-----BEGIN OPENSSH PRIVATE KEY-----
SGkhIFlvdSBjcmFja2VkIG15IGFkbWl0dGVkbHkgbm90LXZlcnktY29tcGxleCBjb2RlLCB3ZWxsIGRvbmUhIEknbSBsb29raW5nIGZvciBhIG5ldyByb2xlIGRvaW5nIGRhdGEgc3Rvcnl0ZWxsaW5nIHdvcmssIGlkZWFsbHkgZm9yIG5vbi1VSyBhbmQgbm9uLVVTIG5ld3NwYXBlcnMuIE1heWJlIHlvdSBrbm93IG9mIHNvbWV0aGluZy4uLj8gUGxlYXNlIERNIG1lIQ==
February 26, 2026 at 10:33 PM
-----BEGIN OPENSSH PRIVATE KEY-----
A few people have asked me recently about how OpenSSH sshd implements privilege separation after the changes of the last couple of years, such as splitting sshd into multiple binaries.
I finally got around to writing it up - please take a look if you're curious.
github.com/openssh/open...
I finally got around to writing it up - please take a look if you're curious.
github.com/openssh/open...
openssh-portable/README.privsep at master · openssh/openssh-portable
Portable OpenSSH. Contribute to openssh/openssh-portable development by creating an account on GitHub.
github.com
July 3, 2026 at 2:36 AM
A few people have asked me recently about how OpenSSH sshd implements privilege separation after the changes of the last couple of years, such as splitting sshd into multiple binaries.
I finally got around to writing it up - please take a look if you're curious.
github.com/openssh/open...
I finally got around to writing it up - please take a look if you're curious.
github.com/openssh/open...
OpenSSH added a "your session isn't secure against store-now-decrypt-later quantum attacks" warning: www.openssh.org/pq.html
I love it. Waiting until the problem is manifest is a great way to have waited too long. Fix shit now.
I love it. Waiting until the problem is manifest is a great way to have waited too long. Fix shit now.
OpenSSH: Post-Quantum Cryptography
OpenSSH post quantum cryptography
www.openssh.org
November 7, 2025 at 11:15 PM
OpenSSH added a "your session isn't secure against store-now-decrypt-later quantum attacks" warning: www.openssh.org/pq.html
I love it. Waiting until the problem is manifest is a great way to have waited too long. Fix shit now.
I love it. Waiting until the problem is manifest is a great way to have waited too long. Fix shit now.
The RSA_public_decrypt public key can be attacker-controlled pre-auth by using OpenSSH certificates.
OpenSSH certs are weird in that they include the signer's public key. OpenSSH checks the signature on parsing. github.com/openssh/open...
OpenSSH certs are weird in that they include the signer's public key. OpenSSH checks the signature on parsing. github.com/openssh/open...
March 30, 2024 at 5:26 PM
The RSA_public_decrypt public key can be attacker-controlled pre-auth by using OpenSSH certificates.
OpenSSH certs are weird in that they include the signer's public key. OpenSSH checks the signature on parsing. github.com/openssh/open...
OpenSSH certs are weird in that they include the signer's public key. OpenSSH checks the signature on parsing. github.com/openssh/open...
OpenSSH is the best git server.
March 5, 2026 at 1:28 PM
OpenSSH is the best git server.
openssh a little *too* open
July 1, 2024 at 6:40 PM
openssh a little *too* open
OpenSSH 10.4 has just been released
This release includes a number of security and bug fixes, as well as a handful of new features - most notable experimental support for a hybrid post-quantum signature scheme (ML-DSA 44 with Ed25519).
www.openssh.org/releasenotes...
This release includes a number of security and bug fixes, as well as a handful of new features - most notable experimental support for a hybrid post-quantum signature scheme (ML-DSA 44 with Ed25519).
www.openssh.org/releasenotes...
OpenSSH: Release Notes
OpenSSH release notes
www.openssh.org
July 6, 2026 at 9:31 AM
OpenSSH 10.4 has just been released
This release includes a number of security and bug fixes, as well as a handful of new features - most notable experimental support for a hybrid post-quantum signature scheme (ML-DSA 44 with Ed25519).
www.openssh.org/releasenotes...
This release includes a number of security and bug fixes, as well as a handful of new features - most notable experimental support for a hybrid post-quantum signature scheme (ML-DSA 44 with Ed25519).
www.openssh.org/releasenotes...
LWN.net - Article
"OpenSSH 8.5 released"...
lwn.net/Articles/848...
==========================
#librecanada #linux #opensource
"OpenSSH 8.5 released"...
lwn.net/Articles/848...
==========================
#librecanada #linux #opensource
September 23, 2026 at 1:06 AM
LWN.net - Article
"OpenSSH 8.5 released"...
lwn.net/Articles/848...
==========================
#librecanada #linux #opensource
"OpenSSH 8.5 released"...
lwn.net/Articles/848...
==========================
#librecanada #linux #opensource
its so nice that windows has openssh and symlinks and a cli package manager
May 31, 2026 at 6:06 PM
its so nice that windows has openssh and symlinks and a cli package manager
OpenSSH 10.3 has just been released. This includes a few minor security fixes, some small new features and a bunch of bugfixes.
www.openssh.org/releasenotes...
www.openssh.org/releasenotes...
OpenSSH: Release Notes
OpenSSH release notes
www.openssh.org
April 2, 2026 at 9:29 AM
OpenSSH 10.3 has just been released. This includes a few minor security fixes, some small new features and a bunch of bugfixes.
www.openssh.org/releasenotes...
www.openssh.org/releasenotes...
-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABDU4eSjlL
SE8PfSyowakQJPAAAAGAAAAAEAAAAzAAAAC3NzaC1lZDI1NTE5AAAAIEQWfW/ZrXqId3Bm
Uu9PDVUMKyIkORkglnZ7UKsgzlXeAAAAoJxUJ/
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABDU4eSjlL
SE8PfSyowakQJPAAAAGAAAAAEAAAAzAAAAC3NzaC1lZDI1NTE5AAAAIEQWfW/ZrXqId3Bm
Uu9PDVUMKyIkORkglnZ7UKsgzlXeAAAAoJxUJ/
February 26, 2026 at 11:30 PM
-----BEGIN OPENSSH PRIVATE KEY-----
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABDU4eSjlL
SE8PfSyowakQJPAAAAGAAAAAEAAAAzAAAAC3NzaC1lZDI1NTE5AAAAIEQWfW/ZrXqId3Bm
Uu9PDVUMKyIkORkglnZ7UKsgzlXeAAAAoJxUJ/
b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABDU4eSjlL
SE8PfSyowakQJPAAAAGAAAAAEAAAAzAAAAC3NzaC1lZDI1NTE5AAAAIEQWfW/ZrXqId3Bm
Uu9PDVUMKyIkORkglnZ7UKsgzlXeAAAAoJxUJ/
OpenSSH 10.5 has just been released, mostly to fix a handful of security vulnerabilities.
www.openssh.org/releasenotes...
We plan to move to a more frequent release schedule for as long as this season of LLM-found bugs lasts. More details in the release notes.
www.openssh.org/releasenotes...
We plan to move to a more frequent release schedule for as long as this season of LLM-found bugs lasts. More details in the release notes.
OpenSSH: Release Notes
OpenSSH release notes
www.openssh.org
August 11, 2026 at 6:26 AM
OpenSSH 10.5 has just been released, mostly to fix a handful of security vulnerabilities.
www.openssh.org/releasenotes...
We plan to move to a more frequent release schedule for as long as this season of LLM-found bugs lasts. More details in the release notes.
www.openssh.org/releasenotes...
We plan to move to a more frequent release schedule for as long as this season of LLM-found bugs lasts. More details in the release notes.
OpenSSH 10.5 ships with several security fixes, as developers say growing AI-assisted vulnerability research is prompting more frequent releases.
linuxiac.com/openssh-10-5...
#OpenSSH #OpenSource
linuxiac.com/openssh-10-5...
#OpenSSH #OpenSource
OpenSSH 10.5 Fixes Security Flaws as Project Responds to AI-Assisted Bug Discovery
OpenSSH 10.5 ships with several security fixes, as developers say growing AI-assisted vulnerability research is prompting more frequent releases.
linuxiac.com
August 11, 2026 at 8:50 AM
OpenSSH 10.5 ships with several security fixes, as developers say growing AI-assisted vulnerability research is prompting more frequent releases.
linuxiac.com/openssh-10-5...
#OpenSSH #OpenSource
linuxiac.com/openssh-10-5...
#OpenSSH #OpenSource
Thanks to the PSCommunity, I've decided to finally join Bluesky. Will use this to post any updates to our projects: PS7, OpenSSH (Windows), DSC, PSGallery/PSResourceGet, etc...
January 16, 2025 at 6:28 PM
Thanks to the PSCommunity, I've decided to finally join Bluesky. Will use this to post any updates to our projects: PS7, OpenSSH (Windows), DSC, PSGallery/PSResourceGet, etc...
Faille sur OpenSSH, pas de panique, c'est dans le cas de l'utilisation de proxycommand (oui ça va faire chier pour les bastions)
cybersecuritynews.com/openssh-vuln...
cybersecuritynews.com/openssh-vuln...
OpenSSH Vulnerability Exploited Via ProxyCommand to Execute Remote Code - PoC Released
A new command injection vulnerability in OpenSSH, tracked as CVE-2025-61984, has been disclosed, which could allow an attacker to achieve remote code execution on a victim's machine.
cybersecuritynews.com
October 7, 2025 at 4:05 PM
Faille sur OpenSSH, pas de panique, c'est dans le cas de l'utilisation de proxycommand (oui ça va faire chier pour les bastions)
cybersecuritynews.com/openssh-vuln...
cybersecuritynews.com/openssh-vuln...
Please help us test OpenSSH ahead of the 9.9 release, due in a few weeks.
New features include a new post-quantum key exchange based on ML-KEM, improved controls to disallow unwanted connections and better performance for the existing PQ key exchange.
Full details at: marc.info?l=openssh-un...
New features include a new post-quantum key exchange based on ML-KEM, improved controls to disallow unwanted connections and better performance for the existing PQ key exchange.
Full details at: marc.info?l=openssh-un...
'Call for testing: OpenSSH 9.9' - MARC
marc.info
September 15, 2024 at 8:36 AM
Please help us test OpenSSH ahead of the 9.9 release, due in a few weeks.
New features include a new post-quantum key exchange based on ML-KEM, improved controls to disallow unwanted connections and better performance for the existing PQ key exchange.
Full details at: marc.info?l=openssh-un...
New features include a new post-quantum key exchange based on ML-KEM, improved controls to disallow unwanted connections and better performance for the existing PQ key exchange.
Full details at: marc.info?l=openssh-un...
Can't wait for emails from usgov agencies asking OpenSSH to comply with commissars' demands to scrub mentions "privilege separation" from our codebase
February 11, 2025 at 12:41 AM
Can't wait for emails from usgov agencies asking OpenSSH to comply with commissars' demands to scrub mentions "privilege separation" from our codebase
FreSSH bugs undiscovered for years threaten OpenSSH security
FreSSH bugs undiscovered for years threaten OpenSSH security
Exploit code now available for MitM and DoS attacks
Researchers can disclose two brand-new vulnerabilities in OpenSSH now that patches have been released.…
dlvr.it
February 18, 2025 at 3:32 PM
FreSSH bugs undiscovered for years threaten OpenSSH security
is anyone using this private key? please don't use it. this is mine. okay? thank you for your attention to this matter.
August 27, 2025 at 9:03 AM
is anyone using this private key? please don't use it. this is mine. okay? thank you for your attention to this matter.
various linux flavors are super fun in that sometimes things just fail silently or throw very unhelpful errors
personal favorite: are your packages broken? then apt in a bash shell will cheerfully go:
"openssh-server : Depends: openssh-client but it is not going to be installed"
personal favorite: are your packages broken? then apt in a bash shell will cheerfully go:
"openssh-server : Depends: openssh-client but it is not going to be installed"
September 16, 2025 at 2:13 PM
various linux flavors are super fun in that sometimes things just fail silently or throw very unhelpful errors
personal favorite: are your packages broken? then apt in a bash shell will cheerfully go:
"openssh-server : Depends: openssh-client but it is not going to be installed"
personal favorite: are your packages broken? then apt in a bash shell will cheerfully go:
"openssh-server : Depends: openssh-client but it is not going to be installed"