This release includes

• Upstream changes from OpenSSH 8.9. Please note this release doesn't have ssh-agent restriction feature. This is tracked as part of https://github.com/PowerShell/Win32-OpenSSH/issues/1902.

• Breaking change

  • This release disables RSA signatures using the SHA-1 hash algorithm by default. For more information, refer to "Potentially-incompatible changes" here.

• Security fixes

  • Validate the ACLs of $env:programdata\ssh folder, it's contents. This is not applicable for windows 10+ / windows server 2019+. For more information, refer to https://github.com/PowerShell/Win32-OpenSSH/issues/1900

• Non-security fixes

  • FIDO/U2F hardware authenticators support to Win32-OpenSSH. Thanks to @martelletto, @akshayku.
  • PKCS11 support to ssh-agent. Thanks to @yan4321.
  • MSI installation package. Thanks to @tmeckel, @heaths.
  • Fixes for various reliability issues listed here.