v1.0.5

Changed

• Usernames that do not meet the base format requirements immediately fail authentication, rather than passing off to the panel API.

Added

• When a connection attempt fails the source IP address of the attempt is now logged. This allows for the use of tools such as fail2ban to automatically block brute force attempts on accounts.

SHA256 Checksum

0a2f634614a796aca22ec8bab98968d155b5bf35c857f4dbc34136959f1a79cf  sftp-server

v.1.1.0

• [Breaking]: Removes support for running as standalone instance.

v1.0.4

Fixed

• [Security] Addresses a bug in path resolution when writing deep directories that could allow a user to write (but not read) a file outside their server scope.

SHA256 Checksum

d7eb3fdf30b35129abeebea70b234d069ac5e9a3f347bb9efcfef9b0bc471185  sftp-server

v1.0.3

Fixed

• Fixes a regression in file permission handling via SFTP. File permissions can now be changed and are not forced to a specific setting.
• [Security] Fixes an unauthorized file read outside of server directory vulnerability when working with the standalone SFTP server.

SHA 256 Checksum

c631fa1f039b3c4b0f7d55c36828bdfd98ae86ba12ef2b7cca15ed006c0ee7b9  sftp-server

v1.0.2

Fixed

• Uploaded files are no longer set to 0000 permissions when uploaded through WinSCP.
• Occasionally trying to save a file with less content or no length would fail to actually apply those changes, this is resolved.

SHA 256 Checksum

0a1c0176c86fef18a9b5fe0178d59edf632b3c1aba351f6038613af137356612  sftp-server

v1.0.1

Fixes issue with stdout in systemd

7f78a34ea579fb78b20fd1cd3a32405a0c8090d7d1b65d9cca27a8412ad9881f  sftp-server

v1.0.0

a0490d9c4ff1beb5b5092a44f73425ee553820e79d8c9597d155e2255b43eb7b  sftp-server