Control: tag -1 confirmed d-i On Tue, Dec 03, 2024 at 03:13:28PM +0000, Colin Watson wrote: > I have a set of OpenSSH fixes that I think are worth including in the > next stable update, all of which fix regressions from bullseye: > > * Minor security fix to creation of template directories (#1001186, > #1064898) > * The gssapi-keyex authentication method was declared incorrectly and > was thus unusable > (https://bugs.launchpad.net/ubuntu/+source/openssh/+bug/2053146) > * The combination of GSS-API key exchange and public key authentication > broke in some situations (#1041521, #1088248) > > In addition, although this isn't a regression, I agree with the reporter > of #1088873 that backporting the sntrup761x25519-sha512 alias for that > post-quantum key algorithm is likely to be helpful for configuration > management and interoperability.
Looks fine to me; d-i ack needed for the udeb (CC). Thanks, -- Jonathan Wiltshire j...@debian.org Debian Developer http://people.debian.org/~jmw 4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC 74C3 5394 479D D352 4C51 ed25519/0x196418AAEB74C8A1: CA619D65A72A7BADFC96D280196418AAEB74C8A1
