Release Announcements

Copssh server 8.7.2

release date:

2025-02-02

Changelog

Cygwin 3.5.7
Update GNU tools

component name	component version	component license	component source
OpenSSH	9.9p1	OpenSSH license
OpenSSL	3.0.15	OpenSSL license
Cygwin	3.5.7	Cygwin license (GPL/LGPL)	Source code for Cygwin
Copssh Server Admin GUI	1.0.2	Itefix EULA
Copssh server	8.7.2	Itefix EULA

2025

cwRsync server 6.9.1

release date:

2025-02-02

Changelog

Cygwin 3.5.7
Update GNU tools

component name	component version	component license	component source
Rsync	3.4.1	Rsync license (GPL)	Source code for Rsync
cwRsync Server Admin GUI	1.0.0	Itefix EULA
Cygwin	3.5.7	Cygwin license (GPL/LGPL)	Source code for Cygwin
OpenSSL	3.0.15	OpenSSL license
cwRsync server	6.9.1	Itefix EULA

2025

Wlighttpd 1.4.0

release date:

2025-01-26

Changelog

- Lighttpd 1.4.77

- Cygwin 3.5.5

component name	component version	component license	component source
lighttpd	1.4.77	lighttpd
Cygwin	3.5.5	Cygwin license (GPL/LGPL)	Source code for Cygwin
Wlighttpd	1.4.0	Itefix free software license (Simplified BSD)

2025

cwRsync client 6.4.0 (reloaded)

release date:

2025-01-23

Changelog

with missing etc directory

component name	component version	component license	component source
Rsync	3.4.1	Rsync license (GPL)	Source code for Rsync
Cygwin	3.5.5	Cygwin license (GPL/LGPL)	Source code for Cygwin
OpenSSH	9.9p1	OpenSSH license
OpenSSL	3.0.15	OpenSSL license
cwRsync client	6.4.0	Itefix free software license (Simplified BSD)

2025

Rsync Client Helper GUI 1.0.3.14 (security)

release date:

2025-01-16

Changelog

Rsync 3.4.1 with security fixes for (see https://kb.cert.org/vuls/id/952657 for more info)

CVE-2024-12084 -⁠ Heap Buffer Overflow in Checksum Parsing.

CVE-2024-12085 -⁠ Info Leak via uninitialized Stack contents defeats ASLR.

CVE-2024-12086 -⁠ Server leaks arbitrary client files.

CVE-2024-12087 -⁠ Server can make client write files outside of destination directory using symbolic links.

CVE-2024-12088 -⁠ -⁠-⁠safe-⁠links Bypass.

CVE-2024-12747 -⁠ symlink race condition.

Output of rsync --version:

rsync  version 3.4.1  protocol version 32
Copyright (C) 1996-2025 by Andrew Tridgell, Wayne Davison, and others.
Web site: https://rsync.samba.org/
Capabilities:
    64-bit files, 64-bit inums, 64-bit timestamps, 64-bit long ints,
    socketpairs, symlinks, symtimes, hardlinks, no hardlink-specials,
    hardlink-symlinks, IPv6, atimes, batchfiles, inplace, append, no ACLs,
    no xattrs, optional secluded-args, iconv, prealloc, stop-at, crtimes
Optimizations:
    no SIMD-roll, no asm-roll, openssl-crypto, no asm-MD5
Checksum list:
    xxh128 xxh3 xxh64 (xxhash) md5 md4 sha1 none
Compress list:
    zstd lz4 zlibx zlib none
Daemon auth list:
    sha512 sha256 sha1 md5 md4

rsync comes with ABSOLUTELY NO WARRANTY.  This is free software, and you
are welcome to redistribute it under certain conditions.  See the GNU
General Public Licence for details.

component name	component version	component license	component source
Rsync	3.4.1	Rsync license (GPL)	Source code for Rsync
Cygwin	3.5.5	Cygwin license (GPL/LGPL)	Source code for Cygwin
OpenSSH	9.9p	OpenSSH license
OpenSSL	3.0.15	OpenSSL license
Rsync Client Helper GUI	1.0.3.14	Itefix EULA

2025

Copssh server 7.19.2

release date:

2025-01-16

Changelog

Fixed - 7.19.1 has had version 9.8 of OpenSSH binaries, not 9.9 as announced.

component name	component version	component license	component source
OpenSSH	9.9p1	OpenSSH license
OpenSSL	3.0.15	OpenSSL license
Cygwin	3.5.5	Cygwin license (GPL/LGPL)	Source code for Cygwin
Copssh Control Panel	4.0.1	Itefix EULA
Copssh server	7.19.2	Itefix EULA

2025

cwRsync client 6.4.0 (security)

release date:

2025-01-16

Changelog

Rsync 3.4.1 with security fixes for (see https://kb.cert.org/vuls/id/952657 for more info)

CVE-2024-12084 -⁠ Heap Buffer Overflow in Checksum Parsing.

CVE-2024-12085 -⁠ Info Leak via uninitialized Stack contents defeats ASLR.

CVE-2024-12086 -⁠ Server leaks arbitrary client files.

CVE-2024-12087 -⁠ Server can make client write files outside of destination directory using symbolic links.

CVE-2024-12088 -⁠ -⁠-⁠safe-⁠links Bypass.

CVE-2024-12747 -⁠ symlink race condition.

Output of rsync --version:

rsync  version 3.4.1  protocol version 32
Copyright (C) 1996-2025 by Andrew Tridgell, Wayne Davison, and others.
Web site: https://rsync.samba.org/
Capabilities:
    64-bit files, 64-bit inums, 64-bit timestamps, 64-bit long ints,
    socketpairs, symlinks, symtimes, hardlinks, no hardlink-specials,
    hardlink-symlinks, IPv6, atimes, batchfiles, inplace, append, no ACLs,
    no xattrs, optional secluded-args, iconv, prealloc, stop-at, crtimes
Optimizations:
    no SIMD-roll, no asm-roll, openssl-crypto, no asm-MD5
Checksum list:
    xxh128 xxh3 xxh64 (xxhash) md5 md4 sha1 none
Compress list:
    zstd lz4 zlibx zlib none
Daemon auth list:
    sha512 sha256 sha1 md5 md4

rsync comes with ABSOLUTELY NO WARRANTY.  This is free software, and you
are welcome to redistribute it under certain conditions.  See the GNU
General Public Licence for details.

component name	component version	component license	component source
Rsync	3.4.1	Rsync license (GPL)	Source code for Rsync
Cygwin	3.5.5	Cygwin license (GPL/LGPL)	Source code for Cygwin
OpenSSH	9.9p	OpenSSH license
OpenSSL	3.0.15	OpenSSL license
cwRsync client	6.4.0	Itefix free software license (Simplified BSD)

2025

cwRsync server 6.9.0 (security)

release date:

2025-01-16

Changelog

Rsync 3.4.1 with security fixes for (see https://kb.cert.org/vuls/id/952657 for more info)

CVE-2024-12084 -⁠ Heap Buffer Overflow in Checksum Parsing.

CVE-2024-12085 -⁠ Info Leak via uninitialized Stack contents defeats ASLR.

CVE-2024-12086 -⁠ Server leaks arbitrary client files.

CVE-2024-12087 -⁠ Server can make client write files outside of destination directory using symbolic links.

CVE-2024-12088 -⁠ -⁠-⁠safe-⁠links Bypass.

CVE-2024-12747 -⁠ symlink race condition.

Output of rsync --version:

rsync  version 3.4.1  protocol version 32
Copyright (C) 1996-2025 by Andrew Tridgell, Wayne Davison, and others.
Web site: https://rsync.samba.org/
Capabilities:
    64-bit files, 64-bit inums, 64-bit timestamps, 64-bit long ints,
    socketpairs, symlinks, symtimes, hardlinks, no hardlink-specials,
    hardlink-symlinks, IPv6, atimes, batchfiles, inplace, append, no ACLs,
    no xattrs, optional secluded-args, iconv, prealloc, stop-at, crtimes
Optimizations:
    no SIMD-roll, no asm-roll, openssl-crypto, no asm-MD5
Checksum list:
    xxh128 xxh3 xxh64 (xxhash) md5 md4 sha1 none
Compress list:
    zstd lz4 zlibx zlib none
Daemon auth list:
    sha512 sha256 sha1 md5 md4

rsync comes with ABSOLUTELY NO WARRANTY.  This is free software, and you
are welcome to redistribute it under certain conditions.  See the GNU
General Public Licence for details.

component name	component version	component license	component source
Rsync	3.4.1	Rsync license (GPL)	Source code for Rsync
cwRsync Server Admin GUI	1.0.0	Itefix EULA
Cygwin	3.5.5	Cygwin license (GPL/LGPL)	Source code for Cygwin
OpenSSL	3.0.15	OpenSSL license
cwRsync server	6.9.0	Itefix EULA

2025

cwRsync client 6.3.3

release date:

2025-01-12

Changelog

Cygwin 3.5.5

component name	component version	component license	component source
Rsync	3.3.0	Rsync license (GPL)	Source code for Rsync
Cygwin	3.5.5	Cygwin license (GPL/LGPL)	Source code for Cygwin
OpenSSH	9.9p	OpenSSH license
OpenSSL	3.0.15	OpenSSL license
cwRsync client	6.3.3	Itefix free software license (Simplified BSD)

2025

Copssh server 7.19.1

release date:

2025-01-12

Changelog

Remove tcpip service dependency for IPv6 only installations
Cygwin 3.5.5

component name	component version	component license	component source
OpenSSH	9.9p1	OpenSSH license
OpenSSL	3.0.15	OpenSSL license
Cygwin	3.5.5	Cygwin license (GPL/LGPL)	Source code for Cygwin
Copssh Control Panel	4.0.1	Itefix EULA
Copssh server	7.19.1	Itefix EULA

2025

Free Software Highlights

Bash-powered Nagios-compatible check plugins

Copssh client

iwget2 - Wget2 for Windows

itefix.net

Release Announcements

Copssh server 8.7.2

Copssh server 8.7.2

cwRsync server 6.9.1

cwRsync server 6.9.1

Wlighttpd 1.4.0

Wlighttpd 1.4.0

cwRsync client 6.4.0 (reloaded)

cwRsync client 6.4.0 (reloaded)

Rsync Client Helper GUI 1.0.3.14 (security)

Rsync Client Helper GUI 1.0.3.14 (security)

Copssh server 7.19.2

Copssh server 7.19.2

cwRsync client 6.4.0 (security)

cwRsync client 6.4.0 (security)

cwRsync server 6.9.0 (security)

cwRsync server 6.9.0 (security)

cwRsync client 6.3.3

cwRsync client 6.3.3

Copssh server 7.19.1

Copssh server 7.19.1

Pages

Free Software Highlights

Featured product

Copssh + Win2ban - SSH/SFTP Server with brute-force protection