summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorDaniel Baumann <daniel.baumann@progress-linux.org>2024-05-07 05:39:22 +0000
committerDaniel Baumann <daniel.baumann@progress-linux.org>2024-05-07 05:39:22 +0000
commit7a4d876c1a512d5c9969583626d32b1d2cafa3e9 (patch)
treee74129efb459fc1d40999546f1dd5d4457abbb35
parentMerging debian version 1:7.9p1-10+deb10u3. (diff)
downloadopenssh-7a4d876c1a512d5c9969583626d32b1d2cafa3e9.tar.xz
openssh-7a4d876c1a512d5c9969583626d32b1d2cafa3e9.zip
Releasing progress-linux version 1:7.9p1-10+deb10u3progress5u1.progress-linux/1%7.9p1-10+deb10u3progress5u1
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to '')
-rw-r--r--debian/changelog46
1 files changed, 46 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog
index f855717..a67df9f 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,49 @@
+openssh (1:7.9p1-10+deb10u3progress5u1) engywuck-security; urgency=high
+
+ * Uploading to engywuck-security, remaining changes:
+ - Updating maintainer field.
+ - Updating uploaders field.
+ - Updating bugs field.
+ - Updating vcs fields.
+ - Enabling pam_access.so.
+ - Disabling pam_motd.so.
+ - Setting default key type in ssh-keygen to ED25519.
+ - Setting default RSA size in ssh-keygen to 4096.
+ - Setting default ECDSA size in ssh-keygen to 521.
+ - Removing small diffie-hellman moduli.
+ - Updating options in ssh_config.
+ - Setting CASignatureAlgorithms in ssh_config to ED25519 and RSA.
+ - Setting Ciphers in ssh_config to ChaCha20 and AES.
+ - Setting HostbasedKeyTypes in ssh_config to ED25519 and RSA.
+ - Setting HostKeyAlgorithms in ssh_config to ED25519 and RSA.
+ - Setting KexAlgorithms in ssh_config to Curve25519 and Diffie-Hellman.
+ - Setting MACs in ssh_config to UMAC and HMAC.
+ - Setting PubkeyAcceptedKeyTypes in ssh_config to ED25519 and RSA.
+ - Setting IdentityFile in ssh_config to ED25519 and RSA.
+ - Removing version control tags in sshd_config.
+ - Setting openssh-server/permit-root-login to false.
+ - Setting openssh-server/password-authentication to false.
+ - Setting default host key generation to ED25519 and RSA.
+ - Setting CASignatureAlgorithms in ssh_config to ED25519 and RSA.
+ - Setting Ciphers in sshd_config to ChaCha20 and AES.
+ - Setting HostbasedAcceptedKeyTypes in sshd_config to ED25519 and RSA.
+ - Setting HostKeyAlgorithms in sshd_config to ED25519 and RSA.
+ - Setting KexAlgorithms in sshd_config to Curve25519 and Diffie-Hellman.
+ - Setting MACs in sshd_config to UMAC and HMAC.
+ - Setting PubkeyAcceptedKeyTypes in sshd_config to ED25519 and RSA.
+ - Setting HostCertificate in sshd_config to ED25519 and RSA.
+ - Setting HostKey in sshd_config to ED25519 and RSA.
+ - Setting AuthorizedKeysFile in sshd_config to
+ /etc/ssh/authorized_keys/%u .ssh/authorized_keys.
+ - Setting AllowAgentForwarding in sshd_config to no.
+ - Setting DebianBanner in sshd_config to no.
+ - Setting LoginGraceTime in sshd_config to 1m.
+ - Setting MaxAuthTries in sshd_config to 3.
+ - Renaming ssh group to _ssh (Closes: #990456).
+ * Merging debian version 1:7.9p1-10+deb10u3.
+
+ -- Daniel Baumann <daniel.baumann@progress-linux.org> Tue, 07 May 2024 07:38:07 +0200
+
openssh (1:7.9p1-10+deb10u3) buster-security; urgency=high
* Non-maintainer upload.