A new version of OpenSSH has been released fixing four security vulnerabilities and a number of non-security related bugs. The software fixes a use-after-free vulnerability that could lead to remote code execution. The next version of the software will deprecate several old ciphersuites and cryptographic algorithms that are no longer considered safe. In version 7.0, the software disables 1024-bit diffie-hellman-group1-sha1 key exchange by default and drops support for the old SSH version 1 protocol.
Source: https://threatpost.com/openssh-7-0-fixes-four-flaws/114265/

