Copssh version 6.1.2 comes with the latest version of LibreSSL (2.6.4). A predefined working directory (inst_directory\_work) is now used to unpack subinstallers and other installer tools, allowing anti malware/virus programs for exclusion in a deterministic way if necessary. Working directory will be removed upon a successful installation.

Copssh version 6.1.0 comes with the latest versions of OpenSSH (7.6) and LibreSSL (2.5.5). We have also updated the Cygwin and GNU Tools to their latest available versions.

Security issue:

• sftp-server(8): in read-only mode, sftp-server was incorrectly permitting creation of zero-length files. Reported by Michal Zalewski.

Potentially-incompatible changes in OpenSSH:

This release includes a number of changes that may affect existing configurations:

• ssh(1): delete SSH protocol version 1 support, associated  configuration options and documentation.
• ssh(1)/sshd(8): remove support for the hmac-ripemd160 MAC.
• ssh(1)/sshd(8): remove support for the arcfour, blowfish and CAST ciphers.
• Refuse RSA keys <1024 bits in length and improve reporting for keys that do not meet this requirement.
• ssh(1): do not offer CBC ciphers by default.