This is a beta-release (non-production ready)
This release includes:
-
Upstream changes from OpenSSH 9.5p1 and a cherry-pick of the "strict KEX" protocol extension changes from OpenSSH 9.6p1.
-
Breaking Changes:
- Remove sha1-based MACs from default configuration options in https://github.com/PowerShell/openssh-portable/pull/706/files.
-
Security Fixes:
- Service paths for SSHD and SSH-Agent in contrib\win32\openssh\install-sshd.ps1 are encapsulated in double-quotes.
-
Non-Security Fixes:
- [SCP/SFTP] Permit data upload that originates from a named pipe in PowerShell/openssh-portable#704.
- Upgrade to LibreSSL 3.8.2. Please refer to https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.8.2-relnotes.txt.
- Upgrade to LibFido2 1.14.0. Please refer to https://developers.yubico.com/libfido2/Release_Notes.html.