OpenSSH 10.6 released
Version 10.6 of OpenSSH has been released. The announcement notes that the OpenSSH team has been receiving a large number of AI-assisted security bug reports. " We very much welcome these reports, especially when combined with human triage, analysis, test-cases and particularly when accompanied by proposed fixes ". As a result, the project expects to be making more frequent releases to get…
OpenSSH version 10.6 has been released, according to the latest announcement. The OpenSSH team has been inundated with AI-assisted security bug reports, to which they extend their appreciation, particularly when accompanied by human triage, analysis, test-cases and proposed fixes. Consequently, the project anticipates more frequent releases to deploy updates to users more swiftly, rather than consolidating bug fixes for the subsequent planned release.
Key updates in this release include the activation of the hybrid post-quantum ssh-mldsa44-ed25519 signature algorithm, the introduction of a -p option for sftp s lmkdir / mkdir commands, and the disabling of the LZ77 dictionary coder in ssh and sshd to counteract side-channel leaks, resulting in diminished Compression option effectiveness.
Furthermore, the scp -R option, facilitating file transfers between two remote hosts, is slated for deprecation due to identified security risks; it will be ignored moving forward. Interested parties can refer to the announcement for the comprehensive rundown of all modifications and bug fixes.
Written by urgent.news from LWN's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
