From 1c0fc73e48ab006cc3f5bd4ac10b8540b450149d Mon Sep 17 00:00:00 2001 From: sebres Date: Thu, 11 Jan 2018 10:27:38 +0100 Subject: [PATCH] Update ChangeLog --- ChangeLog | 8 +++++--- 1 file changed, 5 insertions(+), 3 deletions(-) diff --git a/ChangeLog b/ChangeLog index 475620603..b40b0a0e1 100644 --- a/ChangeLog +++ b/ChangeLog @@ -50,9 +50,11 @@ ver. 0.10.2-dev-1 (2017/??/??) - development edition - fixed syntax error in achnor definition (documentation, see gh-1919); - enclose ports in braces for multiport jails (see gh-1925); * `action.d/firewallcmd-ipset.conf`: fixed create of set for ipv6 (missing `family inet6`, gh-1990) -* `filter.d/sshd.conf`: extended failregex for modes "extra"/"aggressive": now finds all possible (also future) - forms of "no matching (cipher|mac|MAC|compression method|key exchange method|host key type) found", - see "ssherr.c" for all possible SSH_ERR_..._ALG_MATCH errors (gh-1943, gh-1944); +* `filter.d/sshd.conf`: + - extended failregex for modes "extra"/"aggressive": now finds all possible (also future) + forms of "no matching (cipher|mac|MAC|compression method|key exchange method|host key type) found", + see "ssherr.c" for all possible SSH_ERR_..._ALG_MATCH errors (gh-1943, gh-1944); + - fixed failregex in order to avoid banning of legitimate users with multiple public keys (gh-2014, gh-1263); ### New Features * datedetector: extended default date-patterns (allows extra space between the date and time stamps);