[202012][openssh] openssh: Upgrade from 7.9 to 8.4, to match version in buster-backports #10910
Conversation
Blueve
changed the title
|
Hello @saiarcot895 Do you think we can upgrade the openssh server version in 202012? |
|
The build failed due to incorrect dependencies version |
|
It might be fine to upgrade to 8.4 on buster, but one thing that'll need to be verified is that anything using SSH is still able to connect to this new version. OpenSSH may disable/remove support for less secure ciphers/encryption/signature methods, and while most clients will be fine, anything that is using very old versions of OpenSSH or using other implementations may have issues, because they may be trying to use those less secure ciphers/encryption/signature methods. |
Blueve
changed the title
Yes, that is a valid concern... On the other hand, seems like some dependencies are not exists in buster-backports. |
|
/azp run Azure.sonic-buildimage |
|
Azure Pipelines successfully started running 1 pipeline(s). |
Signed-off-by: Saikrishna Arcot <[email protected]>
Blueve
force-pushed
the
dev/jika/upgrade_openssh
branch
from
9e5a024 to
a5cc43d
Compare
|
/azp run Azure.sonic-buildimage |
|
Azure Pipelines successfully started running 1 pipeline(s). |
|
/azp run Azure.sonic-buildimage |
|
Azure Pipelines successfully started running 1 pipeline(s). |
|
/azp run Azure.sonic-buildimage |
|
Azure Pipelines successfully started running 1 pipeline(s). |
|
/azp run Azure.sonic-buildimage |
|
Azure Pipelines successfully started running 1 pipeline(s). |
Signed-off-by: Jing Kan [email protected]
Why I did it
Upgrade 202012 sshd to 1:8.4p1-2 for security concern.
How I did it
Bullseye has already upgrade to use 1:8.4p1-5 and well tested.
This PR is for buster base image, we want to upgrade our openssh to buster-backports stable version 1:8.4p1-2
How to verify it
Build the openssh-server deb package and manually install it to a DUT
Which release branch to backport (provide reason below if selected)
Description for the changelog
Link to config_db schema for YANG module changes
A picture of a cute animal (not mandatory but encouraged)