Bug#1135120: openssh-server: generates ecdsa and ed25519 keys on security upgrade

Package: openssh-server
Version: 1:8.4p1-5+deb11u6
Severity: normal
X-Debbugs-Cc: [email protected], [email protected]

There recently was an OpenSSH upgrade, which led to it
generating ecdsa and ed25519 keys I had deliberately
removed because I use only RSA keys.



-- System Information:
Debian Release: 11.11
  APT prefers oldoldstable-updates
  APT policy: (500, 'oldoldstable-updates'), (500, 'oldoldstable-security'), (500, 'oldoldstable')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 5.10.0-39-amd64 (SMP w/1 CPU thread)
Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/lksh
Init: sysvinit (via /sbin/init)

Versions of packages openssh-server depends on:
ii  adduser                3.118+deb11u1
ii  debconf [debconf-2.0]  1.5.77
ii  dpkg                   1.20.13
ii  libaudit1              1:3.0-2
ii  libc6                  2.31-13+deb11u13
ii  libcom-err2            1.46.2-2+deb11u1
ii  libcrypt1              1:4.4.18-4
ii  libgssapi-krb5-2       1.18.3-6+deb11u7
ii  libkrb5-3              1.18.3-6+deb11u7
ii  libpam-modules         1.4.0-9+deb11u2
ii  libpam-runtime         1.4.0-9+deb11u2
ii  libpam0g               1.4.0-9+deb11u2
ii  libselinux1            3.1-3
ii  libssl1.1              1.1.1w-0+deb11u5
ii  libsystemd0            247.3-7+deb11u8
ii  libwrap0               7.6.q-31
ii  lsb-base               11.1.0
ii  openssh-client         1:8.4p1-5+deb11u6
ii  openssh-sftp-server    1:8.4p1-5+deb11u6
ii  procps                 2:3.3.17-5
ii  runit-helper           2.10.3
ii  ucf                    3.0043+deb11u2
ii  zlib1g                 1:1.2.11.dfsg-2+deb11u2

Versions of packages openssh-server recommends:
ii  logind-considered-harmful [logind]  89
pn  ncurses-term                        <none>
pn  xauth                               <none>

Versions of packages openssh-server suggests:
ii  molly-guard   0.7.2
pn  monkeysphere  <none>
pn  ssh-askpass   <none>
pn  ufw           <none>

-- debconf information:
  openssh-server/password-authentication: true
  openssh-server/permit-root-login: true