Fixed vulnerabilities:

• Official binaries are now linked against GnuTLS 3.8.12

Fixed vulnerabilities:

• Official binaries are now linked against GnuTLS 3.8.12

Bugfixes and minor changes:

• Improved parallelization of concurrent authentication requests to increase performance
• Don't complain about missing or empty configuration files when reloading the configuration. Default values will be used in that case.
• Fix Let's Encrypt® well-known path normalization to preserve native format.
• FTP: Fixed a crash if both control and data connection fail at the same time

Bugfixes and minor changes:

• FTP: Fix a crash processing the ABOR command
• MSW: silent installations now automatically back up configuration files in cases where the interactive installer would prompt the user to do so.

Bugfixes and minor changes:

• FTP: do not use the default impersonator during the test of the FTP connections.
• Fixed bug that reversed mount point precedence, giving priority to group mount points over user ones; user mount points now correctly take precedence.
• Fixed bug that made the %<home> placeholder not work in case "Use system credentials to log in" was selected but "Use system credentials also for accessing &files and directories" was not.

Bugfixes and minor changes:

• macOS: Fixed issue with toolbar size

Bugfixes and minor changes:

• Fixed an issue whith the certificate verification dialog not becoming scrollable on certificates with many subject alternative names
• Updated to libfilezilla 0.52.0

New features:

• UI: Added a new choice when removing groups that are still in use, now the affected users can be removed regardless of other group membership as well
• UI: Small usability improvements to the group membership picker

Bugfixes and minor changes:

• Fixed a crash if editing a user while they are logged in
• Fixed listing the available mounts in the root directory if the root itself is not a defined mount point
• UI: Fixed a crash when adding or removing groups

Bugfixes and minor changes:

• Fixed a crash if loading a custom X.509 private key or certificate fails using implicit FTP over TLS

New features:

• Support a "write only" mode for the mount points.
• Added the --version option to the server.
• FTP: Added support for wildcard patterns (`*` and `?`) in LIST, NLST, MLSD, and STAT commands, with matching semantics identical to those used on Windows. This feature is available on all platforms and is disabled by default. It can be enabled per session using `OPTS filezilla.wildcards=1`; support is advertised via the FEAT command. For reference on matching behavior, see: https://learn.microsoft.com/en-us/archive/blogs/jeremykuhne/wildcards-in-windows
• MSW: Added support for specifying credentials for UNC paths in the mount list. Credentials can be configured via the Administration Interface under Rights Management -> Windows Share Credentials.

Bugfixes and minor changes:

• Fixed edge case in paths normalization

New features:

• For files and directories that are symbolic links, a small overlay symbol is now shown on icons in local file list and directory tree

Bugfixes and minor changes:

• Fixed an issue showing attributes of symbolic links in local file list

Bugfixes and minor changes:

• Fixed a crash if using impersonation
• Fixed a resource consumption issue in the impersonator

Fixed vulnerabilities:

• Official binaries are now linked against GnuTLS 3.8.10

Bugfixes and minor changes:

• FTP: Retry from a different source port if establishing a data connection in passive mode fails with EADDRINUSE

Fixed vulnerabilities:

• Official binaries are now linked against GnuTLS 3.8.10

Bugfixes and minor changes:

• Fixed a crash if using speed limits

Bugfixes and minor changes:

• Fixed initial loading of file extensions for the Auto transfer type

Bugfixes and minor changes:

• Faster natural sort
• *nix: Fixed focus issue in Site Manager
• Updated to libfilezilla 0.50.0

Bugfixes and minor changes:

• UI: Fixed crash opening settings dialog if there are usernames starting with a character that sorts less than the less than sign

Bugfixes and minor changes:

• FTP: fixed crash if receiving an unusual sequence of commands.
• Fixed spurious error while backing up configuration.
• MSW: fixed silent crash of the installer at the end of the installation process.
• UI: fixed bug that might lead to duplicate IPs being retrieved by "retrieve public IP" button in the FTP tester.
• UI: added proper spacing between unit labels and the controls they are attached to.

Bugfixes and minor changes:

• Faster natural sort
• *nix: Fixed focus issue in Site Manager
• Updated to libfilezilla 0.50.0

Bugfixes and minor changes:

• MSW: Fixed bug that caused the installer to override the name of the log file in certain circumstances.

New features:

• It is now possible to configure which protocols users are allowed to login with

Bugfixes and minor changes:

• Fixed validation of domain names during certificate creation if a component in the hostname consists purely of numbers
• Administration UI: Fixed issues with renaming users
• Windows installer: Improved logging

Bugfixes and minor changes:

• Fixed a regression causing the setting 'do not require authentication' to get lost when restarting the server. Note: To see the effect of this fix, administrators must manually reapply the 'do not require authentication' setting for affected users. After this adjustment, the setting will persist as expected.
• MSW: Added NETWORK_SERVICE as a allowed user for the config dir ownership.

New features:

• macOS: Fixed a build issue affecting App Notarization on arm64

Bugfixes and minor changes:

• Updated translations

New features:

• Added option to always refresh remote directory listings when starting a recursive operation

Bugfixes and minor changes:

• Changing logfile settings no longer requires a restart of FileZilla
• Fixed a display issue with special characters in usernames
• MSW: Fixed local file list not updating after renaming or deleting items
• SFTP: Update interval of transfer progress during uploads should now be more consistent on very slow connections
• Updated to libfilezilla 0.49.0

New features:

• Added option to always refresh remote directory listings when starting a recursive operation

Bugfixes and minor changes:

• Changing logfile settings no longer requires a restart of FileZilla
• Fixed a display issue with special characters in usernames
• MSW: Fixed local file list not updating after renaming or deleting items
• SFTP: Update interval of transfer progress during uploads should now be more consistent on very slow connections
• Updated to libfilezilla 0.49.0

Bugfixes and minor changes:

• Fixed a regression causing the automatic renewal of the Let's Encrypt® certificates to not work properly.
• UI: fixed regression causing the Administration Interface port of the last successful connection to not be properly restored.
• UI: fixed a bug where the TLS key appeared to be lost in the interface if certificate generation failed, even though the key was still retained on the server.

Bugfixes and minor changes:

• Fixed an issue with the update mechanism

Bugfixes and minor changes:

• Fixed a regression introduced in 1.9.0, the "public IP or hostname" field on the passive mode page was not restored when opening the settings dialog

Fixed vulnerabilities:

• MSW: Warn if installing the server outside of Program Files due to custom directories having too lax permissions

Bugfixes and minor changes:

• Fixed a race condition resulting in stalled connections
• *nix: Fixed a potential crash if SIGINT is sent to the server while it is shutting down
• Fixes to the update check mechanism
• Fixed a regression in the converter for old 0.9.x configurations dealing with placeholders in native paths

New features:

• Private keys used for TLS can now be stored on a PKCS#11-compatible token device; the UI has been updated accordingly.
• UI: added button to retrieve the current FileZilla Server's public IP address, useful to configure the PASV mode.
• UI: added an FTP connection test, that can be reached directly from the Server menu item or executed at the end of the FTP Network Configuration Wizard.
• Made default values more secure, among which: require TLS on new FTP listeners, require a password for new users and warn if the administration password doesn't meet more stringent security requirements.
• Fixed bug causing the most recent log file, rather than the oldest, to be deleted upon rotation, when using dates as suffixes.
• MSW: fixed regression causing socket listener conflicts due to recent libfilezilla changes.
• Added WebUI: an HTTP server providing a REST API and a web app for seamless web access to stored files. WebUI is not included in the default build and must be enabled with the --enable-webui parameter during compilation. This feature is experimental; feedback and bug reports are welcome.

Bugfixes and minor changes:

• UI: the certificate fingerprint verification dialog is now sized to display the full fingerprint at once.
• UI: fixed bug causing the focus to be lost during user editing.
• UI: fixed bug causing the tray icon to display unexpectedly in certain cases.
• UI: improved error handling in case of server disconnection.
• UI: improved handling of Settings window size on ultra wide screens.
• FTP: the MKD command now returns an error if the directory already exists.
• FTP: Improved login timeout handling to exclude internal server processing time.
• Fixed heap corruption in the Administrator Interface.
• Fixed regression in the path handling routines.