← Wednesday, October 7, 2026SecurityRelease

OpenSSH 10.6 disables its LZ77 coder to mitigate side-channel leaks

lwn.net by jzb Editor score 7/10

OpenSSH 10.6 disables the LZ77 dictionary coder to mitigate side-channel leaks, adds a hybrid post-quantum signature algorithm and plans more frequent releases amid AI-assisted bug reports. Operators should note the security change and its effect on compression.

What

OpenSSH 10.6 disables the LZ77 dictionary coder in ssh and sshd to mitigate side-channel leaks.

How

Disabling the coder reduces the effectiveness of the Compression option; the release also enables a hybrid post-quantum signature algorithm.

Why it matters

Engineers operating SSH systems should account for the compression tradeoff when assessing the release's security changes.

Read on lwn.net →

Headline, summary, brief and diagram are written by a model from the source's own text; the link, byline and numbers come from the source. Read the original before relying on a claim.