diff --git a/nixos/doc/manual/release-notes/rl-unstable.xml b/nixos/doc/manual/release-notes/rl-unstable.xml index a7ba1cb1ff5..cf67014a69d 100644 --- a/nixos/doc/manual/release-notes/rl-unstable.xml +++ b/nixos/doc/manual/release-notes/rl-unstable.xml @@ -21,6 +21,17 @@ below, in the list of backwards-incompatible changes. + + + + Users running an SSH server who worry about the quality of their + /etc/ssh/moduli file with respect to the vulnerabilities + discovered in the Diffie-Hellman key exchange can now replace OpenSSH's + default version with one they generated themselves using the new + services.openssh.moduliFile option. + +