The latest release of SFTPPlus, version 4.35.0, is now available.

A critical security issue was fixed for the FTPS server.

SFTPPlus can now be configured to enforce the use of the same TLS session for both command and data connections.

For backward compatibility, the TLS session reuse is not automatically enabled for existing configuration. You will need to manually update the SFTPPlus configuration.

With this release we have improved the configuration option available for defining administrative roles. You can now configure an administrator with permission targeted only to its own configuration values, like password or multi-factor authentication code.

You can check the full release notes here.