OpenSSH 10.4 Released with Critical Security Fixes

On July 6, 2026, OpenSSH released version 10.4, addressing eight security vulnerabilities, including significant flaws in sftp that could allow malicious servers to redirect downloads. The vulnerabilities were identified by the Swival Security Scanner, highlighting risks for Unix and Linux system operators. The release also includes bug corrections and new features, such as early post-quantum cryptography support. System administrators are advised to update to this version to mitigate potential exploitation. The vulnerabilities affect core utilities within OpenSSH, which is widely used for secure remote access.

Key Points: • OpenSSH 10.4 includes eight security fixes, crucial for Unix and Linux systems. • Two vulnerabilities in sftp could allow malicious servers to manipulate file downloads. • System administrators are urged to upgrade to version 10.4 to prevent exploitation.