OpenSSH 7.6 Is Ready For Testing & Finishes Gutting SSHv1

A call for testing has been issued for the upcoming OpenSSH 7.6 with its release being imminent. This update to OpenSSH finishes deleting the SSH protocol version 1 support. Besides removing the rest of SSHv1 support, OpenSSH 7.6 also nukes some other old code including support for hmac-ripemd160 MAC, arcfour, blowfish, and CAST ciphers. RSA keys less than 1024 bits are also refused. CBC ciphers also will no longer be allowed by default.
Beyond removing the old code, OpenSSH 7.6 adds new RemoteCommand and ExposeAuthInfo options, expanded StrictModes option, and other changes as outlined via this mailing list post issuing the call for testing.
9 Comments