Looking for a stable release

[wimg-cegeka]

Is there no longer a stable release available? I can only find BETA releases.
What should I run on my Windows production environment?

[maertendMSFT]

There is no "non-beta" release that is available on GitHub. This is only due to the level of support we are able to offer on the GitHub releases. All "GA" releases are made through Windows and Windows Update, these versions are officially supported via Windows Support.

There are no differences in quality for a Windows vs GitHub release. All GitHub releases should be stable.

[wimg-cegeka]

Thanks for clarifying this. Since Windows is far behind with it's updates , is it correct to assume that it is more secure to run the latest GitHub release instead of the Windows version?

[maertendMSFT]

The version in Windows is updated during each Windows release, if you update your Windows version you will have a more recent OpenSSH version.
If there are any high priority security fixes needed for Windows, then those are released via servicing. Though the "most secure" of any product is generally the latest release.

[raggi]

@maertendMSFT there are multiple security fixes in both the version range of the currently shipping openssh, and in each of the beta releases since then bar one. The fix for the IO race has been in for nearly year now. I have to be frank, and would ask that you also ask this up the chain: what's the holdup?

[krisavi]

@maertendMSFT

if you update your Windows version you will have a more recent OpenSSH version.

That is so false... Windows 11 ships with 8.6p1 which is years old. Even the updates have not brought any newer versions.

[raggi]

https://github.com/orgs/community/discussions/48568#discussioncomment-9116448

[ranaaqil338]

@maertendMSFT there are multiple security fixes in both the version range of the currently shipping openssh, and in each of the beta releases since then bar one. The fix for the IO race has been in for nearly year now. I have to be frank, and would ask that you also ask this up the chain: what's the holdup?

[tgauth]

The fix for the IO race has been in for nearly year now.

Are you referring to upstream's CVE-2024-6387? If so, please see PowerShell/Announcements#63

[ranaaqil338]

Is there no longer a stable release available? I can only find BETA releases.
What should I run on my Windows production environment?

[ranaaqil338]

Is there no longer a stable release available? I can only find BETA releases.
What should I run on my Windows production environment?

[tgauth]

Windows has both the OpenSSH client and OpenSSH server as features-on-demand that can be installed via optional features