Bugfixes and minor changes:

• Fixed an issue whith the certificate verification dialog not becoming scrollable on certificates with many subject alternative names
• Updated to libfilezilla 0.52.0

New features:

• UI: Added a new choice when removing groups that are still in use, now the affected users can be removed regardless of other group membership as well
• UI: Small usability improvements to the group membership picker

Bugfixes and minor changes:

• Fixed a crash if editing a user while they are logged in
• Fixed listing the available mounts in the root directory if the root itself is not a defined mount point
• UI: Fixed a crash when adding or removing groups

Bugfixes and minor changes:

• Fixed a crash if loading a custom X.509 private key or certificate fails using implicit FTP over TLS

New features:

• Support a "write only" mode for the mount points.
• Added the --version option to the server.
• FTP: Added support for wildcard patterns (`*` and `?`) in LIST, NLST, MLSD, and STAT commands, with matching semantics identical to those used on Windows. This feature is available on all platforms and is disabled by default. It can be enabled per session using `OPTS filezilla.wildcards=1`; support is advertised via the FEAT command. For reference on matching behavior, see: https://learn.microsoft.com/en-us/archive/blogs/jeremykuhne/wildcards-in-windows
• MSW: Added support for specifying credentials for UNC paths in the mount list. Credentials can be configured via the Administration Interface under Rights Management -> Windows Share Credentials.

Bugfixes and minor changes:

• Fixed edge case in paths normalization

New features:

• For files and directories that are symbolic links, a small overlay symbol is now shown on icons in local file list and directory tree

Bugfixes and minor changes:

• Fixed an issue showing attributes of symbolic links in local file list

Bugfixes and minor changes:

• Fixed a crash if using impersonation
• Fixed a resource consumption issue in the impersonator

Fixed vulnerabilities:

• Official binaries are now linked against GnuTLS 3.8.10

Bugfixes and minor changes:

• FTP: Retry from a different source port if establishing a data connection in passive mode fails with EADDRINUSE

Fixed vulnerabilities:

• Official binaries are now linked against GnuTLS 3.8.10

Bugfixes and minor changes:

• Fixed a crash if using speed limits

Bugfixes and minor changes:

• Fixed initial loading of file extensions for the Auto transfer type

Bugfixes and minor changes:

• Faster natural sort
• *nix: Fixed focus issue in Site Manager
• Updated to libfilezilla 0.50.0

Bugfixes and minor changes:

• UI: Fixed crash opening settings dialog if there are usernames starting with a character that sorts less than the less than sign

Bugfixes and minor changes:

• FTP: fixed crash if receiving an unusual sequence of commands.
• Fixed spurious error while backing up configuration.
• MSW: fixed silent crash of the installer at the end of the installation process.
• UI: fixed bug that might lead to duplicate IPs being retrieved by "retrieve public IP" button in the FTP tester.
• UI: added proper spacing between unit labels and the controls they are attached to.

Bugfixes and minor changes:

• Faster natural sort
• *nix: Fixed focus issue in Site Manager
• Updated to libfilezilla 0.50.0

Bugfixes and minor changes:

• MSW: Fixed bug that caused the installer to override the name of the log file in certain circumstances.

New features:

• It is now possible to configure which protocols users are allowed to login with

Bugfixes and minor changes:

• Fixed validation of domain names during certificate creation if a component in the hostname consists purely of numbers
• Administration UI: Fixed issues with renaming users
• Windows installer: Improved logging

Bugfixes and minor changes:

• Fixed a regression causing the setting 'do not require authentication' to get lost when restarting the server. Note: To see the effect of this fix, administrators must manually reapply the 'do not require authentication' setting for affected users. After this adjustment, the setting will persist as expected.
• MSW: Added NETWORK_SERVICE as a allowed user for the config dir ownership.

New features:

• macOS: Fixed a build issue affecting App Notarization on arm64

Bugfixes and minor changes:

• Updated translations

New features:

• Added option to always refresh remote directory listings when starting a recursive operation

Bugfixes and minor changes:

• Changing logfile settings no longer requires a restart of FileZilla
• Fixed a display issue with special characters in usernames
• MSW: Fixed local file list not updating after renaming or deleting items
• SFTP: Update interval of transfer progress during uploads should now be more consistent on very slow connections
• Updated to libfilezilla 0.49.0

New features:

• Added option to always refresh remote directory listings when starting a recursive operation

Bugfixes and minor changes:

• Changing logfile settings no longer requires a restart of FileZilla
• Fixed a display issue with special characters in usernames
• MSW: Fixed local file list not updating after renaming or deleting items
• SFTP: Update interval of transfer progress during uploads should now be more consistent on very slow connections
• Updated to libfilezilla 0.49.0

Bugfixes and minor changes:

• Fixed a regression causing the automatic renewal of the Let's Encrypt® certificates to not work properly.
• UI: fixed regression causing the Administration Interface port of the last successful connection to not be properly restored.
• UI: fixed a bug where the TLS key appeared to be lost in the interface if certificate generation failed, even though the key was still retained on the server.

Bugfixes and minor changes:

• Fixed an issue with the update mechanism

Bugfixes and minor changes:

• Fixed a regression introduced in 1.9.0, the "public IP or hostname" field on the passive mode page was not restored when opening the settings dialog

Fixed vulnerabilities:

• MSW: Warn if installing the server outside of Program Files due to custom directories having too lax permissions

Bugfixes and minor changes:

• Fixed a race condition resulting in stalled connections
• *nix: Fixed a potential crash if SIGINT is sent to the server while it is shutting down
• Fixes to the update check mechanism
• Fixed a regression in the converter for old 0.9.x configurations dealing with placeholders in native paths

New features:

• Private keys used for TLS can now be stored on a PKCS#11-compatible token device; the UI has been updated accordingly.
• UI: added button to retrieve the current FileZilla Server's public IP address, useful to configure the PASV mode.
• UI: added an FTP connection test, that can be reached directly from the Server menu item or executed at the end of the FTP Network Configuration Wizard.
• Made default values more secure, among which: require TLS on new FTP listeners, require a password for new users and warn if the administration password doesn't meet more stringent security requirements.
• Fixed bug causing the most recent log file, rather than the oldest, to be deleted upon rotation, when using dates as suffixes.
• MSW: fixed regression causing socket listener conflicts due to recent libfilezilla changes.
• Added WebUI: an HTTP server providing a REST API and a web app for seamless web access to stored files. WebUI is not included in the default build and must be enabled with the --enable-webui parameter during compilation. This feature is experimental; feedback and bug reports are welcome.

Bugfixes and minor changes:

• UI: the certificate fingerprint verification dialog is now sized to display the full fingerprint at once.
• UI: fixed bug causing the focus to be lost during user editing.
• UI: fixed bug causing the tray icon to display unexpectedly in certain cases.
• UI: improved error handling in case of server disconnection.
• UI: improved handling of Settings window size on ultra wide screens.
• FTP: the MKD command now returns an error if the directory already exists.
• FTP: Improved login timeout handling to exclude internal server processing time.
• Fixed heap corruption in the Administrator Interface.
• Fixed regression in the path handling routines.

Bugfixes and minor changes:

• MSW: Fixed an issue with confirmation dialogs for file deletion not being modal
• Updated to libfilezilla 0.48.1

Bugfixes and minor changes:

• Fixed an issue migrating old queue files if several older versions have been skipped
• Updated to libfilezilla 0.48.0

Fixed vulnerabilities:

• FileZilla Server now requires that the configuration directory is owned either by the operating system user account the server runs under, or a more privileged user (SYSTEM, Amdministrators, TrustedInstaller on Windows, root elsewhere)
• MSW: Mount points are now case-insensitive so that restrictions on sub mounts cannot be bypassed by a change of character case

Bugfixes and minor changes:

• Fixed a potential deadlock during transfers
• FTP: Fixed potential crash if the session gets closed

Fixed vulnerabilities:

• SFTP: Fixed PuTTY ECDSA NIST P-521 private key recovery vulnerability (CVE-2024-31497). If you use NIST P-521 keys to connect to SSH/SFTP servers, you should regenerate them and revoke the previous ones.
• Official binaries are now built against GnuTLS 3.8.4

Bugfixes and minor changes:

• Updated to libfilezilla 0.47.0

Fixed vulnerabilities:

• Official binaries are now built againt GnuTLS 3.8.3

Bugfixes and minor changes:

• Updated to libfilezilla 0.46.0
• MSW: Fixed tab navigation over message log

New features:

• Limits to the number of active sessions defined for the groups now apply to the group as a whole, not just to the individual users belonging to those groups.
• Fixed bug that led to timeouts not being set at startup, but only when changing the configuration.

Bugfixes and minor changes:

• FTP Server: NLST would report a file names with a leading ./ path in certain cases, which confused some clients. Fixed.
• UI: Fixed bug that caused the Administration Interface to misinterpret native paths in the mount lists in case the server were running on a machine with different path semantics than the Administration Interface's one.
• UI: fixed regression that led to some message dialogs not being displayed.
• Fixed regression that caused disabled mount points with empty native paths to be discarded.
• Fixed conversion to utf8 of virtual paths, which was wrongly misinterpreting some native encodings.
• In case of login failure, the login timeout resumes counting down for the remaining time.