Skip to content

Commit 01876cc

Browse files
committed
Disable the use of ssh-rsa with SHA-1 (temporarily enabled in 9.8p1-1.2.2)
Signed-off-by: Vincent Michel <vincent.michel@vates.tech>
1 parent 2ff37f2 commit 01876cc

2 files changed

Lines changed: 4 additions & 194 deletions

File tree

SOURCES/openssh-9.8p1-deprecated-ssh-rsa-warning.patch

Lines changed: 0 additions & 192 deletions
This file was deleted.

SPECS/openssh.spec

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
# start the release from openssh_rel as other packages requires
66

77
# XCP-ng sub release number
8-
%define xcpng_subrel 3
8+
%define xcpng_subrel 4
99

1010
%global WITH_SELINUX 0
1111

@@ -123,7 +123,6 @@ Patch52: openssh-6.7p1-coverity.patch
123123

124124
# XCP-ng patches
125125
Patch1000: openssh-7.4p1-CVE-2025-26465-Fix-cases-where-error-codes-were-not-correc.patch
126-
Patch1001: openssh-9.8p1-deprecated-ssh-rsa-warning.patch
127126
Patch1002: openssh-9.8p1-upstream-when-refusing-a-certificate-for-user-authen.patch
128127
Patch1003: openssh-9.8p1-CVE-2026-35414-when-certificate-support-was-added.patch
129128
Patch1004: openssh-9.8p1-CVE-2026-35414-regression-test-for-certificates.patch
@@ -514,6 +513,9 @@ cat %{_sysconfdir}/ssh/ssh_config.dup > %{_sysconfdir}/ssh/ssh_config
514513
%endif
515514

516515
%changelog
516+
* Wed Apr 29 2026 Vincent Michel <vincent.michel@vates.tech> - 9.8p1-1.2.4
517+
- Disable the use of ssh-rsa with SHA-1 (temporarily enabled in 9.8p1-1.2.2)
518+
517519
* Fri Apr 17 2026 Lucas Ravagnier <lucas.ravagnier@vates.tech> - 9.8p1-1.2.3
518520
- Add patch upstream log when refusing a certificate as dependency for CVE-2026-35414 patch
519521
- Fix CVE-2026-35414 (Bypass of authorized_keys)

0 commit comments

Comments
 (0)