Merge pull request #13 from xcp-ng-rpms/vml/xcpng-3089

Disable the use of ssh-rsa with SHA-1

Author: vxgmichel

SOURCES/openssh-9.8p1-deprecated-ssh-rsa-warning.patch

@@ -5,7 +5,7 @@
 # start the release from openssh_rel as other packages requires
 
 # XCP-ng sub release number
-%define xcpng_subrel 3
+%define xcpng_subrel 4
 
 %global WITH_SELINUX 0
 
@@ -123,7 +123,6 @@ Patch52: openssh-6.7p1-coverity.patch
 
 # XCP-ng patches
 Patch1000: openssh-7.4p1-CVE-2025-26465-Fix-cases-where-error-codes-were-not-correc.patch
-Patch1001: openssh-9.8p1-deprecated-ssh-rsa-warning.patch
 Patch1002: openssh-9.8p1-upstream-when-refusing-a-certificate-for-user-authen.patch
 Patch1003: openssh-9.8p1-CVE-2026-35414-when-certificate-support-was-added.patch
 Patch1004: openssh-9.8p1-CVE-2026-35414-regression-test-for-certificates.patch
@@ -514,6 +513,9 @@ cat %{_sysconfdir}/ssh/ssh_config.dup > %{_sysconfdir}/ssh/ssh_config
 %endif
 
 %changelog
+* Wed Apr 29 2026 Vincent Michel <vincent.michel@vates.tech> - 9.8p1-1.2.4
+- Disable the use of ssh-rsa with SHA-1 (temporarily enabled in 9.8p1-1.2.2)
+
 * Fri Apr 17 2026 Lucas Ravagnier <lucas.ravagnier@vates.tech> - 9.8p1-1.2.3
 - Add patch upstream log when refusing a certificate as dependency for CVE-2026-35414 patch
 - Fix CVE-2026-35414 (Bypass of authorized_keys)