Released: Jan 4, 2024

Mises à jour de 2.11.2

Fonctionnalités

• Added support for strict key exchange extension (thwarts the so-called 'Terrapin attack' - CVE-2023-48795).
  • This is not a critical fix, since neither version of Buru SFTP Server relies on RFC 8308 extension negotiation mechanism, so Terrapin attack can only be used by an attacker to disrupt authentication, causing the SSH session to fail.

Correctifs

• Fixed 'not authenticated' instead of 'not connected' error message.
• Allowed dates outside 1970-2999 range in SFTP v4 (or higher).

Released: Nov 22, 2023

Mises à jour de 2.11.1

Correctifs

• Web Admin - fixed error when saving SSH algorithms on Windows 7/8.

Released: Nov 21, 2023

Mises à jour de 2.11.0

Fonctionnalités

• Added support for 'ecdh-sha2-1.3.132.0.10' and 'ecdsa-sha2-1.3.132.0.10' algorithms on Windows 10+ and Windows Server 2016+ (enabled by default).

Released: Aug 11, 2023

Mises à jour de 2.10.2

Fonctionnalités

• Web Admin
  • Added config.yaml text editor.
  • Configuration has been split into separate pages.

Released: Jul 31, 2023

Mises à jour de 2.10.1

Correctifs

• Fixed file access issue that prevented users from accessing files being currently written to (for example, log files).

Released: Jul 26, 2023

Mises à jour de 2.10.0

Fonctionnalités

• Added support for X.509 server key certificates.
• Added support for encrypted private keys.

Released: Jul 10, 2023

Mises à jour de 2.9.6

Fonctionnalités

• The installer now supports Virtual accounts and Managed Service Accounts (MSAs).
• Command-line tools now respect 'NO_COLOR' environment variable.
• Startup logs now close after service is started.
• Startup logs can now be disabled using '--no-startup-log' command-line switch.

Correctifs

• Fixed svc uninstall not stopping service before uninstalling.

Released: Jun 21, 2023

Mises à jour de 2.9.5

Fonctionnalités

• Web Admin
  • Configuration page now allow you to 'Save and restart service'.
  • Added startup logs browser.

Released: Jun 5, 2023

Mises à jour de 2.9.4

Fonctionnalités

• Changed ‘An existing connection was forcibly closed by the remote host.’ message severity (from Error to Warning).

Released: Jun 1, 2023

Mises à jour de 2.9.3

Fonctionnalités

• Updated internal libraries, including Serilog.