6 versions of OpenSSH Preview are listed here, from December 13, 2023 to the current 10.0.0.0. Each one links to the publisher’s own installer files.
6 versions over 2 years · about 3.2 a year
| Version | Date | Size | Files |
|---|---|---|---|
| 10.0.0.0Latest | October 27, 2025 | — | 64-bit MSIARM64 MSI32-bit MSI |
| 9.8.3.0 | April 18, 2025 | — | 64-bit MSIARM64 MSI32-bit MSI |
| 9.8.2.0 | April 8, 2025 | — | 64-bit MSIARM64 MSI32-bit MSI |
| 9.8.1.0 | October 10, 2024 | — | 64-bit MSIARM64 MSI Release notes- This is a preview-release (non-production ready)
- This release includes:
- fix for MSI, otherwise equivalent to the [v9.8.0.0p1-Preview release](https://github.com/PowerShell/Win32-OpenSSH/releases/tag/v9.8.0.0p1-Preview). |
| 9.8.0.0 | September 27, 2024 | — | 64-bit MSIARM64 MSI32-bit MSI Release notesThis is a preview-release (non-production ready)
Note that the change from "beta" to "preview" is simply to align with release naming requirements.
This release includes:
- Upstream changes from OpenSSH 9.8p1.
- Security Fixes (all pertaining to Windows parity with pre-existing upstream behavior):
- [ssh-agent] validate a PKCS11 library path based on allow-list configurable via -P, with default allow-list set to $env:ProgramFiles and $env:ProgramFiles(x86) - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38029.
- [sftp] check for invalid character in filename to prevent recursive directory attack - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43581.
- [scp] check for invalid character in filename to prevent recursive directory attack - https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-43615.
- Non-Security Fixes:
- Upgrade to ZLib 1.3.1. Please refer to https://zlib.net/.
- Upgrade to LibreSSL 3.9.2. Please refer to https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.9.2-relnotes.txt.
- Upgrade to LibFido2 1.15.0. Please refer to https://developers.yubico.com/libfido2/Release_Notes.html. |
| 9.5.0.0 | December 13, 2023 | — | 64-bit MSIARM64 MSI32-bit MSI Release notesThis is a beta-release (non-production ready)
This release includes:
- Upstream changes from OpenSSH 9.5p1 and a cherry-pick of the "strict KEX" protocol extension changes from OpenSSH 9.6p1.
- Breaking Changes:
- Remove sha1-based MACs from default configuration options in https://github.com/PowerShell/openssh-portable/pull/706/files.
- Security Fixes:
- Service paths for SSHD and SSH-Agent in contrib\win32\openssh\install-sshd.ps1 are encapsulated in double-quotes.
- Non-Security Fixes:
- [SCP/SFTP] Permit data upload that originates from a named pipe in PowerShell/openssh-portable#704.
- Upgrade to LibreSSL 3.8.2. Please refer to https://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-3.8.2-relnotes.txt.
- Upgrade to LibFido2 1.14.0. Please refer to https://developers.yubico.com/libfido2/Release_Notes.html. |
