v9.5.0.0p1-Beta

This is a beta-release (non-production ready)

This release includes:

• Upstream changes from OpenSSH 9.5p1 and a cherry-pick of the "strict KEX" protocol extension changes from OpenSSH 9.6p1.

• Breaking Changes:

  • Remove sha1-based MACs from default configuration options in https://github.com/PowerShell/openssh-portable/pull/706/files.

• Security Fixes:

  • Service paths for SSHD and SSH-Agent in contrib\win32\openssh\install-sshd.ps1 are encapsulated in double-quotes.

• Non-Security Fixes:

  • [SCP/SFTP] Permit data upload that originates from a named pipe in PowerShell/openssh-portable#704.
  • Upgrade to LibreSSL 3.8.2. Please refer to https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.8.2-relnotes.txt.
  • Upgrade to LibFido2 1.14.0. Please refer to https://developers.yubico.com/libfido2/Release_Notes.html.