OpenSSH 10.6 released with post-quantum signatures, LZ77 disabled

OpenSSH 10.6 enables the hybrid post-quantum ssh-mldsa44-ed25519 signature algorithm and disables the LZ77 dictionary coder in ssh and sshd to mitigate side-channel leaks. Citing a flood of AI-assisted bug reports, the project will move to more frequent releases, and the scp -R option is deprecated.

• Hybrid post-quantum ssh-mldsa44-ed25519 signature algorithm enabled
• LZ77 coder disabled in ssh and sshd to mitigate side-channel leaks
• scp -R option deprecated and will be ignored in the future
• Project shifts to more frequent releases amid AI-assisted bug reports