Fedora 21 Update: dropbear-2015.67-1.fc21

[updates at fedoraproject.org]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2015-1905
2015-02-12 23:25:56
--------------------------------------------------------------------------------

Name        : dropbear
Product     : Fedora 21
Version     : 2015.67
Release     : 1.fc21
URL         : https://matt.ucc.asn.au/dropbear/dropbear.html
Summary     : A lightweight SSH server and client
Description :
Dropbear is a relatively small SSH server and client. Dropbear
is particularly useful for "embedded"-type Linux (or other Unix)
systems, such as wireless routers.

--------------------------------------------------------------------------------
Update Information:

== 2015.67 - Wednesday 28 January 2015 ==

- Call fsync() after generating private keys to ensure they aren't lost if a reboot occurs.

- Disable non-delayed zlib compression by default on the server. Can be enabled if required for old clients with DROPBEAR_SERVER_DELAY_ZLIB

- Default client key path ~/.ssh/id_dropbear.

- Prefer stronger algorithms by default. AES256 over 3DES Diffie-hellman group14 over group1.

- Add option to disable CBC ciphers.

- Disable twofish in default options.h.

- Enable sha2 HMAC algorithms by default, the code was already required for ECC key exchange. sha1 is the first preference still for performance.

- Fix installing dropbear.8 in a separate build directory.

- Allow configure to succeed if libtomcrypt/libtommath are missing.

- Don't crash if ssh-agent provides an unknown type of key.

- Minor bug fixes, a few issues found by Coverity scan.

== 2014.66 - Thursday 23 October 2014 ==

- Use the same keepalive handling behaviour as OpenSSH. This will work better with some SSH implementations that have different behaviour with unknown message types.

- Don't reply with SSH_MSG_UNIMPLEMENTED when we receive a reply to our own keepalive message.

- Set $SSH_CLIENT to keep bash happy.

- Fix wtmp which broke since 2013.62.
--------------------------------------------------------------------------------
ChangeLog:

* Sun Feb  1 2015 Christopher Meng <rpm at cicku.me> - 2015.67-1
- Update to 2015.67
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1187879 - dropbear-2015.67 is available
        https://bugzilla.redhat.com/show_bug.cgi?id=1187879
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use
su -c 'yum update dropbear' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------