Nagwin 2.9.0 is contains the latest version of Nagios Core (4.3.2) containing lots of fixes and enhancements. We have also updated Cygwin and GNU tools to their latest versions.

Elkwin Product Edition 3.5.0 comes with the latest versions of Elasticsearch (5.4.0), Logstash (5.4.0) and Kibana (5.4.0). Node.js binary in the Kibana package is now delivered as 64-bit.

Nagwin 2.8.0 is contains the latest version of Nagios Core (4.3.1) containing lots of fixes and enhancements. PHP FastCGI is now configured to start with two worker processes for better Pnp4Nagios performance. Our installer is now made more upgrade friendly and will not touch the configuration in the etc directory at all.

Nagios security fix: CVE-2016-6209 (v 4.3.0)

Copssh version 5.9.0 bundle contains latest versions of OpenSSH (7.5p1), OpenSSL (1.0.1k), Cygwin and GNU tools. Installers use now quoted service executable paths to avoid potential misuse of unquoted path vulnerabilities.

OpenSSH Security fixes:

• ssh(1), sshd(8): Fix weakness in CBC padding oracle countermeasures that allowed a variant of the attack fixed in OpenSSH 7.3 to proceed. Note that the OpenSSH client disables CBC ciphers by default, sshd offers them as lowest-preference options and will remove them by default entriely in the next release. Reported by Jean Paul Degabriele, Kenny Paterson, Martin Albrecht and Torben Hansen of Royal Holloway, University of London.
• sftp-client(1): [portable OpenSSH only] On Cygwin, a client making a recursive file transfer could be maniuplated by a hostile server to perform a path-traversal attack. creating or modifying files outside of the intended target directory. Reported by Jann Horn of Google Project Zero.

OpenSSL Security fixes:

• Truncated packet could crash via OOB read (CVE-2017-3731)
• BN_mod_exp may produce incorrect results on x86_64 (CVE-2017-3732)
• Montgomery multiplication may produce incorrect results (CVE-2016-7055)

Copssh version 5.8.1 bundle contains server installers with improved support for domain based service accounts. We have also updated the Control Panel to configure many advanced server-wide options through the GUI. User specific advanced options are also updated to support more options. Lack of proper permissions on the host private keys are now fixed so that they are only visible to the service account.