OpenSSH 8.4 released

Post Syndicated from original https://lwn.net/Articles/832857/rss

OpenSSH 8.4 is out. The SHA-1 algorithm is deprecated and the “ssh-rsa”
public key signature algorithm will be disabled by default “in a
near-future release.
” They note that it is possible to perform
chosen-prefix attacks against the SHA-1 algorithm for less than USD$50K.