OpenSSH 8.4 released
OpenSSH 8.4 is out. The SHA-1 algorithm is deprecated and the "ssh-rsa"public key signature algorithm will be disabled by default "in anear-future release." They note that it is possible to performchosen-prefix attacks against the SHA-1 algorithm for less than USD$50K.