Releases

Copssh version 5.0.0 contains the latest available OpenSSH version 6.7 with many features and bug fixes. Please pay special attention to backward-incompatible changes like removing unsafe algorithms from the default set of ciphers/MACs and removing support for tcpwrappers.

We have also updated most of the GNU Tools and Cygwin to their latest available versions, including bash coming with a ShellShock immune version:

You can now specify user-specific advanced options in the Copssh Control Panel (available only for the product version!):

Copssh version 4.9.4 comes with OpenSSL 1.0.1i fixing nine security vulnerabilities.  In addition, Cygwin and many GNU tools are updated to their latest versions.

Copssh version 4.9.3 comes with an updated Control Panel with following improvements:

• It is now possible to instruct the Control panel not to convert user names to lowercase. If you add the parameter below to the bin/copsshcp.config file, no conversion will find place:

[Options]
LowercaseUsername=0

The default behaviour is still conversion to lowercase.

• A chrooted sftp environment allowing isolated directories (access type Sftp) was only supported if the default service account (SvcCOPSSH) is selected. It is now supported for all kinds of service accounts including domain users.

• Copssh takes a service restart if a chrooted environment (access type Sftp) is specified during user activation, to avoid error messages about improper permissions on a chrooted directory.

Copssh version 4.9.2 contains version 1.0.1h of OpenSSL addressing 6 security vulnerabilities announced recently.

The Secure Shell (SSH) is a different protocol from SSL or TLS.  OpenSSH relies on the OpenSSL library for access to the cryptographic primitives it provides, not for the TLS or SSL implementations.

Copssh is not vulnerable to those flaws.

Copssh 4.9.1 patch 1001 contains version 1.0.1h of OpenSSL addressing 7 security vulnerabilities announced recently. Even if most of the vulnerabilities affects the TLS implementation which are not used by Copssh, SSL/TLS MITM vulnerability (CVE-2014-0224) can affect ssl clients and servers.