Security

A new release of Rebex Buru SFTP Server with an updated .NET runtime that includes many security fixes.

Rebex and its products are not affected by xz vulnerability CVE-2024-3094.

This release adds support for SSH strict key exchange and adds improves compatibility with .NET 8's Native AOT feature.

This release adds support for Windows Extended Protection, which protects against HAFNIUM-style attacks.

Rebex products are not affected by log4j vulnerability CVE-2021-44228. None of the Rebex products are using the log4j library or Java.

Security issue found in Buru SFTP Server Web Administration 1.8.0 - 1.8.3. Upgrade to version 1.8.4 or newer is strongly recommended.

The security of RC4 encryption algorithm has been questionable for many years. But despite well-founded concerns, this has remained a popular TLS/SSL cipher not only due to its speed, but also as a countermeasure against "BEAST" attack targeting block ...

Last month, Google Security Team disclosed POODLE Attack - a vulnerability in SSL 3.0 protocol that makes it possible for attackers to reveal encrypted data with relative ease. Fortunately, newer versions of the SSL 3.0 protocol (TLS 1.0 and higher) do ...

Rebex products are not affected by the critical OpenSSL bug known as "Heartbleed". A Heartbleed exploit makes it possible for an attacker to access sensitive data such private keys used by the servers to encrypt SSL traffic, usernames and passwords. ...