Security Advisory for SFTPPlus 3.18.0

Thu 15 December 2016 | security compliance

In version 3.18.0 on Linux and Unix systems, when the SFTP server-side creates new files their permissions are filtered against the configured umask.

This was a regression introduced in version 2.8.0, in which the umask value was not used for the newly created files.

An upgrade to 3.18.0 is recommended for any older version running on Linux or Unix.

An upgrade for the Windows version of SFTPPlus is not required.

You can check the full release notes here.

Security advisories newsletter

The security advisories newsletter is available to our customers as a convenient method for receiving information about security updates and best practices.

You can view the security advisories archive here (articles are made public 3 months after their initial internal release).