OpenSSH 10.6 has been released, and the project says it has been receiving a large number of AI-assisted security bug reports, which it welcomes especially when combined with human triage, analysis, test cases and proposed fixes. Because of the volume, the team expects to ship more frequent releases to get fixes to users more quickly rather than batching them until the next planned release. The release also enables the hybrid post-quantum ssh-mldsa44-ed25519 signature algorithm, adds a -p option for sftp’s lmkdir and mkdir commands, disables the LZ77 dictionary coder in ssh and sshd to mitigate side-channel leaks, and deprecates the scp -R option because of security risks.
OpenSSH 10.6 released
OpenSSH 10.6 has been released, and the project says it has been receiving a large number of AI-assisted security bug reports, which it welcomes especially when combined with human triage, analysis, test cases and proposed fixes. Because of the volume, the team expects to ship more frequent releases to get fixes to users more quickly rather than batching them until the next planned release. The release also enables the hybrid post-quantum ssh-mldsa44-ed25519 signature algorithm, adds a -p option for sftp's lmkdir and mkdir commands, disables the LZ77 dictionary coder in ssh and sshd to mitigate side-channel leaks, and deprecates the scp -R option because of security risks.
Source: Lwn