OpenSSH 10.4 Release Patches Critical Remote‑Access Vulnerabilities and Adds Experimental Post‑Quantum Signature

OpenSSH 10.4 Release Patches Critical Remote‑Access Vulnerabilities and Adds Experimental Post‑Quantum Signature

What Happened — The OpenSSH project shipped version 10.4, delivering eight security fixes that address command‑injection paths in sftp/scp, a pre‑authentication denial‑of‑service, a use‑after‑free in the client, and several authentication‑delay bypasses. The update also introduces an experimental post‑quantum composite signature (ML‑DSA‑44 + Ed25519).

Why It Matters for Compliance & Audit Readiness

• Unpatched SSH daemons are a common control gap in SOC 2 CC6.1 (System Operations) and CC7.1 (Change Management); the fixes directly mitigate that gap.
• Demonstrating timely patch adoption and configuration validation provides continuous evidence for audit readiness.
• The new post‑quantum option highlights the need for forward‑looking cryptographic controls, a topic increasingly examined in security‑risk assessments.

Who Is Affected – Any organization that relies on OpenSSH for remote administration, spanning cloud‑infrastructure providers, SaaS operators, and financial‑services firms.

Recommended Actions –

• Deploy OpenSSH 10.4 across all Unix/Linux assets within your change‑management window.
• Review and document any configuration changes (e.g., DisableForwarding, GSSAPIAuthentication) against your SOC 2 access‑control policies.
• Capture patch‑installation logs as immutable audit evidence.
• Test the experimental post‑quantum signature in a non‑production environment and assess its fit with your cryptographic roadmap.

Source: Help Net Security – OpenSSH 10.4 released

Technical Notes – The fixes address:

• SFTP path‑steering to arbitrary client locations.
• SCP file‑write into parent directories on remote‑host copies.
• sshd argument truncation after the ninth parameter, potentially dropping security‑relevant flags.
• Pre‑auth DoS when GSSAPIAuthentication is enabled.
• Skipped minimum authentication delay, enabling rapid password‑guessing.
• Client‑side use‑after‑free triggered by host‑key changes during re‑exchange.
• Added signature malleability checks for Ed25519 and a new NFA‑based pattern matcher to eliminate exponential runtime.