Re: Bug#1088969: bookworm-pu: package openssh/1:9.2p1-2+deb12u4
Control: tag -1 confirmed d-i
On Tue, Dec 03, 2024 at 03:13:28PM +0000, Colin Watson wrote:
> I have a set of OpenSSH fixes that I think are worth including in the
> next stable update, all of which fix regressions from bullseye:
>
> * Minor security fix to creation of template directories (#1001186,
> #1064898)
> * The gssapi-keyex authentication method was declared incorrectly and
> was thus unusable
> (https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2053146)
> * The combination of GSS-API key exchange and public key authentication
> broke in some situations (#1041521, #1088248)
>
> In addition, although this isn't a regression, I agree with the reporter
> of #1088873 that backporting the sntrup761x25519-sha512 alias for that
> post-quantum key algorithm is likely to be helpful for configuration
> management and interoperability.
Looks fine to me; d-i ack needed for the udeb (CC).
Thanks,
--
Jonathan Wiltshire jmw@debian.org
Debian Developer http://people.debian.org/~jmw
4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51
ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1
Reply to: