OpenSSH 10.4 has been released. In addition to a number of security
and bug fixes, there are a few notable changes; this release adds
experimental support for a composite post-quantum signature scheme
combining ML-DSA 44 and Ed25519 as described in this
IETF draft. With 10.4, if OpenSSH is compiled with sandbox support
it will fail on Linux systems that have not enabled SECCOMP
or NO_NEW_PRIVS; prior to this release, sshd would log an error
but continue operation. See the
release notesfor a full list of changes.
source & further reading
lwn.net — original article
Seven stable kernels for Saturday including two security fixes
Fedora Council proposes pausing Community Initiatives
[$] Two LLM-assisted memory-management patch sets