OpenSSH 10.4/10.4p1 Released

Post by PunchyHamster » Tue, Jul 07, 2026, 2:12 PM UTC

lousken wrote: post #19

throw0101a wrote: post #7

Earlier quoted context omitted.

Yes: * https://man.openbsd.org/ssh_config.5#MACs * https://man.openbsd.org/sshd_config.5#MACs ETM, encrypt-than-mac, variants are at the front of the preference list. * https://en.wikipedia.org/wiki/UMAC_(cryptography)

That sucks, that means they will still appear in audits, they should remove them from the default.

Post by ktm5j » Tue, Jul 07, 2026, 2:56 PM UTC

atonse wrote: post #5

throw0101a wrote: post #2

HTML version of release notes: * https://www.openssh.org/releasenotes.html#10.4

Still looks like ascii, doesn’t automatically wrap, nor is it responsive. Anyone know if these projects accept PRs to improve these kinds of things, like legibility? Or is it a point of pride?

Post by lousken » Tue, Jul 07, 2026, 6:56 PM UTC

PunchyHamster wrote: post #21

lousken wrote: post #19

Earlier quoted context omitted.

That sucks, that means they will still appear in audits, they should remove them from the default.

OpenSSH thankfully cares little for corporate security theathre But I can sympathise, our stuff got flagged in audit because we foolishly assumed that some requirement was checked by just having OpenSSH "new enough",but it turned out that RedHat for that RHEL version patched back some old considered insecure primitives to keep their customers happy...