OpenSSH: Release Notes OpenSSH 10.6/10.6p1 (2026-10-06) OpenSSH 10.6 was released on 2026-10-06. It is available from the mirrors listed at https://www.openssh.com/. OpenSSH is a 100% complete SSH protocol 2.0 implementation and includes sftp client and server support. Recently the OpenSSH … Read more
OpenSSH: Release Notes OpenSSH 10.5/10.5p1 (2026-08-11) OpenSSH 10.5 was released on 2026-08-11. It is available from the mirrors listed at https://www.openssh.com/. OpenSSH is a 100% complete SSH protocol 2.0 implementation and includes sftp client and server support. Recently the OpenSSH … Read more
OpenSSH: Post-Quantum Cryptography OpenSSH Post-Quantum Cryptography OpenSSH supports a number of cryptographic key agreement algorithms considered to be safe against attacks from quantum computers. We recommend that all SSH connections use these algorithms. OpenSSH has offered post-quantum key agreement (KexAlgorithms) … Read more
A disclosure for an OpenSSH keystroke obfuscation bypass affecting current OpenSSH versions after 9.4. OpenSSH version 9.5 introduced measures to mitigate a keystroke timing attack via traffic analysis. The patch involved adding keystroke timing obfuscation to the SSH client. As … Read more
Imagine this: an OpenSSH backdoor is discovered, maintainers rush to push out a fixed release package, security researchers trade technical details on mailing lists to analyze the backdoor code. Speculation abounds on the attribution and motives of the attacker, and … Read more
oss-security – Re: CVE-2024-6387: RCE in OpenSSH’s server, on glibc-based Linux systems [ ] [] [day] [month] [year] [list] Date: Mon, 8 Jul 2024 18:21:06 +0200 From: Solar Designer To: oss-security@…ts.openwall.com Cc: Qualys Security Advisory Subject: Re: CVE-2024-6387: RCE in … Read more
Contributed by Peter N. M. Hansteen on 2024-06-06 from the sshd to carry a big stick dept. In a recent commit, Damien Miller (djm@) introduced the new sshd(8) configurations options, PerSourcePenalties and PerSourcePenaltyExemptList, to provide a built in facility in … Read more
[openssh-unix-announce] Announce: timeline to remove DSA support in OpenSSH djm at openssh.com djm at openssh.com Thu Jan 11 15:31:18 AEDT 2024 Hi, OpenSSH plans to remove support for DSA keys in the near future. This message describes our rationale, process … Read more
OpenSSH 9.3 was released on 2023-03-15. It is available from the mirrors listed at https://www.openssh.com/. OpenSSH is a 100% complete SSH protocol 2.0 implementation and includes sftp client and server support. Once again, we would like to thank the OpenSSH … Read more
OpenSSH’s newly released version 9.2p1 contains a fix for a double-free vulnerability. Given the severe potential impact of the vulnerability on OpenSSH servers (DoS/RCE) and its high popularity in the industry, this security fix prompted the JFrog Security Research team … Read more