[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1009363: bullseye-pu: package ruby-net-ssh/1:6.1.0-2+deb11u1



Control: tags -1 + confirmed

On Tue, 2022-04-12 at 09:40 -0300, Antonio Terceiro wrote:
> OpenSSH 8.8 disables RSA signatures using the SHA-1 hash algorithm,
> and
> that breaks clients that do not support stronger algorithms, which is
> the case of the ruby-net-ssh version in bullseye.
> 
> [ Impact ]
> Users of vagrant and capistrano, for example, are not able to connect
> to hosts running OpenSSH 8.8, which includes Debian bookworm but also
> other distributions where OpenSSH 8.8. is already available.
> 
[...]
> The patches are backports of the relevant upstream patches. The first
> adds support for client authentication with RSA + SHA-2. The second
> adds
> support for RSA+SHA-2 in host keys.
> 

Please go ahead.

Regards,

Adam


Reply to: