Announcement
OpenSSH 10.6 brings security fixes as the team plans more frequent releases
The OpenSSH release notes say 10.6 disables LZ77 compression to mitigate a side-channel attack, making compression less effective.
TLDR
The OpenSSH team announced version 10.6 on October 6, 2026. It disables the LZ77 dictionary coder to mitigate a compression side-channel, enables a hybrid post-quantum signature algorithm and adds a deprecation warning for scp’s -R flag. The team says some bugs identified by AI tools were later found independently by other researchers, prompting plans for more frequent releases to get fixes to users sooner.
Combined views
—
First seen ago