Merge pull request #145181 from helsinki-systems/release-notes/openssh

nixos/changelog: Mention OpenSSH upgrade

authored by

Janne Heß and committed by
GitHub
edb29508 e5ac2e1a

+25
+21
nixos/doc/manual/from_md/release-notes/rl-2111.section.xml
··· 151 151 </listitem> 152 152 </itemizedlist> 153 153 </listitem> 154 + <listitem> 155 + <para> 156 + OpenSSH was updated to version 8.8p1 157 + </para> 158 + <itemizedlist spacing="compact"> 159 + <listitem> 160 + <para> 161 + This breaks connections to old SSH daemons as ssh-rsa host 162 + keys and ssh-rsa public keys that were signed with SHA-1 163 + are disabled by default now 164 + </para> 165 + </listitem> 166 + <listitem> 167 + <para> 168 + These can be re-enabled, see the 169 + <link xlink:href="https://www.openssh.com/txt/release-8.8">OpenSSH 170 + changelog</link> for details 171 + </para> 172 + </listitem> 173 + </itemizedlist> 174 + </listitem> 154 175 </itemizedlist> 155 176 </section> 156 177 <section xml:id="sec-release-21.11-new-services">
+4
nixos/doc/manual/release-notes/rl-2111.section.md
··· 46 46 - building LXD images from configurations is now directly possible with just nixpkgs 47 47 - hydra is now building nixOS LXD images that can be used standalone with full nixos-rebuild support 48 48 49 + - OpenSSH was updated to version 8.8p1 50 + - This breaks connections to old SSH daemons as ssh-rsa host keys and ssh-rsa public keys that were signed with SHA-1 are disabled by default now 51 + - These can be re-enabled, see the [OpenSSH changelog](https://www.openssh.com/txt/release-8.8) for details 52 + 49 53 ## New Services {#sec-release-21.11-new-services} 50 54 51 55 - [btrbk](https://digint.ch/btrbk/index.html), a backup tool for btrfs subvolumes, taking advantage of btrfs specific capabilities to create atomic snapshots and transfer them incrementally to your backup locations. Available as [services.btrbk](options.html#opt-services.brtbk.instances).