pool/openssh
SHA256
2
0
Fork 1
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2 Commits 2 Branches 0 Tags 9 MiB
Perl 88.5%
Shell 11.5%
dd9c4b9bb1
Go to file
Antonio Larrosa dd9c4b9bb1 - Add patch to fix sshd not logging in the audit failed login 
attempts (submitted to upstream in
  https://github.com/openssh/openssh-portable/pull/516):
  * fix-audit-fail-attempt.patch
- Use --enable-dsa-keys when building openssh. It's required if
  the user sets the crypto-policy mode to LEGACY, where DSA keys
  should be allowed. The option was added by upstream in 9.7 and
  set to disabled by default.
- These two changes fix 2 of the 3 issues reported in bsc#1229650.

OBS-URL: https://build.opensuse.org/package/show/network/openssh?expand=0&rev=273
2024-08-23 12:36:12 +00:00
_multibuild - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
.gitattributes - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
.gitignore - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
0001-upstream-correctly-restore-sigprocmask-around-ppoll.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
0001-upstream-fix-proxy-multiplexing-mode_-broken-when-keystroke.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
0001-upstream-when-sending-ObscureKeystrokeTiming-chaff-packets_.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
cavs_driver-ssh.pl - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
fix-audit-fail-attempt.patch - Add patch to fix sshd not logging in the audit failed login 2024-08-23 12:36:12 +00:00
fix-CVE-2024-6387.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
fix-memleak-in-process_server_config_line_depth.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
fix-missing-lz.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
logind_set_tty.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-6.6.1p1-selinux-contexts.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-6.6p1-keycat.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-6.6p1-privsep-selinux.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.6p1-cleanup-selinux.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-allow_root_password_login.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-cavstest-ctr.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-cavstest-kdf.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-disable_openssl_abi_check.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-eal3.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-enable_PAM_by_default.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-fips_checks.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-fips.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-host_ident.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-hostname_changes_when_forwarding_X.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-IPv6_X_forwarding.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-ldap.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-no_fork-no_pid_file.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-pam_check_locks.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-pts_names_formatting.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-remove_xauth_cookies_on_exit.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-seccomp_ipc_flock.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-seccomp_stat.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-send_locale.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-sftp_force_permissions.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-sftp_print_diagnostic_messages.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-systemd-notify.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-X11_trusted_forwarding.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.7p1-X_forward_with_disabled_ipv6.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.8p1-role-mls.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.9p1-keygen-preserve-perms.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-7.9p1-revert-new-qos-defaults.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-8.0p1-gssapi-keyex.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-8.1p1-audit.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-8.1p1-ed25519-use-openssl-rng.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-8.1p1-seccomp-clock_gettime64.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-8.1p1-seccomp-clock_nanosleep_time64.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-8.1p1-seccomp-clock_nanosleep.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-8.1p1-use-openssl-kdf.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-8.4p1-pam_motd.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-8.4p1-ssh_config_d.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-8.4p1-vendordir.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-9.6p1-crypto-policies-man.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-9.6p1-crypto-policies.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-9.6p1.tar.gz - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-9.6p1.tar.gz.asc - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-9.8p1.tar.gz - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-9.8p1.tar.gz.asc - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-askpass-gnome.changes - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-askpass-gnome.spec - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-do-not-send-empty-message.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-fips-ensure-approved-moduli.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-link-with-sk.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-mitigate-lingering-secrets.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-openssl-3.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-reenable-dh-group14-sha1-default.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh-whitelist-syscalls.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh.changes - Add patch to fix sshd not logging in the audit failed login 2024-08-23 12:36:12 +00:00
openssh.keyring - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
openssh.spec - Add patch to fix sshd not logging in the audit failed login 2024-08-23 12:36:12 +00:00
README.FIPS - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
README.kerberos - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
README.SUSE - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
ssh-askpass - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
ssh.reg - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
sshd-gen-keys-start - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
sshd-sle.pamd - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
sshd.fw - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
sshd.pamd - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
sshd.service - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
sshd.socket - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
sshd@.service - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
sysconfig.ssh - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
sysusers-sshd.conf - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00
wtmpdb.patch - Update to openssh 9.8p1: 2024-08-12 09:54:46 +00:00

README.SUSE 

There are following changes in default settings of ssh client and server:

* Accepting and sending of locale environment variables in protocol 2 is
  enabled.

* PAM authentication is enabled and mostly even required, do not turn it off.

* In SLE15, root authentiation with password is enabled by default
  (PermitRootLogin yes).
  NOTE: this has security implications and is only done in order to not change
  behaviour of the server in an update. We strongly suggest setting this option
  either "prohibit-password" or even better to "no" (which disables direct
  remote root login entirely).

* DSA authentication is enabled by default for maximum compatibility.
  NOTE: do not use DSA authentication since it is being phased out for a reason
  - the size of DSA keys is limited by the standard to 1024 bits which cannot
  be considered safe any more.

* Accepting all RFC4419 specified DH group parameters. See KexDHMin in
  ssh_config and sshd_config manual pages.

For more information on differences in SUSE OpenSSH package see README.FIPS