cwRsync - Rsync client and server for Windows

Version 4.2.0 - September 2011

CHANGES FROM VERSION 4.1.0

1. UPDATED - Rsync 3.0.9

See http://rsync.samba.org/ftp/rsync/src/rsync-3.0.9-NEWS for more info.

Rsync on Cygwin does not use socketpairs anymore (better stability).

2. UPDATED - Cygwin 1.7.9

See http://cygwin.com/ml/cygwin-announce/2011-03/msg00043.html for more info.

3. NEW - ssh-agent and ssh-add

SIGNATURES

MD5 Signature:

0755585aeaf9b582a493be17e37924bd *cwRsync_4.2.0_Installer.zip c787dfa854775793d1a1b5c3502b57b5 *cwRsyncServer_4.2.0_Installer.zip

SHA256 Signature: 5abeec588e937bd749456ddb347e4116b0f8407e15f412281fc64c763d1de62d *cwRsync_4.2.0_Installer.zip

21e608caed9e5e7e1f1f9881729eab0a8fce6e1ff31d85dcb7759d502478160c *cwRsyncServer_4.2.0_Installer.zip

Download: http://itefix.no/i2/download

Public key authentication (PKA) allows a user to connect to the Copssh server without sending a password over the Internet. PKA uses a key pair: a private key and a public key. The private key represents user's  identity and should be kept in a secure place and protected with a passphrase. The corresponding public key is automatically added to the list of public keys accepted by the user on the Copssh server.

Copssh Control Panel is now updated with a management framework for PKA administration:

• Wizard for creation of key pairs: Select key types rsa, dsa and ecdsa with supported keylengths, save private keys with an optional passphrase and add the public key to the list of authorized keys.

• Remove a public key from the list of authorized keys.

• Update comment and/or options fields of a public key

NB! This is just an attempt to make PKA setup easier. If you are a seasoned PKA veteran, you can update the underlying system files directly according to your requirements.

It's been observed that auto-populating the user list from domains with many users is very time consuming and leads to hangs and problems. User Activation Wizard in the Control Panel uses now a text entry field for domain users or if the local host is a domain controller. Auto-populated user list is still the preferred way to select local users on hosts which are not domain controllers.

Copssh 4.1.0 contains also the security patch for OpenSSL 0.9.8r.

** SECURITY UPDATE ** - OpenSSH 5.8p



Fix vulnerability in legacy certificate signing introduced in OpenSSH-5.6 and found by Mateusz Kocielski.



Legacy certificates signed by OpenSSH 5.6 or 5.7 included data from the stack in place of a random nonce field. The contents of the stack do not appear to contain private data at this point, but this cannot be stated with certainty for all platform, library and compiler combinations. In particular, there exists a risk that some bytes from the privileged CA key may be accidentally included.



A full advisory for this issue is available at: http://www.openssh.com/txt/legacy-cert.adv

2. UPDATE - Control Panel 2.0.3



More stable support for domain user activation (Use domainname\user to logon).

Bugfix. Empty activated user list after completing wizard



MD5 Signature:

da3ca0dd294db57767ca47cf14bb6a3d *Copssh_4.0.4_Installer.zip



SHA256 Signature:

690c5ac0c2f72bbc9754f8bf914b376d2098a3ee3a5578c728b4b859927d5bf6 *Copssh_4.0.4_Installer.zip



Download: http://itefix.no/i2/download

Version 4.0.2 comes with OpenSSL 0.9.8q security update and more stable handling of user lists in User Activation Wizard. 

CHANGES FROM VERSION 4.0.1

1. SECURITY UPDATE- OpenSSL 0.9.8q

See https://openssl-library.org/news/secadv/20101202.txt for more information

2. Update - Control Panel User Activation Wizard 2.0.2

Better handling of user lists for activation