Summary

This article details the list of changes for Laserfiche Forms 10.4.4 Update 1.

The following improvements have been made, as well as changes to address the Laserfiche Forms Portal File Upload Vulnerability.

• Public users no longer have the option to download a copy of the file that they uploaded when returning to a saved draft or after submission. (324708, 339722)
• Enhancements to prevent files types not in the "File extensions allowed" option from being uploaded. (298692)
• No longer terminate a submission if a file upload field and the submission contains cf_bp_attachment_data with a duplicate id. (270156)
• Improved performance of assigning tasks using team filters. (147380)

The update includes the following files:

• \Config\bin\ar\FormsResource.resources.dll (10.4.4.453)
• \Config\bin\EntityModels.dll (10.4.4.453)
• \Config\bin\es\FormsResource.resources.dll (10.4.4.453)
• \Config\bin\Forms.Persistence.EntityFramework.dll (10.4.4.453)
• \Config\bin\FormsCommonUtils.dll (10.4.4.453)
• \Config\bin\FormsModel.dll (10.4.4.453)
• \Config\bin\FormsResource.dll (10.4.4.453)
• \Config\bin\fr\FormsResource.resources.dll (10.4.4.453)
• \Config\bin\pt-BR\FormsResource.resources.dll (10.4.4.453)
• \Config\bin\SharedServices.dll (10.4.4.453)
• \Config\bin\th\FormsResource.resources.dll (10.4.4.453)
• \Config\bin\zh-hans\FormsResource.resources.dll (10.4.4.453)
• \Config\bin\zh-hant\FormsResource.resources.dll (10.4.4.453)
• \Forms\bin\ar\FormsResource.resources.dll (10.4.4.453)
• \Forms\bin\E-Forms.dll (10.4.4.453)
• \Forms\bin\EntityModels.dll (10.4.4.453)
• \Forms\bin\es\FormsResource.resources.dll (10.4.4.453)
• \Forms\bin\Forms.Persistence.EntityFramework.dll (10.4.4.453)
• \Forms\bin\FormsCommonUtils.dll (10.4.4.453)
• \Forms\bin\FormsModel.dll (10.4.4.453)
• \Forms\bin\FormsResource.dll (10.4.4.453)
• \Forms\bin\fr\FormsResource.resources.dll (10.4.4.453)
• \Forms\bin\Jint.dll (2.11.58.0)
• \Forms\bin\pt-BR\FormsResource.resources.dll (10.4.4.453)
• \Forms\bin\SharedServices.dll (10.4.4.453)
• \Forms\bin\th\FormsResource.resources.dll (10.4.4.453)
• \Forms\bin\zh-Hans\FormsResource.resources.dll (10.4.4.453)
• \Forms\bin\zh-Hant\FormsResource.resources.dll (10.4.4.453)
• \Forms\js\app\form-builder\form-layout.directive.js (Last Modified 9/6/2021)
• \Forms\js\form\forms.js (Last Modified 9/6/2021)
• \Forms\js\form\newfileupload.js (Last Modified 9/6/2021)
• \Forms\js\form\validationUtil.js (Last Modified 9/6/2021)
• \Forms\js\templates\partial.template.js (Last Modified 9/6/2021)
• \Forms\Partials\FormsDesigner\_FieldEditMenu.html (Last Modified 9/6/2021)
• \Forms\Views\Designer\FormBuilder.cshtml (Last Modified 9/6/2021)

Resolution

Click the following link to download a ZIP file containing Hotfix 1014320 for Laserfiche Forms 10.4.4.

KB1014320.zip

1. Extract the executable file from the ZIP file to a temporary location on the server hosting Laserfiche Forms 10.4.4.
2. Stop the Laserfiche Forms Routing Service.
3. Run the installer to update Forms.
4. Start the Laserfiche Forms Routing Service.

Note: In order to upgrade to Forms 10.4.5, this update will need to be manually uninstalled. This does not apply when upgrading to Forms 11 or later.

Related Links

Laserfiche Forms Portal File Upload Vulnerability.

Release Notes for Laserfiche Forms 10.4.4.

List of Changes for Forms 10.4.4.