UDMG 3.4.x Maintenance
Stonebranch provides UDMG maintenance through updated installation packages.
This page lists the product installation package maintenance history for UDMG 3.4.x and USP 3.4.x.
Product Packaging
A package maintenance level is incremented when the package changes or the package installation changes.
Stonebranch changes product version, release, or modification identifiers at its discretion when it deems an appropriate number of enhancements or capabilities have been introduced to warrant the change.
Packaging Methods
The UDMG 3.4.x and USP 3.4.x packages are provided in formats appropriate for the target platforms.
For installation information, refer to our official Installation and Configuration Roadmaps:
Package Maintenance Levels
This section identifies the changes included in UDMG 3.4.x and USP 3.4.x.
UDMG
Release 3.4.2 - October 15, 2026
| Change ID | Description |
|---|---|
| #61634 | Database: Resolved an issue that prevented upgrading to 3.4.0 from prior versions when using an Oracle database. |
| #61722 | FTP: Resolved an issue that prevented editing existing Remote FTP Server Endpoints. |
| #61723 | AS2: Resolved an issue that prevented editing existing Remote AS2 Server Endpoints. |
Release 3.4.1 - October 6, 2026
| Change ID | Description |
|---|---|
| #61243 | Database: Resolved an issue where upgrading to UDMG 3.4.0 failed on Oracle databases, preventing UDMG Server from starting with the error "database is dirty". This affected all Oracle databases upgraded from an earlier version. |
| #61243 | Database: Resolved an issue where upgrading to UDMG 3.4.0 failed on MySQL databases that had ever run UDMG 3.2.x. UDMG Server did not start, and the log showed the error "database is dirty". |
| #61245 | Database: Resolved an issue where upgrading failed on Microsoft SQL Server databases that had ever run UDMG 3.2.x, preventing UDMG Server from starting with the error "database is dirty". Customers using SQL Server and running UDMG 3.2.x should upgrade directly to UDMG 3.4.1. |
Release 3.4.0 - October 5, 2026
| Change ID | Description |
|---|---|
| #58980 | AS2: Added numerous interoperability and compatibility improvements across AS2 message exchange, MDN processing, header handling, certificate validation, and partner communications. Improved compatibility with third-party AS2 implementations. |
| #60945 | FTP: Added interoperability, compatibility and security improvements. |
| #60945 | SFTP: Added interoperability, compatibility and security improvements. |
| #57943 #57499 | Library dependencies updated due to vulnerabilities. info These defects reflect third-party dependency updates made in response to CVE disclosures. Not every CVE directly impacts UDMG; however, these updates were applied proactively to eliminate any potential risk and ensure continued compliance with security best practices. |
| #45661 | API: Enhanced UDMG REST API list operations with support for paginated results, sorting, and filtering. These improvements help reduce response sizes, improve client efficiency, and simplify management of large environments while preserving compatibility with existing integrations. warning The accounts-groups resource has been renamed to |
| #60781 #51394 #57396 #58491 #59071 | API: Implemented a broad set of fixes and improvements to Swagger UI and OpenAPI documentation, improving accuracy, API discoverability, and alignment between documented and actual API behavior. warning The Schedule Transfer API no longer accepts requests that omit the required |
| #53452 | API: The transfer cancel and stop APIs have been simplified by removing the redundant warning The |
| #49297 | Administration: Case-Insensitive Naming Enforcement Added case-insensitive uniqueness validation for Account Groups, Endpoints, Pipelines, Credentials, IP Filters, and Secondary Domains. This enhancement improves consistency with Universal Controller and prevents creation of new Configuration Items whose names differ only by letter casing. warning New Configuration Items cannot be created with names that differ from an existing object only by case. Existing Items are unaffected and require no migration. |
| #47659 | Administration: Case-Insensitive Domain Handling Users can now log in regardless of Domain name capitalization. UDMG prevents duplicate Domains that differ only by letter case, providing a more consistent experience. |
| #59466 | Pipelines: Virtual Path Validation Improvements The Virtual Path field now rejects path segments that contain leading or trailing spaces, helping prevent configuration errors and improving compatibility with client applications while continuing to support spaces within folder names. |
| #59331 | Administration: Last Name is now optional when creating a User. |
| #59334 #59789 | Administration: Endpoint Status is now displayed according to Endpoint type, showing meaningful values such as Auto-start/Manual-start for Local Server Endpoints and Enabled/Disabled for Remote, Cloud, and Local Filesystem Endpoints, while Runtime Status is shown only for Endpoint types that have an active runtime state. |
| #58420 #55829 | Administration: Improved authentication workflows, session management, and access-control error handling throughout the Web Transfer Client and UDMG Admin UI. Users now receive more accurate and actionable feedback when sessions end, access permissions change, login prerequisites are not met, or requests are routed to passive Cluster Nodes. |
| #57696 #57632 #57742 #57741 #57906 #57907 #57871 #58804 #57871 | SSO: Updated SAML SSO labels and documentation to clearly distinguish Identity Provider (IdP) and Service Provider (SP) identifiers. Added parameter validation checks. Removed default comma (,) in the Role/Group Delimiter (For Single String Attributes) field. |
| #58790 | SSO: Credentials that are in use by an SSO configuration can no longer be deleted, helping prevent configuration errors and ensuring referential integrity. |
| #59966 | SSO: Enhanced SSO troubleshooting by providing clearer error details when authentication fails. Admins now receive more actionable information about configuration, validation, and identity provider issues, helping them identify and resolve login problems more quickly. |
| #54732 | SSO: Partners authenticated through SSO are now redirected to the login page when signing out of the Web Transfer Client (WTC). |
| #59211 | Workflows: Automation and Event Integration Enhancements Improved workflow automation capabilities by aligning workflow replacement variables, event payloads, UAC integration templates, and product documentation. These updates provide more consistent runtime context, improve event integration reliability, and make available workflow variables easier to discover and use when building automations and monitoring integrations. The following variables have been updated: |
| #58297 #58354 #52804 | Workflows: Variable Enhancements and Compatibility Updates Improved consistency of account-related Workflow replacement variables across Tasks and Pipelines. |
| #57173 | Workflows: Additional Account Replacement Variables Added support for |
| #58534 #58427 #58493 #54436 #57119 | Transfers: Reporting Enhancements Added support for absolute date range filtering in the Transfers Dashboard and transfer reporting APIs ( The Transfers Dashboard now includes a date-range picker that allows Users to select a start date, an end date, or an open-ended range. Existing relative time-range filters and API integrations remain fully supported for backward compatibility. |
| #50957 #59151 #59152 #55774 | Transfers: List Usability Enhancements The Transfers Dashboard now supports server-side search, filtering, and pagination, delivering faster and more scalable access to large transfer histories. Page size options have been expanded up to 10,000 records, filter selections are preserved across sessions, and searches are applied only when requested, providing a more responsive and predictable user experience. |
| #59288 | Scheduled Transfers: Added the Scheduled Transfers Dashboard that provides visibility into pending and completed transfer schedules, including schedule status, timing information, pipeline details, source and destination paths, and related transfer IDs. Users can view schedule details and cancel pending scheduled transfers directly from the user interface. |
| #60225 | Wildcard: The Transfers List API now includes the number of files matched by wildcard transfers, providing the same visibility previously available only through the individual transfer API. |
| #50583 | Transfers: Two new hidden-by-default columns are available in the Transfers Dashboard table:
|
| #59072 | Scheduled Client Transfers: Path Visibility Improvements Scheduled Transfer APIs and user interface pages now clearly distinguish between configured paths and runtime-resolved paths. Original This release also includes multiple fixes to path calculation, virtual path handling, trailing-slash behavior, cloud transfer path resolution, dry-run results, and scheduled transfer responses, improving consistency and accuracy across transfer, schedule, and API workflows. |
| #59597 #59598 #59599 #58270 | Scheduled Transfers: Scheduled Transfers now correctly validate that required Endpoints and Credentials are enabled before execution, preventing transfers from running with disabled resources and providing clearer error messages when configuration issues are detected. warning The Schedule Transfer API no longer accepts requests that omit the required |
| #59327 #59506 #59837 #59322 #58761 | Transfers: Improved Transfer cancellation handling by ensuring in-progress transfers stop immediately when cancelled, preserving cancellation reasons, reporting accurate cancellation counts, and preventing cancelled transfers from being incorrectly reported as completed. |
| #55949 | Administration: License Expiration Notifications UDMG now displays licensing notifications to Operator, Domain Administrator, and System Administrator Users when the license is approaching expiration ("UDMG License expires in X days") or when the system is unlicensed ("UDMG is unlicensed"), helping Admins proactively renew or apply licenses before operations are affected. |
| #58908 #58909 | Administration: License Usage Visibility Enhancements The License Details section now displays transfer counts for the current license period and up to three prior license periods, helping Admins track usage trends over time and providing immediate visibility into completed license periods for auditing and compliance purposes, without requiring manual transfer history analysis. |
| #60487 | Pipelines: Configuration Improvements Disabled Endpoints can now be selected and displayed as Pipeline Source and Destination Endpoints, making it easier to view and update existing Pipeline configurations. |
| #57663 | Cloud: Enhanced Endpoint Validation Cloud Endpoint validation now supports selecting a Key Pair Credential during validation, allowing Admins to verify both connectivity and authentication to cloud storage services before configuring transfers. |
| #57352 | Scheduled Transfers: Wildcard Transfer Concurrency Control Added the |
| #55839 #57987 | WTC: File Integrity Verification Enhancements The Web Transfer Client (WTC) now allows Admins to configure file integrity verification directly from the user interface, with support for MD5, CRC32, SHA-1, SHA-256, and SHA-512 checksum algorithms. Checksum validation is now optional and defaults to disabled, providing greater flexibility for cloud storage integrations and performance-sensitive deployments. warning Checksum verification is no longer enabled by default to MD5 for newly configured WTC endpoints. Existing endpoints may require review during upgrade to ensure the desired checksum behavior is preserved. |
| #57685 | WTC: French Language Support The Web Transfer Client (WTC) now supports French, allowing partners to access the interface in their preferred language. |
| #57680 | WTC: Localization Improvements Expanded Spanish and German translations across the user interface, further reducing the number of English-only labels and messages. |
| #51680 #51991 #51856 #54236 #55912 #56139 #58211 #58213 #58656 #57412 | WTC: Usability Improvements Enhanced the Web Transfer Client (WTC) user experience with improved refresh behavior, more consistent error messages, better search and navigation workflows, improved file and folder operation feedback, and fixes for display and text-entry issues during file management activities. |
| #55549 | WTC: Overwrite Confirmation for File Operations The Web Transfer Client (WTC) now prompts partners for confirmation before renaming or overwriting an existing file or folder, helping prevent accidental data replacement. |
| #58625 | WTC: The Local HTTPS Server (WTC) Endpoint System Disclaimer Label field now supports up to 2,500 characters. |
| #60886 #60889 | WTC: Domain Banner and Logo Management Improvements Improved banner and logo customization by providing clearer validation messages for oversized images, preserving existing logos when uploads fail, and allowing Admins to remove or replace logos while saving other configuration changes. |
| #56241 | Security: Software Bill of Materials (SBOM) A Software Bill of Materials (SBOM) in SPDX JSON format is available upon request. |
| #59436 #53470 | Security: Enhanced Browser Security Protections Strengthened browser-side security by implementing a comprehensive Content Security Policy (CSP) and additional HTTP security headers, including HSTS, Referrer-Policy, X-Frame-Options, X-Content-Type-Options, and Cross-Origin-Resource-Policy (CORP), providing improved protection against common web-based attacks and aligning with industry security best practices. |
| #58787 | Security: Improved Authentication Protection Authentication timing is now consistent for valid and invalid usernames across FTP, SFTP, WTC, and the HTTP API, helping prevent username enumeration; FTP also returns the same error response for all invalid credentials. |
| #55584 | Administration: Improved Password Recovery The |
| #55950 | Administration: Password Policy Validation Improvements Password creation and reset screens now provide real-time validation feedback, helping Users understand password policy requirements as they type and reducing password-related errors during Account and User management. |
| #51969 | Security: Modernized CSRF Protection UDMG now uses a modern browser-based CSRF protection mechanism, simplifying authentication flows while maintaining security. |
| #58746 #57905 | Administration: Enhanced User Role Assignment Controls Strengthened role-assignment validation to prevent Users from creating or assigning roles with higher privileges than their own, helping enforce the intended permission hierarchy and reducing the risk of privilege escalation. |
| #59115 | Administration: MySQL TLS Connectivity Fix Resolved an issue that prevented UDMG from starting when using MySQL connections configured with TLS. Secure MySQL connections configured through the standard database settings now start successfully, eliminating the need to use a direct DSN configuration as a workaround. |
| #59141 #59140 | Administration: Improved Database Connection Logging UDMG now logs configured and generated database connection strings (DSNs) with passwords masked, making database connectivity issues easier to troubleshoot without exposing credentials. |
| #59215 | Administration: Enhanced Database Connectivity Diagnostics UDMG now classifies common database connectivity failures into dedicated categories, exposed through the API |
| #58912 | Transfers: Forward Proxy Logging Enhancements Transfer logs now include the configured forward proxy type ( |
| #59254 #58275 | Administration: Improved Logging Visibility MySQL connectivity errors and rclone diagnostic messages are now consistently captured in the UDMG logs, instead of being written only to standard error stream, improving troubleshooting and ensuring important diagnostic information is available on all supported platforms, including Windows. |
| #59102 #59252 | Administration: Configuration Reliability Improvements Boolean configuration settings that default to enabled now correctly honor explicit Log file rotation can be disabled. |
| #59567 | Administration: The configuration file now includes the |
| #58770 | SFTP: Rename Validation Improvements UDMG now prevents SFTP rename operations that cross virtual file system (VFS) boundaries, returning a clear "crossing boundary" error instead of allowing misleading failures or reporting a successful move when the file was not actually relocated. This provides more predictable behavior when working across multiple pipelines or storage mappings. |
| #59168 | SFTP: Improved Compatibility with Modern SFTP Servers Remote SFTP endpoints using RSA host keys now support |
| #58009 | SFTP: Improved Local Endpoint Shutdown Handling Stopping or restarting an SFTP endpoint now properly terminates active client connections, ensuring existing sessions are closed and preventing further file operations until clients reconnect after the endpoint becomes available again. |
| #60229 | HA: Secure Cluster Communications Enhanced UDMG cluster security with configurable network bindings, shared-token authentication, and TLS/mTLS encryption for internal NATS communications. The client port now binds to |
| #54358 | HA: Improved Cluster Node Monitoring The |
| #57889 | HA: Improved Endpoint State Handling Disabled local server endpoints now remain stopped after a full cluster restart, while manually started endpoints remain synchronized across active nodes. |
| #57243 | HA: Improved Recovery After Unexpected Shutdowns Transfers and Workflow Tasks that were in progress when UDMG shut down are now automatically updated to an appropriate terminal state after restart, preventing Transfers from remaining in Processing and Workflow Tasks from remaining in Running indefinitely. |
Known Issues in UDMG 3.4.0
| Change ID | Scope | Title | Description |
|---|---|---|---|
| #57751 | Local Server Endpoints | Disabling Auto-Start on Local Server Endpoints Causes Login Failures | Disabling the Auto-Start Endpoint setting on a Local Server Endpoint causes logins to fail even though the Endpoint remains in a listening state. Workaround: Re-enable Auto-Start Endpoint in Local AS2 Server, Local FTP Server, Local HTTPS Server (WTC), and Local SFTP Server Endpoints. |
| #61048 | Transfers Dashboard | Transfers View Pagination Behavior Changes | The Transfers view now uses server-side pagination, which changes how sorting, filtering, and refresh behave. The default sort order has changed from Last Updated to Start Time; changing the sort column is not currently supported. After updating the date range or any other filter, click the magnifying glass icon to apply the new criteria. |
| #61011 | Administration | Account Edits Blocked by Disabled Credential | If an Account references a Credential that has been marked as disabled, saving changes to the Account is not possible (clicking Save does not apply edits). Also, disabled Credentials do not appear in the assigned credentials drop-down, so the Credential cannot be removed from within the Account form. Workaround: Temporarily re-enable the Credential. Once re-enabled, dissociate it from the Account on the Accounts page, where the Credential is now visible in the assigned credentials list. After the credential is re-enabled or removed, the Account can be edited normally. |
| #61122 | Remote AS2 Server Endpoint | Workflows Not Supported with Asynchronous MDN Disposition | When using Asynchronous MDN as the MDN Disposition Mechanism for Remote AS2 Server Endpoints, Workflows are not supported (Tasks specified in a Workflow do not run). Workaround: Switch to Synchronous MDN disposition, under which Workflows run normally. |
| #61034 #61033 | LDAP | Disabling LDAP Does Not Stop Synchronization or Authentication | Disabling an LDAP provider does not stop synchronization or authentication for Users and Accounts federated from that source. Workarounds:
|
USP
Release 3.4.0 - October 5, 2026
| Change ID | Description |
|---|---|
| #57944 #57500 | Library dependencies updated due to vulnerabilities. info These defects reflect third-party dependency updates made in response to CVE disclosures. Not every CVE directly impacts UDMG; however, these updates were applied proactively to eliminate any potential risk and ensure continued compliance with security best practices. |
| #53726 #58174 #57157 #58345 #45386 #58529 #47766 #58886 | Administration: Improved Configuration Visibility Tables now display user-friendly names instead of UUIDs for referenced resources, making configurations easier to identify and manage. Improved column formatting and filtering. Addition of columns in the Deployments, Route Inbound Nodes, and Route Outbound Nodes tables. Ability to navigate to the referenced credentials from the Encryption Key Usage table. |
| #58823 | SSO: Configurable SAML Signing Algorithms Administrators can now explicitly configure the signature algorithm used for SAML AuthnRequest signing, improving compatibility with identity providers and providing greater visibility and control over SAML authentication settings. |
| #53719 | Administration: Status Monitoring Improvements Status information now displays the time of the last server health check. |
| #58660 | Administration: Health Check Configuration Improvements Listener health check settings can now be left blank when Use Health Check is disabled. |
| #47813 | API: Swagger UI is now available at |
| #53338 | Administration: Custom banner logos now display correctly in the USP Manager interface. |
| #51847 #55480 | Administration: Email can also be edited and cleared without glitches. |
| #51536 #56564 #55959 | Administration: Browser Autofill Improvements Browser autofill is now disabled on User, LDAP, and HSM configuration forms to reduce unintended field population and improve data entry reliability. |
| #57240 | Administration: Session handling has been improved to prevent unexpected sign-outs. |
| #58115 | Administration: Live Tunnel start and stop actions are no longer available to read-only Users. |