A security advisory was created for SFTPPlus version 3.18.0 affecting Linux and Unix systems that rely on the umask functionality.
Keep up to date on SFTPPlus
We are pleased to announce the latest release of SFTPPlus, version 3.18.0.
It includes support for listening on port below 1024 using Unix special capabilities and permissions.
The server-side home folder creation capabilities were improved to allow creating a set of directories and subdirectories after an account is …
We are pleased to announce the latest release of SFTPPlus, version 3.17.0.
It includes a fix for the FTPS connection not being successfully closed in the case in which the FTP client issues the QUIT command. This affects only the server-side functionality and only the implicit and explicit …
SFTPPlus version 3.13.1 was release as a bugfix release on top of 3.13.0.
It includes a security fix in which the transfer scripts were previously executed a root, even if the process was configured to run under a non-root account.
If possible we recommend upgrading to …
SFTPPlus Team announces a new release of SFTPPlus Client, version 1.5.64.
In this version we fixed FTPS transfers for Linux/Unix operating systems.
A new transfer setting was added, maxfileage, which can be used in GET transfers to skip files on the remote server that are older than …
SFTPPlus version 3.11.1 was release as a bugfix release on top of 3.11.0.
It includes a security fix in which the transfer scripts were previously executed a root, even if the process was configured to run under a non-root account.
If possible we recommend upgrading to …
We are pleased to announce the latest release of SFTPPlus, version 3.16.0.
It includes a security fix in which the transfer scripts were previously executed a root, even if the process was configured to run under a non-root account. This affects only the client-side functionality. As long as …
We are pleased to announce the latest release of SFTPPlus, version 3.15.0.
The release was done to address an intercompatiblity issue of SFTPPlus FTPS server-side when interacting with the WinSCP FTPS client.
Beside fixing the above mentioned issue, starting with this release you can configure the FTP/FTPS …
We are pleased to announce the latest release of SFTPPlus, version 3.14.0.
It adds support for the Next CRL Publish extension used to schedule the automatic refresh of a CRL.
You can check the full release notes.
We are pleased to announce the latest release of SFTPPlus, version 3.13.0.
This release adds support for authenticating account stored in LDAP
Beside many other small improvements, in this release we have added support for FTPS client-side functionality, implicit and explicit. This is in a preview state and …
We are pleased to announce the latest release of SFTPPlus, version 3.12.0.
This release adds a couple of security related functionalities and security related defect fixes.
Here is the list with the main new features:
- Support was added for validating certificate revocation lists (CRL) based on the distribution …
SFTPPlus Team announces a new release of SFTPPlus Client, version 1.5.63.
In this version we have fixed FTPS get/put transfers for Windows when the product is installed in a folder path containing spaces.
The configuration file (global.conf) is no longer overwritten on upgrades thus avoiding accidental …
We are pleased to announce the latest release of SFTPPlus, version 3.11.0.
This release adds SUSE Linux Enterprise Server (SLES) 10 to the list of supported SUSE versions.
The support for certificate revocation list was extended in this version to support loading CRLs over HTTP and supporting multiple …
We are pleased to announce the latest release of SFTPPlus, version 3.10.1. This is a bug fix only release, no new features were added.
We continue to focus on improving the quality of SFTPPlus by fixing any defect which is know to us, big or small:
- Account activity …
We are pleased to announce the latest release of SFTPPlus, version 3.10.0.
In this release we have improved the FTP implementation to allow configuring the default data type used by FTP/FTPS transfers.
In SFTPPlus, the default data type is IMAGE/binary, but for compatibility with the FTP …
We are announcing that SFTPPlus Server version 1.8 has reached end of life.
As described in our Product Life Cycle page, SFTPPlus version 1.8 was released on 03/10/2012.
The end of life was reached on 08/04/2016, 3 years after version 2 was released.
Security …
We are pleased to announce the latest release of SFTPPlus, version 3.9.0.
In this release we improved the fault-tolerant capabilities for the client-side transfers.
Another important change is the usage of database indexes for the audit/log entries stored in a database. This result in fast navigation and …
We are pleased to announce the latest release of SFTPPlus, version 3.8.0.
In this release we expanded the list of supported Linux distribution to include Ubuntu 16.04 LTS on X86_64. We have also added an experimental Linux build for hardened distribution build with an OpenSSL without SSLv3 …
We are pleased to announce the latest release of SFTPPlus, version 3.7.0.
Here is the list of the important new functionalities:
- The OpenSSL version distributed in our Windows version was updated to OpenSSL 1.0.2g.
- The SSH protocol was updated to support hmac-sha2-256, diffie-hellman-group14-sha1, and diffie-hellman-group-exchange-sha256.
- SFTP …
SFTPPlus Team announces a new release of SFTPPlus Client, version 1.5.61.
In this version we have fixed a regression in which SFTP transfer using absolute inbox path were failing.
In this release we have also added support for running the SFTPPlus client from an installation folder containing space …
We are pleased to announce the latest release of SFTPPlus, version 3.6.0.
Here is the list of the important new functionalities:
- The OpenSSL version used by SFTPPlus is advertised as part of the events generated when starting the SFTPPlus process, as well as in the Local Manager status …
SFTPPlus Server versions 1.6 and newer are not vulnerable to the DROWN attack.
SFTPPlus versions 3 and newer are also not vulnerable to it.
The DROWN attack targets server-side products, thus SFTPPlus client is not vulnerable to it.
SFTPPlus relies on OpenSSL for the SSL and TLS protocols used …
We have released version 3.5.1 of SFTPPlus, which is a release containing only defect fixes.
Here is the list of fixes:
- Event with ID 20024 is now emitted for internal errors caused by unhandled runtime errors.
- Include the sample Library_LaunchDaemons_sftpplus.plist file in the distributable archive.
- Documentation was …
We are pleased to announce the latest release of SFTPPlus, version 3.5.0.
In this version we added the functionality of dispatching files received by both service side services and client side transfers.
As an experimental feature we have added support to validate received file using the RSA Digital …