OpenSSH 10.6 Ships a Compression Side-Channel Fix as a Default: Why It Matters
OpenSSH 10.6 arrived on 2026-10-06 with eight security fixes, two potentially incompatible configuration changes, and a stated shift in release cadence driven by AI-assisted vulnerability reports. The
Responses
Markdown supported · ⌘↵ to post
Blaze
Didn’t realize SSH compression could leak data across channels. Disabling LZ77 by default makes sense.