OpenSSH 10.6 Released, Deprecates scp -R Flag and Announces More Frequent Updates

OpenSSH 10.6 Release

OpenSSH 10.6 was released on October 6, 2026. This version is available from the official OpenSSH mirrors. OpenSSH provides a complete SSH protocol 2.0 implementation, including sftp client and server support.

Deprecation of `scp -R` Flag

The `scp -R` flag, used for remote-to-remote copies by executing `scp` on a remote host, is now deprecated. This flag is considered fragile and poses security risks due to credential requirements and potential shell quoting discrepancies. OpenSSH 10.6 will issue a deprecation warning, and in a future release, the flag will be ignored, reverting to copying via the client host.

Removal of Legacy Platform Support in `sshd`

Future releases will remove `sshd` support for platforms that do not allow file descriptor passing and require root privileges for PTY allocation. This primarily affects older operating systems like SCO OpenServer 5 and QNX 6. The OpenSSH team notes that this deprecation could be avoided if the user community for these platforms provides assistance.

Increased Release Frequency Due to AI-Assisted Bug Reports

The OpenSSH team has observed a significant increase in security bug reports, many generated or assisted by AI models. While some AI reports lack real-world security impact, the team acknowledges that AI tools can identify vulnerabilities that adversaries might also discover. Consequently, OpenSSH will adopt a more frequent release schedule to deliver bug fixes to users more rapidly, rather than batching them for planned releases.