[Bug 288849] security/py-fail2ban: Support OpenSSH 9.8p1 and later

From: <bugzilla-noreply_at_freebsd.org>
Date: Wed, 13 Aug 2025 18:47:18 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=288849

            Bug ID: 288849
           Summary: security/py-fail2ban: Support OpenSSH 9.8p1 and later
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: cy@FreeBSD.org
          Reporter: yasu@freebsd.org
          Assignee: cy@FreeBSD.org
             Flags: maintainer-feedback?(cy@FreeBSD.org)

Created attachment 262943
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=262943&action=edit
Patch file

According to the Release Notes of OpenSSH, following incompatible change is
made with 9.8p1.

* sshd(8): several log messages have changed. In particular, some
  log messages will be tagged with as originating from a process
  named "sshd-session" rather than "sshd".

And it causes fail2ban to fail to detect attack to SSH port. So change
filter.d/sshd.conf so it also supports 9.8p1 and later.

Reference:      https://www.openssh.com/txt/release-9.8
Reference:     
https://github.com/fail2ban/fail2ban/blob/4e22c20559ea6488bf9a8e84c5f7d8bff5a52c34/config/filter.d/sshd.conf#L19

-- 
You are receiving this mail because:
You are the assignee for the bug.