Vulnerabilities in the Bouncy Castle cryptographic library allow decryption of data and forgery of digital signatures; immediate patching is necessary.
OpenSSH 10.4 combines classical ECDSA signatures for the first time with post-quantum algorithms for quantum security, while addressing multiple existing vulnerabilities.
