Skip to main content

Changelogs

Version 9.1.11

Release date: 2024-03-13

  • [#295487]: Add a new action to the “New” button to upload files and directly share them with a CargoLink
  • [#293137]: Update backend libraries for security (ruby on rails from 7.0.8 to 7.0.8.1)

Version 9.1.10

Release date: 2024-02-21

  • [#294828]: Add a setting to enable / disable HTTP/2
  • [#294362]: Fix background GeoIP database update
  • [#293870]: Fix missing translation for CargoLink status

Version 9.1.9

Release date: 2024-02-07

  • [#293872]: Fix CargoLink wizard for prepared links created by a folder action
  • [#292758]: Fix error notification sending for folder actions
  • [#292471]: Fix drag and drop in the upload dialog
  • [#292251]: Fix enable/disable upload for single-file CargoLinks

Version 9.1.8

Release date: 2024-01-24

  • [#292589]: Fix attributes management for SAML authentication sources
  • [#292458]: Fix editing PGP keys in user management
  • [#292260]: Fix missing colour in status badges for CargoLinks
  • [#291816]: Fix missing lock icons in the file manager
  • [#291791]: Fix missing translations for asynchronous content scans

Version 9.1.7

Release date: 2024-01-10

  • [#291578]: Fix transfers table in the CargoLink detail view
  • [#290171]: Fix asynchronous content scanning when re-uploading files with the same name

Version 9.1.6

Release date: 2023-12-13

  • [#290677]: Improve firewall rule persistence
  • [#290250]: Fix CargoLink expiration setting
  • [#290174]: Fix broken role change
  • [#290123]: Fix broken folder action edit (dropdown)
  • [#290122]: Fix shared folder information in the file manager

Version 9.1.5

Release date: 2023-11-29

  • [#289873]: Fix creating zip files from the object store
  • [#289757]: Fix pagination in the user administration

Version 9.1.4

Release date: 2023-11-15

  • [#289460]: Fix password reset functionality
  • [#289085]: Fix group selection in the recipient input
  • [#289005]: Add search hint when selecting files for a CargoLink
  • [#288994]: Ensure that only approved locales installed on the system
  • [#288977]: Fix confidential message styling

Version 9.1.3

Release date: 2023-11-02

  • [#288316]: Fix file upload retry button
  • [#287935]: Fix problem with editing a SAML authentication source
  • [#287365]: Fix background content scanning for ICAP integration
  • [#286916]: Update to ProFTP 1.3.8a for security and stability improvements
  • [#280421]: Improve handling a big amount of files in the uploader (>10'000 entries)

Version 9.1.2

Release date: 2023-10-18

  • [#286034]: Add http2 support to the web server
  • [#283287]: Add automated security scanner for the source code (SAST)
  • [#280168]: Fix user list sorting for administrators
  • [#275802]: Improve dashboard performance for administrators
  • [#275794]: Improve CargoLinks list performance for users

Version 9.1.1

Release date: 2023-10-04

  • [#286286]: Fix verifying the maximum lifetime of a CargoLink against the system wide limit
  • [#284476]: Improve ZIP download file name
  • [#267447]: Fix creating users on the fly when using CargoMail integration
  • [#250870]: Improve reverse IP lookup for private addresses

Version 9.1.0

Release date: 2023-09-20

  • [#285458]: Fix refresh cache button in CargoLink details view
  • [#285341]: Improve sign-in dialog when using Single Sign On
  • [#284573]: Fix missing translation for PIN entry in the CargoLink wizard
  • [#284572]: Fix scrollbars in quick links on the dashboard
  • [#284571]: Fix link to CargoLink approval details view
  • [#284530]: Add custom zip generation service to fix memory issues and improve performance
  • [#279447]: Update nginx to latest stable 1.24 version

Version 9.0.2

Release date: 2023-09-06

  • [#284163]: Fix effective deletion of users when using auto deletion
  • [#284115]: Fix missing icons in the CargoLinks list view
  • [#283896]: Fix target selection when uploading files via CargoLink
  • [#283869]: Fix CargoLink shortcut edit window
  • [#283057]: Fix background cleanup tasks for files and CargoLinks
  • [#281269]: Disable share creation when the system does not have users yet

Version 9.0.1

Release date: 2023-08-23

  • [#279437]: Update to the latest jQuery version

Version 9.0.0

Release date: 2023-08-09

  • [#282850]: Fix periodical cleanup service
  • [#282849]: Fix CargoLink creation issue for objectstore
  • [#280436]: Improve perfomance for CargoLink creation in case of big amount of files
  • [#253690]: Upgrade frontend framework to the latest version

Version 8.3.5

Release date: 2023-07-26

  • [#281270]: Improve API v1 documentation for user management
  • [#280424]: Improve CargoLink creation with a huge amount of files (> 10'000)
  • [#280396]: Fix organization management UI
  • [#280273]: Improve JSON support in the API v1 for contacts management

Version 8.3.4

Release date: 2023-07-12

  • [#280409]: Fix user list navigation for administrators
  • [#276324]: Add welcome email to invited users with sign-in information

Version 8.3.3

Release date: 2023-06-29

  • [#279253]: Fix quota limit message when trying to upload files to a CargoLink
  • [#278015]: Fix storing preferred locale for a contact
  • [#277081]: Improve default sorting of CargoLink approval list
  • [#277063]: Improve hint text for file selection in the CargoLink wizard
  • [#277061]: Fix 2FA label in the user list as administrator
  • [#275371]: Improve cluster monitoring to detect split brain situations
  • [#252255]: Improve user exporting in CSV format

Version 8.3.2

Release date: 2023-06-14

  • [#278014]: Improve PIN brute force attack notification for CargoLinks
  • [#276982]: Fix memory issue when creating big zip files for download
  • [#276267]: Fix locked, but not processed jobs in the background queue

Version 8.3.1

Release date: 2023-05-31

  • [#276009]: Add automatic PIN regeneration for CargoLink recipients
  • [#275790]: Improve users list performance for administrators

Version 8.3.0

Release date: 2023-05-17

  • [#275879]: Fix potential build time informational leakage
  • [#275624]: Improve logging for SAML integration
  • [#275461]: Improve CargoLink file upload dialog
  • [#272583]: Upgrade to Rails 7 for performance and security improvements
  • [#272476]: Add support for bearer token format in API v1
  • [#271910]: Improve timeout handling for malware scanning

Version 8.2.5

Release date: 2023-05-03

  • [#273339]: Fix checking for pending content scans with file names having special characters in the name
  • [#272735]: Fix updating traffic charts when switching months in the administration traffic report page
  • [#272600]: Fix uploading files in the file manager with partially invalid shares
  • [#272570]: Fix CargoLink shortcut handling when not using tenants
  • [#255695]: Fix potential out of space issues for the content scanner
  • [#250136]: Improve PDF journal layout when using registered transfers

Version 8.2.4

Release date: 2023-04-19

  • [#272244]: Fix layout issue in the file upload wizard
  • [#271940]: Add ability to toggle autodelete on existing CargoLinks

Version 8.2.3

Release date: 2023-04-05

  • [#270291]: Improve admin users list loading performance
  • [#267800]: Improve checksum calculation for the CargoLinks with large files

Version 8.2.2

Release date: 2023-03-22

  • [#270146]: Implement direct object store access for the content scanner
  • [#269997]: Fix transfer log view errors for deleted users
  • [#269084]: Improve local ICAP content scanner monitoring
  • [#268481]: Fix shares management of participants after user deletion

Version 8.2.1

Release date: 2023-03-08

  • [#269434]: Fix sending email with specific locale settings from the user
  • [#267632]: Implement automatic deletion for users managed in external directories
  • [#44090]: Fix error when trying to download an empty folder in the file manager

Version 8.2.0

Release date: 2023-02-23

  • [#268140]: Fix audit journal display for attribute changes
  • [#268126]: Add a feature to restrict sign-in from internal networks only
  • [#267980]: Fix adding defaults for authentication sources
  • [#267977]: Fix issue with DB archiving not being performed
  • [#267833]: Improve sorting and filerting for CargoLink approvals
  • [#267759]: Prevent multiple usage of a share invitation token
  • [#267758]: Add read / write settings for share invitation to externals
  • [#260353]: Fix parallel session usage with different roles for the same user
  • [#256261]: Add a feature to integrate a Cargo file upload widget to external websites

Version 8.1.0

Release date: 2023-02-08

  • [#267880]: Add user filter to the transfer logs
  • [#267787]: Fix file downloads for CargoLink approvers
  • [#267757]: Fix account confirmation page layout
  • [#267729]: Fix upload links creation when using an object store
  • [#267244]: Fix tooltip styling on timestamps
  • [#267081]: Fix pre-filling attributes when editing an authentication source
  • [#265845]: Update nginx to 1.22 for security and stability improvements
  • [#259384]: Trigger a failover if the data store is not available
  • [#252254]: Add filtering and sorting to the audit logs

Version 8.0.0

Release date: 2023-01-25

  • [#267415]: Fix HMAC API authentication regression
  • [#267139]: Allow SHA-256 signed SAML requests
  • [#267135]: Prevent creating CargoLink in the file manager for special folders (Incoming and Outgoing)
  • [#266892]: Provide packages for Ubuntu 22.04 LTS
  • [#266042]: Remove unused feature to inverse navigation colours
  • [#265844]: Update to ProFTP 1.3.8 for security and stability improvements
  • [#260560]: Allow to enable SecureDrop by default for upload CargoLinks

Version 7.1.6

Release date: 2023-01-11

  • [#266029]: Improve reverse DNS lookup for ip addresses in the user interface
  • [#266025]: Fix preview mode for CargoLinks only valid in the future
  • [#265704]: Fix display error in the user overview for administrators
  • [#265600]: Remove legacy backup section from the administration interface
  • [#264176]: Do not show quick-links section when no items are available for the user
  • [#263951]: Allow to re-assign an approver for a CargoLink if enabled system wide
  • [#263923]: Allow to choose any user as approver for a CargoLink if enabled system wide
  • [#257551]: Improve PDF journal for CargoLinks to contain relative path of files if directories are shared
  • [#252256]: Show basic license information to the administrator in the dashboard

Version 7.1.5

Release date: 2022-12-07

  • [#264562]: Add service inheritance for new external users invited via share
  • [#264471]: Fix file manager sidebar labels
  • [#264470]: Fix blank tab when downloading files in safari browser
  • [#264075]: Improve custom application logo
  • [#263952]: Improve fallback approver notifications
  • [#263924]: Add list of CargoLink approvals

Version 7.1.4

Release date: 2022-11-23

  • [#264469]: Fix reports months navigation
  • [#264442]: Fix font rendering problem in Safari
  • [#264417]: Fix CargoLinks list view when selecting expired links
  • [#264353]: Fix pin display in CargoLink Wizard when enforcements are in place
  • [#264178]: Fix moving shared folders in the file manager
  • [#264130]: Fix missing groups favourite icon
  • [#263962]: Fix “Enable Upload” setting preset in the CargoLink wizard

Version 7.1.3

Release date: 2022-11-09

  • [#263782]: Improve file upload error messages
  • [#263781]: Fix unicode filename handling when uploading files
  • [#263738]: Fix access control for fallback approvals
  • [#263574]: Fix downloading of a large amount of files in the file manager
  • [#262233]: Fix drag&drop file uploads for systems using the object store
  • [#260632]: Prevent duplicates in data room participations

Version 7.1.2

Release date: 2022-10-26

  • [#261685]: Improve footer layout in the web interface
  • [#261495]: Show specific information to CargoLink recipients if a link is not yet available
  • [#259487]: Update to newest ruby on rails libraries for security and performance
  • [#259383]: Add file system availability monitoring and alerting

Version 7.1.1

Release date: 2022-10-12

  • [#261706]: Fix multiple roles behavior
  • [#261631]: Fix font loading in some browsers
  • [#260743]: Prevent deleting users with active shares

Version 7.1.0

Release date: 2022-09-28

  • [#260669]: Fix share path handling for administrators
  • [#260620]: Improve CargoLink detail view layout
  • [#260553]: Fix word wrapping for the CargoLink preview page
  • [#259837]: Fix database encryption algorithm migration
  • [#259827]: Improve CargoLink API to allow file downloads
  • [#259659]: Prevent browser from caching files downloaded via CargoLink
  • [#259657]: Fix missing translation of error messages in file upload
  • [#259101]: Allow CargoLink owner to see the confidential message content
  • [#256446]: Fix closing of the notifications dialog via the bell icon
  • [#250064]: Add a searchable label to a CargoLink

Version 7.0.3

Release date: 2022-09-07

  • [#259532]: Fix layout for journal logs (audit) page
  • [#259032]: Fix error message in the FileManager when object store is not available
  • [#196461]: Added sorting to DataRooms by participants count and its name

Version 7.0.2

Release date: 2022-08-25

  • [#257522]: Cleanup legacy tooltip library to use modern components
  • [#256659]: Improve escalation when local monitoring restarts a service continuously
  • [#256634]: Add monitoring to object store replication in a cluster setup

Version 7.0.1

Release date: 2022-08-10

  • [#257550]: Fix wrong error message on deleting share or user
  • [#256435]: Update Rails 6 to 6.1

Version 7.0.0

Release date: 2022-07-27

  • [#256892]: Fix marking contact as private
  • [#256583]: Fix contacts import with UTF-8 encoding
  • [#256482]: Fix regression for OTP auth when becoming a user (as admin)
  • [#256166]: Switch to Vite.js for the frontend bundling
  • [#255783]: Update the minio object store version
  • [#236461]: Upgrade to Rails 6 for performance and security improvements

Version 6.6.7

Release date: 2022-07-13

  • [#256692]: Improve 4-eyes fallback approver actions when checking a CargoLink
  • [#256595]: Increase default number of entries in the contact list page
  • [#256525]: Fix accidentally resetting feature states when deleting the site logo
  • [#256201]: Add explicit “select folder” button when uploading files for a CargoLink
  • [#256159]: Improve error message for the administrator when trying to remove a user which is still owning active shares

Version 6.6.6

Release date: 2022-06-29

  • [#256158]: Fix typo, add icons to the CargoLink wizard confirmation page
  • [#255846]: Improve logging of background jobs
  • [#255697]: Improved the description for the “Transfer-Only” mode
  • [#253880]: Improve CargoLink edit page when pin and mobile number enforcements are in place

Version 6.6.5

Release date: 2022-06-15

  • [#255657]: Fix contacts import from CSV files
  • [#255594]: Fix email sending for the fallback approver (2-man rule scenario)
  • [#255553]: Fix CargoLink expiration notification scheduling
  • [#255109]: Improve FolderAction execution performance
  • [#253890]: Limit system information for normal administrators

Version 6.6.4

Release date: 2022-06-01

  • [#255404]: Fix layout on report page
  • [#255212]: Adjust memory settings for the content scanner
  • [#254970]: Improve view cache for CargoLinks when uploading files

Version 6.6.3

Release date: 2022-05-18

  • [#254622]: Fix autocomplete for teams in the CargoLink wizard
  • [#254521]: Fix content scanner timeout when interacting with an ICAP server
  • [#254473]: Restore old CargoLink list behaviour with active/expired links
  • [#254444]: Fix content navigation entries in the file manager
  • [#254414]: Allow super administrators to be configured as user manager in the SAML configuration
  • [#253888]: Fix logging in the API when trying to download an expired CargoLink

Version 6.6.2

Release date: 2022-05-04

  • [#254386]: Remove folder rename tracking for CargoLinks and Shares to prevent unwanted side effects
  • [#254064]: Improve storage pruning performance with large amount of files
  • [#253694]: Use the pagination API when managing contacts
  • [#253645]: Fix formatting of weekly AV scan reports when malware was found
  • [#253623]: Improve stability of the content-scanner under heavy load
  • [#253576]: Improve preview mode information for the CargoLink owner
  • [#253503]: Fix styling in file manager when hovering over objects

Version 6.6.1

Release date: 2022-04-20

  • [#253578]: Fix become user feature for admin accounts
  • [#253538]: User search imporved
  • [#253483]: Improved upload cleanup task performance
  • [#253293]: Add ability to have multiple external user IDs
  • [#253159]: Implement pagination/sorting for tables
  • [#250882]: Add posibility to copy link for a cargolink with anonymous recipient

Version 6.6.0

Release date: 2022-04-06

  • [#253393]: Fix daily log export issue with file names
  • [#253161]: Update to ruby 2.7 for security and performance improvements
  • [#252701]: Update to monit 5.32 for security and performance improvements
  • [#252250]: Improve user management by keeping search results after editing
  • [#252249]: Add a delete button to the user overview page
  • [#250764]: Add support for specific CargoServer proxy for ESET AV updates
  • [#238288]: Update to mod_zip 1.2.0 for security and performance improvements

Version 6.5.1

Release date: 2022-03-23

  • [#252716]: Update rails to 5.2.7 for security and performance
  • [#252715]: Update frontend libraries to the latest versions for security and performance
  • [#252682]: Fix and improve SNMP integration into the SNMP daemon
  • [#251846]: Improve API performance for CargoLink recipient view
  • [#250874]: Skip sending empty file lists in the weekly cleanup information mails
  • [#242322]: Show the IP of the last sign in in the user management list
  • [#230818]: Also prune PIN information when GDPR cleanup is enabled for CargoLinks

Version 6.5.0

Release date: 2022-03-09

  • [#252440]: Fix data room icons in the file manager
  • [#252075]: Improve uploading large amount of files for CargoLinks
  • [#251868]: Remove locked / infected files in the background when content scans are finished
  • [#250900]: Fix PDF journal font to support cyrillic characters
  • [#250804]: Add support for uploading full directories to a CargoLink
  • [#250068]: Add support for uploading files into specific subfolders of an upload link
  • [#242937]: Switch the application server to puma for improved performance

Version 6.4.9

Release date: 2022-02-23

  • [#252184]: Update monit to the latest version
  • [#251968]: Ensure a user always has a role assigned
  • [#251869]: Improve error message when creating a share for an invalid folder name
  • [#251562]: Fix error message display when file upload fails and retries are triggered
  • [#251538]: Fix contact editing form cleanup from last edit
  • [#250803]: Implement combined file upload notifications for upload CargoLinks

Version 6.4.8

Release date: 2022-02-09

  • [#251860]: Fix 2FA setup for users after sign-in when enforcement is in place
  • [#251739]: Fix increasing idle database connections from the background queue workers
  • [#251159]: Update frontend libraries (jquery, jquer-ui) for security
  • [#251158]: Fix uploading directory structures in file manager into subfolders
  • [#250873]: Improve file selection and file type filtering for CargoLink upload links
  • [#250765]: Improve automatic database reconnections in the background queue workers
  • [#250404]: Fix quota editing for users with multiple roles

Version 6.4.7

Release date: 2022-01-26

  • [#250886]: Hide temporary folders from file selections in the CargoLink wizard
  • [#250875]: Improve error pages layout
  • [#250403]: Improve error message when trying to upload files larger then the configured limit
  • [#250294]: Remove the deprecated CargoBatches API
  • [#250186]: Prevent file overwrite when in “Prevent delete” mode
  • [#235773]: Add role management (add/remove role from a user) to the audit list

Version 6.4.6

Release date: 2022-01-12

  • [#250695]: Fix upload link file size limit checks
  • [#250689]: Fix uploading folders with files into the file manager
  • [#250171]: Improve the error message for invalid or expired CargoLinks shown to the recipient
  • [#250170]: Improve the error message when trying to overwrite an already existing file in an upload CargoLink
  • [#250058]: Display the folder name of CargoLinks in the recipient view
  • [#249935]: Improve cleanup of automatically generated folders for CargoLinks when auto-deleting files
  • [#249714]: Improve error messages for the file uploader in case a content scanner detects unwanted content
  • [#166720]: Skip OTP authentication when impersonating a user as administrator

Version 6.4.5

Release date: 2021-12-29

  • [#250173]: Filter out internal “.Uploads” folder for shares
  • [#250172]: Fix missing translations for file retention settings (autodelete)
  • [#250137]: Add SMS limits configuration for CargoLinks
  • [#250121]: Add file size to CargoLink uploads in the file list
  • [#249913]: Fix CargoLink message field editing when showing in the file manager
  • [#249903]: Add cleanup for “.Uploads” with the the object store
  • [#249632]: Add regular CargoLink manifest cache consistency checks
  • [#249629]: Add redis synchronisation in a cluster setup
  • [#249108]: Fix a missing permission check for CargoLinks in the file manager leading to a generic error instead of disabling the option
  • [#246654]: Add improved ICAP integration with background content scanning
  • [#240063]: Prevent super administrators from seeing notifications for users
  • [#39343]: Add expiration information to CargoLinks in the recipient view

Version 6.4.4

Release date: 2021-12-15

  • [#250065]: Fix uploading very big files with the chunk based uploader
  • [#249727]: Update javascript and ruby libraries for security and functionality improvements
  • [#249671]: Improve database replication for sequence objects
  • [#249667]: Improve captcha readability
  • [#249109]: Fix tooltip in the log viewer for administrators
  • [#247756]: Add cluster information to the administrator dashboard

Version 6.4.3

Release date: 2021-12-01

  • [#249105]: Update javascript and ruby libraries for security and functionality improvements
  • [#248406]: Improve error messages for CargoLink lifetime restrictions
  • [#248247]: Fix spurious SFTP upload errors when invoking the content scanner
  • [#241520]: Improve DNS reverse resolution and GeoIP resolution by using asynchronous frontend processing
  • [#231726]: Improve upload size limit handling when using the chunk based file uploader
  • [#137080]: Implement object store synchronisation in a cluster setup

Version 6.4.2

Release date: 2021-11-17

  • [#248469]: Fix directory structure uploads on the file manager when using the object store backend
  • [#248464]: Remove debug output on HTML pages
  • [#248409]: Fix encoding problem with file names containing a “+” character
  • [#248267]: Fix sign in error when a configured LDAP server is not available for feature checking
  • [#248231]: Fix PIN enforcement for pre-created CargoLink edit view
  • [#248135]: Fix server side error for pre-created CargoLink when enforcements are in place
  • [#247413]: Allow names like “Adam F” as valid user name (single character components)
  • [#245839]: Fix editing a SSH public key for a user as administrator
  • [#235311]: Add resumable file upload to improve reliability with unstable network connections

Version 6.4.1

Release date: 2021-11-03

  • [#247608]: Fix missing page titles for some pages
  • [#247497]: Improve CargoLink list view performance
  • [#247484]: Fix an issue in calculating the status of a CargoLink leading to a server side error
  • [#247451]: Improve manifest (available files) generation performance for CargoLinks
  • [#246656]: Add support for background content scanning when creating a CargoLink from directly uploaded files

Version 6.4.0

Release date: 2021-10-20

  • [#247464]: Fix path quoting issue when scanning files with whitespace in the name
  • [#247421]: Fix file preview controls in the file manager
  • [#247283]: Fix performance issue with download callbacks after CargoLink file download
  • [#247139]: Fix session overview with old and new style session identifier
  • [#247138]: Fix audit journal view for some objects missing audit information
  • [#246770]: Improve file manager performance for large folders
  • [#242079]: Fix password warning layout
  • [#235312]: Implement chunk based file uploader for CargoLinks and user dashboard

Version 6.3.2

Release date: 2021-10-07

  • [#246916]: Fix mobile menu icon
  • [#246868]: Fix dashboard quick action display depending on features enabled for a user
  • [#246853]: Fix a restart issue with background queue workers
  • [#246836]: Implement a chunk based file uploader for upload links
  • [#246818]: Fix CargoLink handling of files containing the “[]” special characters
  • [#246769]: Fix layout of contacts and favourites in the file manager (right column)
  • [#246646]: Fix colours for file manager icons for links and shares
  • [#246482]: Fix layout of password reset form
  • [#246378]: Implement a feature to expect regular new files from a user and otherwise stop cleaning up old files
  • [#246120]: Fix folder action configuration display
  • [#246036]: Fix WebDAV file upload

Version 6.3.1

Release date: 2021-09-22

  • [#246653]: Improve Transfer-Only mode for users which have additional features enabled
  • [#246651]: Improve AV scanner settings (ESET) for ZIP file handling
  • [#246645]: Fix a file manager issue where all objects are selected after a file upload
  • [#246042]: Improve dashboard layout
  • [#245980]: Fix PIN delivery information for approver notification email
  • [#245686]: Improve share disable/enable actions
  • [#245685]: Prevent sharing automatically managed folders from the file manager such as “Outgoing” and “Incoming”
  • [#245680]: Improve list of shares sorting behaviour and actions
  • [#245666]: Improve notification display for changed files
  • [#245665]: Improve file change notification settings in the file manager
  • [#245501]: Improve error display in multiple tabs when editing a user
  • [#242957]: Update to proftpd 1.3.7c for security and compatibility improvements
  • [#232102]: Update to PostgreSQL 12 for performance and security improvements

Version 6.3.0

Release date: 2021-09-08

  • [#246015]: Fix profile editing for SSO users
  • [#245979]: Fix service name filter in the transfer log view
  • [#245679]: Improve timestamp format in the file deletion notification email
  • [#245678]: Fix path selection when editing an existing share
  • [#245657]: Implement ESET AV-scanner integration with SFTP/FPTS
  • [#245512]: Improve PIN delivery settings in the CargoLink wizard
  • [#245406]: Fix an issue with setting expiration date for existing CargoLinks
  • [#245394]: Implement system wide maximum value for CargoLink lifetimes
  • [#245374]: Improve PostgreSQL stability on low system memory
  • [#245182]: Fix SNMP logging permission issue by switching to syslog
  • [#244886]: Implement feature enabling/disabling globally and per user for administrators
  • [#243976]: Fix file change notifications for virtual file system (object store)
  • [#8581]: Implement self-managed 2FA for users including system wide enforcement policy

Version 6.2.0

Release date: 2021-08-25

  • [#245500]: Fix translation issues in the UI when editing a user
  • [#245395]: Fix an JSON date format for the CargoLinks API
  • [#245375]: Improve directory selection control for shares
  • [#245233]: All switching to a user account as administrator independent of the services enabled for the user
  • [#245199]: Improve background queue processing for CargoLink file manifest generation
  • [#245017]: Prepare for integrating ESET as content scanner
  • [#244888]: Implement file deletion notifications for users
  • [#242677]: Fix shortcut URLs for CargoLinks to be case insensitiv
  • [#166076]: Allow to restrict file types for upload links

Version 6.1.6

Release date: 2021-08-11

  • [#245043]: Improve performance for loading a CargoLink via API when a huge number of downloads is already present
  • [#245020]: Fix the state of CargoLinks created in the background via folder actions
  • [#245019]: Fix client side download counters in CargoLink preview mode
  • [#245015]: Fix logo position for users which have the navigation column disabled
  • [#244981]: Fix a redirect loop when multiple roles are assigned to a user which have specific dashboard settings
  • [#244879]: Fix system audit display for object store based file information
  • [#244816]: Fix file manager to not select all objects after a new directory has been created
  • [#244746]: Fix a cache invalidation issue of SHA1/SHA2 checksums when replacing files via SFTP
  • [#244375]: Improve the list of CargoLinks display performance by optimising a database query
  • [#244182]: Add the new mobile number input control to account settings and user management
  • [#165343]: Implement a facility to migrate a user from file system storage to object storage
  • [#241717]: Improve system configuration section to keep the currently selected tab when updating the settings
  • [#242367]: Fix an issue when multiple authentication sources are enabled and the user object is updated after successful sign in
  • [#241696]: Improve drag&drop feedback for folders which should use the special folder upload button instead
  • [#244375]: Improve the list of CargoLinks display performance by optimising a database query

Version 6.1.5

Release date: 2021-07-28

  • [#244668]: Implement new UI layout for organisation management as a user
  • [#243977]: Implement copying the shortcut URL of a CargoLink to the clipboard
  • [#244627]: Fix user management when having disabled services still active for a user (such as FTP)
  • [#244623]: Improve share participant user selection by sorting, adding an auto-complete field and searching
  • [#244591]: Fix a folder action issue when creating CargoLinks automatically for new files
  • [#244520]: Fix image path used in the sign-in component to not use absolute url
  • [#244513]: Fix user management when storing the public key of a user
  • [#244449]: Fix the user management when setting OTP via SMS as administrator
  • [#244434]: Fix missing navigation entry for organisation management as user
  • [#244412]: Fix an issue with CargoLink domain when using tenants
  • [#244370]: Fix an issue with PIN enforcement for CargoLinks preventing CargoLinks without PIN
  • [#244362]: Fix an issue when configuring the AD/LDAP source for group checks for shares
  • [#244361]: Improve user management performance with a lot of users
  • [#244351]: Fix invitation mail resend button for CargoLink
  • [#244344]: Fix the login disclaimer display when using embedded links
  • [#244320]: Fix access information as a recipient for confidential messages
  • [#244319]: Fix invalid text body referencing files for confidential message download information emails

Version 6.1.4

Release date: 2021-07-06

  • [#244299]: Fix a caching issue with multiple recipients of a CargoLink

Version 6.1.3

Release date: 2021-07-05

  • [#244257]: Fix sign up after invitation when external authentication is enabled

Version 6.1.2

Release date: 2021-07-02

  • [#244230]: Fix share invitation link for registering an account
  • [#244220]: Fix share path selection on edit
  • [#244203]: Fix terms accept redirection
  • [#244202]: Fix missing PIN when creating a CargoLink for multiple recipients
  • [#244201]: Fix error display on sign-in failures
  • [#244199]: Fix pin delivery by email as automatic fallback
  • [#244196]: Fix enable/disable upload flag for existing CargoLinks
  • [#244195]: Fix contact search layout
  • [#244193]: Improve recipient view information when the PIN can not be sent automatically for a CargoLink
  • [#244191]: Fix translations generation and loading for the frontend

Version 6.1.1

Release date: 2021-06-30

  • [#244175]: Fix email reconfirmation when editing a user as administrator
  • [#244140]: Fix default message and subject for CargoLinks of type confidential message
  • [#244074]: Fix custom CargoLink background image display
  • [#244071]: Improve quota and managed quota display in the user management
  • [#244046]: Fix a file cleanup issue for uploaded but unused files when creating CargoLinks (regression introduced in version 6.x)
  • [#244030]: Fix the usage of custom CargoLink default text settings
  • [#244023]: Fix pin delivery method when adding a new recipient to a CargoLink
  • [#244020]: Improve autocomplete when adding recipients to a CargoLink
  • [#244019]: Fix pin delivery method for multiple recipients when email delivery is selected
  • [#243958]: Fix approver lookup via directory to honour the administration settings to enable/disable the feature
  • [#243953]: Fix pin delivery by email as automated fallback when adding recipients without mobile numbers to a CargoLink
  • [#243928]: Fix the setting “SMS-OTP enabled” for user management as administrator

Version 6.1.0

Release date: 2021-06-16

  • [#242813]: Fix CargoLink valid-from / expires-at date input
  • [#242585]: Fix user management to correctly disable / enable fields depending on the authentication strategy
  • [#242545]: Fix email notification for share participants when creating a new share
  • [#242541]: Fix colour for the sign in button
  • [#242386]: Add CargoLink expiration notification for the sender
  • [#239222]: Add sorting by services for user management by administrators
  • [#239656]: Add upload information to the CargoLink PDF journal (if enabled)
  • [#238958]: Add CargoLink approval feature (two man rule)

Version 6.0.4

Release date: 2021-06-02

  • [#242434]: Fix a potential scheduled task invocation permission check
  • [#242321]: Allow for setting a custom password minimum length
  • [#242180]: Hide automatically managed CargoLink folders when selecting files in the CargoLink wizard
  • [#242161]: Improve login name generator uniqueness based on email addresses
  • [#242099]: Implement the folder action UI in the new layout
  • [#242098]: Security update of javascript libraries
  • [#240039]: Improve an error message when no user account can be created automatically due to email duplication check
  • [#238906]: Improve automatic cleanup of expired CargoLinks to also remove empty folders

Version 6.0.3

Release date: 2021-05-19

  • [#242309]: Fix authentication source assignment for new, automatically created users via AD/LDAP
  • [#242237]: Fix feedback message when an uploaded file is rejected by the malware scanner
  • [#242218]: Fix a file upload timeout configuration on the client side component
  • [#242179]: Add an informational message when file search in the CargoLink wizard returns no matches
  • [#242126]: Fix an error in audit log displaying for old user objects having legacy attributes in the changes
  • [#242124]: Fix an issue with CargoLink shortcut editing permissions for existing CargoLinks
  • [#242123]: Fix Single Sign On button link on sign-in page
  • [#242121]: Allow Single Sign On users to change their settings without providing a password
  • [#242090]: Fix client side CargoLink download counter update when downloading a file
  • [#242087]: Fix layout in the directory search for users
  • [#242085]: Add missing logo the the transfer log view for administrators

Version 6.0.0

Release date: 2021-05-05

  • [#242073]: Brand new user interface - see separate release notes
  • [#241472]: Fix SNMP configuration validation

Version 6.0.1

Release date: 2021-05-05

  • [#242088]: Fix file manager custom style include
  • [#242082]: Fix API Key expiration input

Version 5.3.7

Release date: 2021-04-14

  • [#240939]: Fix manifest generation timeout catching for CargoLinks and return Retry-After header to the client
  • [#240754]: Fix language setting detection via SAML and do not overwrite existing custom setting
  • [#239221]: Fix user impersonation for administrator to check if the target user can use the web interface

Version 5.3.6

Release date: 2021-03-31

  • [#240923]: Update openssl to version 1.1.1k for security fixes
  • [#240768]: Update the mimemagic library for licensing issues
  • [#240576]: Fix custom SNMP data fetching
  • [#240536]: Fix escaping special characters when displaying a confidential message
  • [#240052]: Allow minimum password length configuration
  • [#239886]: Update jquery library for security fixes
  • [#239885]: Prevent the HTTP header X-Forwarded-Host to be interpreted for security reasons

Version 5.3.5

Release date: 2021-03-17

  • [#239684]: Improve automatic share mounting when signing in
  • [#239532]: Update openssl to 1.1.1j for security fixes
  • [#238902]: Apply filter parameters when exporting transfer logs

Version 5.3.4

Release date: 2021-03-03

  • [#239079] Fix a potential issue for background jobs trying to load deleted objects
  • [#239611] Fix background share mounting error
  • [#239468] Fix a mime-type detection regression for file downloads
  • [#239472] Fix an issue with share invitation when external authentication (via LDAP/SAML) is activated

Version 5.3.3

Release date: 2021-02-17

  • [#239016] Disable file manager toolbar right click for layout consistency
  • [#236373] Allow searching for unconfirmed users as administrator
  • [#238434] Fix rules for PIN enforcement when both uploads and downloads are enabled for a CargoLink (combine enforcement policies)
  • [#239005] Fix link label in the CargoLink invitation for upload links when file name hiding is enabled
  • [#239004] Fix markup in CargoLink confirmation page
  • [#238407] Fix a validation issue when a group of recipients is used in the CargoLink wizard
  • [#237251] Allow the “.” character in shared folder names

Version 5.3.2

Release date: 2021-02-03

  • [#238484]: Fix folder upload with empty, nested subfolders in the file manager
  • [#238432]: Fix a missing translation for account confirmation grace time in the admin interface
  • [#237783]: Fix access permission for session information for sub administrators
  • [#236372]: Fix an internal server error when email duplicates arise with external authentication

Version 5.3.1

Release date: 2021-01-20

  • [#237451]: Fix CargoLink creation with directories which might affect the automatic cleanup
  • [#235482]: Implement automatic share management based on Active Directory groups

Version 5.2.20

Release date: 2021-01-06

  • [#237361]: Improve CargoLink download notification file path
  • [#236778]: Fix an issue with ED25519 keys for SFTP
  • [#236763]: Fix file checksum metadata cache management when moving files
  • [#236739]: Improve Filezilla compatibility for cipher consensus with SFTP

Version 5.2.19

Release date: 2020-12-16

  • [#237126]: Fix an exception when synchronising ActiveDirectory groups for shares
  • [#236796]: Fix an issue about scheduled file cleanup
  • [#236620]: Fix an issue with checksum calculation of uploaded files with CargoLinks
  • [#235726]: Improve quality with automated visual end-to-end tests
  • [#235485]: Add automatic Active Directory based shares for SFTP users
  • [#234092]: Fix an issue about automatically deleting files shared by CargoLink

Version 5.2.18

Release date: 2020-12-02

  • [#235800]: Fix an issue about updating SecureDrop expiration configuration
  • [#235484]: Implement a configuration section for automatic share management based on Active Directory groups
  • [#235483]: Implement automatic cleanup for shares based on Active Directory groups
  • [#235481]: Implement automatic shares based on Active Directory groups

Version 5.2.17

Release date: 2020-11-18

  • [#235748]: Fix proxy usage for outgoing connections downloading GeoIP databases
  • [#235553]: Prevent modifying CargoLinks to potentially circumvent PIN enforcement
  • [#235510]: Ensure existing PIN enforcement settings are migrated to the new configuration options
  • [#235441]: Fix an issue in the audit log display with deleted entries

Version 5.2.16

Release date: 2020-11-04

  • [#235037]: Ensure responses to HEAD requests always deliver a Content-Length header
  • [#234858]: Add a link to all CargoLinks in the dashboard when in “transfer only” mode
  • [#234709]: Fix a mime type detection issue with text based files for JSON, XML and CSS types
  • [#231995]: Add a configuration option per user to enforce PIN and mobile number usage for CargoLinks
  • [#231993]: Add a configuration option to enforce PIN and mobile number usage for CargoLinks when receiving files
  • [#231992]: Add a configuration option to enforce PIN and mobile number usage for CargoLinks when sending files

Version 5.2.15

Release date: 2020-10-21

  • [#234632]: Fix redirect for direct links after single sign on (SSO)
  • [#234611]: Improve file download speed by using asynchronous direct IO by the webserver
  • [#234300]: Fix user email change reconfirmation by administrators

Version 5.2.14

Release date: 2020-10-07

  • [#233959]: Improve transfer log entry for confidential messages
  • [#233958]: Improve download log display for confidential messages
  • [#233744]: Improve inter package dependency for CargoServer applications

Version 5.2.13

Release date: 2020-09-23

  • [#233360]: Improve log filtering for sensitive data in error handlers
  • [#233208]: Fix CargoLink PDF journal with anonymous recipients
  • [#232099]: Add PostgreSQL 12 compatibility for all applications
  • [#231523]: Update proftpd to 1.3.7a for security and stability improvements

Version 5.2.12

Release date: 2020-08-26

  • [#232442]: Fix issues with editing old CargoLinks
  • [#231642]: Improve the administration dashboard to sign out automatically after the session timeout
  • [#231356]: Add a check for available storage before uploading large files

Version 5.2.11

Release date: 2020-08-12

  • [#230807]: Add whitespace sanitising for user data like email and login fields

Version 5.2.10

Release date: 2020-07-29

  • [#230692]: Improve PIN prompt message on CargoLink recipient view
  • [#22426]: Improve invitation emails for share participants

Version 5.2.9

Release date: 2020-07-15

  • [#230272]: Improve administration UI with additional hints for LDAP configuration
  • [#230019]: Fix nightly session cleanup failures due to an invalid query
  • [#230009]: Improve SMS delivery status checks and parameter validation
  • [#229756]: Improve default timeout values for background file change detection
  • [#229743]: Update bundler to version 2.1 for all projects
  • [#228091]: Improve the nightly GeoIP DB update process and subsequent application reloading

Version 5.2.8

Release date: 2020-07-01

  • [#229897]: Improve logging for SAML requests
  • [#229630]: Improve AV scanner configuration management with ansible
  • [#228629]: Improve file type detection with additional ruleset for libmagic
  • [#227929]: Improve logging by adding a software version information to each message
  • [#227680]: Add an option to enable/disable binding sessions to a specific client
  • [#226684]: Update to ruby 2.6.6 for security and performance improvements
  • [#199470]: Improve logging for automatically cleaned up temporary files

Version 5.2.7

Release date: 2020-06-17

  • [#229539]: Implement disk usage monitoring per user and autolocking of accounts when limits are reached
  • [#228247]: Improve error messages for failed uploads in the dashboard
  • [#228184]: Fix content scanning when using the CargoLink API version 1
  • [#226781]: Update to openssl 1.1.1g for security and performance
  • [#28568]: Implement TLSv1.3 for HTTPS

Version 5.2.6

Release date: 2020-06-03

  • [#228594]: Fix range based download requests
  • [#227387]: Improve Redis connection settings

Version 5.2.5

Release date: 2020-05-20

  • [#228590]: Fix primary key type on the session table to prevent out of range errors
  • [#228013]: Fix heartbeat code on file uploading to the dashboard for session prolongation
  • [#227927]: Fix checksum calculation after file upload via the API to use a background job
  • [#227688]: Fix links in notification emails to correctly use tenant information
  • [#227410]: Add validation to internal networks configuration to prevent invalid network addresses
  • [#227406]: Fix a german translation about internal networks configuration
  • [#28058]: Fix a replication data type issue with background jobs

Version 5.2.4

Release date: 2020-05-06

  • [#227910]: Fix an issue with disabled TLS for LDAP connections
  • [#227685]: Fix an issue with file type detection with restricted uploads for CargoLink
  • [#227670]: Fix share target path resolution
  • [#227596]: Fix SFTP uploading for files larger than 2GB for some clients
  • [#45513]: Update to nginx 1.18 for security and performance

Version 5.2.3

Release date: 2020-04-22

  • [#226977]: Improve service checks after split brain situations
  • [#226753]: Add additional email header configuration for CargoLink invitations
  • [#226699]: Fix share mount state detection when using bindfs
  • [#226262]: Fix missing oauth2 scopes for existing API access tokens

Version 5.2.2

Release date: 2020-04-08

  • [#203034]: Fix missing system configuration for CargoLink notifications
  • [#201503]: Fix an issue where the CargoLink PIN got sent multiple times
  • [#201269]: Fix an issue with the GeoIP database download
  • [#167166]: Add client network depending 2FA enforcement
  • [#166358]: Improve file type detection for incoming files

Version 5.2.1

Release date: 2020-03-25

  • [#198674]: Add outgoing mail queue monitoring
  • [#198673]: Add SMS delivery monitoring
  • [#196577]: Improve testing facility for SFTP/FTPS for new versions
  • [#196116]: Fix a styling issue in CargoLink invitation emails
  • [#167165]: Remove deprecated TLSv1.1 for FTPS and HTTPS

Version 5.2.0

Release date: 2020-03-11

  • [#197739]: Fix an issue with too many pages in the CargoLink PDF journal
  • [#197697]: Add a configuration option to allow a clock drift for SAML authentication
  • [#197667]: Fix an issue with tenants and wrong invitation link
  • [#45502]: Update proftpd to 1.3.6c for security and performance improvements

Version 5.1.5

Release date: 2020-02-19

  • [#197988]: Fix a potential caching issue when downloading all files at once for a CargoLink multiple times
  • [#197947]: Fix an issue about wrong files being cleaned up for CargoLinks
  • [#197946]: Fix an error with folder action invocation with the wrong path
  • [#197738]: Improve CargoLink PDF journal for long file names
  • [#195808]: Improve user feedback when denying a file upload due to malware scanning

Version 5.1.4

Release date: 2020-02-05

  • [#196883]: Fix a SAML attribute parsing issue with the login
  • [#196111]: Fix an encoding issue with the ecall SMS provider
  • [#195344]: Fix an issue in the CargoLink journal PDF with upload event details
  • [#195104]: Fix an issue with file name escaping in the CargoLink detail view

Version 5.1.3

Release date: 2020-01-21

  • [#195875]: Fix TLS 1.3 connection attempts for FTPS
  • [#195727]: Fix a custom CA certificate permission error
  • [#195135]: Prevent HTML content in the CargoLink invitation message
  • [#195103]: Fix invalid content-type header when the accept header could not be detected
  • [#166298]: Add an option to hide file names in the CargoLink invitation email messages for confidentiality purpose
  • [#166201]: Fix a potential relative path issue when triggering automated actions on file upload
  • [#166113]: Switch to POST based downloads for the file manager to circumvent URL length restrictions
  • [#165529]: Update LDAP library for security and certificate validation improvements

Version 5.1.2

Release date: 2020-01-08

  • [#195383]: Fix an issue about user device binding with altered headers

Version 5.1.1

Release date: 2019-12-11

  • [#166085]: Implement a configuration to enable or disable URL shortening for CargoLinks
  • [#166072]: Fix an issue with flash alert messages after file uploads to a CargoLink
  • [#165522]: Implement a configuration to enable or disable the SecureDrop feature
  • [#165487]: Improve session security by binding the cookies to the user device
  • [#135696]: Switch to the new ecall API for sending SMS
  • [#31322]: Improve the position of the download link in CargoLink invitation emails

Version 5.1.0

Release date: 2019-11-27

  • [#165461]: Implement file type restrictions for logo and other image uploads as administrator
  • [#165351]: Fix a redirect loop issue with terms and one-time-password authentication
  • [#164880]: Fix an issue with IP address lookups for country information in the log view
  • [#164810]: Fix an issue with the mobile number when adding a new recipient to an existing CargoLink
  • [#137085]: Implement a URL shortcut for selected CargoLink recipients
  • [#137084]: Implement a SecureDrop feature to upload files in a postbox fashion
  • [#135607]: Fix a potential issue with invalid emails being added to the address book automatically

Version 5.0.8

Release date: 2019-11-13

  • [#164712]: Fix an issue with an erroneously prevented delete request in the file manager
  • [#137061]: Fix a job scheduling issue when creating a CargoLink
  • [#136860]: Add SMTP relay authentication via SASL
  • [#136234]: Filter sensitive headers stored with HTTPS download requests

Version 5.0.7

Release date: 2019-10-30

  • [#136751]: Fix a timezone encoding issue when scheduling events
  • [#136726]: Fix a I18n issue for generic error information
  • [#134577]: Fix a volume mount discovery issue for prometheus metrics reporting

Version 5.0.6

Release date: 2019-10-16

  • [#135460]: Add an improved resource, lock and metadata API
  • [#134485]: Add a file search backend
  • [#134428]: Fix an issue with the terms rich text editor
  • [#8669]: Update the APN push gateway to newest rails 5.2 version

Version 5.0.5

Release date: 2019-10-02

  • [#134470]: Fix an issue with a lost SSH key for a user when editing his settings
  • [#31227]: Fix checklist for new customer installations regarding support connections

Version 5.0.4

Release date: 2019-09-18

  • [#129787]: Fix file manager to prevent deletion of shared folders
  • [#129778]: Fix file manager to prevent participants from deleting target folders of shares
  • [#44031]: Add more file upload details to CargoLink journal PDF
  • [#33288]: Add support for OCSP stapling to the webserver
  • [#32826]: Fix an issue with fast cluster switches where services where not terminated correctly

Version 5.0.3

Release date: 2019-08-28

  • [#129881]: Fix share mount check after user login via background queue
  • [#129779]: Fix log errors after deleting a file
  • [#129777]: Fix log errors when reaching the quota with SFTP
  • [#129769]: Fix immediate PIN sending when adding additional recipients to a CargoLink
  • [#129653]: Fix database connection sharing with background queue jobs
  • [#129621]: Add Ubuntu 18.04 LTS production repository for our packages
  • [#129553]: Fix SNMP proxy to read cluster state via state file as opposed to service script

Version 5.0.2

Release date: 2019-08-21

  • [#129544]: Improve data change discovery after fail-over (automatic switch-back)
  • [#129428]: Fix a configuration migration issue for folder actions with Rails 5.2
  • [#129422]: Fix a bundler version mismatch issue for CargoMail when loading Rails 5.2 library versions
  • [#129418]: Fix a archive database migration issue for Rails 5.2
  • [#45944]: Fix a transfer journal filter issue with service names
  • [#37856]: Improve CargoMail compatibility with Ubuntu 18.04 LTS
  • [#27883]: Add automated CargoServer cluster update to Ubuntu 18.04 LTS

Version 5.0.1

Release date: 2019-08-07

  • [#45514]: Switch to openssl 1.1.1c for security updates
  • [#45508]: Remove legacy CoffeeScript frontend components
  • [#45497]: Fix an issue about SMS notifications being sent on CargoLink access
  • [#13723]: Support prometheus exporters on Ubuntu 18.04 LTS

Version 5.0.0

Release date: 2019-07-24

  • [#45356]: Fix a javascript issue when dragging files to contacts
  • [#45355]: Fix a javascript issue when loading the file manager
  • [#45354]: Fix a javascript issue when checking the session validity
  • [#44968]: Mark email field on user management as required
  • [#39290]: Switch to Ruby On Rails 5.2.3 for stability, security and performance

Version 4.3.8

Release date: 2019-07-10

  • [#44649]: Fix a user confirmation issue in the administration interface
  • [#44426]: Fix a cache refresh issue with group memberships in external directories
  • [#44089]: Fix a remote syslog buffering issue when using TCP transport
  • [#44030]: Implement a facility to create preconfigured CargoLinks
  • [#43912]: Implement CSV export for workflows related to data rooms
  • [#43910]: Implement automatic workflow state changes based on new files
  • [#39984]: Improve API documentation for data rooms
  • [#39983]: Implement a resource API for data rooms
  • [#38276]: Fix a mtab parsing issue on newer Linux kernels
  • [#38275]: Fix a fail2ban status processing issue with Ubuntu 18 LTS
  • [#37893]: Fix an issue with wrong timestamps when uploading files in the web file manager

Version 4.3.7

Release date: 2019-06-26

  • [#44100]: Fix a datatype size issue when storing file metadata with CargoLink
  • [#44054]: Fix a parameter checking issue when marking contacts as private
  • [#43930]: Fix bindfs compatibility with newer Ubuntu LTS releases
  • [#43907]: Improve workflow UI
  • [#43772]: Remove legacy feature “unconfirmed contacts”

Version 4.3.6

Release date: 2019-06-12

  • [#40614]: Fix a parameter issue when creating/updating a team
  • [#40612]: Fix a parameter issue when updating a folder action
  • [#40554]: Fix a parameter duplication issue when creating network restrictions
  • [#40230]: Fix a bundler library version lock issue preventing startup
  • [#38274]: Fix an OS package listing issue in the administration view

Version 4.3.5

Release date: 2019-05-23

  • [#40002]: Fix a datatype issue when setting expiration time in the cache
  • [#34832]: Implement customer specific NTP monitoring rules

Version 4.3.4

Release date: 2019-05-15

  • [#39814]: Fix an issue with the vault mounter UI startup
  • [#39292]: Fix all external libraries to exact versions
  • [#38711]: Fix a parameter sanitising issue when managing users
  • [#36733]: Support Ubuntu 18.04 LTS with ansible automation
  • [#29847]: Fix SSHD ClientAliveCountMax setting for automatic logout
  • [#13722]: Fix startup on Ubuntu 18.04 LTS with systemd
  • [#7870]: Switch to “strong parameters” for web request parameter whitelisting

Version 4.3.3

Release date: 2019-05-01

  • [#38724]: Fix missing I18n for authentication sources
  • [#38723]: Fix a database extension issue when creating objects with UUID
  • [#38362]: Add UUID as external identifier for a CargoLink
  • [#38361]: Add UUID as external identifiers to sender/recipients of CargoLinks
  • [#37859]: Update the mounter (vault) application to Ruby on Rails 5.2
  • [#32035]: Improve autofill hints for forms dealing with passwords
  • [#29834]: Improve cookie security by enabling SameSite settings
  • [#29588]: Improve recipient feedback when sending a PIN per SMS for a CargoLink
  • [#22293]: Update authentication library devise to 4.6 for security and stability fixes
  • [#21258]: Add a file cache cleanup facility

Version 4.3.2

Release date: 2019-04-17

  • [#38320]: Fix an issue with request_id logging generated at the webserver
  • [#37404]: Fix an issue with umlauts in the preconfigured PIN for recipients
  • [#35594]: Improve workflow email notifications on data rooms
  • [#35550]: Fix subfolder uploads for the file manager
  • [#35181]: Fix server side error with confidential message and specific user profile settings
  • [#33565]: Fix errors when uploading files after session timeout
  • [#32296]: Fix CargoLinks with multiple recipients having preconfigured PINs
  • [#32050]: Implement user list export for administrators
  • [#31247]: Update nginx and openssl to recent version for security fixes
  • [#23988]: Fix file downloads with “%” characters in the name
  • [#15291]: Reschedule weekly AV scan and report to Sunday evening

Version 4.3.1

Release date: 2019-04-03

  • [#31881]: Fix a SFTP quota issue with proftpd

Version 4.3.0

Release date: 2019-03-20

  • [#35620]: Fix german translations for CargoLink PDF Journal
  • [#31054]: Improve build infrastructure for Ubuntu 18.04 LTS
  • [#28564]: Update to Ruby 2.5 for security and performance
  • [#20507]: Fix a potential background queue concurrency issue

Version 4.2.33

Release date: 2019-03-06

  • [#30158]: Improve large ACL import with background processing

Version 4.2.32

Release date: 2019-02-20

  • [#34828]: Improve cache invalidation for CargoLink file lists
  • [#34789]: Fix an upload issue with drag&drop in the file manager for folders
  • [#30088]: Improve folder action call delay/limiting
  • [#29389]: Implement a CargoLink PDF transfer journal
  • [#29387]: Implement permanent metadata storage for CargoLink payloads
  • [#13425]: Implement soft delete for CargoLink objects

Version 4.2.31

Release date: 2019-02-06

  • [#33022]: Implement multiple application_ids for APN subscriptions
  • [#33021]: Implement multiple application_ids for APN on the push gateway
  • [#31944]: Implement IP restrictions for tenants
  • [#30161]: Implement CargoLink statistics metric with prometheus

Version 4.2.30

Release date: 2019-01-23

  • [#32361]: Fix transfer log display when GeoIP database is missing
  • [#32195]: Fix nginx based file uploading for the filemanager using CSRF protection

Version 4.2.29

Release date: 2019-01-09

  • [#31112]: Replace JS fetch API calls due to browser incompatibility
  • [#31108]: Improve ansible output management for updates
  • [#29388]: Add basic PDF creation facility to the backend

Version 4.2.28

Release date: 2018-12-12

  • [#30872]: Fix terms display date and checks when re-approving the terms
  • [#30728]: Update to openssl 1.1.1a for security updates
  • [#30717]: Implement LC_* environment variable cleanup for SSH connections
  • [#30716]: Fix date format checks when collecting error information metrics
  • [#29836]: Implement POST only requests for the file manager
  • [#29835]: Improve CSRF checks for the file manager
  • [#29799]: Implement custom user login format checkers
  • [#29793]: Improve automated cluster updates (maintenance mode)
  • [#29785]: Implement domain based rules for postfix when using CargoMail
  • [#29517]: Fix an issue with the API key expiration date set to the current date by default
  • [#21580]: Fix a typo in a DB view for unified transfer querying

Version 4.2.27

Release date: 2018-11-28

  • [#30155]: Fix a class inheritance issue with background jobs
  • [#29827]: Fix user name validation (firstname lastname)

Version 4.2.26

Release date: 2018-11-14

  • [#29900]: Fix unicorn server timeout configuration reload
  • [#29879]: Update to nginx 1.14.1 for security reasons
  • [#29596]: Improve the API documentation about pin delivery options
  • [#29580]: Implement usage terms re-approval after update

Version 4.2.25

Release date: 2018-10-31

  • [#29509]: Fix Content Security Policy to allow inline images (data attribute)
  • [#29393]: Improve CargoLink recipient view introduction text
  • [#29392]: Implement configurable PIN delivery by email

Version 4.2.24

Release date: 2018-10-17

  • [#29342]: Fix CargoLink download notification backlink for tenants
  • [#28923]: Implement custom usage terms to be accepted by all users

Version 4.2.23

Release date: 2018-10-03

  • [#28756]: Fix the profile icon
  • [#28664]: Fix metric collection with encrypted datastore (vault)

Version 4.2.22

Release date: 2018-09-19

  • [#28563]: Update to openssl 1.1.1 for security and TLS1.3 preparation
  • [#28149]: Fix a typo in the CargoLink invitation subject
  • [#27885]: Implement 10 minutes error counter statistics via prometheus
  • [#22309]: Implement key=value format logging for integration into SIEM systems

Version 4.2.21

Release date: 2018-09-05

  • [#22486]: Implement automated virtual node creation
  • [#18758]: Implement upload limit management via ansible

Version 4.2.20

Release date: 2018-08-22

  • [#27544]: Fix profile settings limit for CargoLinks (number range)
  • [#27367]: Update to openssl 1.1.0i for security updates
  • [#25109]: Implement separate AV-Engine update management
  • [#24799]: Implement expiration of DataRoom objects
  • [#24373]: Fix max_downloads configuration limit checks
  • [#22649]: Improve test coverage for storage pruning
  • [#19030]: Implement full product configuration management

Version 4.2.19

Release date: 2018-07-25

  • [#24490]: Fix keepalived custom settings deployment
  • [#24083]: Implement customer specific application timeouts
  • [#6843]: Implement “copy to clipboard” for CargoLinks

Version 4.2.18

Release date: 2018-07-11

  • [#24395]: Implement default country prefix for mobile numbers
  • [#24380]: Fix an issue with autocompleting mobile numbers on IE11
  • [#24261]: Improve package cleanup after automated software update
  • [#24050]: Fix an issue with JSON data store authentication
  • [#24023]: Implement customer specific snmpd settings
  • [#22520]: Fix an issue with wrong image urls in the browserconfig.xml file
  • [#18755]: Implement automatic and custom keepalived configuration management

Version 4.2.17

Release date: 2018-06-27

  • [#22838]: Fix an issue with editing email and login attributes as administrator

Version 4.2.16

Release date: 2018-06-13

  • [#23093]: Implement the configuration of prepared_statements for DB connections
  • [#21448]: Implement fail2ban management via ansible
  • [#17705]: Improve the job queue monitoring for failed jobs

Version 4.2.15

Release date: 2018-05-16

  • [#22703]: Fix a cache invalidation issue when updating ACL entries for CargoLinks
  • [#22621]: Fix a cache invalidation issue when group membership in an external AD changes
  • [#22609]: Update to nginx 1.14 for security and stability improvements
  • [#22600]: Implement cleanup for temporary files when exporting transfer logs
  • [#22247]: Increase system limits for file system watches via inotify
  • [#22165]: Implement explicit UTF8 support in FTP(S) connections when using the FEAT command
  • [#21148]: Prevent administrators to use “become user” then the target user has the web interface disabled
  • [#18994]: Implement 2FA via SMS policy for auto-provisioned users via AD/LDAP

Version 4.2.14

Release date: 2018-05-02

  • [#22502]: Fix an email template issue for account creation errors
  • [#22499]: Fix an issue with proftpd deny filter for hidden files
  • [#22450]: Fix an issue with seed data on new installations
  • [#22429]: Improve german documentation for account registration
  • [#21806]: Implement transfer log exports as CSV for administrators

Version 4.2.13

Release date: 2018-04-18

  • [#22173]: Implement customer specific SFTPKeyExchange settings
  • [#22168]: Improve ansible logging on managed nodes
  • [#22060]: Implement a “Referrer Policy” header for improved security
  • [#21804]: Fix a DB replication issue when detecting sequence dependencies
  • [#21650]: Fix an issue with folder uploads into the file manager
  • [#21573]: Implement extended object ID value ranges (bigint)
  • [#21308]: Implement customer specific SFTP/FTPS debug logging
  • [#21274]: Fix hidden files configuration (dot-files) for proftpd
  • [#18627]: Improve cron job handling in maintenance mode
  • [#8530]: Update to monit 5.25.1 for security and stability improvements

Version 4.2.12

Release date: 2018-04-04

  • [#22059]: Fix an issue when adding share participants by email
  • [#21798]: Update to openssl 1.1.0h for security updates
  • [#21781]: Fix a startup issue when multiple postgresql versions are available
  • [#21776]: Fix a replication start issue in maintenance mode
  • [#21562]: Fix a shell script syntax issue with the replication starter script
  • [#21443]: Fix a metrics collector issue when services are starting/stopping
  • [#13699]: Update CargoMail to ruby 2.3.6
  • [#9793]: Improve audit logs display for removed share participants

Version 4.2.11

Release date: 2018-03-21

  • [#21376]: Fix an issue with SCP logging (file size placeholder)
  • [#21321]: Fix an issue with the transfer log exporter (file name special characters)
  • [#21280]: Fix an issue with mod_statcache for proftpd changing file permissions
  • [#21247]: Fix an issue with missing CA files for proftpd
  • [#21241]: Fix an issue for proftpd TLSOptions and AllowEmptyPasswords (upstream bug)
  • [#21203]: Increase the DB replication timeout to optimise for large changesets
  • [#21149]: Fix an issue with a slow DB query for the administration dashboard

Version 4.2.10

Release date: 2018-03-07

  • [#20508]: Add nginx secure_link module for protecting temporary urls
  • [#20465]: Fix proftpd configuration with TLS session ticket settings
  • [#19107]: Monitor SSL certificate for expiration
  • [#18754]: Add a maintenance mode for cluster updates
  • [#8958]: Improve dot-files handling in the file manager and proftpd
  • [#8372]: Improve verification if shares are enabled for a user
  • [#7857]: Update to jQuery version 3

Version 4.2.9

Release date: 2018-02-21

  • [#20303]: Implement configurable session timeouts
  • [#20280]: Fix an issue with SFTP logging when deleting files
  • [#19128]: Fixed a DB password change task with ansible node management
  • [#18769]: Fix an issue with account manager assignment when editing users
  • [#17471]: Fix SFTP session tracking by ignoring monitoring connections
  • [#16736]: Update to openssl 1.1
  • [#12385]: Implement improved memory management with jemalloc for ruby
  • [#9080]: Improve log output of background file system monitoring
  • [#7483]: Improve email link for CargoLinks when using a desktop email application
  • [#7252]: Improve german localisation for the administration interface

Version 4.2.8

Release date: 2018-02-07

  • [#18997]: Improve CargoMail package management with ansible
  • [#18969]: Remove ansible 2.4 deprecated syntax for node management
  • [#18968]: Improve multi-user ansible setup for node management
  • [#18967]: Fix an issue with user preferences editing and disabled CargoLink upload features
  • [#18852]: Implement custom mailname support for nodes
  • [#18851]: Implement configurable SFTP logging for nodes
  • [#18842]: Implement internal DNS domain support for nodes
  • [#18366]: Implement environment based configuration for the database replication
  • [#15307]: Disable TLS 1.0 and TLS 1.1 by default
  • [#11261]: Update to proftpd 1.3.6
  • [#7415]: Improve SMS delivery retry scheduling

Version 4.2.7

Release date: 2018-01-24

  • [#18757]: Improve serving cached static SVG files
  • [#18727]: Improve environment based DB connection handling
  • [#18628]: Implement customer specific FTPS ciphers and TLS protocols
  • [#18181]: Add a german user guide
  • [#17703]: Update to ansible 2.4 for node management
  • [#16775]: Add cookie information to the sign-in page
  • [#15365]: Fix a file encoding issue (non UTF-8)
  • [#9091]: Improve error displaying when a file upload fails

Version 4.2.6

Release date: 2018-01-10

  • [#18492]: Improve background job error handling
  • [#18405]: Fix a I18n issue with SMS status information
  • [#18270]: Update to openssl 1.0.2n
  • [#18269]: Update to nginx 1.12.2
  • [#18261]: Improve ntp configuration
  • [#18021]: Improve CargoLink download access checks
  • [#17573]: Implement postgres credential management via ansible

Version 4.2.5

Release date: 2017-12-13

  • [#18252]: Implement proftpd custom settings with ansible
  • [#18232]: Implement custom sshd settings with ansible
  • [#17699]: Implement background queue monitoring and alerting
  • [#17694]: Implement cluster configuration with ansible
  • [#17589]: Fix a unicorn status display issue
  • [#17572]: Implement encrypted SSL certificate management with ansible
  • [#8105]: Fix a contact parsing issue when using the address book in the CargoLink wizard

Version 4.2.4

Release date: 2017-11-29

  • [#18176]: Fix an issue when displaying CargoLinks with nested directories
  • [#18114]: Implement node role metric with prometheus
  • [#18109]: Implement NTP metrics and alerts with prometheus
  • [#18055]: Fix a share JS issue when inviting participants by email address
  • [#18024]: Fix a directory ownership in /opt/cargo
  • [#17759]: Improve file system event dispatch monitoring
  • [#17747]: Implement application version metrics with prometheus
  • [#17725]: Fix an issue when downloading directories as ZIP files containing the ‘?’ character in the name
  • [#17692]: Implement SenderID compliant headers for email messages
  • [#13718]: Fix an issue when comparing email addresses by using case-insensitive operations
  • [#9089]: Fix a display issue with long file names in a CargoLink

Version 4.2.3

Release date: 2017-11-15

  • [#17963]: Improve JSON data store for CargoLinks
  • [#17852]: Fix permission checks on user data directories
  • [#17761]: Implement group membership filters for CargoLinks
  • [#17760]: Improve host based configuration for ansible
  • [#17570]: Implement encrypted configuration elements with ansible
  • [#13646]: Fix rabbitmq startup monitoring
  • [#13640]: Fix prometheus access via ssh
  • [#9812]: Improve SAML local logout

Version 4.2.2

Release date: 2017-11-01

  • [#17816]: Implement ansible template validation
  • [#17795]: Fix prometheus file system metric gathering
  • [#17781]: Implement unicorn worker settings via ansible
  • [#17757]: Improve initial database password generation
  • [#17741]: Implement firewall rebuild when changing settings via ansible
  • [#17737]: Fix content scanner file path encoding with special characters
  • [#17704]: Implement Cargo software update via ansible
  • [#17701]: Update proftpd configuration to use database functions
  • [#17690]: Improve email validation and recipient parsing
  • [#17432]: Implement configuration of max. login attempts via ansible
  • [#17391]: Implement a unified transfer view for administrators
  • [#17028]: Improve HTTPS monitoring for prometheus

Version 4.2.1

Release date: 2017-10-18

  • [#17648]: Fix an issue with custom cache intervals for CargoLinks
  • [#17590]: Fix an issue with prepared statements in the background queue
  • [#17458]: Fix an issue with public key lookup for SFTP
  • [#17447]: Improve automated configuration rollout for managed nodes
  • [#11137]: Fix an issue with encoded file names when using WebDAV with the macOS finder
  • [#7670]: Improve the documentation generation by using asciidoctor

Version 4.2.0

Release date: 2017-10-04

  • [#17390]: Improve remote system management and automation
  • [#17025]: Fix a file manager navigation issue
  • [#17013]: Improve cargo update automation
  • [#15355]: Improve CargoLink manifest generation and caching
  • [#15353]: Implement a file resource API on top of CargoLinks
  • [#15312]: Fix long cache key handling
  • [#15190]: Improve local DB connection settings
  • [#9002]: Fix a browser header parsing issue (wrong encoding)
  • [#7364]: Implement automatic account locking based on authentication failures

Version 4.1.14

Release date: 2017-09-20

  • [#17016]: Improve bulk user import
  • [#16949]: Update to ruby 2.3.5 for security fixes
  • [#8936]: Implement profile edit restrictions for users

Version 4.1.13

Release date: 2017-09-06

  • [#16761]: Fixed a load path issue with libraries
  • [#16738]: Fixed a class namespace issue
  • [#15348]: Implement custom invitation subjects for CargoLinks
  • [#15347]: Implement email sending policy per user

Version 4.1.12

Release date: 2017-08-23

  • [#13578]: Fix an issue with counting currently active web users
  • [#12433]: Support Redis as cache store
  • [#11274]: Update to nginx 1.12.1
  • [#8209]: Improve monit status integration into the administration web interface

Version 4.1.11

Release date: 2017-08-09

  • [#15298]: Fix an issue when moving an existing account to AD authentication
  • [#15292]: Update to openssl 1.0.2l
  • [#15282]: Fix a german translation issue in the administration interface
  • [#15269]: Fix a circular dependency issue
  • [#15192]: Add more options to the file TTL setting
  • [#15171]: Update to ruby on rails 4.2.9
  • [#13906]: Fix a share duplication path check issue
  • [#13825]: Fix a redirect issue after editing a CargoLink
  • [#13568]: Instrument nginx for prometheus monitoring
  • [#13424]: Fix a download logging inconsistency (file name versus full path)

Version 4.1.10

Release date: 2017-07-26

  • [#13860]: Fix an issue when detecting mounted shares with spaces in their name
  • [#13824]: Fix a typo in the english CargoLink invitations subject
  • [#13756]: Improve sign in error feedback
  • [#13289]: Fix an issue with email addresses containing umlauts

Version 4.1.9

Release date: 2017-07-05

  • [#13814]: Implement CargoLink specific caching intervals
  • [#13747]: Fix an issue with CargoLink uploads double logging into service transfers
  • [#13744]: Fix an issue with ansible proxy settings
  • [#9067]: Implement signed and encrypted SAML messages
  • [#8224]: Implement an option to remove old CargoLink download logs

Version 4.1.8

Release date: 2017-06-21

  • [#13698]: Update ruby to version 2.3.4
  • [#13515]: Improve CargoLink invitation subject
  • [#13514]: Fix WebDAV OPTIONS for windows clients
  • [#8229]: Implement CargoLink settings enforcement for administrators

Version 4.1.7

Release date: 2017-06-07

  • [#13628]: Fix an issue with SMS encoding using a mail gateway
  • [#13559]: Fix an issue with Javascript initialisation for some views
  • [#13558]: Fix an issue with WebDAV external authentication
  • [#12384]: Implement adding recipient mobile numbers in the CargoLink wizard

Version 4.1.6

Release date: 2017-05-24

  • [#13550]: Fix JS date picker control initialisation
  • [#12447]: Fix CargoLink wizard server exception handling
  • [#12382]: Fix authenticated WebDAV GET request server errors
  • [#11246]: Implement file system events in a AMQP message queue

Version 4.1.5

Release date: 2017-05-10

  • [#13280]: Update unicorn application server to version 5.3
  • [#13273]: Implement prometheus base monitoring exporters
  • [#12445]: Fix queue worker thread monitoring in cargod
  • [#11273]: Implement WebDAV locking feature toggle
  • [#11231]: Implement AMQP broker server configuration
  • [#9203]: Fix archive interval calculation
  • [#7152]: Fix share read/write change application

Version 4.1.4

Release date: 2017-04-26

  • [#12443]: Fix an issue with automatic CargoLink deletion (file remover)
  • [#9209]: Implement ServiceTransfer logging for WebDAV
  • [#8925]: Implement autodelete (content remove) for confidential messages

Version 4.1.3

Release date: 2017-04-12

  • [#11142]: Improve english translations
  • [#9768]: Improve background job performance rebuilding CargoLink manifests
  • [#9307]: Improve the dashboard view and honor the enabling/disabling of CargoLinks to receive files
  • [#9258]: Fix an issue for MS IE when downloading files with UTF-8 encoded names

Version 4.1.2

Release date: 2017-03-29

  • [#9794]: Fix an issue regarding logging of WebDAV sessions
  • [#9785]: Fix some translation issues in the admin panel when using German as the default language
  • [#9293]: Fix restrictions regarding upload CargoLinks in new CargoLink wizard
  • [#9256]: Allow CargoLink recipients to upload multiple files at once
  • [#8935]: Prevent users from editing CargoLinks generated by CargoMail

Version 4.1.1

Release date: 2017-03-15

  • [#9314]: Remove some legacy DRBD parts from cluster file synchronization script
  • [#9276]: Fix an issue regarding missing german translations for the login page
  • [#9253]: Allow admins to enable / disable the AD group share feature
  • [#9096]: Fix an issue in the admin audit log regarding Cargo user deletion
  • [#9088]: Fix an issue regarding overly detailed upload progress percentage
  • [#8922]: Implement logging for WebDAV sessions
  • [#8896]: Auto-mount shares for AD groups upon first login / Cargo account creation
  • [#8830]: Allow enforcement of PIN usage on all CargoLinks
  • [#3894]: Allow Shares to AD group members

Version 4.1.0

Release date: 2017-03-01

  • [#9125]: Add missing release notes for Cargo 4.0.13
  • [#9124]: Fix an issue with ZIP downloads in conjunction with items that are still pending content scanning
  • [#9069]: Fix an issue regarding visitor group refresh caching
  • [#8924]: Prevent AD synchronized users from changing their name, email and phone number in Cargo
  • [#8894]: Allow IP restrictions for WebDAV service usage
  • [#8892]: Implement basic WebDAV support
  • [#8889]: Implement file locking required for WebDAV support
  • [#7833]: Fix an issue regarding folders with slashes in their names
  • [#7513]: Delete files & folders uploaded using the Easy Dashboard when no CargoLink was ever created
  • [#6778]: Prevent Cargo admins from editing AD synchronized user details

Version 4.0.14

Release date: 2017-02-15

  • [#9060]: Fix an issue regarding keepalived restarts in Cargo cluster setups
  • [#9059]: Fix an issue regarding SAML IDP certificate formatting
  • [#9053]: Update nginx to version 1.10.3
  • [#9051]: Disallow bulk download on CargoLinks with all items still pending content scan
  • [#9050]: Fix a file download logging issue regarding background content scans
  • [#9049]: Fix a sporadic error message when moving folders in WebFM
  • [#9045]: Fix an issue in provisioning regarding proftpd.conf include statements
  • [#8593]: Speed up failovers by keeping nginx, proftpd and unicorn running on both cluster nodes at all times
  • [#8327]: Implement background content scanning for CargoLink uploads
  • [#8318]: Implement background content scanning for uploads via Easy Dashboard
  • [#7232]: Increase max. number of open files for Cargo processes

Version 4.0.13

Release date: 2017-02-01

  • [#9043]: Fix an issue regarding package installation not catching errors during DB migration
  • [#9033]: Fix an issue regarding DB migration of the super admin flag
  • [#9007]: Update OpenSSL to version 1.0.2k
  • [#9001]: Reduce number of log messages when calculating file checksums
  • [#9000]: Include /data/config in nightly Cargo backups
  • [#8987]: Fix an issue regarding certain file extensions (.bak, .core) getting hidden in CargoLinks
  • [#8969]: Improve cleanup of aborted large HTTPS uploads
  • [#8951]: Fix a logging issue regarding files uploaded using the new CargoLink wizard
  • [#8946]: Update keepalived to version 1.3.2
  • [#8887]: Fix an issue regarding archiving of transfers with long filenames / paths
  • [#8866]: Allow GeoIP restrictions on FTP / FTPS / SFTP connections
  • [#8420]: Improve the message indicating remaining views of a confidential message
  • [#8328]: Prevent users from accessing files that are still getting scanned in the background

Version 4.0.12

Release date: 2017-01-18

  • [#8945]: Update ProFTPd to version 1.3.5d
  • [#8933]: Improve separation between nginx access and error logging
  • [#8927]: Prevent confidential message content from getting logged
  • [#8901]: Fix an issue regarding fail2ban log rotation
  • [#8890]: Run the hourly cache warmup on Cargo slave nodes as well
  • [#8888]: Move long-running manifest generation for a CargoLink to the background
  • [#8178]: Fix an issue regarding email notifications for users with special characters in their name
  • [#8176]: Fix an issue regarding email notifications after a confidential message has been downloaded

Version 4.0.11

Release date: 2017-01-04

  • [#8904]: Fix a path monitoring issue for folder actions when matching sub-directories
  • [#8884]: Add email alerting when exceeding certain resource limits
  • [#8839]: Unify the manifest and the file list generated for CargoLinks
  • [#8725]: Make the number of unicorn workers configurable
  • [#7869]: Move all inline JavaScript code into separate CoffeeScript files
  • [#7751]: Fix a share creation issue when comparing the path with existing shares
  • [#6730]: Allow multiple super-admins on a Cargo instance

Version 4.0.10

Release date: 2016-12-14

  • [#8837]: Speed up generation of the file manifest
  • [#8834]: Fix an issue preventing email notifications for new CargoLinks in the classic wizard
  • [#8833]: Fix an issue with the mouse-over text in the LDAP user directory admin search results
  • [#8720]: Prevent auto-deletion of folders in case there’s other CargoLinks pointing to it
  • [#7510]: Fix an issue regarding auto-deletion of expired CargoLinks

Version 4.0.9

Release date: 2016-11-30

  • [#8811]: In Cargo cluster setups, trigger a fail-over in case the database on the designated master becomes unresponsive
  • [#8765]: Fix an issue regarding expired CargoLinks with GeoIP restrictions
  • [#8755]: Update management SSH configuration for stronger ciphers and best practice security settings
  • [#8735]: Fix an issue regarding account sign up / user self-registration
  • [#8733]: Fix an issue when the LDAP user directory for address lookups isn’t reachable
  • [#8010]: Update Ruby to version 2.3.1
  • [#7500]: Display contacts and favorite contacts in filemanager sidepanel
  • [#7253]: Improve some of the German translations
  • [#7176]: Improve ProFTPd session status handling
  • [#6600]: Implement plivo.com as a new SMS gateway provider

Version 4.0.8

Release date: 2016-11-16

  • [#8716]: Update nginx to version 1.10.2
  • [#8713]: Improve filtering and pagination of Cargo journal / admin audit log
  • [#8710]: Fix an issue with restarting Cargo services after unlocking an encrypted filesystem
  • [#8705]: Fix an issue regarding SHA1 checksum calculations on directories
  • [#8704]: Fix an issue in CargoMail regarding startup and queue processing behaviour
  • [#8674]: Localized and improved error pages (for HTTP errors 404, 500 etc)
  • [#8591]: Prevent the weekly anti-virus scan from following Cargo shares
  • [#8326]: Async content scanner: Prevent users from accessing unscanned files
  • [#6670]: Allow restrictions based on which country a CargoLink access request is coming from (GeoIP)

Version 4.0.7

Release date: 2016-11-02

  • [#8711]: Fix an issue regarding file-synchronization during fail-overs in cluster setups
  • [#8687]: Update ClamAV to version 0.99.2
  • [#8647]: Fix error handling when user directory server IP or credentials are wrong
  • [#8449]: Disable PIN input field when creating a CargoLink for a recipient group

Version 4.0.6

Release date: 2016-10-19

  • [#8672]: Allow for multiple AD servers with fail-over capabilities
  • [#8658]: Improve DB replication monitoring
  • [#8648]: Show the full name and mobile number when autocompleting CargoLink recipients
  • [#8585]: Show directory contact visibility information to the administrator
  • [#8228]: Fix an issue when computing disk usage and 0 bytes are allocated
  • [#7943]: Allow adding a mobile number to a CargoLink’s recipient

Version 4.0.5

Release date: 2016-10-05

  • [#8592]: Show the admin owning a certain directory in LDAP directory configuration section
  • [#8584]: Update OpenSSL to version 1.0.2j
  • [#8572]: Prevent creation of duplicate contacts when using a central user directory
  • [#8184]: Show the required mobile number format when adding / modifying a contact
  • [#6615]: Update list of Cargo package dependencies

Version 4.0.4

Release date: 2016-09-21

  • [#8557]: Fix an issue when admins are editing a user account
  • [#8543]: Automatically update GeoIP database on a weekly basis
  • [#8542]: Enable users to use contacts from an external address book when creating new Shares
  • [#8537]: Fix an issue regarding session timeouts during large uploads
  • [#8525]: Fix a potential javascript issue when uploading large files with a browser
  • [#8523]: Fix alerts regarding a stalled DB replication
  • [#8455]: Allow admins to configure external address book lookups via AD / LDAP
  • [#8445]: Use binstubs for Ruby application gems
  • [#8347]: Fix an issue regarding a deleted user still having active CargoLinks
  • [#8319]: Implement background scanning of uploaded files
  • [#8300]: Fix an issue with antivirus reports falsely marking disappeared files as infected
  • [#7655]: Improve error message in case CargoLink settings cannot be saved as user’s new default
  • [#4198]: Enable users to use contacts from an external address book when creating new CargoLinks

Version 4.0.3

Release date: 2016-09-07

  • [#8531]: Update keepalived to version 1.2.23
  • [#8529]: Fix an issue regarding the page titles for new upload CargoLinks & confidential messages
  • [#8471]: Fix an issue regarding the links from a CargoLink view back to Web file manager
  • [#8081]: Fix an issue regarding local accounts when using SAML authentication
  • [#7788]: Update OpenSSL to version 1.0.2h

Version 4.0.2

Release date: 2016-08-24

  • [#8436]: Fix submission of contact information via CargoLink recipient parameter
  • [#8431]: Fix File Manager sorting by modification time
  • [#8375]: Update Rails to version 4.2.7.1
  • [#8325]: Implement asynchronous content-scanning facility for Web Filemanager uploads
  • [#6092]: Reduce DB backup compression level to increase backup speed

Version 4.0.1

Release date: 2016-08-10

  • [#8411]: Fix an issue with translations of authenticated CargoLinks
  • [#8410]: Fix an issue when configuring new tenants (subdomains)
  • [#8405]: Get SSL certificate path from environment in proftpd.conf
  • [#8403]: Fix an issue preventing the creation of a share on sub-folders in elFinder
  • [#8402]: Improve description of “Unlimited Downloads” field in account settings
  • [#8401]: Fix an issue regarding invalid input for CargoLink max. number of downloads
  • [#8400]: Fix an issue when setting maximum downloads on an existing CargoLink to 1
  • [#8395]: Fix an issue regarding the display of the close button on the old CargoLink wizard
  • [#8392]: Fix a routing issue when editing existing folder actions
  • [#8384]: Add asynchronous content scanning feature flag
  • [#8376]: Add proper validation to user profile settings
  • [#8036]: Allow drag&drop of files from desktop onto contacts/favorites
  • [#7856]: Update elFinder (File Manager) to the latest version
  • [#7480]: Fix sanitization of HTML in CargoLink email messages
  • [#6669]: Add GeoIP information to CargoLink download reports

Version 4.0.0

Release date: 2016-07-27

  • [#8393]: Get DB credentials from environment variables in proftpd.conf
  • [#8370]: Add a Cancel button to the confidential message dialog
  • [#8369]: Fix an application issue when the ClamAV content-scanner isn’t available
  • [#8362]: Enable server-side copying for FTP / FTPS (SITE CPFR/CPTO commands)
  • [#8351]: Fix default quota and anti-virus report sender email address and X-Sender header
  • [#8280]: Switch scheduled maintenance tasks to use syslog
  • [#8276]: Fix an issue when resolving a AD distribution list for folder actions
  • [#8059]: Report Anti-Virus content scanner violations on a single log line
  • [#8030]: Allow unlimited downloads of a CargoLink as a user default setting
  • [#7882]: Allow setting / unsetting unlimited downloads on an existing CargoLink
  • [#7427]: Allow sorting of CargoLinks based on creation and expiration date

Version 3.1.16

Release date: 2016-07-13

  • [#8365]: Fix a CSS issue in the admin configuration section
  • [#8349]: Fix a user authentication issue in conjunction with CargoMail & SAML
  • [#8311]: Fix an issue with CargoMail startup
  • [#8310]: Fix rsyslog configuration for CargoMail
  • [#8165]: Fix application of a user’s default PIN when creating new CargoLinks
  • [#7652]: Refuse files if (anti-virus) content scanner cannot be invoked
  • [#7448]: Offload SHA checksum calculation for uploaded files to nginx

Version 3.1.15

Release date: 2016-06-29

  • [#8302]: Improve HTML layout for mobile recipients
  • [#8298]: Correct a typo in the german localisation when sending a download notification
  • [#8296]: Fix an issue when loading a folder action in the background
  • [#8284]: Add X-Sender header to notification mails for new shares
  • [#8275]: Fix a scheduling issues for actions using a weekly schedule
  • [#8246]: Increase allowed memory limit when monitoring CargoMail
  • [#8168]: Improve file manager link on the dashboard with an icon
  • [#7575]: Use syslog for CargoMail
  • [#7430]: Allow for enabling uploads directly in the CargoLink wizard
  • [#4196]: Improve upload progress feedback when scanning files for malware

Version 3.1.14

Release date: 2016-06-15

  • [#8235]: Update nginx to version 1.10.1
  • [#8216]: Add an API to get the current oauth visitor information
  • [#8047]: Add random SECRET_KEY_BASE to /data/config/env
  • [#7853]: Optimize CargoLink recipient view for smartphones
  • [#7536]: Fix a display issue with the LDAP user search mask
  • [#7509]: Remove all customizations from production.rb

Version 3.1.13

Release date: 2016-06-01

  • [#8198]: Fix ClamAV logrotate scripts
  • [#8186]: Fix an API ACL performance issue
  • [#8179]: Fix an issue regarding backslashes in shared folder names
  • [#8159]: Automatically start CargoMail if installed
  • [#8103]: Update keepalived to version 1.2.20
  • [#8102]: Update nginx to version 1.10.0
  • [#8101]: Improve error message when an admin tries to create an invalid Share
  • [#8011]: Fix a potential stale caching issue for the menu
  • [#7982]: Restrict read permissions on /var/log/xferlog
  • [#7508]: Fix calculation regarding unicorn memory limits

Version 3.1.12

Release date: 2016-05-18

  • [#8164]: Fix some typos and inconsistencies in the WebUI
  • [#8163]: Fix rubyrep_wrapper access permissions
  • [#8099]: Update monit to version 5.17.1
  • [#8093]: Use 4096-bit RSA keys instead of 1024-bit DSA keys for SFTP
  • [#8092]: Update OpenSSL to version 1.0.1t
  • [#8085]: Add RAR archive scanning support to ClamAV
  • [#8082]: Increase ClamAV scanning timeout for uploads via the WebUI
  • [#8067]: Fix a public group membership query issue for externally authenticated visitors
  • [#8043]: Fix transport log export with regards to automatically deleted files
  • [#7907]: Allow scheduled creation of CargoLinks via a Folder Action
  • [#7432]: Implement new confidential message wizard
  • [#7179]: Fix IE11 referrer hiding when linking to external URLs

Version 3.1.11

Release date: 2016-05-04

  • [#8069]: Fix handling of filenames and paths in download notifications and cache warmup background job
  • [#8066]: Fix WAF header authentication precedence
  • [#8022]: Fix fallback authentication via other authentication sources when using SSO via SAML
  • [#4534]: Prevent admins from creating loops when configuring Shares

Version 3.1.10

Release date: 2016-04-20

  • [#8029]: Make ClamAV (clamd/freshclam) use syslog instead of directly logging to a file
  • [#8009]: Fix display of files uploaded via a PIN-protected CargoLink
  • [#7981]: Apply a more restrictive umask on user data, only granting Cargo services read/write access
  • [#7979]: Add “no-store, no-cache” to Cache-Control headers to prevent caching of sensitive information
  • [#7963]: Increase ClamAV maximum scan size to 1 GB, move temporary archive extraction path to /data/tmp
  • [#7872]: Add ActiveSupport v4 compatibility to monit
  • [#7739]: Integrate HMAC protected user id propagation from external systems using HTTP headers

Version 3.1.9

Release date: 2016-04-06

  • [#7977]: Update ProFTPD to version 1.3.5b
  • [#7909]: Allow expiration extension on CargoLinks pointing to an empty folder
  • [#7898]: Added permission layer to the key/value store available with each CargoLink
  • [#7744]: Allow excluding attributes in the CargoLink manifest
  • [#7404]: Do not traverse bindfs Shares in disk usage calculation background job

Version 3.1.8

Release date: 2016-03-23

  • [#7967]: Fix rake-wrapper.sh job locking mechanism
  • [#7962]: Fix issues with the “More settings” section of the old CargoLink wizard
  • [#7954]: Fix an issue with CargoLinks pointing to the wrong subdomain in a multi-tentant setup
  • [#7953]: Fix an issue regarding files uploaded via a CargoLink not getting immediately displayed

Version 3.1.7

Release date: 2016-03-09

  • [#7908]: Fix an issue regarding quoting in CargoLink invitation messages
  • [#7905]: Update to Rails 4.2.5.2 (preflight), Rails 3.2.22.2 (webapp)
  • [#7899]: Update OpenSSL to version 1.0.1s
  • [#7897]: Fix log export when users have been deleted
  • [#7889]: Do not filter login_token in rails.log
  • [#7886]: Fix an issue with some icons missing in font-awesome 4.4.0
  • [#7810]: Fix an issue where the admin audit logs were missing some information

Version 3.1.6

Release date: 2016-02-24

  • [#7875]: Update glibc to fix CVE-2015-7547
  • [#7861]: Fix a caching issue of the files displayed in a CargoLink for the recipient
  • [#7825]: Fix an exception regarding downloads of non-existing files
  • [#7769]: Update preflight app to Rails 4.2
  • [#7759]: Update the devise Ruby gem to version 3.2.4
  • [#7757]: Update jQuery Ruby gem to version 3.1.4
  • [#7538]: Fix an issue when duplicate recipients are specified for a CargoLink

Version 3.1.5

Release date: 2016-02-10

  • [#7838]: Fix the handling of subdomain URLs
  • [#7827]: Fix an issue with folder-action-monitor signal handling during startup
  • [#7824]: Increase the type of up/download size in the DB to bigint, allowing logging of transfers of up to 64TB
  • [#7738]: Build nginx using the latest version of mod_zip
  • [#7735]: Implement public groups for the API ACL
  • [#7703]: Peridiocally refresh a visitor’s ACL group membership
  • [#7558]: Enforce ACL permissions on CargoLinks

Version 3.1.4

Release date: 2016-01-27

  • [#7808]: Update to OpenSSL 1.0.1r
  • [#7789]: Update to nginx 1.8.1
  • [#7734]: Show the actual client IP in rails.log instead of the upstream proxy IP
  • [#7732]: Fix an issue regarding IE11 file uploads when using the new dashboard
  • [#7730]: When cargo-mail is installed, permit incoming SMTP from the servers configured in postfix main.cf
  • [#7721]: Export all environment variables defined in /data/config/env to Rails environment
  • [#7696]: Update config and documentation to contain our new jumphost IP for maintenance access
  • [#7419]: Do not trigger CAPTCHA upon reloading the login page
  • [#7408]: Hide text ‘Click on the envelope to see its content’ when the secret message is displayed

Version 3.1.3

Release date: 2015-12-23

  • [#7666]: Increase kernel memory allocated for inotify user watches
  • [#7664]: Improve monit postgresql socket monitoring
  • [#7654]: Increase number of nginx workers to prevent blocking behaviour during large file uploads
  • [#7644]: Fix an issue where downloading a zipped directory via a CargoLink wouldn’t generate a notification mail
  • [#7612]: Fix the display of number of remaining downloads on a CargoLink with multiple recipients
  • [#7605]: Update to OpenSSL 1.0.1q
  • [#7600]: Fix wording regarding notifications about Share participants
  • [#7597]: Fix an issue where the expiration date for partially downloaded CargoLinks could no longer be increased
  • [#7571]: Fix an issue where a CargoLink would mistakenly get assigned a random PIN under certain conditions
  • [#7569]: Fix an issue where setting a custom PIN for a CargoLink might not work under certain conditions
  • [#7553]: Improve CargoLink expiration time input validation
  • [#7512]: Improve quota and content checks before moving uploaded data to a user’s home directory
  • [#7450]: Prevent users from configuring negative numbers of max downloads for CargoLinks

Version 3.1.2

Release date: 2015-12-02

  • [#7578]: Fix an issue with password recovery getting erroneously enabled during provisioning
  • [#7574]: Update to custom-built monit 5.15 to improve speed and stability
  • [#7573]: Fix an issue in the classic CargoLink wizard when setting an expiration time of only a few minutes
  • [#7570]: Fix an issue preventing the creation of local Cargo users
  • [#7568]: Fix an issue regarding the display of expired CargoLinks
  • [#7567]: Fix an issue where confidential messages were missing the envelope icon when using the old CargoLink wizard
  • [#7565]: Fix visibility of “New upload” button at the top left when using the old CargoLink wizard
  • [#7559]: Remove a few obsolete ‘monit monitor’ calls from cargo init-script
  • [#7529]: Improve failover mechanism of Cargo HA cluster
  • [#7477]: Fix an issue where a wrong path for a file might be shown depending on how it’s downloaded
  • [#7461]: Prevent monit from stopping services under high system load
  • [#7459]: Update to keepalived 1.2.19 to improve failover speed and handling of gratuitous ARP
  • [#7455]: Fix cargo-replicator.sh mechanism of finding rubyrep’s PID when killing it
  • [#7449]: Fix an issue with a download of multiple files stalling under certain conditions

Version 3.1.1

Release date: 2015-11-18

  • [#7549]: Fix an issue with rubyrep not starting if the designated slave isn’t available
  • [#7547]: Fix “flicker” effect when uploading files via Easy Dashboard
  • [#7534]: Fix an issue preventing admins from being able to kick (forcefully logout) users
  • [#7531]: Fix file selection dialog in the old CargoLink wizard
  • [#7527]: Fix a typo in /etc/logrotate.d/cargo introduced in Cargo 2.6.8
  • [#7498]: Fix time input validation when setting the expiration time on a CargoLink
  • [#7492]: Fix traffic report calculations, which were accidentally inflated by a factor of 1e6
  • [#7488]: Fix wording when creating the email message for an upload CargoLink
  • [#7476]: Fix downloads in CargoLink “preview” mode (by the owner of the CargoLink) getting counted as actual downloads
  • [#7462]: Fix display of ‘unlimited’ number of downloads in new CargoLink wizard
  • [#7279]: Fix the shell script cargo-replicator.sh to generate proper rubyrep.conf

Version 3.1.0

Release date: 2015-11-04

  • [#7471]: Fix an issue with files for expired CargoLinks (with auto-delete enabled) not getting pruned properly
  • [#7470]: Fix an issue where downloading from a CargoLink pointing to a file within a subfolder might not work under certain circumstances
  • [#7439]: Fix an issue introduced in Cargo 2.6.9 where unicorn might get restarted because of it’s memory consumption on a >8 CPU core system
  • [#7433]: Switch rubyrep from file logging to syslog
  • [#7429]: Open new CargoLink wizard with file selection abilities when clicking on a contact
  • [#7428]: Implement a file selection drop-down / search list in the new CargoLink wizard
  • [#7426]: Allow dropping a file from WebFM to a contact in order to open the new CargoLink dialog
  • [#7422]: Allow users to choose between classic view and new easy dashboard in their account settings
  • [#7417]: Fix an issue with nginx requiring an error log file even when configured to use syslog

Version 2.6.9

Release date: 2015-10-21

  • [#7411]: Update to the latest version of nginx mod_zip module
  • [#7410]: Update to the latest version of headers-more-nginx-module
  • [#7407]: Fix an issue with a package install script trying to chown legacy directory /opt/cargo/webapp/logs
  • [#7395]: Fix provisioning of the log level setting, i.e. generation of /data/config/env
  • [#7389]: Improved wording according to OSAG feedback, more consistent terminology, fixed some typos
  • [#7387]: Fix a redirect loop in the new CAPTCHA mechanism
  • [#7381]: Include WebFM up- and downloads in log export feature
  • [#7375]: Fix an issue regarding the download of files with path names longer than 256 characters
  • [#7370]: Fix an issue with the log export feature prematurely removing old logs
  • [#7333]: Fix an issue where a download might be logged with a wrong (user provided) filename
  • [#7257]: In the admin interface, allow sorting of users based on last login time
  • [#7251]: Fix Cargo sign-in message for german users
  • [#6940]: Configure Postgresql performance settings based on available memory

Version 2.6.8

Release date: 2015-10-07

  • [#7369]: Remove monit sshd and rsyslogd monitoring, these are already monitored by upstart
  • [#7365]: Add proper memcache protocol check to monit memcached monitoring
  • [#7362]: Switch all Cargo-related daemons (nginx, proftpd, postgresql) to syslog logging
  • [#7320]: Fix an issue with sync-to-slave.sh not getting REMOTE_HOST properly set
  • [#7309]: Fix an issue regarding custom filters in the Cargo API
  • [#7305]: Restart Postgresql only after 3 consecutive failed connection attempts by monit
  • [#7262]: Use rsyslog for handling all Cargo (shell / daemon / rails) messages
  • [#7260]: Switch all Cargo Rails jobs to syslog
  • [#7184]: Enforce CAPTCHA based on source IP instead of HTTP session

Version 2.6.7

Release date: 2015-09-23

  • [#7361]: Fix handling of LOG_LEVEL in case /data/config/env is missing
  • [#7266]: Implement caching for CargoLink JSON manifests
  • [#7264]: New folder action for maintaining (cached) CargoLink JSON manifests
  • [#7261]: Ability to trigger Apple Push Notifications via API call
  • [#7259]: Make all shell scripts send their output to syslog
  • [#7187]: Set LOG_LEVEL environment variable for all Rails tasks
  • [#7115]: Ability to exclude certain files from the CargoLink JSON manifest

Version 2.6.6

Release date: 2015-09-09

  • [#7178]: Reload rsyslog after provisioning in order to use the new hostname in the logfiles
  • [#7158]: Fix potential issue regarding date ranges for traffic reports
  • [#7130]: Add dependency on gsfonts package required for CAPTCHA
  • [#7116]: Fix the LDAP user search function in Cargo admin interface
  • [#7105]: FIx a ZIP download issue when nginx’ mod_zip feature cannot be used
  • [#6823]: Make messages regarding a wrong PIN entry go to the proper log file

Version 2.6.5

Release date: 2015-08-26

  • [#7046]: Fix an issue regarding one-click creation of a new CargoLink Upload
  • [#7034]: Fix setting of SMS sender when using Ecall gateway
  • [#7032]: Fix bug ID 4201 in ProFTPD leaving behind temporary files of scp users hitting their quota
  • [#7022]: Add the ability to set the Ruby log level via environment variable LOG_LEVEL
  • [#7017]: Fix an issue regarding the display of traffic reports in the admin audit section

Version 2.6.5-rc2

Release date: 2015-08-12

  • [#7011]: Fix an issue regarding the display of currently banned IPs (fail2ban)
  • [#7010]: Fix an issue with iptables not getting the proper rules for FTP under certain circumstances
  • [#6939]: Fix an issue with folder-action-monitor / cargod logging during signal handling routine
  • [#6938]: Fix an issue regarding the display of login reports in the admin audit section
  • [#6937]: Fix an issue regarding nginx’ static error pages in conjunction with the new asset pipeline
  • [#6932]: Fix an issue with ProFTPd / ClamAV communications
  • [#6926]: Implement an interface to ecall.ch as a new SMS gateway
  • [#6851]: Reload Cargo daemons without user service interruption upon reconfiguration
  • [#6787]: Implement asset pipeline for all assets and removed unused CSS & JS
  • [#6773]: Select from a (searchable) ordered list when adding a folder to a CargoLink

Version 2.6.5-rc1

Release date: 2015-07-29

  • [#6852]: Fix CargoLink URL display after creating a new CargoLink
  • [#6822]: Support non-numerical characters in LDAP-provisioned mobile phone numbers
  • [#6809]: Disable display of CargoLink upload preference field when enable_links_upload: false
  • [#6717]: Fix an issue with authentication caching when a user’s DN changes in LDAP
  • [#6705]: Fix a JS injection vulnerability in filemanager HTML preview
  • [#6703]: Fix an XSS vulnerability in the PIN field
  • [#6656]: Remove TLSCACertificateFile parameter from proftpd.conf
  • [#6202]: Update all applications to use Ruby 2.1.5
  • [#6156]: Update ProFTPD to version 1.3.5a, restrict FTPS to TLS v1.1 & v1.2

Version 2.6.4

Release date: 2015-07-15

  • [#6783]: Fix a DB migration issue regarding LDAP user templates
  • [#6724]: Use Rails 3.2.22 for all Cargo applications
  • [#6711]: Fix an issue regarding service management by delegated admins
  • [#6575]: Fix CargoLink URL display after CargoLink creation

Version 2.6.4-rc5

Release date: 2015-07-01

  • [#6696]: Make services start/stop in the foreground instead of using monit
  • [#6689]: Fix an issue regarding enabling/disabling of external authentication
  • [#6677]: Improve the generation of unique home directories based on the login name from any authentication source
  • [#6629]: Relax the login character constraints to prevent issues with external authentication and sanitize the home directory we create from it
  • [#6613]: Fix an issue regarding external authentication where the first login always fails

Version 2.6.4-rc4

Release date: 2015-06-26

  • [#6511]: Multiple network interface support in node.conf
  • [#6325]: Update mounter/preflight gems to match the webapp
  • [#6271]: Do not perform reverse DNS lookups on SSH connections
  • [#6267]: Fix permissions on directory /var/log/cargo
  • [#6266]: Fix an issue regarding the display of banned hosts
  • [#6248]: Fix an issue with reconfigure.rb not getting properly deployed

Version 2.6.4-rc3

Release date: 2015-06-16

  • [#6721]: Update to OpenSSL-1.0.1o
  • [#6540]: Fix an issue in the web admin interface where fetching the latest login for a user was using a very slow SQL query

Version 2.6.4-rc2

Release date: 2015-06-02

  • [#6657]: Fix an issue where file checksums are not being computed in the background when using the CargoLink API
  • [#6654]: Fix an issue where missing locales from the AD triggers errors when sending emails
  • [#6593]: Fix an issue where the postgres database startup was too late when cargo starts with /etc/init.d/cargo

Version 2.6.4-rc1

Release date: 2015-05-19

  • [#6628]: Fix an issue regarding authentication of AD users with special characters in their names
  • [#6619]: Fix an issue regarding the location of iptables saved rulesets
  • [#6618]: Fix an issue regarding reconfiguration of the hostname
  • [#6614]: Fix an issue regarding the logfile locations during debian package installation
  • [#6612]: Fix an issue regarding the display of the IP in the preflight app upon initial startup
  • [#6477]: Fix an issue with include files in proftpd.conf
  • [#6273]: Change the DB location to /data/database
  • [#6272]: Fix order of monit and cargo services startup

Version 2.6.3

Release date: 2015-04-01

This version focussed on issues with the installation and configuration.

  • [#6495]: Fixed an issue with the locale when generating contacts from CargoLinks
  • [#6497]: Fixed an issue when displaying a contact without a name
  • [#6512]: Fixed an issue with displaying a large directory structure for a CargoLink
  • [#6272]: Fixed an issue when computing the service status
  • [#6477]: Fixed an issue when generating the proftpd configuration
  • [#6612]: Fixed an issue when detecting the IP address for the console prompt
  • [#6614]: Fixed an issue with the log directory creation upon installation
  • [#6628]: Fixed an issue with special characters in the login when using AD integration
  • [#6593]: Fixed a startup timing issue with the postgresql database
  • [#6652]: Implemented the generation of a DH params file upon initial installation
  • [#6653]: Fixed an issue with the /data directory layout for initial installations
  • [#6654]: Fixed an issue where missing locales from the AD triggered errors when sending emails
  • [#6657]: Fixed an issue where file checksums are not being computed in the background when using the CargoLink API

Version 2.6.2

Release date: 2015-02-01

This version focussed on improving the CargoLink recipient view with large directories.

  • [#6220]: Implemented a feature to throttle API access mitigating denial of service attacks
  • [#6221]: Improved the recipient view of a CargoLink
  • [#6246]: Improved the checks to prevent directory traversals when requesting a CargoLink download
  • [#6265]: Improved the PIN entry field for CargoLinks on small devices
  • [#6287]: Implemented a feature to redirect to an existing CargoLink in the file manager if the CargoLink icon is clicked
  • [#6290]: Improved the exception handling when watching user data for changes in the file system
  • [#6337]: Improved the share mounting performance
  • [#6381]: Implemented a feature to allow for customised CargoLink background for tenants
  • [#6442]: Improved the session statistics calculation for performance
  • [#6452]: Improved the disk usage calculation via queued background job
  • [#6482]: Updated to openssl 1.0.1m for security improvements
  • [#6484]: Fixed an issue when checking the expiration date of a CargoLink

Version 2.6.1

Release date: 2015-01-01

This version focussed on performance and security updates.

  • [#4197]: Implemented a feature to allow for downloading multiple files as ZIP archive in the file manager
  • [#4480]: Improved the automatic database optimisation for the quota table
  • [#4675]: Improved the initial configuration of the system
  • [#5849]: Improved the cleanup of share targets when the share expires
  • [#5950]: Improved the performance of statistical views for the administrator to cope with heavy load and session count
  • [#5953]: Implemented a feature to allow for automatic contact management
  • [#5960]: Improved the audit log generation when changing user settings (like the timezone and the locale)
  • [#6012]: Fixed an issue with the IP address in the CargoLink download notification email
  • [#6052]: Fixed an issue where the error counter of a session was not increased when the authentication failed
  • [#6076]: Improved the performance for showing the downloads in the CargoLink detail view
  • [#6080]: Improved the default SMS gateway API client
  • [#6126]: Implemented a feature to provide SNMP data from proftpd
  • [#6157]: Improved the login attribute validation
  • [#6163]: Improved the user display across administrative views for consistency
  • [#6164]: Improved the home directory validation when renaming a user
  • [#6166]: Fixed an issue with the LDAP/AD based locale setting for new users
  • [#6169]: Implemented a feature to allow for custom attributes when sending upload/download notifications
  • [#6170]: Implemented a feature to allow for email based authentication when using SFTP/FTPS
  • [#6174]: Updated to rails 3.2.21 for security improvements
  • [#6180]: Improved the quicklinks menu and the general visual appearence
  • [#6185]: Implemented a feature to configure the log archive mode
  • [#6189]: Improved the CargoLink creation for anonymous recipients to allow for easier copy&paste
  • [#6190]: Fixed an issue with triggers being fired while the database replication is running
  • [#6192]: Fixed an issue where selecting and downloading multiple files from the file manager did no work
  • [#6193]: Fixed an issue when double-clicking a object in the file manager
  • [#6194]: Improved the validation when renaming a file in the file manager
  • [#6195]: Improved the handling of internally versus externally authenticated users
  • [#6196]: Updated to openssl 1.0.1k for security improvements

Version 2.6

Release date: 2014-12-01

This version focussed on the disk encryption management.

  • [#1486]: Implemented a feature to allow for encryption management via Web-UI
  • [#4513]: Implemented a feature to allow for TLS1.1/TLS1.2 with FTPS, updated openssl to 1.0.1j
  • [#5801]: Improved the thread handling of cargod upon startup
  • [#5840]: Improved the handling of global data retention policy with CargoLink expiration settings
  • [#5841]: Implemented a feature to allow for sorting in the file manager
  • [#5959]: Fixed an issue where delegated administrators could not change their password
  • [#6074]: Fixed a potential issue when downloading a large number of files within a ZIP archive

Version 2.5.4

Release date: 2014-08-01

This version focussed on performance improvements security improvements.

  • [#2122]: Implemented a feature to allow for user specific auto-deletion of data
  • [#3584]: Improved the handling of large directory structures in the file manager
  • [#3794]: Implemented a feature to integrate the address book into the user selection for shares
  • [#3889]: Implemented a feature to mark shared items with CargoLink in the file manager
  • [#4208]: Implemented a feature to report daily logins
  • [#4276]: Implemented a feature to adhere to SPF when sending invitation email messages
  • [#5527]: Implemented a feature to show pending invitations for shares
  • [#5581]: Implemented a feature to search for objects in the CargoLink recipients view
  • [#5592]: Implemented a feature to allow for easier CargoLink expiration date setting
  • [#5602]: Improved the user deletion by performing the cleanup in a background job
  • [#5614]: Implemented a feature to enable/disable menu entries
  • [#5622]: Improved the share verification upon login by running it in the background
  • [#5626]: Updated to openssl 1.0.1i for security improvements
  • [#5752]: Implemented a feature for new users to inherit the administrator of the user inviting them
  • [#5757]: Improved the CargoLink download notification email
  • [#5761]: Implemented referrer header suppression for external links

Version 2.5.3

Release date: 2014-07-01

This version focussed on CargoLink enhancements and security improvements.

  • [#2115]: Added a feature to configure the user’s timezone affecting the display of timestamp values
  • [#3793]: Added a fature to allow for CargoLink default settings per user
  • [#3940]: Improved the security of user invitations (for shares and memberships) by using a invitation token
  • [#4315]: Improved the handling of file permission issues in the data store
  • [#5078]: Improved the detection and mitigation of brute force attacks against a user account
  • [#5138]: Improved the detection and mitigation of brute force attacks against a CargoLink PIN
  • [#5302]: Updated to openssl 1.0.1h for security improvements
  • [#5307]: Improved the logging of the data archiving background job
  • [#5363]: Improved the database connectivity for the background job worker
  • [#5370]: Improved the handling of missing files in the background job worker
  • [#5391]: Improved the database replication monitoring
  • [#5398]: Added a feature to enforce a minimum PIN length (if the PIN is set)
  • [#5400]: Improved the user attribute validation
  • [#5407]: Improved a validation when changing the PIN of a CargoLink
  • [#5419]: Updated to rails 3.2.19 for security improvements
  • [#5448]: Fixed an issue with the application configuration when updating a cluster installation
  • [#5487]: Updated to proftpd 1.3.4.e for bug fixes and security improvements
  • [#5515]: Improved the email message when sending CargoLink invitations
  • [#5522]: Added a feature to allow for proxy authentication via CargoLink
  • [#5528]: Added a feature to allow for CargoLink default notification settings

Version 2.5.2

Release date: 2014-05-14

This version focussed on database performance and minor features.

  • [#5128]: Improved the DB performance for session and transfer views
  • [#5169]: Added a feature to allow for creating a CargoLink for upload with a quicklink
  • [#5170]: Added a feature to allow for disabling/enabling a CargoLink
  • [#5175]: Added a feature to provide a key/value store based on JSON for CargoLinks
  • [#5181]: Added a feature to allow for setting the enable_upload flag in the CargoLink API

Version 2.5.1

Release date: 2014-05-01

This version focussed on bug fixes and improvements with external authentication sources.

  • [#5098]: Improved the Content-Security-Policy header
  • [#5101]: Improved the CargoLink management by switching to the “/cargolinks” prefix
  • [#5102]: Added a feature to allow for configuring the preferred locale of a contact
  • [#5103]: Fixed an issue where the super administrator could not change his password
  • [#5106]: Fixed an issue where the local authentication redirected to a SSO Login on failure
  • [#5108]: Fixed an issue with email address validation in the configuration file
  • [#5117]: Added a feature to enable/disable external authentication sources
  • [#5137]: Fixed an issue where shared contacts may not be considered for autocompletion in the CargoLink wizard
  • [#5139]: Improved the PIN input field for CargoLinks
  • [#5144]: Added a feature to use the preferredLanguage attribute in the SAML response

Version 2.5.0

Release date: 2014-04-01

This version focussed on SSO (single sign on) and security updates.

  • [#1630]: Added a feature to send CargoLink PINs on demand
  • [#4690]: Improved the SNMP agent by adding a system status information
  • [#4919]: Improved the database replication monitor
  • [#4920]: Added a feature to allow for custom data stored with a CargoLink
  • [#4925]: Added a feature to detect and mitigate brute force attacks on CargoLinks
  • [#4926]: Added a feature to allow CargoLinks of type “directory” via the API
  • [#4927]: Added a feature to provide a manifest in JSON format for a CargoLink via the API
  • [#4928]: Added a feature to allow SAML based SSO authentication/authorisation
  • [#4938]: Fixed an issue where the log archiving failed to start
  • [#4940]: Improved the archiving of old log and session data
  • [#4964]: Improved the SMS status checks by using asynchronous scheduling
  • [#4965]: Fixed an issue where the antivirus report tried to process a missing file
  • [#4973]: Updated to rails 3.2.17 for security improvements
  • [#4991]: Improved the display of confidential messages
  • [#5019]: Improved the CargoLink manifest cache
  • [#5027]: Updated openssl to version 1.0.1g for security improvements
  • [#5031]: Fixed an issue where notifications for file uploads in a CargoLink have not been sent
  • [#5045]: Improved user input handling to prevent stored XSS vulnerabilities
  • [#5047]: Improved error messages to prevent reflected XSS vulnerabilities
  • [#5056]: Improved the failed login detection and IP blocking rules
  • [#5057]: Improved the SW version display to prevent information leakage
  • [#5058]: Improved the error messages sent by the webserver
  • [#5060]: Improved the SFTP cipher selection
  • [#5074]: Added a feature to enforce authentication even for CargoLink access
  • [#5077]: Improved the SSL cipher and protocol selection for HTTPS, added the X-Content-Security-Policy header

Version 2.4.1

Release date: 2014-02-01

This version focussed on improvements for backup/restore and external authentication sources

  • [#4604]: Improved the interface with the f-prot scanning engine
  • [#4605]: Improved the restore of encrypted backups
  • [#4606]: Improved the application server timing configuration
  • [#4676]: Improved the email quota report layout
  • [#4685]: Fixed an issue for new users missing a authentication source configuration
  • [#4686]: Added a feature to verify the email with external authentication sources when signing up is enabled
  • [#4701]: Improved the restore of database objects from backups
  • [#4747]: Improved the handling of internal/external authentication

Version 2.4.0

Release date: 2014-01-01

This version focussed on improvements for default settings and disk space monitoring

  • [#4514]: Implemented a feature to deny uploads when low disk space conditions occur
  • [#4545]: Improved the support for PostgreSQL 9.3
  • [#4547]: Implemented a feature to search users in external authentication sources
  • [#4548]: Updated to Rails 3.2.16 for security improvements
  • [#4552]: Improved the application logging by storing all logs in /var/log/cargo
  • [#4558]: Fixed an issue where the bind password for external authentication sources was lost on editing the object
  • [#4562]: Implemented a feature to configure defaults for new CargoLinks
  • [#4563]: Implemented a feature to configure defaults for new Shares

Version 2.3.1

Release date: 2013-12-01

This version focussed on bug fixes and improvements

  • [#2953]: Added a link to show system information and services status details
  • [#4206]: Improved the user session list by allowing for date based filtering and number of transfers
  • [#4319]: Fixed an issue when creating a new account and starting the password reset workflow without confirming the account beforehand
  • [#4330]: Fixed a warning when calling dpkg via sudo
  • [#4334]: Fixed multiple issues with special characters in share path names
  • [#4348]: Updated to Rails 3.2.15 for security and performance improvements
  • [#4352]: Fixed an issue where a folder rename triggered an exception when reconfiguring attached shares
  • [#4353]: Fixed an issue with automated actions on user account creation (case sensitive email comparison)
  • [#4361]: Improved the user management by separating confirmed and unconfirmed users
  • [#4419]: Fixed an issue where a new user could not be locked and promoted as administrator
  • [#4439]: Improved the performance of interacting with the proftpd daemon
  • [#4440]: Fixed an issue where shares are not shown for delegated administrators
  • [#4441]: Fixed an issue with automated actions after signing in when the user has no email address
  • [#4445]: Implemented a feature to allow for trusted additional network interfaces (multi-homed hosts)
  • [#4448]: Fixed an issue where directories did count for a total CargoLink payload size
  • [#4455]: Implemented a feature to allow for reactivating expired CargoLinks
  • [#4474]: Implemented a feature to search AD group membership using a extensible match for nested groups
  • [#4497]: Improved the email address validation

Version 2.3.0

Release date: 2013-10-01

This version focussed on bug fixes and improvement of the shares

  • [#2949]: Improved the contact search performance
  • [#3895]: Improved a tool tip when trying to delete a user
  • [#3903]: Improved the sending of Apple push notifications by using a background queue
  • [#3935]: Improved the checks when deleting directories to prevent errors with shares
  • [#4105]: Improved the replication check while archiving old transfer data
  • [#4110]: Improved the events display by adding a database optimisation
  • [#4126]: Fixed an issue when sending attachments in standard mail messages
  • [#4157]: Improved the manifest generation by optimising a database query
  • [#4173]: Fixed a segfault when using SCP connections
  • [#4175]: Fixed an issue with ZIP-archives for CargoLinks when using “+” in file names
  • [#4179]: Improved the SFTP/FTP session performance by optimising a database interaction
  • [#4192]: Improved the local monitoring of the failover process
  • [#4200]: Improved the delegated administrator’s view by adding the status information (lower left corner)
  • [#4201]: Upgraded the application server unicorn to 4.6.3
  • [#4204]: Fixed a log export issue (empty files)
  • [#4207]: Improved a form control to set the CargoLink expiration date
  • [#4224]: Improved the SMS delivery check at the provider
  • [#4225]: Added a feature to allow for configuring the administrator assigned to new users (when signing up)
  • [#4279]: Fixed an issue with share double mounting by comparing wrong path elements
  • [#4284]: Improved the share path validation to prevent duplicate identical shares
  • [#4286]: Improved the share path validation to be more strict with special characters
  • [#4287]: Fixed a mount/unmount issue for shares when using whitespace in the name
  • [#4314]: Added a feature to allow for configuring global CargoLink defaults

Version 2.2.0

Release date: 2013-08-01

This version focussed on external authentication sources

  • Added a Active Directory / LDAP integration for external authentication
  • Added a background job queue to allow for asynchronous processing
  • Added a bulk transfer mode when synchronising with a CargoLink
  • Improved the search form for contacts and users
  • Improved the autocompletion for CargoLink recipients
  • Upgraded to bootstrap version 2.3 (HTML/CSS framework)
  • Fixed a redirect when editing unconfirmed contacts
  • Fixed a inotify file descriptor leak when mounting/unmounting shares

Version 2.1.4

Release date: 2013-07-01

This version focussed on bug fixes and improvements

  • Fixed an issue when selecting users to share folders
  • Added a new feature to create ZIP-archives on the fly and support streaming
  • Improved the fail2ban internal configuration

Version 2.1.3

Release date: 2013-06-01

This version focussed on bug fixes and improvements

  • Added a new replication monitoring feature
  • Added a feature to create CargoLinks via the API with unlimited expiration date
  • Upgraded to proftpd 1.3.4d for security and performance improvements
  • Improved the archiving of logdata to better cooperate with the replication
  • Improved the display of recipients for CargoLinks in the detail view
  • Improved the user list when configuring a share
  • Improved the email greetings
  • Improved the caching of checksum data for CargoLink manifests
  • Improved the handling of existing users being invited to a share by email
  • Improved the cleanup of temporary ZIP-files
  • Fixed a issue when creating a share for a custom path as administrator
  • Fixed a issue when generating email recipient addresses
  • Fixed a issue with the writable setting for a share when inviting a new user
  • Fixed a issue when creating and editing a share and inviting external users

Version 2.1.2

Release date: 2013-04-01

This version focussed on bug fixes and improvements

  • Added a content scanning features with support for antivirus (clamav, f-prot)
  • Added a feature to share contacts within a organisation
  • Added a feature to edit the PIN for a CargoLink
  • Upgraded to OpenSSL 1.0.1e for security improvements
  • Upgraded to proftpd 1.3.4c for security and performance improvements
  • Improved the file size check when upload to a favorite
  • Fixed a issue when creating a CargoLink for a empty folder
  • Fixed a issue when creating a ZIP-file when downloading from a CargoLink
  • Fixed a issue when the session timeout is hit while uploading large files
  • Fixed a issue when adding a user to a organisation

Version 2.1.1

Release date: 2013-03-01

This version focussed on bug fixes and improvements

  • Added a feature to add/remove recipients from CargoLinks
  • Improved the CargoLink manifest cache (cache warmup)
  • Improved email headers when sending notifications (precedence, auto-submitted)
  • Improved the user data synchronisation when using shares
  • Improved the data migration tools from sqlite3 to PostgreSQL
  • Upgraded to Ruby on Rails 3.2.12 for security and performance improvements
  • Fixed a issue where custom email attachments could not be found

Version 2.1.0

Release date: 2013-02-01

This version focussed on performance improvements by introducing the PostgreSQL database system

  • Added support for PostgreSQL as as database backend which will be the default for new installations
  • Added a realtime database replication solution for PostgreSQL
  • Added a feature to allow the recipient to upload files to a CargoLink
  • Improved the CargoLink directory view
  • Improved the caching using memcached
  • Improved I18n when sending email
  • Improved strict UTF-8 encoding of all file and directory names
  • Upgraded to Ruby on Rails 3.2.11 for security and performance improvements
  • Fixed a issue with the custom path when editing a share
  • Fixed a cache key issue affecting the quicklinks above the menu
  • Fixed a javascript issue with the calendar control on IE8
  • Fixed a issue when searching users in the administration view
  • Fixed a encoding issue when importing contacts

Version 2.0.5

Release date: 2013-01-01

This version focussed on notifications and security fixes

  • Added a feature to re-invite users (tenants mode)
  • Added support for push notifications (see separate documentation)
  • Improved the detection of new files in the folder action monitor
  • Improved the generation of session tokens
  • Improved logging for the folder actions
  • Fixed a upstream Ruby on Rails security issue while parsing parameters

Version 2.0.4

Release date: 2012-12-01

This version focussed on bug fixes and improvements

  • Added the feature to disable Apple touch icons in the layout
  • Added the feature to allow for sharing a empty folder via CargoLink (ie. for upload only)
  • Improved the handling of requests via javascript in the administrator’s dashboard
  • Improved the mime-type configuration for downloading video files
  • Fixed the javascript code for creating a CargoLink for IE8
  • Fixed the handling of filenames with special characters (ie. umlauts) in the file manager

Version 2.0.1

Release date: 2012-11-01

The 2.0 Release is a major milestone in the Cargo product line and provides a large set of new features based on the rock solid Cargo core infrastructure.

  • Redesigned web interface using modern HTML5 features
  • Support for Drag&Drop when creating CargoLinks from your desktop
  • Support for contact and recipient list management
  • Support for CargoLinks with multiple recipients
  • Allows CargoLinks recipients to upload files
  • Provides a REST-ful API available via HTTPS, secured by access tokens or a HMAC-based scheme
  • Upgraded to Ruby on Rails 3.2.8 for security and performance improvements
  • Switched to nginx for SSL performance and caching improvements
  • Switched to unicorn as application server for performance improvements
  • Improved large file uploads (> 1 GB) via the web interface Consult the User Guide and the API Guide for more details about the new features.

Version 2.0.3

Release date: 2012-11-01

This version focussed on bug fixes and improvements

  • Added a feature to enable/disable CargoLink download notifications
  • Improved the download log display for CargoLinks
  • Improved the handling of internal exceptions
  • Improved the download of large documents
  • Fixed the HTTP cache settings for IE8
  • Fixed the handling of the configured SSL certificate in node.conf when upgrading

Version 2.0.2

Release date: 2012-10-01

This version focussed on bug fixes and improvements

  • Added a download button to the file manager
  • Upgraded the SSL library to support TLS1.1 and TLS 1.2 directly in the webserver
  • Improved the SSL compression and keepalive timeout settings
  • Fixed the quota report job
  • Fixed the password enforcement when editing a user as administrator
  • Fixed the handling of temporary files when uploading data

Version 1.3.6

Release date: 2012-06-01

This version focussed on the folder actions feature

  • Improved performance and stability of folder actions
  • Introduced the first general folder action “Create CargoLink”
  • New CargoLink list layout
  • Upgraded to Ruby on Rails 3.0.14 (Four important security fixes)
  • Improved log archive handling

Version 1.3.5

Release date: 2012-05-01

This version focussed on the folder actions feature

  • Initial release of the folder actions feature

Version 1.3.4

Release date: 2012-04-01

This version focussed on bug fixes and improvements

  • Switched to external image reference in the documentation to support Internet Explorer 8
  • Support for Internet Explorer 8 sending a format parameter of ‘*/*’ when accessing the site from a external link
  • Support for exclusive locking when mounting/unmouting shares to mitigate an issue with fast master/slave switching
  • Improved the database synchronisation between the nodes (to prevent locking issues)
  • Fixed a bug with the “pull dry” option of sync-to-slave.sh where the local database is truncated

Version 1.3.3

Release date: 2012-03-01

This version focussed on bug fixes and improvements

  • Support for explicit UTF8 encoding with FTP
  • Support for getting the sychnronisation status via SNMP
  • Improved error notifications by email
  • Fixed the admin-flag handling when creating a new user
  • Fixed the control socket issue with proftpd (upstream bug number 3756) with a custom patch
  • Fixed a synchronisation issue when automatically exporting logs

Version 1.3.2

Release date: 2012-02-01

This version focussed on performance and monitoring

  • Support for SNMP monitoring, including custom service data
  • Performance improvements for the administration dashboard
  • Performance improvements for the user management
  • Updated local database indexes
  • AutoDelete feature for CargoLinks and files
  • Upgrade to Ruby on Rails 3.0.11 due to a possible XSS security issue
  • Allow for certain environment variables to be accepted for SFTP clients (LC_MESSAGES)
  • Improved log rotation in ‘/var/log/cargo’
  • Improved service monitoring on the current master node
  • Fixed the audit-view for delegated administrators
  • Fixed a issue for the audit log generation when deleting a file via WebFM
  • Fixed a issue when displaying quota warnings

Version 1.3.1

Release date: 2011-12-01

This version focussed on the CargoLink API

  • Initial support for the creation of CargoLinks in bulk
  • CargoLink API

Version 1.1.9

Release date: 2011-11-01

This version focussed on enhanced administration features.

  • Delegated administration
  • Restricted super administration access
  • Enhanced quota computing
  • Reverse proxy support

Version 1.3.0

Release date: 2011-11-01

This version focussed on the Shares feature

  • Shares allow for shared folders between users and integrate with all services supported
  • Export transfer logs in xfer format automatically
  • Allow for case-insensitive login on authentication
  • New script to change the shared IP on a cluster

Version 1.2.0

Release date: 2011-10-01

This version focussed on the CargoLink feature and security

  • CargoLinks can transport confidential messages
  • CargoLinks can share directories
  • Improved user dashboard with quicklinks, favourites and drag&drop support for CargoLink creation
  • Upgrade to Ruby on Rails 3.0.10 due to minor security issues

Version 1.1.8

Release date: 2011-08-01

This version focussed on the CargoLink feature.

  • Initial CargoLink implementation to share files
  • SMS Authentication
  • Increase HTTPS security by using HSTS, session protection, CSRF protection

Version 1.1.7

Release date: 2011-07-14

This version focussed on the OTP authentication and clustering.

  • OTP Support according to RFC-4226
  • Failover-Cluster with VRRP

Version 1.1.6

Release date: 2011-07-01

This version focussed on the SFTP service

  • SFTP support
  • key-based authentication support

Version 1.1

Release date: 2011-05-01

This version focussed on the web-based file manager

  • Integration of the web-based file manager