openwrt-6.x/package
Konstantin Demin 2d9a0be307 dropbear: disable two weak kex/mac algorithms
hmac-sha1 and diffie-hellman-group14-sha1 are weak algorithms.
A future deprecation notice of ssh-rsa (2048-bit) has been issued. [1]

It has no place in a potentially internet-facing daemon like dropbear.
Upstream has acknowledged this and offered this solution to disable
these two until this is made to be the default in the next release
of dropbear next year. [2]

1. https://www.openssh.com/txt/release-8.2
2. https://github.com/mkj/dropbear/issues/138

Signed-off-by: John Audia <therealgraysky@proton.me>
Signed-off-by: Konstantin Demin <rockdrilla@gmail.com>
2024-02-09 09:13:05 +00:00
..
base-files base-files/leds: add setting the LED color via uci 2024-02-07 15:34:43 +01:00
boot kexec-tools: update to 2.0.28 2024-02-06 12:10:05 +01:00
devel strace: update to 6.7 2024-02-07 20:13:06 +01:00
firmware wireless-regdb: update to 2024.01.23 2024-02-04 18:47:07 +01:00
kernel kernel: modules: video: add missing video-mem2mem symbol 2024-02-05 18:25:16 +01:00
libs zlib: update to 1.3.1 2024-02-02 17:26:29 +01:00
network dropbear: disable two weak kex/mac algorithms 2024-02-09 09:13:05 +00:00
system ubox: update to Git HEAD (2024-01-24) 2024-01-24 13:08:36 +01:00
utils ucode: add libjson-c/host dependency 2024-02-01 16:22:11 +01:00
Makefile build: add CycloneDX SBOM JSON support 2023-11-01 11:14:41 +00:00