Security Advisory for SFTPPlus 3.18.0

A security advisory was created for SFTPPlus version 3.18.0 affecting Linux and Unix systems that rely on the umask functionality.

Published
2016-12-15
Tags
security-advisory

In version 3.18.0 on Linux and Unix systems, when the SFTP server-side creates new files their permissions are filtered against the configured umask.

This was a regression introduced in version 2.8.0, in which the umask value was not used for the newly created files.

An upgrade to 3.18.0 is recommended for any older version running on Linux or Unix.

An upgrade for the Windows version of SFTPPlus is not required.

You can check the full release notes here.