Release announcements

Rsync Client Helper GUI 1.0.3.7

release date:

2023-03-29

Changelog

Fix - Installer finish page - Auto run doesn't work
New - Installer finish page - Option to create shortcut at desktop

component name	component version	component license	component source
Rsync	3.2.7	Rsync license (GPL)	Source code for Rsync
Cygwin	3.4.5	Cygwin license (GPL/LGPL)	Source code for Cygwin
OpenSSH	9.2p	OpenSSH license
LibreSSL	3.6.1	LibreSSL license
Rsync Client Helper GUI	1.0.3.7	Itefix EULA

2023

component name	component version	component license	component source
Nagios Core with a patch for external commands via plain files	4.4.9	Nagios Core license	Source code for Nagios Core
Lighttpd	1.4.64	Lighttpd license
PHP	7.4.29	PHP License, this product includes PHP software, freely available from
Net-SNMP	5.9.1	Net-SNMP license
Cygwin	3.4.5	Cygwin license (GPL/LGPL)	Source code for Cygwin
Blat	3.2.22	BLAT license
Nagwin product	5.1.2	Itefix EULA

Copssh client 7.10.0 (security)

release date:

2023-03-21

Changelog

- OpenSSH 9.3p

Changes since OpenSSH 9.2
=========================

This release fixes a number of security bugs.

Security
========

This release contains fixes for a security problem and a memory
safety problem. The memory safety problem is not believed to be
exploitable, but we report most network-reachable memory faults as
security bugs.

* ssh-add(1): when adding smartcard keys to ssh-agent(1) with the
per-hop destination constraints (ssh-add -h ...) added in OpenSSH
8.9, a logic error prevented the constraints from being
communicated to the agent. This resulted in the keys being added
without constraints. The common cases of non-smartcard keys and
keys without destination constraints are unaffected. This problem
was reported by Luci Stanescu.

* ssh(1): Portable OpenSSH provides an implementation of the
getrrsetbyname(3) function if the standard library does not
provide it, for use by the VerifyHostKeyDNS feature. A
specifically crafted DNS response could cause this function to
perform an out-of-bounds read of adjacent stack data, but this
condition does not appear to be exploitable beyond denial-of-
service to the ssh(1) client.

The getrrsetbyname(3) replacement is only included if the system's
standard library lacks this function and portable OpenSSH was not
compiled with the ldns library (--with-ldns). getrrsetbyname(3) is
only invoked if using VerifyHostKeyDNS to fetch SSHFP records. This
problem was found by the Coverity static analyzer.

- LibreSSL 3.6.2

component name	component version	component license	component source
OpenSSH	9.3p	OpenSSH license
LibreSSL	3.6.2	LibreSSL license
Cygwin	3.4.5	Cygwin license (GPL/LGPL)	Source code for Cygwin
Copssh client	7.10.0	Itefix free software license (Simplified BSD)

2023

Copssh server 8.1.0

release date:

2023-03-20

Changelog

OpenSSH 9.3p
LibreSSL 3.6.2 (security)

component name	component version	component license	component source
OpenSSH	9.3p	OpenSSH license
LibreSSL	3.6.2	LibreSSL license
Cygwin	3.4.5	Cygwin license (GPL/LGPL)	Source code for Cygwin
Copssh Server Admin GUI	1.0.1	Itefix EULA
Copssh server	8.1.0	Itefix EULA

2023

Copssh server 7.13.0

release date:

2023-03-20

Changelog

OpenSSH 9.3p
LibreSSL 3.6.2

component name	component version	component license	component source
OpenSSH	9.3p	OpenSSH license
LibreSSL	3.6.2	LibreSSL license
Cygwin	3.4.5	Cygwin license (GPL/LGPL)	Source code for Cygwin
Copssh Control Panel	4.0.1	Itefix EULA
Copssh server	7.13.0	Itefix EULA

2023

cwDup 4.1.2

release date:

2023-03-10

Changelog

- Python 3.8.10

- Cygwin 3.4.5

- OpenSSH 9.2

- Rsync 3.2.7

component name	component version	component license	component source
Duplicity	0.8.21	Duplicity license (GPL)	Source code for Duplicity
Python	3.8.10	Python license
GnuPG	1.4.21	GPL	Source code for GnuPG
Cygwin	3.4.5	Cygwin license (GPL/LGPL)	Source code for Cygwin
Rsync	3.2.7	Rsync license (GPL)	Source code for Rsync
OpenSSH	9.2p	OpenSSH license
NcFTP	3.2.5	Freeware
librsync	2.3.1	librsync license (GPL)	Source code for librsync
cwDup	4.1.2	Itefix free software license (Simplified BSD)

2023

Win2ban 2.0.2

release date:

2023-03-09

Changelog

Cygwin 3.4.5

component name	component version	component license	component source
Fail2ban	0.11.2	Fail2ban license	Source code for Fail2ban
Python	3.8.10	Python license
Cygwin	3.4.5	Cygwin license (GPL/LGPL)	Source code for Cygwin
Elastic Winlogbeat	6.8.15	Winlogbeat license
Win2ban	2.0.2	Itefix EULA

2023