8000 Update openssh to 10.6p1 by gominimal-pkgmgr-mgr[bot] · Pull Request #850 · gominimal/pkgs · GitHub
[go: up one dir, main page]

Skip to content

Update openssh to 10.6p1 - #850

Merged
bryan-minimal merged 1 commit into
mainfrom
update-openssh-10.6p1
Oct 11, 2026
Merged

bryan-minimal merged 1 commit into
mainfrom
update-openssh-10.6p1

Conversation

@gominimal-pkgmgr-mgr
Copy link
Copy Markdown
Contributor

Update openssh 10.5p1 → 10.6p1

Source: github:openssh/openssh-portable:tag
Release: https://github.com/openssh/openssh-portable/releases/tag/V_10_6_P1
Changelog: openssh/openssh-portable@10.5p1...V_10_6_P1
Released: 3 days ago (2026-10-06)

Pkgscan: clean — diff against the prior version surfaced no newly-introduced suspicious patterns.

Vulnerability impact

Partition analysis at 10.6p1 (uses each advisory's fixed-version, vulnerable-range, affected-ranges, and fix-commit ancestry to decide):

  • 1 cleared — the new version is outside the advisory's affected range, OR the tag's lineage includes a known fix-commit. These will drop off the next scan.

Vulnerabilities fixed (1)

This update clears 1 vulnerabilities affecting 10.5p1:

CVE / GHSA CPE Severity Fixed in
CVE-2026-106587 (openbsd, openssh) LOW 10.6

Components changed

CycloneDX component delta (declared materials — the package's own version, not a dependency-tree diff)
Component Old New
~ openssh 10.5p1 10.6p1
~ openssh-upstream 10.5p1 10.6p1

Changes

Old New
Version 10.5p1 10.6p1
SHA256 d44d28a839ea9daf... a9dc9565dffe8640...
Size 2.3 MB 2.4 MB
Source gs://minimal-staging-archives/openssh-10.5p1.tar.gz gs://minimal-staging-archives/openssh-10.6p1.tar.gz

Quality suggestions

  • Missing tests block. This package has no standalone tests, so the buildbot will only verify compilation — not functional correctness. Consider adding a minimal smoke test (e.g., a --version or small round-trip invocation) as part of this PR so future bumps catch regressions. See packages/python/build.ncl for a simple example.

Created by pkgmgr

@gominimal-pkgmgr-mgr
gominimal-pkgmgr-mgr Bot requested a review from a team as a code owner October 10, 2026 05:38
@gominimal-pkgmgr-mgr gominimal-pkgmgr-mgr Bot added the auto-update Opened autonomously by pkgmgr auto-update label Oct 10, 2026
@coderabbitai
coderabbitai Bot commented Oct 10, 2026
Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration
  • Configuration used: Repository: gominimal/pkgs/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: f494b365-e6cf-4e4c-a22d-11a18cb32c0f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@mitodrummer mitodrummer left a comment
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Checked that the new sha256 matches the one in the upstream 10.6 release notes and the build is green; the notes' incompatible changes (ssh rejects $ and \ in command-line usernames, the LZ77 compression coder is disabled) shouldn't affect anything here.

@bryan-minimal
bryan-minimal added this pull request to the merge queue Oct 11, 2026
Merged via the queue into main with commit 3c58c5e Oct 11, 2026
11 checks passed
@bryan-minimal
bryan-minimal deleted the update-openssh-10.6p1 branch October 11, 2026 00:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

auto-update Opened autonomously by pkgmgr auto-update

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

0