[MacPorts] #59016: [openssh/openssl] : Apple keychain patch update should have blocked openssl upgrade

MacPorts noreply at macports.org
Sat Oct 19 07:01:05 UTC 2019


#59016: [openssh/openssl] : Apple keychain patch update should have blocked openssl
upgrade
----------------------+----------------------
  Reporter:  RJVB     |      Owner:  Ionic
      Type:  defect   |     Status:  closed
  Priority:  Normal   |  Milestone:
 Component:  ports    |    Version:
Resolution:  fixed    |   Keywords:  security
      Port:  openssh  |
----------------------+----------------------

Comment (by Ionic):

 I worry more about 10.7, 10.6 and such. For 10.9, everything should work
 out of the box (with the few changes I had to make due to undefined
 dictionary values).

 I admit to not really having tested this, though. I still use the Apple-
 provided ssh-agent on my machine and using that, the client throws a
 warning message (invalid/unknown signature(?)), but otherwise seems to
 work. The ssh-agent typically isn't a huge security problem so changing it
 doesn't benefit a lot, other than supporting newer features/key types.

-- 
Ticket URL: <https://trac.macports.org/ticket/59016#comment:19>
MacPorts <https://www.macports.org/>
Ports system for macOS


More information about the macports-tickets mailing list