- Sync patches with AlmaLinux.
- Fix parsing of IPv6 IPs in sftp client (#2162733)
- Omit client side from minimize-sha1-use.patch to prevent regression (#2093897)
- Fix new issues found by static analyzers
- Upstream: add a local implementation of BSD realpath() for sftp-server (#2064249)
- Change product name from Fedora to RHEL in openssh-7.8p1-UsePAM-warning.patch (#1953807)
- Include caveat for crypto-policy in sshd manpage (#2044354)
- Change log level of FIPS specific log message to verbose (#2050511)
- Clarify force_file_perms (-m) documentation in sftp-server manpage (#1862504)
- Minimize the use of SHA1 as a proof of possession for RSA key (#2093897)
- Upstream: ClientAliveCountMax=0 disable the connection killing behaviour (#2015828)
- Add support for "Include" directive in sshd_config file (#1926103)
- CVE-2021-41617 upstream fix (#2008885)
- sshd -T requires -C when "Match" is used in sshd_config (#1836277)
- CVE-2020-14145 openssh: Observable Discrepancy leading to an information
  leak in the algorithm negotiation (#1882252)
- Hostbased ssh authentication fails if session ID contains a '/' (#1944125)
- ssh doesn't restore the blocking mode on standard output (#1942901)
- SFTP sort upon the modification time (#1909988)
- ssh-keygen printing fingerprint issue with Windows keys (#1901518)
- PIN is lost when iterating over tokens when adding pkcs11 keys to ssh-agent (#1843372)
- ssh-agent segfaults during ssh-add -s pkcs11 (#1868996)
- ssh-copy-id could not resolve ipv6 address ends with colon (#1933517)
- sshd provides PAM an incorrect error code (#1879503)
- Openssh client window fix (#1913041)