FileZilla

New features:Configuration wizard to setup passive mode Linux: Warn if sysctl knob kernel.yama.ptrace_scope is 0 Linux: Refuse to run if sysctl knob fs.protected_hardlinks is 0 Bugfixes and minor changes:Admin UI: Rejecting a certificate fingerprint prompt no longer triggers automatic reconnects

Bugfixes and minor changes:More detailed error messages if an XML file known to exist cannot be opened

Fixed vulnerabilities:The internal tool filezilla-server-crypt now accepts the password from stdin, not anymore as a parameter, to avoid password leaking. Mountpoints are now impossible to rename or delete. New features:The ... [More] configuration files can now be reloaded without shutting down the service first. To make it work, send the SIGHUP signal to the service process on nix, send the paramchange control message to the service on Windows (i.e. 'sc control filezilla-server paramchange'). The UI now automatically attempts to reconnect to the server if the connection is lost MSW: users are now case-insensitive Mac: created an installer Display the administration TLS certificate fingerprints at installation time, so that they can be taken note of. Negotiate custom ALPN with FileZilla Client, this allows saving a few round-trips during connection establishment Bugfixes and minor changes:Warn if no administration password has been given during installation. In TVFS, fixed implicit root "/" not being accessible, trac #12617. In TVFS, an implicit mountpoint whose parent is non-recursive is now able to be listed and cwd'd into. Solved off-by-one bug in path normalization. Reported filesystem errors are permanent, hence use 5yz error codes rather than 4yz error codes in command replies. Permissions are now correctly updated in the UI when the current selected user changes. Fixed regressions in the UI related to the TLS certificates generation. MSW: the installer now correctly support the /D parameter, used to define a different default installation directory from the command line. Debian: the installer now asks for an administration password. Errors during ACME certificates generation are now properly displayed in the UI. [Less]

New features:Negotiate custom ALPN with FileZilla Server >=1.3.0 during TLS handshake to save some roundtrips during connection establishment Prepare FileZilla to support TOTP-based 2FA authentication on future FileZilla Server ... [More] versions Bugfixes and minor changes:Made downloading updates more robust if the network connection is unreliable Updated to libfilezilla 0.36.0 [Less]

Bugfixes and minor changes:Small usability changes to setting up Let's Encrypt certificates

New features:Created Debian and macOS packages Introduced more finegrained access controls for the mountpoints Bugfixes and minor changes:MSW: Disallow files and directories ending on space or dot If a user gets disabled, corresponding ... [More] sessions are now kicked Let's Encrypt certificates are now only renewed if in use. The UI now lets you edit users info even if they're disabled. Fixed support for UNC pathames on Windows Fixed a few regressions Autoban now shares state across login sessions, which makes it work as intended. The UI now clearly shows in the log whenever it has connected with the FileZilla FTP server. [Less]

Bugfixes and minor changes:Fixed incorrect default settings for file editing Fixed a crash looking up data in file lists Fixed a crash if a HTTPS connection gets canceled during the TLS handshake Updated to libfilezilla 0.35.0

Fixed vulnerabilities:MSW: Fixed directory traversal vulnerability, all users of 1.x must update Bugfixes and minor changes:MSW: Fixed installer getting stuck if not installing all components MSW: Installer enables minidump for executables Fixed CIDR parsing Fixed potential crash if a transfer gets aborted

Bugfixes and minor changes:Fixed a potential crash after uploading

Bugfixes and minor changes:macOS Monterey: Opening the Site Manager on startup is now delayed a millisecond, otherwise the right mouse button would have stopped working macOS: Fixed getting temporary directory MSW: Updated to ... [More] libfilezilla 0.34.1 to fix local directory contents returned by the system in oversized buffers containing nulls [Less]