packages/net/openssh, branch master

openssh: update to 10.6_p2

2026-11-05T14:09:36Z

OpenSSH 10.6p2 works around a critical authentication bug. https://www.openssh.org/txt/release-10.6p2 Signed-off-by: Darren Tucker

openssh: add mldsa44-ed25519 host key

2026-11-01T07:03:49Z

Generate and enable an mldsa44-ed25519 host key alongside rsa and ed25519, and preserve it across sysupgrade. OpenSSH 10.6 enables mldsa44-ed25519 by default and includes it in sshd's default HostKey list; match that. Signed-off-by: John Audia

openssh: add missing CONFLICTS between variants

2026-10-30T05:34:08Z

openssh-server and openssh-server-pam both install /usr/sbin/sshd, but nothing marks them as conflicting, so they can be selected and installed together. Declare the conflict so that they cannot be selected or installed together. Checked the Conflicts field in the generated package metadata. Signed-off-by: Josef Schlehofer

openssh: update to 10.6_p1

2026-10-10T09:40:43Z

Update to 10.6p-1 and add myself as MAINTAINER Changelog: https://www.openssh.com/txt/release-10.6 Signed-off-by: John Audia

openssh: update to 10.5_p1

2026-08-30T09:10:40Z

Changelog: https://www.openssh.com/txt/release-10.5 Signed-off-by: John Audia

openssh: reindent Package/ metadata blocks to 2 spaces

2026-08-07T13:10:48Z

FormalityCheck expects package metadata lines inside 'define Package/' blocks to be indented with exactly 2 spaces. Historically this file used tabs, which triggers the audit on any newly-touched line. Convert all metadata lines in the plain 'define Package/' blocks to 2 spaces so future edits don't repeatedly trip the check. No functional change: recipe blocks (/install, /conffiles, /description) retain their tab indentation as required by make. Signed-off-by: Michael Pfeifroth

openssh: make libfido2 dependency conditional on sk-helper

2026-08-07T13:10:48Z

The openssh-sk-helper package unconditionally depends on libfido2, which causes the build system to pull in libfido2 and its dependencies (libcbor, libudev) even when openssh-sk-helper is not selected. Use the PACKAGE_openssh-sk-helper:libfido2 conditional dependency pattern so libfido2 is only required when the sk-helper sub-package is actually selected. Signed-off-by: Michael Pfeifroth

openssh: fix BSD license identifier with a valid one

2026-07-23T05:28:58Z

The situation here is complicated. The OpenSSH project combines different licenses. However, the fact is that the name 'BSD' used here for the license name is not SPDX-compliant. It is therefore replaced by the valid SPDX licenses BSD-2-Clause and BSD-3-Clause. Signed-off-by: Florian Eckert

openssh: add test-version.sh CI override

2026-07-18T19:49:20Z

OpenSSH reports "10.4p1" but PKG_VERSION is "10.4_p1", so the forced generic probe never matches and fails. Verify via ssh/sshd where the subpackage ships one and accept the subpackages that carry no version-reporting binary. Signed-off-by: Alexandru Ardelean

openssh: update to 10.4_p1

2026-07-10T11:13:46Z

Changelog: https://www.openssh.com/txt/release-10.4 Build system: x86/64 Build-tested: x86/64-glibc Run-tested: x86/64-glibc Signed-off-by: John Audia