Re: OpenSSH update

[Ludovic Courtès]

Leo Famulari <address@hidden> skribis:

> OpenSSH has released a new version, 7.2p1:
> http://www.openssh.com/txt/release-7.2
>
> There are some new features and many fixed bugs.
>
> Here are the incompatible changes, copied from the link above. If there
> are no objections I will apply the update.
>
> Potentially-incompatible changes
> ================================
>
> This release disables a number of legacy cryptographic algorithms
> by default in ssh:
>
>  * Several ciphers blowfish-cbc, cast128-cbc, all arcfour variants
>     and the rijndael-cbc aliases for AES.
>
>      * MD5-based and truncated HMAC algorithms.
>
>      These algorithms are already disabled by default in sshd.

Sounds reasonable to me.

Thanks!

Ludo’.