Also here are some interesting upstream messages that are relevant to this bug.
FYI: SSH1 now disabled at compile-time by default Wed Mar 25 2015 https://lists.mindrot.org/pipermail/openssh-unix-dev/2015-March/033701.html Obsolete MD5 Tue May 5 2015 https://lists.mindrot.org/pipermail/openssh-unix-dev/2015-May/033867.html Weak DH primes and openssh Thu May 28 2015 https://lists.mindrot.org/pipermail/openssh-unix-dev/2015-May/033966.html -- Matt Taggart tagg...@debian.org
