suSSHi OpenSSH Client Patches

Overview

openssh-9.9p1-susshi.patch

openssh-9.8p1-susshi.patch

openssh-9.7p1-susshi.patch

openssh-9.6p1-susshi.patch

openssh-9.3p1-susshi.patch

openssh-9.2p1-susshi.patch

openssh-9.1p1-susshi.patch

openssh-9.0p1-susshi.patch

openssh-8.9p1-susshi.patch

openssh-8.8p1-susshi.patch

openssh-8.7p1-susshi.patch

openssh-8.6p1-susshi.patch

openssh-8.5p1-susshi.patch

Applying the Patch

  1. Download the portable OpenSSH version from www.openssh.com and untar the archive:

    $ cd ~/Downloads
    $ tar xzvf openssh-9.8p1.tar.gz
    
  2. Download the correct patch and place it in the same download folder.

  3. Apply the patch:

    $ cd openssh-9.8p1
    $ patch < ../openssh-9.8p1-susshi.patch
    
  4. Build OpenSSH with your preferred options:

    $ ./configure --sysconfdir=/etc/ssh --prefix=/usr/local --with-pam
    $ make
    

    The following files are affected by the patch and thus may replace the system installed ones:

    • scp

    • scp.1

    • sftp

    • sftp.1

    • ssh

    • ssh.1

    • ssh_config.5

    If you prefer, you may also install the whole freshly compiled OpenSSH suite instead of the system provided:

    $ sudo make install
    

    Tip

    On macOS you may have to install the brew package “openssl” upfront and append the option --with-ssl-dir=/usr/local/opt/openssl when configuring OpenSSH:

    $ brew install openssl
    $ CFLAGS="-fzero-call-used-regs=all -ftrivial-auto-var-init=zero" \
      ./configure --sysconfdir=/etc/ssh --prefix=/usr/local --with-pam --with-ssl-dir=/opt/homebrew/opt/openssl
    $ make
    $ sudo make install