OpenSSH 10.6 deliberately breaks two features in the name of security
The New Stack 1 week ago 41
OpenSSH 10.6 intentionally breaks SSH compression and shell-handling of certain usernames to reduce security risks. It disables the LZ77 dictionary coder used for SSH compression, and also rejects $ and \ in command-line usernames. After upgrading, SSH compression will work but be less effective and automation that passes those usernames directly will need changes (especially for ProxyCommand/Match exec-style flows).
