[Bug 1285374] New: F23 release notes don't mention that OpenSSH 7.0 disabled ssh-dss public keys by default

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1285374

            Bug ID: 1285374
           Summary: F23 release notes don't mention that OpenSSH 7.0
                    disabled ssh-dss public keys by default
           Product: Fedora Documentation
           Version: devel
         Component: release-notes
          Assignee: relnotes(a)fedoraproject.org
          Reporter: mstahl(a)redhat.com
        QA Contact: docs-qa(a)lists.fedoraproject.org
                CC: relnotes(a)fedoraproject.org, wb8rcr(a)arrl.net,
                    zach(a)oglesby.co
            Blocks: 151189 (fc-relnotes-traqr)



Fedora 22 to Fedora 23 upgrades OpenSSH from 6.9 to 7.1, but the release notes
only mention 7.1 and don't mention the default configuration changes that
happened in 7.0, such as the disabling of ssh-dss public keys that may prevent
a login to/from upgraded systems without explicit command line parameters.

https://docs.fedoraproject.org/en-US/Fedora/23/html/Release_Notes/sect-Re...

Actual results:

it only links to 7.1 release notes.

"3.4.2. OpenSSH 7.1
The OpenSSH project continues to improve the security of network communication
with the release of OpenSSH 7.1. See the upstream release notes for detailed
information about this release."

Expected results:

there should be at least a link to the OpenSSH 7.0 release notes too;
possibly explicitly mentioning the disabling of public keys.

http://www.openssh.com/txt/release-7.0

"Support for ssh-dss, ssh-dss-cert-* host and user keys is disabled by default
at run-time. To temporarily enable existing host keys, use the command line
option '-oHostKeyAlgorithms=ssh-dss' and to enable existing user keys, use
'-oPubkeyAcceptedKeyTypes=ssh-dss'."


Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=151189
[Bug 151189] Fedora release notes tracker bug
-- 
You are receiving this mail because:
You are the QA Contact for the bug.

[Bug 1285374] F23 release notes don't mention that OpenSSH 7.0 disabled ssh-dss public keys by default

[Red Hat Bugzilla]

https://bugzilla.redhat.com/show_bug.cgi?id=1285374



--- Comment #1 from Jakub Jelen <jjelen(a)redhat.com&gt; ---
Just adding, there should be also summed up content of the heads up email on
devel, mentioning ssh1 support [1]. I tried to reach you before release,
according to [2], but without any success.

If you have further queries, feel free to reach for me here on IRC. This should
be probably updated early so others updating will not get into troubles as
Michael.

Thank you.

[1] https://lists.fedoraproject.org/pipermail/devel/2015-August/213362.html
[2] https://fedoraproject.org/wiki/Release_notes_process

-- 
You are receiving this mail because:
You are the QA Contact for the bug.