New Features

• Import of users and groups from SSO providers added.
• Multiline watermark with customizable font size and support for Arabic content.
• Specification of the order in which signees receive and sign eSignature documents, with support for multiple recipients in the same position.

Improvements

• OAuth Client Secret field renamed to OAuth Client Secret Value for consistency.
• New Default Country Phone Code field to specify the default code for user phone numbers.
• New admin workflow condition "If a user's account is near its expiration date" added.
• Workflow condition "If a user's last login is older than" extended with parameter to skip admins.
• Option to change the unit for managed storage Chunk Upload Size removed; all values now in MB.
• New policy setting "Allow workflow automation sharing" added, disabled by default.
• Phone number fields now display the country code and have an extended country code search function.
• External users can now add comments to file shares.

Bug Fixes

• Fixed issue where credential synchronization with external services failed.
• Fixed AD authentication issue using the wrong attribute.
• Fixed group import not working.
• Audit log exports with large batches now work.
• "End date cannot be earlier than start date" error for invalid dates corrected.
• Fixed Desktop Edit option prompting restarts and appearing disabled.
• Fixed external users accessing Team Folders shared with the "Everyone" group.
• Fixed adding new users during a share where additional information was not saved.
• Password in email notifications for password-protected shares now displayed fully, even with "<" characters.
• Export of share lists now shows blank expiration dates correctly as blank.
• Group search when creating a share now works.
• Fixed storage quota calculation after emptying the recycle bin; undeletable files no longer falsely shown as deleted.
• Labels in the Send Share Link via Email dialog box now appear in French when the UI language is French.
• Folders with more than 1000 files now listed completely in the UI.
• Workflow "If a file is downloaded, delete the file" now triggered when selecting all files in a folder.
• Workflow "If file was not modified for specified days, delete the file(s)" now deletes all qualifying files in root Team Folders with many files.
• NodeJS upgraded to version 22.15.1 to address a security vulnerability.
• PHP upgraded to version 8.3.21 to address a security vulnerability.
• External users no longer receive Automation Workflow approval prompts for Team Folder paths shared with the "Everyone" group.
• High CPU usage during bulk uploads in systems with integrated antivirus fixed.
• Fixed issue where files from Azure External Network folders were downloaded to temporary folders.
• Fixed issue with Solr upgrades.
• Storage quota display for tenants now shows units for both used and total storage.
• Thumbnail creation for Office files on encrypted storage now generates .enc files to avoid false alarms.
• Thumbs tool now deletes thumbs directly in the specified path.

New Features

• Added setting to block account creation through the login form (createprofile API endpoint).
• New fields for public shares: default password length (set to 14 characters) and complex passwords (requiring at least one lowercase letter, uppercase letter, number, and special character).
• Hungarian added as a user interface language for the admin and user portals.
• Workflow confirmation: Users must now click "Confirm" to run a workflow.
• "If a new user is created" workflow now includes a parameter to only include users from specific email domains.

Improvements

• Upgraded Composer dependencies to current versions.
• Upgraded LibreOffice
• Upgraded Memcached
• Upgraded MongoDB
• Upgraded OpenSSL
• Upgraded PHP
• PHP file location can now be modified for WebDRM preview support.
• Added "folder_path" parameter to the "Downloaded Files" report.
• Added support for multiple Memcached instances in high-availability systems.
• Email template for the account deactivation workflow can now be customized.
• Uploaded folders now reflect the date of the most recently updated file in the folder.

Bug Fixes

• Users can no longer copy files and change extensions to forbidden ones.
• Users with preview-only permissions can no longer download files.
• Fixed enumeration vulnerability caused by differing error messages for valid/invalid usernames.
• Removed jQuery to eliminate security issues.
• Cookies are now client-bound and cannot be reused.
• Added customizable error messages for 405 and 500 error codes.
• Fixed phishing risk from crafted emails originating from INGOS FILE SHARE.
• Upgraded twbs/bootstrap library to resolve a security issue.
• User search now respects the User account search mode setting.
• Unauthenticated users can no longer access other users' profile images.
• Password reset response no longer specifies the user type (e.g., promoted user).
• Upgraded NodeJS to resolve a security issue.
• Updated UI dependencies to eliminate security issues.
• Fixed Active Directory login failures.
• Audit Logs with "Common" setting now only show common operations; default changed to "All".
• File previews no longer appear as downloads in Audit Logs.
• Deletion of folders with 50,000 files from the recycle bin now works.
• Downloaded PDFs are no longer corrupted.
• Download option now appears when selecting over 100 files.
• Invalid URLs now correctly return a 404 response code.
• All groups are now selectable when adding to Team Folder shares.
• Fixed false positives in the file integrity workflow.
• LDAP connection is now backward compatible without the "ldap://" prefix.
• Fixed ICAP timeout by adding a response time setting.
• ICAP integration now works with storage encryption enabled.
• Removed misleading lockout error message when no lockout is set.
• Fixed SSO file sharing in MS Teams for INGOS FILE SHARE files.
• Fixed errors when deleting certain notification rules.
• "New accounts must change password" setting no longer applies to SSO logins.
• Fixed password generation error message requiring special characters.
• PDF signatures are now visible in QuickJS preview.
• regia
• EML files can now be previewed.
• Search now reliably returns results.
• Fixed ServerSync error with Arabic (non-NFC) file names.
• Public share delete button is no longer accessible.
• Video shares can now be previewed/played in mobile browsers.
• Fixed SSO login with IdP Thales in the user portal.
• Fixed thumb cleanup failure.
• Long Terms of Service on mobile browsers now have an accessible "Accept" button.
• German translation for Team Folders is now complete, with no English text remaining.
• Fixed incorrect upload quota exceeded notifications for valid uploads.
• Long folder names are now displayed correctly with ellipses.
• Default Primary Color from customization is now used in notification titles.
• Fixed user export with active filters on the Manage Users screen.
• Fixed error in "If file was not modified for specified days" workflow.
• "Delete file on download" workflow now respects delete permissions.
• Backup in multi-tenant environments now includes all sites.
• Admin setting now prevents deletion of user data.
• Fixed error with numerically named files in network shares.
• S3 network shares now correctly display folders and files with the same name.
• Seeding tool now deletes local files after uploading to S3 storage.
• ServerLink no longer resets share approval workflow in policies.
• ServerLink now syncs deleted files even without versioning.
• Drive now correctly detects changed passwords.
• Right-click options for Drive and Sync added on macOS/Windows.
• Drive now highlights searched files in the opened folder.
• Fixed login for INGOS FILE SHARE for Office in Drive.
• Trust FileCloud for Office and login from INGOS FILE SHARE for Office panel now available on first use.
• Fixed sync failure in FileCloud Desktop for macOS.
• Users on smart-mounted network shares no longer receive notifications for shares created by others.
• Network folders ending with "c$" can now be added.
• Preview of DICOM files now uses the Rubo DICOM viewer.

New Features

• Disable "Send for Approval" Option: A new policy option is now available on the User Policy tab to disable the "Send for Approval" feature. This ensures that only users with file sharing permissions can share files, while the file approval option is restricted for external users and those without sharing rights.

Improvements

• Notifications: Toast notifications now appear correctly even when email notifications are disabled.
• Video Preview: Videos in the user portal can now be previewed while they are still loading.
• Search Functionality:
  • Fixed an issue where search results from lengthy searches appeared after the search was cancelled.
  • Corrected the behavior of the "Search again" icon so that it now searches only within the current location instead of all locations.
• Team Folders & Sync: The timestamp for a parent Team Folder is now correctly saved during synchronization on the user portal.
• Large file attachments: The upload for large file attachments has been improved.

Bug Fixes

• Network Shares – User Interface: Resolved an issue where, when accessing a network share on the user portal, not all results were loaded or scrolling was not possible.

Enhancements

• Improved File Management: Resolved issues preventing some downloaded ZIP files from opening. Share notification emails are now sent after the creator finalizes settings, and newly created shares default to private, ensuring tighter access controls. Admins can now share Team Folders with external users directly from the admin portal.
• Search and Sorting: Metadata searches now default to partial matches for easier discovery. File, folder, and user lists have been updated to use natural sorting for better readability.
• Custom Workflows: Enhanced workflows allow periodic email actions and real-time notifications. Custom variables are now supported, and users can track workflow progress with toast notifications.
• SSL and Backup Tools: Incremental backups now function seamlessly after incomplete Rsync backups. A new tool helps manage excessive thumbnail storage.
• Database and Compatibility: MongoDB Enterprise is now supported on Windows and Linux environments. Links to app stores can now direct users straight to Google Play and Apple Store pages.

Security Updates

• Component Updates: Apache, NodeJS, and PHP have been updated to the latest secure versions to address known vulnerabilities.
• SSL Improvements: Enhanced SSL validation and protections against path traversal attacks strengthen security.

Bug Fixes

• Active Directory: Addressed synchronization issues, including failures caused by unreachable domain servers or duplicate user names.
• File and Folder Management: Corrected long path deletion issues, restored visibility for deleted files in Team Folders, and fixed upload date mismatches in shared files.
• Preview and Reporting: Resolved issues with LibreOffice and WOPI previews and improved report generation reliability.
• User Interface: Fixed sorting issues for numerically named files and corrected missing right-click options for multiple file selections.
• Client-Specific Fixes: Resolved folder sync issues for users with updated permissions and fixed scrolling issues in the Mac client’s "Versions" tab.
• Server Enhancements: Improved stability and functionality for S3 Network Folders, resolving errors with file previews, recycling, and sharing.

Improvement

• 2FA/DUO: INGOS FILE SHARE integration with DUO has been updated to include information if enrollment fails due to a DUO policy.
• Encryption: Added support for AES256-CBC encryption.
• License: Admins can now retrieve their license keys from the Settings > License tab in the admin portal.
• Microsoft GCC High: Now supports Azure XOAUTH SMTP with GCC High.
• Solr: A new setting has been added to fix issues with connecting to Solr when using self-signed certificates.
• MongoDB: Upgraded to version 6.017, which includes security updates.
• npm/async: Upgraded to version 3.2.5, which includes security updates.
• pdfjs: Upgraded to version 4.2.67, which includes security updates.
• SimpleSAML: The twig/twig composer package for the SimpleSAML library has been updated to version 3.14.0, which includes security updates.

Bug Fixes

• 2FA/DUO: Some users were not receiving their DUO 2FA codes. This has been fixed.
• Compliance: An issue causing the Compliance Dashboard to appear empty has been fixed.
• Favicon: When admins updated the favicon, it did not appear updated in all browsers. This has been fixed.
• Approval screen: In the approval screen, when users previewed csv files with a large number of columns, the page was cut off. This has been fixed.
• Microsoft Outlook: Users could not drag and drop emails or email attachments from (classic) Outlook to the INGOS FILE SHARE web browser in Windows. This has been fixed.
• PDFs: Print preview was not working in PDFs. This has been fixed.
• PDFs: When Document Converter preview and watermark were enabled, PDF files from Network Shares were downloaded as .tmp files. This has been fixed.
• Preview: An issue preventing DICOM files from being previewed in folders that had a + in their name has been fixed.
• Share: An issue causing the share window to hang when an admin shares a subfolder of a Team Folder has been fixed.
• Share: When an upload limit was set on a shared folder, and the share recipient tried to upload a file larger than the limit, the upload was attempted and resulted in an error. Now the file size is checked before upload and the user is notified that the file size exceeds the limit.
• Solr: An issue causing a Solr Unauthorized 401 error to appear has been fixed.
• Video preview: Video preview was not working on Safari and iOS. This has been fixed.
• FileCloud for Office: An issue preventing users from logging in to INGOS FILE SHARE for Office in Drive has been fixed.
• Launching app: On macOS Sequoia, restarting Sync after initially opening and running a sync failed to launch it. This has been fixed.
• Permissions: User permissions to Team Folders were not honored in Drive. This has been fixed.
• Right-click options: A problem causing INGOS FILE SHARE right-click options to not appear in file explorer for Sync and Drive has been fixed.
• Search: When a file is searched for in Drive, when Drive opens the folder containing the file, the file is now highlighted.
• ServerSync: A condition that caused ServerSync to hang up has been fixed.
• FILE SHARE for Office: An issue preventing users from enabling INGOS FILE SHARE for Office has been fixed.

Security Updates

• Apache: Permission checks have been added for Apache users in Linux used for importing data.
• Endpoints: To improve security, several endpoint request HTTP methods were changed from GET to POST.
• stylesheet/js: URLs for stylesheets and JavaScript on the INGOS FILE SHARE login page included paths relative to the current location. For security purposes, these have been changed to paths relative to the website root.