SecureFX(R) 4.0.2 (Official) -- January 18, 2007 Copyright (C) 1995-2007 VanDyke Software, Inc. All rights reserved. This file contains a SecureFX product history. It includes lists of new features, changes, and bug fixes sorted by release. For a product description, installation notes, registration information, and contact information, please refer to Readme.txt (downloaded with this installation). Changes in SecureFX 4.0.2 (Official) -- January 18, 2007 -------------------------------------------------------- Bug fixes: - File transfer information was not logged when the transfer queue was used. - SFTP: ASCII files without an EOL at the end of a file were corrupted during SFTP transfers. - SFTP: SecureFX crashed when connecting to an OpenVMS SFTP server. - SFXCL: The /Delete flag only worked when wildcards were used. Vulnerabilities: - According to US-CERT Vulnerability Note VU#845620, it is theoretically possible for an attacker to forge RSA signatures when the RSA key has a public exponent of three. SecureFX no longer generates keys with a public exponent of three and warns before a key with a public exponent of three is used for authentication or accepted from a host. Changes in SecureFX 4.0.1 (Official) -- November 16, 2006 --------------------------------------------------------- Bug fixes: - SecureFX crashed when attempting to manually transfer a file while the remote listing was being refreshed. - The transfer queue flashed when multiple files had been selected and then were being transferred. - When attempting to re-transfer a file in the queue that had originally been cut and pasted from one location to another on the remote, SecureFX reported that the file could not be found. - SFTP: SecureFX crashed when attempting to connect to a VShell server that explicitly denied SFTP access. - FTP and FTP/SSL: If a transfer or file listing was cancelled, the connection was lost. - FTP/SSL: SecureFX could not connect to servers that required SSLv3 compatibility. - FTP/SSL: After downloading a 0-byte file from Filezilla, the file was locked on the local machine. - SFXCL: SFXCL transfer reported success for sessions with an expired password. Changes in SecureFX 4.0 (Official) -- October 10, 2006 ------------------------------------------------------ Bug fixes: - File attributes could not be set for multiple files. - FTP: Under certain circumstances, SecureFX crashed when a "pwd" command was issued. Changes in SecureFX 4.0 (Beta 4) -- October 3, 2006 --------------------------------------------------- Bug fixes: - Files copied from other applications could not be pasted into SecureFX windows. - When SecureFX was integrated with SecureCRT, double clicking a terminal-only session in the Connect dialog did not launch SecureCRT. - If a session that had been deleted or renamed was selected from the Recently Used Sessions list, a different session was opened. - FTP/SSL: SecureFX crashed after attempting to retransfer files that had been uploaded and then deleted from the remote machine. Changes in SecureFX 4.0 (Beta 3) -- September 21, 2006 ------------------------------------------------------ Changes: - The transfer queue cannot be toggled while a transfer is in progress. - For manual downloads and uploads done through the transfer queue, the file sizes are shown when the transfer starts. - Increased the size of the authentication, key exchange, ciphers, and MACs list boxes in order to eliminate the scrollbars. - Added a maximize button to the Connect dialog. - FTP/SSL: Improved error message for failed connections. Bug fixes: - Under certain circumstances, when trying to start SecureFX, SecureFX kept reporting a "failed to open clipboard" error. - SecureFX crashed if a file type that did not have an associated extension was edited. - In the Connect dialog, sometimes renaming a session or pressing ALT+Q (Quick Connect) did not work. - Under certain circumstances, a directory listing of a large directory with long file names could fail. - If the mouse was hovering over a file name while dragging and dropping multiple files, the transfer failed. - Attempting to transfer an empty directory resulted in an error. - When a connection attempt was cancelled, the connection was retried if the connection retry "Maximum number of attempts" option was set to a value greater than zero. - When SecureCRT was integrated with SecureFX, if a SecureFX session was launched from SecureCRT, sometimes the Session Options dialog did not list all of the available protocols for that session. - SFTP: When SFTP roots were used, timestamps were not correctly preserved for uploads. - SFTP: When connected to an OpenSSH server, the user/group information was displayed as numbers instead of as text. Changes in SecureFX 4.0 (Beta 2) -- September 7, 2006 ----------------------------------------------------- Changes: - The Session Options dialog was made larger so that there are no scrollbars in the Category tree. - In the transfer queue window, the columns "Start Time" and "Finish Time" were moved to the end. - SFTP: Changed the default compression to "None". This only affects new installations. Bug fixes: - SecureFX crashed if the transfer queue was hidden and shown while a transfer was in progress. - When a connection went down during a transfer, if the transfer was resumed through the transfer queue, the file was not transferred correctly. - The session window and the SecureFX window could not be closed after moving a file from one folder to another on the remote machine. - If a file already existed on the remote and the transfer was made through the transfer queue window, SecureFX did not ask if the file should be overwritten. - SFTP: SecureFX crashed when downloading a zero-byte file from VShell running on Windows. - SFTP and FTP/SSL: In some cases, the lock icon was not drawn correctly. Changes in SecureFX 4.0 (Beta 1) -- August 22, 2006 --------------------------------------------------- New features: - Added protocol support for FTP over SSL. - Added a transfer queue, which is optionally displayed. When the transfer queue is displayed, all items to be transferred go through the queue and are transferred sequentially. - Added the ability to move files and folders using drag and drop or cut and paste, which deletes the source files or folders after they have been transferred. - Added support for unauthenticated and basic HTTP proxies. - Added the ability to close the local window. - Added a global option to disable the prompt that asks if the cached file should be used when doing a remote edit. - SSH2: Enhanced X.509 host-key support by validating X.509 host- key certificates. - SFXCL: Added a /Move flag, which specifies that the source files or folders should be deleted after they have been transferred. Changes: - If the global setting "Show connection closed dialog" is off, the reconnect dialog will not be displayed when the network is disconnected. Bug fixes: - If an HTTP proxy was being used and the session was disconnected before the hostname was resolved, CPU usage went up to 100%. - Upgrading to a newer version of SecureFX did not remove the old entry in Add/Remove programs. - SSH2: SecureFX could not validate the server's X.509 DSA host key when the key was not encoded using ASN.1 (F-Secure and SSH Communications servers). - SSH2: SecureFX could not validate the server's X.509 RSA host key if the server used the SHA-1 hash (later versions of F-Secure and SSH Communications servers).