Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

sonicbuildimage: Update openssh to openssh_9.2p1-2+deb12u5 #21922

Conversation

aaronpayment
Copy link
Contributor

Update the openssh-server version to match the newly released version on the debian mirror. https://security.debian.org/pool/updates/main/o/openssh/

Why I did it

The previous version openssh_9.2p1-2+deb12u3 has been removed from https://security.debian.org/pool/updates/main/o/openssh/ and a new version openssh_9.2p1-2+deb12u5 is now present.

The build will fail as it tries to fetch a non existent file. This change allows the build to pass by fetching the available file.

This fixes issue #21921

How I did it

Update rules/openssh.mk to use the new file name deb12u5

How to verify it

The build passes with fetching the new file.

Which release branch to backport (provide reason below if selected)

  • 201811
  • 201911
  • 202006
  • 202012
  • 202106
  • 202111
  • 202205
  • 202211
  • 202305
  • 202411

Tested branch (Please provide the tested image version)

  • master
  • 202411

Description for the changelog

Update openssh to openssh_9.2p1-2+deb12u5

Update the openssh-server version to match the newly released version on the debian mirror.
https://security.debian.org/pool/updates/main/o/openssh/

Signed-off-by: Aaron Payment <aaronp@arista.com>
@mssonicbld
Copy link
Collaborator

/azp run Azure.sonic-buildimage

Copy link

Azure Pipelines successfully started running 1 pipeline(s).

Copy link
Contributor

@kperumalbfn kperumalbfn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @aaronpayment for fixing this.

@saiarcot895
Copy link
Contributor

Same as #21904, FIPS build needs to be updated first.

@qiluo-msft
Copy link
Collaborator

This PR is similar to #21904, but lack of FIPS_OPENSSH_VERSION change. Will this PR break FIPS feature?

@r12f
Copy link
Contributor

r12f commented Mar 4, 2025

hi @saiarcot895 , do we have any dependency on this PR: sonic-net/sonic-fips#76 ?

@kperumalbfn kperumalbfn merged commit a1e2c1f into sonic-net:master Mar 4, 2025
21 checks passed
@mssonicbld
Copy link
Collaborator

Cherry-pick PR to 202411: #21930

Junchao-Mellanox pushed a commit to Junchao-Mellanox/sonic-buildimage that referenced this pull request Mar 5, 2025
…#21922)

sonicbuildimage: Update openssh to openssh_9.2p1-2+deb12u5
miatttao pushed a commit to miatttao/sonic-buildimage that referenced this pull request Mar 5, 2025
…#21922)

sonicbuildimage: Update openssh to openssh_9.2p1-2+deb12u5
prabhataravind pushed a commit to prabhataravind/sonic-buildimage that referenced this pull request Mar 5, 2025
…#21922)

sonicbuildimage: Update openssh to openssh_9.2p1-2+deb12u5
@r12f
Copy link
Contributor

r12f commented Mar 6, 2025

202411 PR is merged. Fixing tag.

@mssonicbld
Copy link
Collaborator

Cherry-pick PR to 202405: #21960

@mssonicbld
Copy link
Collaborator

Cherry-pick PR to msft-202405: Azure/sonic-buildimage-msft#814

qiluo-msft pushed a commit that referenced this pull request Mar 11, 2025
Update fips openssh to openssh_9.2p1-2+deb12u5

Why I did it
SONiC build none fips openssh from debian source code, and this version upgrade to openssh_9.2p1-2+deb12u5 by this PR: #21922

How I did it
Update fips openssh to openssh_9.2p1-2+deb12u5

How to verify it
Pass all UT.

Manually confirm the package installed

Tested branch (Please provide the tested image version)
Description for the changelog
Update fips openssh to openssh_9.2p1-2+deb12u5
mssonicbld added a commit to mssonicbld/sonic-buildimage that referenced this pull request Mar 13, 2025
Update fips openssh to openssh_9.2p1-2+deb12u5

#### Why I did it
SONiC build none fips openssh from debian source code, and this version upgrade to openssh_9.2p1-2+deb12u5 by this PR:
sonic-net#21922

##### Work item tracking
- Microsoft ADO:

#### How I did it
Update fips openssh to openssh_9.2p1-2+deb12u5

#### How to verify it
Pass all UT.

Manually confirm the package installed

<!--
If PR needs to be backported, then the PR must be tested against the base branch and the earliest backport release branch and provide tested image version on these two branches. For example, if the PR is requested for master, 202211 and 202012, then the requester needs to provide test results on master and 202012.
-->

#### Which release branch to backport (provide reason below if selected)

<!--
- Note we only backport fixes to a release branch, *not* features!
- Please also provide a reason for the backporting below.
- e.g.
- [x] 202006
-->

- [x] 202405
- [x] 202411

#### Tested branch (Please provide the tested image version)

<!--
- Please provide tested image version
- e.g.
- [x] 20201231.100
-->

#### Description for the changelog
Update fips openssh to openssh_9.2p1-2+deb12u5

#### Link to config_db schema for YANG module changes
<!--
Provide a link to config_db schema for the table for which YANG model
is defined
Link should point to correct section on https://github.com/Azure/sonic-buildimage/blob/master/src/sonic-yang-models/doc/Configuration.md
-->

#### A picture of a cute animal (not mandatory but encouraged)
mssonicbld added a commit that referenced this pull request Mar 17, 2025
Update fips openssh to openssh_9.2p1-2+deb12u5

#### Why I did it
SONiC build none fips openssh from debian source code, and this version upgrade to openssh_9.2p1-2+deb12u5 by this PR:
#21922

##### Work item tracking
- Microsoft ADO:

#### How I did it
Update fips openssh to openssh_9.2p1-2+deb12u5

#### How to verify it
Pass all UT.

Manually confirm the package installed

<!--
If PR needs to be backported, then the PR must be tested against the base branch and the earliest backport release branch and provide tested image version on these two branches. For example, if the PR is requested for master, 202211 and 202012, then the requester needs to provide test results on master and 202012.
-->

#### Which release branch to backport (provide reason below if selected)

<!--
- Note we only backport fixes to a release branch, *not* features!
- Please also provide a reason for the backporting below.
- e.g.
- [x] 202006
-->

- [x] 202405
- [x] 202411

#### Tested branch (Please provide the tested image version)

<!--
- Please provide tested image version
- e.g.
- [x] 20201231.100
-->

#### Description for the changelog
Update fips openssh to openssh_9.2p1-2+deb12u5

#### Link to config_db schema for YANG module changes
<!--
Provide a link to config_db schema for the table for which YANG model
is defined
Link should point to correct section on https://github.com/Azure/sonic-buildimage/blob/master/src/sonic-yang-models/doc/Configuration.md
-->

#### A picture of a cute animal (not mandatory but encouraged)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

8 participants