Open SSH 10.6p2 was released on 2026-11-05. The release addresses a critical security workaround for Linux systems using musl libc with PAM disabled, preventing password authentication bypass exploits. The Open SSH team announced more frequent releases to address bugs quickly after receiving numerous security reports, many identified by AI tools.
The release also includes bug fixes for post-quantum hybris signature schemes, CPU spin issues with channel timeout, and compilation on older platforms. Future deprecation notices include the -R flag for scp and platform support removal for SCO Open Server 5 and QNX 6. The Open SSH community continues to support the project through code contributions, bug reports, and donations.
Source: Hacker News · Summarized by HeadlinesBriefing