Both actually. The SHA-1 collision builds on earlier collisions found in SHA-0. Here's more info, taken from a summary from CRYPTO '04. (I had been referring to CRYPTO, and not Usenix Security, and edited the original post to reflect that.)