-
Notifications
You must be signed in to change notification settings - Fork 1.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
sonicbuildimage: Update openssh to openssh_9.2p1-2+deb12u5 #21922
sonicbuildimage: Update openssh to openssh_9.2p1-2+deb12u5 #21922
Conversation
Update the openssh-server version to match the newly released version on the debian mirror. https://security.debian.org/pool/updates/main/o/openssh/ Signed-off-by: Aaron Payment <aaronp@arista.com>
/azp run Azure.sonic-buildimage |
Azure Pipelines successfully started running 1 pipeline(s). |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thanks @aaronpayment for fixing this.
Same as #21904, FIPS build needs to be updated first. |
This PR is similar to #21904, but lack of FIPS_OPENSSH_VERSION change. Will this PR break FIPS feature? |
hi @saiarcot895 , do we have any dependency on this PR: sonic-net/sonic-fips#76 ? |
Cherry-pick PR to 202411: #21930 |
…#21922) sonicbuildimage: Update openssh to openssh_9.2p1-2+deb12u5
…#21922) sonicbuildimage: Update openssh to openssh_9.2p1-2+deb12u5
…#21922) sonicbuildimage: Update openssh to openssh_9.2p1-2+deb12u5
202411 PR is merged. Fixing tag. |
Cherry-pick PR to 202405: #21960 |
Cherry-pick PR to msft-202405: Azure/sonic-buildimage-msft#814 |
Update fips openssh to openssh_9.2p1-2+deb12u5 Why I did it SONiC build none fips openssh from debian source code, and this version upgrade to openssh_9.2p1-2+deb12u5 by this PR: #21922 How I did it Update fips openssh to openssh_9.2p1-2+deb12u5 How to verify it Pass all UT. Manually confirm the package installed Tested branch (Please provide the tested image version) Description for the changelog Update fips openssh to openssh_9.2p1-2+deb12u5
Update fips openssh to openssh_9.2p1-2+deb12u5 #### Why I did it SONiC build none fips openssh from debian source code, and this version upgrade to openssh_9.2p1-2+deb12u5 by this PR: sonic-net#21922 ##### Work item tracking - Microsoft ADO: #### How I did it Update fips openssh to openssh_9.2p1-2+deb12u5 #### How to verify it Pass all UT. Manually confirm the package installed <!-- If PR needs to be backported, then the PR must be tested against the base branch and the earliest backport release branch and provide tested image version on these two branches. For example, if the PR is requested for master, 202211 and 202012, then the requester needs to provide test results on master and 202012. --> #### Which release branch to backport (provide reason below if selected) <!-- - Note we only backport fixes to a release branch, *not* features! - Please also provide a reason for the backporting below. - e.g. - [x] 202006 --> - [x] 202405 - [x] 202411 #### Tested branch (Please provide the tested image version) <!-- - Please provide tested image version - e.g. - [x] 20201231.100 --> #### Description for the changelog Update fips openssh to openssh_9.2p1-2+deb12u5 #### Link to config_db schema for YANG module changes <!-- Provide a link to config_db schema for the table for which YANG model is defined Link should point to correct section on https://github.com/Azure/sonic-buildimage/blob/master/src/sonic-yang-models/doc/Configuration.md --> #### A picture of a cute animal (not mandatory but encouraged)
Update fips openssh to openssh_9.2p1-2+deb12u5 #### Why I did it SONiC build none fips openssh from debian source code, and this version upgrade to openssh_9.2p1-2+deb12u5 by this PR: #21922 ##### Work item tracking - Microsoft ADO: #### How I did it Update fips openssh to openssh_9.2p1-2+deb12u5 #### How to verify it Pass all UT. Manually confirm the package installed <!-- If PR needs to be backported, then the PR must be tested against the base branch and the earliest backport release branch and provide tested image version on these two branches. For example, if the PR is requested for master, 202211 and 202012, then the requester needs to provide test results on master and 202012. --> #### Which release branch to backport (provide reason below if selected) <!-- - Note we only backport fixes to a release branch, *not* features! - Please also provide a reason for the backporting below. - e.g. - [x] 202006 --> - [x] 202405 - [x] 202411 #### Tested branch (Please provide the tested image version) <!-- - Please provide tested image version - e.g. - [x] 20201231.100 --> #### Description for the changelog Update fips openssh to openssh_9.2p1-2+deb12u5 #### Link to config_db schema for YANG module changes <!-- Provide a link to config_db schema for the table for which YANG model is defined Link should point to correct section on https://github.com/Azure/sonic-buildimage/blob/master/src/sonic-yang-models/doc/Configuration.md --> #### A picture of a cute animal (not mandatory but encouraged)
Update the openssh-server version to match the newly released version on the debian mirror. https://security.debian.org/pool/updates/main/o/openssh/
Why I did it
The previous version openssh_9.2p1-2+deb12u3 has been removed from https://security.debian.org/pool/updates/main/o/openssh/ and a new version openssh_9.2p1-2+deb12u5 is now present.
The build will fail as it tries to fetch a non existent file. This change allows the build to pass by fetching the available file.
This fixes issue #21921
How I did it
Update rules/openssh.mk to use the new file name deb12u5
How to verify it
The build passes with fetching the new file.
Which release branch to backport (provide reason below if selected)
Tested branch (Please provide the tested image version)
Description for the changelog
Update openssh to openssh_9.2p1-2+deb12u5