A lighter week on the usual beats (no fresh Proxmox, nginx, WordPress, or Ubuntu news worth flagging beyond what’s already in last week’s roundup), but a solid OpenSSH release and a Home Assistant update make up for it.
OpenSSH 10.6: compression side-channel mitigation, post-quantum signatures, tighter SFTP
Released October 6. The LZ77 dictionary coder is now disabled by default in ssh/sshd to close a compression-based side-channel, so don’t be surprised if SSH compression feels less effective afterward. The project suggests handling compression at the application layer instead if you need it. Also notable: the hybrid ssh-mldsa44-ed25519 post-quantum signature algorithm is enabled, a new WarnWeakCrypto option logs connections using non-PQ-safe key exchange, SFTP gets stricter path validation against malicious servers, and usernames passed on the command line can no longer contain $ or \. Worth the upgrade on anything facing the internet. Release notes.
Home Assistant 2026.10: map card rebuilt on OpenStreetMap, trigger IDs get a UI
Out October 7. The map card was rebuilt on OpenStreetMap vector tiles via a new “Map tiles” integration, after the previous provider’s API-key requirement broke maps for a lot of installs last release. Dark mode is included, with older devices falling back to the classic map. Automations with multiple triggers are easier to manage now that trigger IDs have a proper UI, and there’s a one-click toggle for AI integrations if you’re into that. Also worth knowing: Nabu Casa plans to rename Home Assistant Cloud to Home Assistant Link in the December release, features unchanged. Full changelog.
LWN: the LAVD scheduler’s path from gaming hack to general-purpose sched_ext scheduler
From this week’s LWN Weekly Edition, a Kernel Recipes 2026 writeup on LAVD, a sched_ext-based CPU scheduler that started as a latency tweak for gaming workloads and has since grown into something usable more broadly. If you’re running Proxmox or any other box where scheduler latency under mixed VM/container load matters, it’s a useful look at where sched_ext is heading as an alternative to CFS/EEVDF. LWN Weekly Edition, October 8 (full article behind the subscriber paywall for non-subscribers until it ages out).
MikroTik RouterOS 7.26beta1: per-VLAN DHCP snooping, initial centralized management
A development-channel build dated October 1. It’s not stable, so don’t put it on production gear yet, but it’s worth watching. Highlights include per-VLAN DHCP snooping on bridges, a fix for loop-protect when a VLAN interface joins a bridge, tighter ECDSA/EdDSA certificate validation, DHCPv6 server fixes, DoH stability improvements, and an early version of a centralized platform for monitoring and alerting across RouterOS devices. Forum announcement.
Leave a Reply