OpenSSH 10.4 Released with Multiple Security Fixes and New Features

OpenSSH 10.4 (released July 6, 2026) provides multiple security patches and protocol hardening for widely used OpenSSH utilities, fixing issues such as sftp/scp file redirection, internal-sftp argument truncation, a pre-authentication GSSAPI DoS, and a client-side use-after-free. The release also introduces experimental composite post-quantum signature support (ML-DSA44+Ed25519), an NFA-based wildcard matcher, stricter sandbox behavior on Linux, and several portability and bug fixes; source packages and checksums are available from official mirrors.