OpenSSH 10.6 turns off LZ77 compression to stop a cross-channel plaintext leak
OpenSSH 10.6, released October 6, turns off the LZ77 coder in SSH compression to block an attack that reads one channel's secrets from another. Hosts using the Compression option will get less from it, so the project suggests compressing in the application.
Reality
- Evidence72
- Adoption
- Insufficient
- Hype gap0
- Incentives25
- Confidence75