Release Announcements

Copssh client 8.1.0 (security)

release date:

2025-02-19

Changelog

OpenSSH 9.9p2 with security patches

* Fix CVE-2025-26465 - ssh(1)(link is external) in OpenSSH versions 6.8p1 to 9.9p1
  (inclusive) contained a logic error that allowed an on-path
  attacker (a.k.a MITM) to impersonate any server when the
  VerifyHostKeyDNS option is enabled. This option is off by default.

* Fix CVE-2025-26466 - sshd(8)(link is external) in OpenSSH versions 9.5p1 to 9.9p1
  (inclusive) is vulnerable to a memory/CPU denial-of-service related
  to the handling of SSH2_MSG_PING packets. This condition may be
  mitigated using the existing PerSourcePenalties feature.

component name	component version	component license	component source
OpenSSH	9.9p2	OpenSSH license
OpenSSL	3.0.15	OpenSSL license
Cygwin	3.5.7	Cygwin license (GPL/LGPL)	Source code for Cygwin
Autossh	1.4f	Autossh license (Simplified BSD)
Copssh client	8.1.0	Itefix free software license (Simplified BSD)

2025

Copssh server 7.20.0 (security)

release date:

2025-02-19

Changelog

OpenSSH 9.9p2 with security patches

* Fix CVE-2025-26465 - ssh(1) in OpenSSH versions 6.8p1 to 9.9p1
  (inclusive) contained a logic error that allowed an on-path
  attacker (a.k.a MITM) to impersonate any server when the
  VerifyHostKeyDNS option is enabled. This option is off by default.

* Fix CVE-2025-26466 - sshd(8) in OpenSSH versions 9.5p1 to 9.9p1
  (inclusive) is vulnerable to a memory/CPU denial-of-service related
  to the handling of SSH2_MSG_PING packets. This condition may be
  mitigated using the existing PerSourcePenalties feature.

component name	component version	component license	component source
OpenSSH	9.9p2	OpenSSH license
OpenSSL	3.0.15	OpenSSL license
Cygwin	3.5.7	Cygwin license (GPL/LGPL)	Source code for Cygwin
Copssh Control Panel	4.0.1	Itefix EULA
Copssh server	7.20.0	Itefix EULA

2025

Copssh server 8.8.0 (security)

release date:

2025-02-19

Changelog

OpenSSH 9.9p2 with security patches

* Fix CVE-2025-26465 - ssh(1) in OpenSSH versions 6.8p1 to 9.9p1
  (inclusive) contained a logic error that allowed an on-path
  attacker (a.k.a MITM) to impersonate any server when the
  VerifyHostKeyDNS option is enabled. This option is off by default.

* Fix CVE-2025-26466 - sshd(8) in OpenSSH versions 9.5p1 to 9.9p1
  (inclusive) is vulnerable to a memory/CPU denial-of-service related
  to the handling of SSH2_MSG_PING packets. This condition may be
  mitigated using the existing PerSourcePenalties feature.

component name	component version	component license	component source
OpenSSH	9.9p2	OpenSSH license
OpenSSL	3.0.15	OpenSSL license
Cygwin	3.5.7	Cygwin license (GPL/LGPL)	Source code for Cygwin
Copssh Server Admin GUI	1.0.2	Itefix EULA
Copssh server	8.8.0	Itefix EULA

2025

CowAxess 2.3.1

release date:

2025-02-16

Changelog

Cygwin 3.5.7
OpenSSL 3.0.15
Update GNU tools

component name	component version	component license	component source
GoAccess	1.9.3	GoAccess license (MIT)
Cygwin	3.5.7	Cygwin license (GPL/LGPL)	Source code for Cygwin
OpenSSL	3.0.15	OpenSSL license
CowAxess	2.3.1	Itefix free software license (Simplified BSD)

2025

OpenSSL tool 2.1.0

release date:

2025-02-16

Changelog

OpenSSL 3.4.1
Cygwin 3.5.7

component name	component version	component license	component source
OpenSSL	3.4.1	OpenSSL license
Cygwin	3.5.7	Cygwin license (GPL/LGPL)	Source code for Cygwin
OpenSSL tool for Windows	2.1.0	Itefix free software license (Simplified BSD)

2025

itmux 1.0.1

release date:

2025-02-13

Changelog

Cygwin 3.5.7

component name	component version	component license	component source
Tmux	3.5a	Tmux license
Mintty	3.7.6	Mintty license
OpenSSH	9.9p1	OpenSSH license
Cygwin	3.5.7	Cygwin license (GPL/LGPL)	Source code for Cygwin
itmux	1.0.1	Itefix free software license (Simplified BSD)

2025

Win2ban 2.0.6

release date:

2025-02-13

Changelog

Cygwin 3.5.7

component name	component version	component license	component source
Fail2ban	0.11.2	Fail2ban license	Source code for Fail2ban
Python	3.8.16	Python license
Cygwin	3.5.7	Cygwin license (GPL/LGPL)	Source code for Cygwin
Elastic Winlogbeat	6.8.23	Winlogbeat license
Win2ban	2.0.6	Itefix EULA

2025

Nagwin 5.6.1

release date:

2025-02-13

Changelog

Lighttpd 1.4.77
Cygwin 3.5.7

component name	component version	component license	component source
Nagios Core with a patch for external commands via plain files	4.5.7	Nagios Core license	Source code for Nagios Core
Lighttpd	1.4.77	Lighttpd license
PHP	7.4.29	PHP License, this product includes PHP software, freely available from
Net-SNMP	5.9.4	Net-SNMP license
Cygwin	3.5.7	Cygwin license (GPL/LGPL)	Source code for Cygwin
OpenSSL	3.0.15	OpenSSL license
Blat	2.7.6	BLAT license
Nagwin	5.6.1	Itefix EULA

2025

Rsync Client Helper GUI 1.0.3.15

release date:

2025-02-13

Changelog

Cygwin 3.5.7

component name	component version	component license	component source
Rsync	3.4.1	Rsync license (GPL)	Source code for Rsync
Cygwin	3.5.7	Cygwin license (GPL/LGPL)	Source code for Cygwin
OpenSSH	9.9p	OpenSSH license
OpenSSL	3.0.15	OpenSSL license
Rsync Client Helper GUI	1.0.3.15	Itefix EULA

2025

Copssh server 8.7.2

release date:

2025-02-02

Changelog

Cygwin 3.5.7
Update GNU tools

component name	component version	component license	component source
OpenSSH	9.9p1	OpenSSH license
OpenSSL	3.0.15	OpenSSL license
Cygwin	3.5.7	Cygwin license (GPL/LGPL)	Source code for Cygwin
Copssh Server Admin GUI	1.0.2	Itefix EULA
Copssh server	8.7.2	Itefix EULA

2025

release date:

release date:

release date:

release date:

release date:

release date:

release date:

release date:

release date:

release date:

Pages