blocklist: Rename blacklist to blocklistFollow up upstream rename from blacklist to blocklist.- Old names and rc scripts are still valid, but emitting an ugly warning- Old firewall rules and anc
blocklist: Rename blacklist to blocklistFollow up upstream rename from blacklist to blocklist.- Old names and rc scripts are still valid, but emitting an ugly warning- Old firewall rules and anchor names should work, but emitting an ugly warning- Old MK_BLACKLIST* knobs are wired to the new onesAlthough care has been taken not to break current configurations, thisis a large patch containing mostly duplicated code. If issues arise, itwill be swiftly reverted.Reviewed by: ivy (pkgbase)Approved by: emaste (mentor)MFC after: 2 daysRelnotes: yes
show more ...
sshd-auth: Chase MK_GSSAPI changesFixes: 8e28d84935f2 ("OpenSSH: Update to 10.0p2")Sponsored by: The FreeBSD Foundation
OpenSSH: Update to 10.0p2Full release notes are available athttps://www.openssh.com/txt/release-10.0Selected highlights from the release notes:Potentially-incompatible changes- This release
OpenSSH: Update to 10.0p2Full release notes are available athttps://www.openssh.com/txt/release-10.0Selected highlights from the release notes:Potentially-incompatible changes- This release removes support for the weak DSA signature algorithm. [This change was previously merged to FreeBSD main.]- This release has the version number 10.0 and announces itself as "SSH-2.0-OpenSSH_10.0". Software that naively matches versions using patterns like "OpenSSH_1*" may be confused by this.- sshd(8): this release removes the code responsible for the user authentication phase of the protocol from the per-connection sshd-session binary to a new sshd-auth binary.Security- sshd(8): fix the DisableForwarding directive, which was failing to disable X11 forwarding and agent forwarding as documented. [This change was previously merged to FreeBSD main.]New features- ssh(1): the hybrid post-quantum algorithm mlkem768x25519-sha256 is now used by default for key agreement.Sponsored by: The FreeBSD FoundationDifferential Revision: https://reviews.freebsd.org/D51630