Rebex Buru SFTP Server Versionen

Erfahren Sie, was sich in den einzelnen Releases geändert hat – mit Details zu Funktionen, Verbesserungen und behobenen Problemen.

Jan
Feb
Mär
Apr
Mai
Jun
Jul
Aug
Sep
Okt
Nov
Dez
Rebex Buru SFTP Server 2.20.0Hauptversion22. Juni 2026
Funktionen
  • Improved handling of broken SSH INIT ML-KEM packets.
Korrekturen
  • Fixed possible deadlock while SSH session is being renegotiated.
  • Fixed handling of SFTP SSH_FXP_RENAME_OVERWRITE.
  • Fixed wrong length detection in SSH_FXP_WRITE packet parser.
Rebex Buru SFTP Server 2.19.0Hauptversion25. Mai 2026
Funktionen
  • Added support for Argon2 password hashing. Argon2 is a memory-hard algorithm significantly more resistant to brute-force attacks than SHA-2, at the cost of higher memory and CPU usage per login. Enable it by setting users.passwordHashAlgorithm: { type: argon2id } in config.yaml. Argon2 parameters such as memory cost and parallelism can be configured explicitly.
  • Extended users.passwordHashAlgorithm in config.yaml to accept an object form ({ type: argon2id }, { type: SHA512, saltLength: 20 }) in addition to the existing string form (SHA512). The string form remains supported.
  • Added --password-hash option to burusftp user update command (mirrors the existing option in burusftp user add).
  • Web Admin: Added "Add new user" button to the users toolbar.
  • Web Admin: Added Save button to the breadcrumb bar on selected pages.
Korrekturen
  • Web Admin: Fixed breadcrumbs on the Protection and FTP settings pages.
Rebex Buru SFTP Server 2.18.419. März 2026
Korrekturen
  • Fixed incorrect Windows privilege check for terminal shell running as a different user. The service now correctly requires the 'Replace a process level token' (SeAssignPrimaryTokenPrivilege) and 'Adjust memory quotas for a process' (SeIncreaseQuotaPrivilege) privileges, rather than the overly broad 'Act as part of the operating system' (SeTcbPrivilege) privilege.
  • Fixed diffie-hellman-group17-sha512 and diffie-hellman-group18-sha512 being advertised but not usable as kex algorithms.
  • Web Admin - fixed incorrect hours displayed in placeholder text for max idle duration and max session duration fields.
Rebex Buru SFTP Server 2.18.320. Feb. 2026
Korrekturen
  • Fixed LiteDB database locking error.
  • Web Admin - log viewer now only shows the last 50kB and adds an option to view or download the entire log file.
Rebex Buru SFTP Server 2.18.210. Feb. 2026
Korrekturen
  • Fixed behavior of 'ftp.bindings[].externalAddress' and 'ftp.bindings[].dataPortRange' in FTPS implicit mode.
Rebex Buru SFTP Server 2.18.19. Feb. 2026
Korrekturen
  • Fixed a compatibility issue with some SSH clients by changing the SSH message order for SSH shell channels.
Rebex Buru SFTP Server 2.18.0Hauptversion8. Jan. 2026
Funktionen
  • Major overhaul of SSH/SFTP core - improved performance, thread and memory usage in some scenarios.
  • Added support for 'mlkem768x25519-sha256', 'mlkem768nistp256-sha256' and 'mlkem1024nistp384-sha384' hybrid post-quantum key exchange ciphers.
  • Added support for 'diffie-hellman-group17-sha512' and 'diffie-hellman-group18-sha512' key exchange ciphers.
  • Added support for copy-data SFTP extension.
  • Improved performance of elliptic curve algorithms on modern platforms.
  • Installer - when upgrading, now checks the current license before overwriting the existing installation.
Korrekturen
  • Fixed intermittent crash when SSH terminal client disconnects.
  • Web Admin - fixed 2FA status not being indicated correctly for some users.