pyrox.dev
openssh{,_hpn,_gssapi}: 10.0p1 -> 10.0p2
See: https://www.openwall.com/lists/oss-security/2025/04/09/6
10.0p1 was accidentally released as 10.0p2, with 10.0p1 in the URL.
Add a `urlFor` function to sort this out. It can be removed at a
later date.
+20
-6
pkgs/tools/networking/openssh/default.nix
+20
-6
pkgs/tools/networking/openssh/default.nix
···
7
7
}:
8
8
let
9
9
common = opts: callPackage (import ./common.nix opts) { };
10
+
11
+
# Gets the correct OpenSSH URL for a given version.
12
+
urlFor =
13
+
version:
14
+
let
15
+
urlVersion =
16
+
{
17
+
# 10.0p1 was accidentally released as 10.0p2:
18
+
# https://www.openwall.com/lists/oss-security/2025/04/09/6
19
+
"10.0p2" = "10.0p1";
20
+
}
21
+
.${version} or version;
22
+
in
23
+
"mirror://openbsd/OpenSSH/portable/openssh-${urlVersion}.tar.gz";
10
24
in
11
25
{
12
26
openssh = common rec {
13
27
pname = "openssh";
14
-
version = "10.0p1";
28
+
version = "10.0p2";
15
29
16
30
src = fetchurl {
17
-
url = "mirror://openbsd/OpenSSH/portable/openssh-${version}.tar.gz";
31
+
url = urlFor version;
18
32
hash = "sha256-AhoucJoO30JQsSVr1anlAEEakN3avqgw7VnO+Q652Fw=";
19
33
};
20
34
···
24
38
25
39
openssh_hpn = common rec {
26
40
pname = "openssh-with-hpn";
27
-
version = "10.0p1";
41
+
version = "10.0p2";
28
42
extraDesc = " with high performance networking patches";
29
43
30
44
src = fetchurl {
31
-
url = "mirror://openbsd/OpenSSH/portable/openssh-${version}.tar.gz";
45
+
url = urlFor version;
32
46
hash = "sha256-AhoucJoO30JQsSVr1anlAEEakN3avqgw7VnO+Q652Fw=";
33
47
};
34
48
···
67
81
68
82
openssh_gssapi = common rec {
69
83
pname = "openssh-with-gssapi";
70
-
version = "10.0p1";
84
+
version = "10.0p2";
71
85
extraDesc = " with GSSAPI support";
72
86
73
87
src = fetchurl {
74
-
url = "mirror://openbsd/OpenSSH/portable/openssh-${version}.tar.gz";
88
+
url = urlFor version;
75
89
hash = "sha256-AhoucJoO30JQsSVr1anlAEEakN3avqgw7VnO+Q652Fw=";
76
90
};
77
91