diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-07-01 17:59:03 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-07-01 17:59:03 +0000 |
commit | fcb5a1d6daf000dfe8786f5173a03761148cc096 (patch) | |
tree | dabeec48083c12911757967a3c91349be962b759 /debian | |
parent | Merging debian version 1:9.2p1-2+deb12u3. (diff) | |
download | openssh-progress-linux.tar.xz openssh-progress-linux.zip |
Releasing progress-linux version 1:9.2p1-2+deb12u3progress7u1.HEADprogress-linux/1%9.2p1-2+deb12u3progress7u1progress-linux
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'debian')
-rw-r--r-- | debian/changelog | 51 |
1 files changed, 51 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog index 6a4cf1b..99f6702 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,54 @@ +openssh (1:9.2p1-2+deb12u3progress7u1) graograman-security; urgency=high + + * Uploading to graograman-security, remaining changes: + - Updating maintainer field. + - Updating uploaders field. + - Updating bugs field. + - Updating vcs fields. + - Enabling pam_access.so. + - Disabling pam_motd.so. + - Setting default key type in ssh-keygen to ED25519. + - Setting default RSA size in ssh-keygen to 4096. + - Setting default ECDSA size in ssh-keygen to 521. + - Removing small diffie-hellman moduli. + - Updating options in ssh_config. + - Including openssh-client configuration files for Progress Linux. + - Setting CASignatureAlgorithms in ssh_config to ED25519. + - Setting Ciphers in ssh_config to ChaCha20. + - Setting HostbasedKeyTypes in ssh_config to ED25519. + - Setting HostKeyAlgorithms in ssh_config to ED25519. + - Setting KexAlgorithms in ssh_config to + sntrup761x25519-sha512@openssh.com and Curve25519. + - Setting MACs in ssh_config to UMAC and HMAC. + - Setting PubkeyAcceptedKeyTypes in ssh_config to ED25519. + - Setting IdentityFile in ssh_config to ED25519. + - Setting openssh-server/permit-root-login to false. + - Setting openssh-server/password-authentication to false. + - Setting default host key generation to ED25519. + - Including openssh-server configuration files for Progress Linux. + - Setting CASignatureAlgorithms in ssh_config to ED25519. + - Setting Ciphers in sshd_config to ChaCha20. + - Setting HostbasedAcceptedKeyTypes in sshd_config to ED25519. + - Setting HostKeyAlgorithms in sshd_config to ED25519. + - Setting KexAlgorithms in sshd_config to + sntrup761x25519-sha512@openssh.com and Curve25519. + - Setting MACs in sshd_config to UMAC and HMAC. + - Setting PubkeyAcceptedKeyTypes in sshd_config to ED25519. + - Setting HostCertificate in sshd_config to ED25519. + - Setting HostKey in sshd_config to ED25519. + - Setting AuthorizedKeysFile in sshd_config to + /etc/ssh/authorized_keys/%u .ssh/authorized_keys. + - Setting AllowAgentForwarding in sshd_config to no. + - Setting DebianBanner in sshd_config to no. + - Setting LoginGraceTime in sshd_config to 1m. + - Setting MaxAuthTries in sshd_config to 3. + - Adding patches from Colin Evrard <colin.evrard.134@gmail.com> for + optional Multipath TCP support. + - Refreshing mptcp patches. + * Merging debian version 1:9.2p1-2+deb12u3. + + -- Daniel Baumann <daniel.baumann@progress-linux.org> Mon, 01 Jul 2024 11:57:33 +0200 + openssh (1:9.2p1-2+deb12u3) bookworm-security; urgency=high * Non-maintainer upload by the Security Team. |