Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 2 Apr 2025 02:39:27 +0200
From:      Christian Weisgerber <naddy@mips.inka.de>
To:        freebsd-security@freebsd.org
Subject:   Re: Heads-up: DSA key support being removed from OpenSSH
Message-ID:  <Z-yHP60GXxdI-gbi@lorvorc.mips.inka.de>
In-Reply-To: <Z9tIOBjs2DgvBhy7@lorvorc.mips.inka.de>
References:  <CAPyFy2Dk0VoqLPSHxTLzBCWT_ouqU_kj4QNhN17VybMinbr6bA@mail.gmail.com> <76933d66-eff5-4d43-a7a6-98a153e71d77@rlwinm.de> <Z9tIOBjs2DgvBhy7@lorvorc.mips.inka.de>

index | next in thread | previous in thread | raw e-mail

Christian Weisgerber:

> If OpenSSH upstream stick to the published schedule, version 9.9
> that is now in 13-STABLE/14-STABLE/15-CURRENT will be the _final_
> release that even includes the DSA code.

Subject: Call for testing: OpenSSH 10.0
[...]
Potentially-incompatible changes
--------------------------------

 * This release removes support for the weak DSA signature
   algorithm, completing the deprecation process that began in
   2015 (when DSA was disabled by default) and repeatedly warned
   over the the last 12 months.
[...]

https://lists.mindrot.org/pipermail/openssh-unix-dev/2025-April/041855.html

-- 
Christian "naddy" Weisgerber                          naddy@mips.inka.de


home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Z-yHP60GXxdI-gbi>