Release version: 10.8.1

Release date: 16th August 2024

Notes

Software installation files are available.

Maintenance Report

This section briefly describes the enhancements in Lasernet 10.8.1.

“Strict Kex Extension” Support

NIST CVE-2023-48795 describes an SSH/OpenSSH vulnerability that enables remote attackers to bypass integrity checks by omitting packets from connection negotiation messages. This prefix truncation attack can result in downgraded security and is known as a Terrapin attack. This is a vulnerability of SSH/SFTP servers; Lasernet is an SFTP client and does not contain a vulnerability.

The OpenSSH “strict kex extension” prevents Terrapin attacks. Because Lasernet acts as an SFTP client, it must support the OpenSSH strict kex extension in order to connect to SFTP servers that are using that extension. If an SFTP server does have a “Require strict kex extension” mode (or similar) enabled, Lasernet can now connect to the SFTP server and communicate with it in accordance with the requirements of that mode.

Enhancements

Lasernet 10 System Requirements

For information about Lasernet 10 system requirements, refer to the Lasernet System Requirements page.

Important Information to Read Before Upgrading to Lasernet 10.8.1

New Installers, Connections, Sign in, and SDK from Lasernet 10.2

The installation procedure and the configuration procedure, in several of the client applications, changed at Lasernet 10.2. There are now separate installers for Lasernet Server 10 and Lasernet Developer 10.

If you currently have Lasernet 10.1.4 or earlier and have not read the release notes for Lasernet 10.2, it is recommended that you do so before you install Lasernet 10.8.1. The information provided there is crucial for upgrading to Lasernet 10.2 and later, and also describes changes that affect third-party modules developed with the Lasernet SDK.

How to Get Support

If you encounter difficulty using Lasernet, contact us via the Create Ticket button in the support portal.