OpenSSH version 6.1 is primarily a bugfix release.

Features:

• sshd(8): This release turns on pre-auth sandboxing sshd by default for new installs, by setting UsePrivilegeSeparation=sandbox in sshd_config.
• ssh-keygen(1): Add options to specify starting line number and number of lines to process when screening moduli candidates, allowing processing of different parts of a candidate moduli file in parallel
• sshd(8): The Match directive now supports matching on the local (listen) address and port upon which the incoming connection was received via LocalAddress and LocalPort clauses.
• sshd(8): Extend sshd_config Match directive to allow setting AcceptEnv and {Allow,Deny}{Users,Groups}
• Add support for RFC6594 SSHFP DNS records for ECDSA key types. bz#1978
• ssh-keygen(1): Allow conversion of RSA1 keys to public PEM and PKCS8
• sshd(8): Allow the sshd_config PermitOpen directive to accept "none" as an argument to refuse all port-forwarding requests.
• sshd(8): Support "none" as an argument for AuthorizedPrincipalsFile
• ssh-keyscan(1): Look for ECDSA keys by default. bz#1971
• sshd(8): Add "VersionAddendum" to sshd_config to allow server operators to append some arbitrary text to the server SSH protocol banner.

Bugfixes:

• ssh(1)/sshd(8): Don't spin in accept() in situations of file descriptor exhaustion. Instead back off for a while.
• ssh(1)/sshd(8): Remove hmac-sha2-256-96 and hmac-sha2-512-96 MACs as they were removed from the specification. bz#2023,
• sshd(8): Handle long comments in config files better. bz#2025
• ssh(1): Delay setting tty_flag so RequestTTY options are correctly picked up. bz#1995
• sshd(8): Fix handling of /etc/nologin incorrectly being applied to root on platforms that use login_cap.

Portable OpenSSH:

• sshd(8): Allow sshd pre-auth sandboxing to fall-back to the rlimit sandbox from the Linux SECCOMP filter sandbox when the latter is not available in the kernel.
• ssh(1): Fix NULL dereference when built with LDNS and using DNSSEC to retrieve a CNAME SSHFP record.
• Fix cross-compilation problems related to pkg-config. bz#1996

Existing customers can download the latest version from their customer page at www.itefix.net

Copssh is now UAC (User Account Control) aware, and does not require to disable it any longer. Version 4.3.1 contains many tool and library updates including OpenSSL 1.0.1c security and bug fix and Cygwin 1.7.15. Start menu items are installed for all users instead of the current user. An improved version of the Control Panel (2.1.3) is also a part of the installer: It requires to be run as admin, converts short domain names to uppercase automatically, and is able to locate domain controllers in complex and segmented networks.

Existing customers can download the latest version from their customer page at www.itefix.net

Copssh version 4.3.0 brings you OpenSSH 6.0p, OpenSSL 1.0.1a (a security update) and Cygwin 1.7.13 (Lots of changes from 1.7.9 and support for NT4 is dropped). Many other tools and programs are also updated.

Existing customers can download the latest version from their customer page at www.itefix.net

Version 5.0.1 contains a client installer with an updated Rsync GUI. In addition, both client and server installers are updated with OpenSSL security patches 0.9.8s and 0.9.8t.

Existing customers can download the latest version from their customer page at www.itefix.net.

Copssh version 4.2.2 is a minor update and contains updated versions of bash and readline7.dll, fixing broken backspace in bash shell and a non-working nano editor.

In addition, the Windows firewall is automatically configured for communication on port 22.

Furthermore, Copssh installer instructs Vista/7 platforms to run it with administrator privileges (no need to specify "Run as administrator" or disabling UAC (User Accont Control)). You need, however, still to run the Control Panel as an administrator for a proper operation.

Uninstaller logic is also updated for removal of the firewall exception and the service account upon request.