OpenSSH 10.6 released
Version 10.6 of OpenSSHhas been released. The announcement notes that the OpenSSH team has beenreceiving a large number of AI-assisted security bug reports. "
We very muchwelcome these reports, especially when combined with human triage, analysis,test-cases and particularly when accompanied by proposed fixes". As aresult, the project expects to be making more frequent releases to get updatesto users more quickly rather than batching the bug fixes until the next plannedrelease.
Notable changes in this release include enabling the hybrid post-quantumssh-mldsa44-ed25519 signature algorithm, addition of a -p option for sftp's lmkdir/mkdir commands, as wellas disabling the LZ77 dictionary coder in ssh and sshd to mitigate side-channelleaks (which will result in reduced effectiveness of the Compressionoption). The scp-R option, whichallows copies between two remote hosts, is being deprecated due to securityrisks; the option will be ignored in the future. See the announcement for fulldetails of all changes and bug fixes.