Changelog for
openssh-server-debuginfo-9.3p1-10.fc39.x86_64.rpm :
* Wed Jan 10 2024 Dmitry Belyavskiy
- 9.3p1-10- Forbid shell metasymbols in username/hostname Resolves: CVE-2023-51385- Fix Terrapin attack Resolves: CVE-2023-48795- Apply destination constraints to all PKCS#11 keys Resolves: CVE-2023-51384
* Fri Sep 08 2023 Dmitry Belyavskiy - 9.3p1-9- Revert \"Remove sshd.socket unit (rhbz#2025716)\" according to FESCO decision
* Thu Aug 03 2023 Dmitry Belyavskiy - 9.3p1-8- Split including crypto-policies to a separate config (rhbz#1970566)- Disable forking of ssh-agent on startup (rhbz#2148555)- Remove sshd.socket unit (rhbz#2025716)- Minor optimization of ssh_krb5_kuserok (rhbz#2112501)
* Tue Aug 01 2023 Dmitry Belyavskiy - 9.3p1-7- Relax checks of OpenSSL version
* Wed Jul 26 2023 Mattias Ellert - 9.3p1-6- Update gssapi-keyex patch for OpenSSH 9.0+
* Fri Jul 21 2023 Dmitry Belyavskiy - 9.3p1-5- Fix remote code execution in ssh-agent PKCS#11 support Resolves: CVE-2023-38408
* Thu Jul 20 2023 Fedora Release Engineering - 9.3p1-3.1- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Thu Jun 08 2023 Norbert Pocs - 9.3p1-4- Fix deprecated %patchN syntax- Reduce the number of patches by merging related patches
* Wed Jun 07 2023 Dmitry Belyavskiy - 9.3p1-3- Fix DSS verification problem Resolves: rhbz#2212937
* Fri Jun 02 2023 Dmitry Belyavskiy - 9.3p1-2- Remove unused patch
* Thu Jun 01 2023 Dmitry Belyavskiy - 9.3p1-1 + 0.10.4-9- Rebase OpenSSH to 9.3p1
* Wed May 24 2023 Norbert Pocs - 9.0p1-18- Fix pkcs11 issue with the recent changes- Clarify HostKeyAlgorithms relation with crypto-policies
* Fri Apr 14 2023 Dmitry Belyavskiy - 9.0p1-17- In case when sha1 signatures are not supported, fallback to sha2 in hostproof- Audit logging patch was not applied (rhbz#2177471)
* Thu Apr 13 2023 Norbert Pocs - 9.0p1-16- Make the sign, dh, ecdh processes FIPS compliant by adopting to openssl 3.0
* Thu Apr 13 2023 Dmitry Belyavskiy - 9.0p1-15- Fix self-DoS Resolves: CVE-2023-25136- Remove too aggressive coverity fix causing native tests failure
* Wed Apr 12 2023 Florian Weimer - 9.0p1-14.2- C99 compatiblity fixes
* Tue Mar 14 2023 Timothée Ravier - 9.0p1-14- Make sshd & sshdAATT units want ssh-host-keys-migration.service
* Mon Mar 13 2023 Zoltan Fridrich - 9.0p1-13- Add sk-dummy subpackage for test purposes (rhbz#2176795)
* Mon Mar 06 2023 Dusty Mabe - 9.0p1-12- Mark /var/lib/.ssh-host-keys-migration as %ghost file- Make ssh-host key migration less conditional
* Wed Mar 01 2023 Dusty Mabe - 9.0p1-11- Provide a systemd unit for restoring default host key permissions (rhbz#2172956)- Co-Authored by Timothée Ravier
* Mon Jan 23 2023 Dmitry Belyavskiy - 9.0p1-10- Restore upstream behaviour and default host key permissions (rhbz#2141272)
* Thu Jan 19 2023 Fedora Release Engineering - 9.0p1-9.1- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Mon Jan 09 2023 Dmitry Belyavskiy - 9.0p1-9- Fix build against updated OpenSSL (rhbz#2158966)
* Mon Oct 24 2022 Norbert Pocs - 9.0p1-8- Add additional audit logging about ssh key used to login (rhbz#2049947)
* Fri Oct 21 2022 Dmitry Belyavskiy - 9.0p1-7- Check IP opts length (rhbz#1960015)
* Wed Oct 05 2022 Anthony Rabbito - 9.0p1-6- Add a socket unit to ssh-agent user unit (rhbz#2125576)
* Thu Sep 29 2022 Dmitry Belyavskiy - 9.0p1-5- RSAMinSize => RequiredRSASize
* Fri Sep 02 2022 Luca BRUNO - 9.0p1-4- Move users/groups creation logic to sysusers.d fragments
* Wed Aug 24 2022 Alexander Sosedkin - 9.0p1-3- State in manpages that HostbasedAcceptedAlgorithms is set by crypto-policies
* Wed Aug 17 2022 Dmitry Belyavskiy - 9.0p1-2- Port patches from CentOS - RSAMinSize (rhbz#2117264)
* Thu Aug 11 2022 Dmitry Belyavskiy - 9.0p1-1 + 0.10.4-7- Rebase OpenSSH to 9.0p1 (rhbz#2057466)
* Wed Aug 10 2022 Dmitry Belyavskiy - 8.8p1-4 + 0.10.4-6- Port patches from CentOS (rhbz#2117264)
* Mon Aug 01 2022 Luca BRUNO - 8.8p1-3- Use allocated static GID for \'ssh_keys\' group (rhbz#2104595)
* Fri Jul 22 2022 Fedora Release Engineering - 8.8p1-2.1- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
* Fri Apr 29 2022 Dmitry Belyavskiy - 8.8p1-2- Disable locale forwarding in OpenSSH (#2002739)
* Thu Jan 20 2022 Fedora Release Engineering - 8.8p1-1.1- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild