PowerFolder Server 16 SP8

  • Release Date: January 2022
  • Build Number: 16.8.100
  • Type: Service Pack Release


CVE-2021-44228

(lightbulb) PowerFolder is NOT affected by CVE-2021-44228.

In the software we do not use the affected library LOG4J, but instead use the Java system implemented logging mechanism.


Fixed Security Issue

(warning) This release contains major security fixes.


All production builds are starting from X.Y.100* and development builds (not for productive use) are starting from X.Y.1 - 99

* (Where X=Major software version and Y=Service pack number)

Upgrade Information

  • Please read this complete Release Notes and instructions before upgrading.
  • Please follow the regular upgrade documentation for Windows or Linux
  • Upgrading any previous version higher or equal to version 11.8
  • Cluster: Running different versions on the servers in the cluster is supported but limited to version >= 14.3.5

New Feature: Storage Migration during Uptime (BETA)

Automatic migration of data on backend storage
(warning)This function is currently marked as in beta state. Although heavy quality assurance was run on it, we still recommend to fully run this function in test systems only.

For more information, please visit our documentation.

Downgrade Information (optional)

  • In case a downgrade to a previous version is necessary:
    • For a downgrade you have to review our downgrade documentation.
    • Simply replace the PowerFolder-Server.jar file with that from the previous version you would like to run.
  • Log messages due to the higher schema version of database can be ignored:
    • [DatabaseMigrator]: Database layout version is newer than expected.

Changes

  • PFS-3930 - API call for folders and accounts to block / unblock folder access 
  • PFS-3636 - Restoring files from the recycle bin in web should contain time-stamp (last modification date) 
  • PFS-3922 - Fix display error in the folder options window 
  • PFS-3924 - Fix assign folder as server or org admin 
  • PFS-3918 - Delete invitations as soon as the shared folder is also deleted 
  • PFS-3926 - Workaround for Zotero non-standard requests 
  • PFS-3923 - Block merge account action in case of same email as username 
  • PFS-3936 - Federation: Skip repeating merge notes in account 
  • PFS-3937 - Apply "correctStoragePaths" using API independent of config entry
  • INT-601 - 4.8 Security checked API for correct authorization
  • INT-582 - 4.4 Security enhancement in web upload
  • INT-580 - 5.8 Security fix in document editing
  • INT-592 - 5.4 Security fix in upload form