Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package openssh for openSUSE:Factory checked in at 2025-09-23 20:47:02 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/openssh (Old) and /work/SRC/openSUSE:Factory/.openssh.new.27445 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "openssh" Tue Sep 23 20:47:02 2025 rev:196 rq:1306629 version:10.0p2 Changes: -------- +++ only whitespace diff in changes, re-diffing --- /work/SRC/openSUSE:Factory/openssh/openssh.changes 2025-09-15 19:54:24.130874065 +0200 +++ /work/SRC/openSUSE:Factory/.openssh.new.27445/openssh.changes 2025-09-23 20:47:03.851255948 +0200 @@ -1,0 +2,10 @@ +Mon Sep 22 08:44:33 UTC 2025 - Antonio Larrosa <[email protected]> + +- Add patch to relax the openssl 3.x version check so that we + don't identify a mismatch between released and pre-release + versions as incompatible when we already identify the whole + 3.x versions as compatible (boo#1250115): + * openssh-10.0p2-relax-openssl-version-check.patch +- Run some of the tests to check there are no regressions. + +------------------------------------------------------------------- New: ---- openssh-10.0p2-relax-openssl-version-check.patch ----------(New B)---------- New:/work/SRC/openSUSE:Factory/.openssh.new.27445/openssh.changes- 3.x versions as compatible (boo#1250115): /work/SRC/openSUSE:Factory/.openssh.new.27445/openssh.changes: * openssh-10.0p2-relax-openssl-version-check.patch /work/SRC/openSUSE:Factory/.openssh.new.27445/openssh.changes-- Run some of the tests to check there are no regressions. ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ openssh.spec ++++++ --- /var/tmp/diff_new_pack.xaNzdV/_old 2025-09-23 20:47:07.343402911 +0200 +++ /var/tmp/diff_new_pack.xaNzdV/_new 2025-09-23 20:47:07.343402911 +0200 @@ -148,6 +148,7 @@ Patch107: openssh-send-extra-term-env.patch # upstream patch https://github.com/openssh/openssh-portable/pull/388 Patch108: openssh-9.6p1-pam-rhost.patch +Patch109: openssh-10.0p2-relax-openssl-version-check.patch # 200 - 300 -- Patches submitted to upstream # PATCH-FIX-UPSTREAM -- https://github.com/openssh/openssh-portable/pull/452 boo#1229010 Patch200: 0001-auth-pam-Immediately-report-instructions-to-clients-and-fix-handling-in-ssh-client.patch @@ -501,6 +502,15 @@ }} +%check +make file-tests +make interop-tests +make extra-tests +make unit +pushd openbsd-compat/regress +make +popd + %pre server -f sshd.pre %if %{defined _distconfdir} # Prepare for migration to /usr/etc. ++++++ openssh-10.0p2-relax-openssl-version-check.patch ++++++ Index: openssh-10.0p1/openbsd-compat/openssl-compat.c =================================================================== --- openssh-10.0p1.orig/openbsd-compat/openssl-compat.c +++ openssh-10.0p1/openbsd-compat/openssl-compat.c @@ -52,7 +52,7 @@ ssh_compatible_openssl(long headerver, l * For versions >= 3.0, only the major and status must match. */ if (headerver >= 0x3000000f) { - mask = 0xf000000fL; /* major,status */ + mask = 0xf0000000L; /* major,status */ return (headerver & mask) == (libver & mask); } Index: openssh-10.0p1/openbsd-compat/regress/opensslvertest.c =================================================================== --- openssh-10.0p1.orig/openbsd-compat/regress/opensslvertest.c +++ openssh-10.0p1/openbsd-compat/regress/opensslvertest.c @@ -55,6 +55,9 @@ struct version_test { { 0x3010101fL, 0x3020001fL, 1}, /* newer library minor version: ok */ { 0x3010101fL, 0x1010101fL, 0}, /* older library major version: NO */ { 0x3010101fL, 0x4010101fL, 0}, /* newer library major version: NO */ + + { 0x30500020L, 0x3050003fL, 1}, /* newer library + prerelease: ok */ + { 0x30500020L, 0x4050003fL, 0}, /* newer library major version: NO */ }; void
