Backport fix for CVE-2024-6387 (rhbz#2294879)

Forbid shell metasymbols in username/hostname
2023-51385
Fix Terrapin attack
2023-48795
Apply destination constraints to all PKCS#11 keys
2023-51384

Revert "Remove sshd.socket unit (rhbz#2025716)" according to FESCO decision

Split including crypto-policies to a separate config (rhbz#1970566)
Disable forking of ssh-agent on startup (rhbz#2148555)
Remove sshd.socket unit (rhbz#2025716)
Minor optimization of ssh_krb5_kuserok (rhbz#2112501)

Relax checks of OpenSSL version

Update gssapi-keyex patch for OpenSSH 9.0+

Fix remote code execution in ssh-agent PKCS#11 support
2023-38408

Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

Fix deprecated %patchN syntax
Reduce the number of patches by merging related patches

Fix DSS verification problem

Remove unused patch

Rebase OpenSSH to 9.3p1

Fix pkcs11 issue with the recent changes
Clarify HostKeyAlgorithms relation with crypto-policies

In case when sha1 signatures are not supported, fallback to sha2 in hostproof
Audit logging patch was not applied (rhbz#2177471)

Make the sign, dh, ecdh processes FIPS compliant by adopting to

Fix self-DoS
2023-25136
Remove too aggressive coverity fix causing native tests failure