# changelog

author: Solar Designer <solar@openwall.com> 8.7p1-30.el9.security.0.1
changelog:
  - Instead of linking against libsystemd, load it dynamically in a temporary
    child process to avoid polluting actual sshd's address space with that
    library and its many dependencies (shortens "ldd sshd" from 28 to 20 lines)


author: Solar Designer <solar@openwall.com> 8.7p1-34.3.el9_3.security.0.2
changelog:
  - Rebase 8.7p1-34.el9_3.security.0.1 on 8.7p1-34.3
  - Build without Kerberos support (shortens "ldd sshd" from 20 to 13 lines)


author: Solar Designer <solar@openwall.com> 8.7p1-34.3.el9_3.security.0.3
changelog:
  - Comment out GSSAPI* lines in /etc/ssh/ssh*_config.d/50-redhat.conf and patch
    the code to silently ignore GSSAPIKexAlgorithms when unsupported (like it is
    in our new without-Kerberos build)


author: Solar Designer <solar@openwall.com> - 2.34-83.12.el9.security.0.5
changelog:
  - Rebase on 2.34-83.12
  - Add iconv() ISO-2022-CN-EXT CVE-2024-2961 fix from upstream glibc 2.34 branch


