Release Announcements

Copssh server with a new Admin GUI

NB! Not backwards compatible. New installation is required.

• Almost full and direct support for capabilities of sshd_config
• Access control via users and groups
• Conditional match blocks
• SSH/SFTP Logging via syslog
• Key pair creation and transfer
• and more ..

 More info at https://itefix.net/content/copssh-server-admin-gui

• Service run by LOCAL SERVICE instead of LOCAL SYSTEM reducing vulnerability footprint,
• Cygwin 3.4.5

• Provided as a portable installer (extracts files only, no admin requirements)
• Cygwin 3.4.5
• OpenSSH 9.2p
• LibeSSL 3.6.1

• Cygwin 3.4.5
• Add Readme Security/SSL as some additional certificate setup is required for proper operation.

• OpenSSH 9.2, LibreSSL 3.6.1 and Cygwin 3.4.5
• system wide /etc/ssh_config to make sure that known_hosts is created at the root level, avoiding warnings in the case a home directory can't be located.
• Improved xxhash (0.8.1) support including xxh128 and xxh3
• man pages included

Rsync 3.2.7, --version output:

rsync  version 3.2.7  protocol version 31
Copyright (C) 1996-2022 by Andrew Tridgell, Wayne Davison, and others.
Web site: https://rsync.samba.org/
Capabilities:
    64-bit files, 64-bit inums, 64-bit timestamps, 64-bit long ints,
    socketpairs, symlinks, symtimes, hardlinks, no hardlink-specials,
    hardlink-symlinks, IPv6, atimes, batchfiles, inplace, append, no ACLs,
    no xattrs, optional secluded-args, iconv, prealloc, stop-at, crtimes
Optimizations:
    no SIMD-roll, no asm-roll, openssl-crypto, no asm-MD5
Checksum list:
    xxh128 xxh3 xxh64 (xxhash) md5 md4 sha1 none
Compress list:
    zstd lz4 zlibx zlib none
Daemon auth list:
    sha512 sha256 sha1 md5 md4

rsync comes with ABSOLUTELY NO WARRANTY.  This is free software, and you
are welcome to redistribute it under certain conditions.  See the GNU
General Public Licence for details.

• GoAccess 1.7
• Cygwin 3.4.5

• OpenSSH 9.2

Changes since OpenSSH 9.1
=========================

This release fixes a number of security bugs.

Security
========

This release contains fixes for two security problems and a memory
safety problem. The memory safety problem is not believed to be
exploitable, but we report most network-reachable memory faults as
security bugs.

 * sshd(8): fix a pre-authentication double-free memory fault
   introduced in OpenSSH 9.1. This is not believed to be exploitable,
   and it occurs in the unprivileged pre-auth process that is
   subject to chroot(2) and is further sandboxed on most major
   platforms.

 * ssh(8): in OpenSSH releases after 8.7, the PermitRemoteOpen option
   would ignore its first argument unless it was one of the special
   keywords "any" or "none", causing the permission list to fail open
   if only one permission was specified. bz3515

 * ssh(1): if the CanonicalizeHostname and CanonicalizePermittedCNAMEs
   options were enabled, and the system/libc resolver did not check
   that names in DNS responses were valid, then use of these options
   could allow an attacker with control of DNS to include invalid
   characters (possibly including wildcards) in names added to
   known_hosts files when they were updated. These names would still
   have to match the CanonicalizePermittedCNAMEs allow-list, so
   practical exploitation appears unlikely.

....

- OpenSSH 9.2p

- Cygwin 3.4.5

- Cygwin and GNU Tool update

• Cygwin 3.4.5