Microsoft has released the KB5053606 cumulative update for Windows 10 22H2 and Windows 10 21H2, which fixes numerous bugs, including one preventing SSH connections.

The Windows 10 KB5053606 update is mandatory as it contains Microsoft’s March 2025 Patch Tuesday security updates, which fix six actively exploited zero-day vulnerabilities.

Windows users can install this update by going into Settings, clicking on Windows Update, and manually performing a ‘Check for Updates.’

However, as this update is mandatory, it will automatically start installing in Windows once you check for updates. To make this more manageable, you can schedule a time when your computer is restarted to finish the installation.

After installing this update, Windows 10 22H2 will be updated to build 19045.5608 and Windows 10 21H2 will be build 19044.5608.

Windows 10 users can also manually download and install the KB5053606 update from the Microsoft Update Catalog.

What’s new in Windows 10 KB5053606

The KB5053606 update includes fixes for numerous bugs in Windows 10, including one that caused the OpenSSH service not to start and prevent connections.

This update includes nine fixes or changes, which are listed below.

• [Daylight saving time (DST)] This update supports DST changes in Paraguay.

• [Narrator]

  • Fixed: It fails to say the Chinese IME candidate window quick action buttons right.

  • Fixed: It does not say the control type for the Chinese IME suggestion opt-in item.

  • Fixed: It does not say the heading of the Chinese IME suggestion opt-in panel.

• [Input Method Editor (IME)]

  • Fixed: The Chinese IME stops responding when you change the font family or font size.

  • Fixed: The color contrast ratio of the Chinese IME search suggestion panel is less than you expect.

• [Desktop Window Manager (dwm.exe}] Fixed: Dwm.exe stops responding many times.

• [Country and Operator Settings Asset] This update brings COSA profiles up to date for certain mobile operators.

• [Open Secure Shell (OpenSSH) (known issue)] Fixed: The service fails to start, which stops SSH connections. There is no detailed logging, and you must run the sshd.exe process manually.

Microsoft says that there are two known issues, all of which were introduced in previous updates.

After installing the January 2025 and later Windows updates may fail if Citrix Session Recording Agent (SRA) version 2411 is installed on the device.

“As a workaround, stop the Session Recording Monitoring service, install the Microsoft security update, and enable the Session Recording Monitoring service,” explains a Citrix support bulletin.

Devices with certain Citrix components installed might be unable to complete the January 2025 Windows security update installation. This issue was observed on devices with Citrix Session Recording Agent (SRA) version 2411. The 2411 version of this application was released in December 2024.

Finally, the Windows EventViewer may incorrectly display an Event 7023 error about SgrmBroker.exe, stating, “The System Guard Runtime Monitor Broker service terminated with the following error: %%3489660935.” 

Microsoft says that SgrmBroker.exe currently serves no purpose and that this error does not impact any functionality on the device, which will be fixed in future updates.

A complete list of fixes can be found in the KB5053606 support bulletin and last month’s KB5052077 preview update bulletin.