Released: Jun 25, 2024

Updates in 2.14.3

Funktionen

• Added support for logging user lockout events.

Fehlerkorrekturen

• Fixed burusftp user update <username> --password "" behavior - now removes password instead of setting an empty password.
• Fixed burusftp user add <username> --password "" behavior - now does nothing instead of setting an empty password.

Released: Jun 21, 2024

Updates in 2.14.2

Funktionen

• Web Admin - Server key list now also shows certificate details for keys with certificates.

Fehlerkorrekturen

• Web Admin - Fixed loading comment from user public keys.

Released: Jun 10, 2024

Updates in 2.14.1

Funktionen

• Added support for loading private keys in new OpenSSH key format encrypted using AES/GCM or ChaCha20/Poly1305.
• Added logging of SSH ciphers supported by the client on mismatch (log level: debug).
• Environment variables can now be used in server key paths.
• Web Admin - Server configuration page now shows full path to configuration file and revert buttons.

Fehlerkorrekturen

• Fixed handling of client’s SSH_MSG_EXT_INFO message.
• Web Admin - Fixed missing log level dropdown on logging...

Released: May 21, 2024

Updates in 2.14.0

Funktionen

• Web Admin - major changes:
  • Form visuals have been updated.
  • Multiple users can now be selected for certain actions (lock, unlock, delete).
  • UI customization changes:
    • Full Material UI schema is no longer supported.
    • Secondary palette is no longer supported.
  • Error is now shown when multiple server SSH keys of same type are added.
  • Public server keys can now be easily exported from the web interface.
  • SSH algorithm selection is now simplified. Manual sorting is still supported by editing the...

Released: Apr 25, 2024

Updates in 2.13.0

Funktionen

• Removed KeyCertSign and CrlSign usages from burusftpwa certgen-generated certificates.
• SSH banner is now configurable.

Released: Apr 23, 2024

Updates in 2.12.1

Fehlerkorrekturen

• Fixed CreateProcess failed error during installation.

Released: Apr 15, 2024

Updates in 2.12.0

Funktionen

• Added a new silent installation mode.

Released: Mar 18, 2024

Updates in 2.11.4

Fehlerkorrekturen

• Fixed user update command:
  • Fixed error message when Microsoft Windows account is not found.
  • Fixed error when updating fields other than Windows account and related, when Windows account is already set, using Free license.

Released: Jan 18, 2024

Updates in 2.11.3

Funktionen

• Updated signing certificate.

Fehlerkorrekturen

• Fixed configuration backup when upgrading using installer.

Released: Jan 4, 2024

Updates in 2.11.2

Funktionen

• Added support for strict key exchange extension (thwarts the so-called 'Terrapin attack' - CVE-2023-48795).
  • This is not a critical fix, since neither version of Buru SFTP Server relies on RFC 8308 extension negotiation mechanism, so Terrapin attack can only be used by an attacker to disrupt authentication, causing the SSH session to fail.

Fehlerkorrekturen

• Fixed 'not authenticated' instead of 'not connected' error message.
• Allowed dates outside 1970-2999 range in SFTP v4 (or higher).