f(0); - printf("%d %d %d %f %f %lld %lld\n", i, j, k, l, m, n, o); - /* - * Test fallthrough behaviour. clang 10's -Wimplicit-fallthrough does diff --git a/patches/openssh-8.9p1/autogen.sh b/patches/openssh-8.9p1/autogen.sh deleted file mode 120000 index 9f8a4cb7d..000000000 --- a/patches/openssh-8.9p1/autogen.sh +++ /dev/null @@ -1 +0,0 @@ -../autogen.sh \ No newline at end of file diff --git a/patches/openssh-8.9p1/series b/patches/openssh-8.9p1/series deleted file mode 100644 index eb319a82b..000000000 --- a/patches/openssh-8.9p1/series +++ /dev/null @@ -1,4 +0,0 @@ -# generated by git-ptx-patches -#tag:base --start-number 1 -0001-Improve-detection-of-fzero-call-used-regs-all-suppor.patch -# 35e561a03b8e1fd58ce4b40b565cdd3f - git-ptx-patches magic diff --git a/rules/openssh.make b/rules/openssh.make index 8f48e426e..bc6e0ed71 100644 --- a/rules/openssh.make +++ b/rules/openssh.make @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_OPENSSH) += openssh # # Paths and names # -OPENSSH_VERSION := 8.9p1 -OPENSSH_MD5 := f33910174f0af52491277211e2b105bb +OPENSSH_VERSION := 9.0p1 +OPENSSH_MD5 := 5ed8252a0ee379c0f7c9e0d25d32424d OPENSSH := openssh-$(OPENSSH_VERSION) OPENSSH_SUFFIX := tar.gz OPENSSH_URL := \ -- 2.32.0 _______________________________________________ ptxdist mailing list [email protected] To unsubscribe, send a mail with subject "unsubscribe" to [email protected]
