LWN.net (RSS Feed) on Nostr: [$] Debian changes OpenSSH packaging In the wake of the <a ...
[$] Debian changes OpenSSH packaging
In the wake of the <a href="https://lwn.net/Articles/967866/"; rel="nofollow">XZ
backdoor</a>, the Debian project has revisited some of the
patches included in its https://www.openssh.com/
packages to improve security. The outcome of this is that the project
will be splitting out support for https://en.wikipedia.org/wiki/Kerberos_(protocol)
key exchange into a
separate set of packages, though not until after the Debian 13
("trixie") release expected next year. The impact on Debian users
should be minimal, but it is an interesting look into the changes
Linux distributions make to upstream software as well as some of the
long-term consequences of those choices.
https://lwn.net/Articles/991088/
In the wake of the <a href="https://lwn.net/Articles/967866/"; rel="nofollow">XZ
backdoor</a>, the Debian project has revisited some of the
patches included in its https://www.openssh.com/
packages to improve security. The outcome of this is that the project
will be splitting out support for https://en.wikipedia.org/wiki/Kerberos_(protocol)
key exchange into a
separate set of packages, though not until after the Debian 13
("trixie") release expected next year. The impact on Debian users
should be minimal, but it is an interesting look into the changes
Linux distributions make to upstream software as well as some of the
long-term consequences of those choices.
https://lwn.net/Articles/991088/