<a href="https://www.openssh.org/txt/release-10.6">Version 10.6</a> of OpenSSH
has been released. The announcement notes that the OpenSSH team has been
receiving a large number of AI-assisted security bug reports. "<q>We very much
welcome these reports, especially when combined with human triage, analysis,
test-cases and particularly when accompanied by proposed fixes</q>". As a
result, the project expects to be making more frequent releases to get updates
to users more quickly rather than batching the bug fixes until the next planned
release.</p>

<p>Notable changes in this release include enabling the hybrid post-quantum
ssh-mldsa44-ed25519 signature algorithm, addition of a <tt>-p</tt> option for <a
href="https://man.openbsd.org/sftp"><tt>sftp</tt></a>'s <a
href="https://man.openbsd.org/sftp#lmkdir"><tt>lmkdir</tt></a>/<a
href="https://man.openbsd.org/sftp#mkdir"><tt>mkdir</tt></a> commands, as well
as disabling the LZ77 dictionary coder in <a
href="https://man.openbsd.org/ssh"><tt>ssh</tt></a> and <a
href="https://man.openbsd.org/sshd"><tt>sshd</tt></a> to mitigate side-channel
leaks (which will result in reduced effectiveness of the Compression
option). The <a
href="https://man.openbsd.org/scp#R"><tt>scp&#160;-R</tt></a> option, which
allows copies between two remote hosts, is being deprecated due to security
risks; the option will be ignored in the future. See the announcement for full
details of all changes and bug fixes.</p>

<p></p>