1
0
Fork 0
forked from mirror/openwrt
openwrt/package/network/services
Konstantin Demin 2d9a0be307 dropbear: disable two weak kex/mac algorithms
hmac-sha1 and diffie-hellman-group14-sha1 are weak algorithms.
A future deprecation notice of ssh-rsa (2048-bit) has been issued. [1]

It has no place in a potentially internet-facing daemon like dropbear.
Upstream has acknowledged this and offered this solution to disable
these two until this is made to be the default in the next release
of dropbear next year. [2]

1. https://www.openssh.com/txt/release-8.2
2. https://github.com/mkj/dropbear/issues/138

Signed-off-by: John Audia <therealgraysky@proton.me>
Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
2024-02-09 09:13:05 +00:00
..
bridger bridger: update to the latest version 2023-05-12 21:18:31 +02:00
dnsmasq dnsmasq: invert logic for "localuse" 2023-12-16 15:28:21 +00:00
dropbear dropbear: disable two weak kex/mac algorithms 2024-02-09 09:13:05 +00:00
ead ead: fix resource leak in tinysrp 2020-01-05 19:36:46 +01:00
hostapd wifi-scripts: add new package, move wifi scripts to a single place 2024-02-03 16:16:36 +01:00
ipset-dns build: prefer HTTPS if available (for packages) 2022-10-05 17:37:07 +02:00
lldpd lldpd: add option to force EDP 2024-02-08 12:35:37 +02:00
odhcpd odhcpd: Bump to latest commits 2023-10-28 22:33:32 +01:00
omcproxy omcproxy: bump to git HEAD 2021-11-04 15:04:45 +02:00
ppp ppp: backport patches improving ppp interface creation 2023-06-14 05:40:26 +02:00
relayd relayd: bump to version 2023-01-28 2023-01-28 20:24:22 +01:00
uhttpd uhttpd: bump PKG_RELEASE 2024-02-02 04:22:17 +00:00
umdns umdns: update to Git HEAD (2023-11-21) 2023-11-21 07:36:08 +01:00
unetd unetd: update to the latest version 2023-06-04 16:54:52 +02:00
ustp treewide: add support for "lto" in PKG_BUILD_FLAGS 2023-03-21 18:28:22 +01:00