Summary

This article details the list of changes for Laserfiche Forms 10.2.1 Update 6.

The following changes have been made to address the Laserfiche Forms Portal File Upload Vulnerability.

• Public users no longer have the option to download a copy of the file that they uploaded when returning to a saved draft or after submission. (324708, 339722)
• Enhancements to prevent files types not in the "File extensions allowed" option from being uploaded. (298692)

The update includes the following files:

• \Config\bin\EntityModels.dll (10.2.1.363)
• \Config\bin\Forms.Persistence.EntityFramework.dll (10.2.1.363)
• \Config\bin\FormsCommonUtils.dll (10.2.1.363)
• \Forms\bin\E-Forms.dll (10.2.1.363)
• \Forms\bin\EntityModels.dll (10.2.1.363)
• \Forms\bin\Forms.Persistence.EntityFramework.dll (10.2.1.363)
• \Forms\bin\FormsCommonUtils.dll (10.2.1.363)
• \Forms\js\form\forms.js (Last Modified 9/10/2021)
• \Forms\js\form\newfileupload.js (Last Modified 9/10/2021)
• \Forms\js\form\validationUtil.js (Last Modified 9/10/2021)
• \Forms\Styles\form.css (Last Modified 9/10/2021)
• \Forms\Views\Form\_FormLayout.cshtml (Last Modified 9/10/2021)
• \Config\bin\ar\FormsResource.resources.dll (10.2.1.363)
• \Config\bin\es\FormsResource.resources.dll (10.2.1.363)
• \Config\bin\FormsResource.resources.dll (10.2.1.363)
• \Config\bin\fr\FormsResource.resources.dll (10.2.1.363)
• \Config\bin\pt-BR\FormsResource.resources.dll (10.2.1.363)
• \Config\bin\th\FormsResource.resources.dll (10.2.1.363)
• \Config\bin\zh-Hans\FormsResource.resources.dll (10.2.1.363)
• \Config\bin\zh-Hant\FormsResource.resources.dll (10.2.1.363)
• \Forms\bin\ar\FormsResource.resources.dll (10.2.1.363)
• \Forms\bin\es\FormsResource.resources.dll (10.2.1.363)
• \Forms\bin\FormsResource.resources.dll (10.2.1.363)
• \Forms\bin\fr\FormsResource.resources.dll (10.2.1.363)
• \Forms\bin\pt-BR\FormsResource.resources.dll (10.2.1.363)
• \Forms\bin\th\FormsResource.resources.dll (10.2.1.363)
• \Forms\bin\zh-Hans\FormsResource.resources.dll (10.2.1.363)
• \Forms\bin\zh-Hant\FormsResource.resources.dll (10.2.1.363)

Resolution

Click the following link to download a ZIP file containing update 6 for Laserfiche Forms 10.2.1.

KB1014327.zip

1. Extract the executable file from the ZIP file to a temporary location on the server hosting Laserfiche Forms 10.2.1.
2. Stop the Laserfiche Forms Routing Service.
3. Run the installer to update Forms.
4. Start the Laserfiche Forms Routing Service.

More Information

When you install Update 6 over the release version of Laserfiche Forms 10.2.1, the Update 6 installation process will create backups of the following configuration files in C:\Program Files\Laserfiche\Laserfiche Forms\Forms\TempFile.

• RoutingEngineServiceHost.exe.config
• Config\web.config
• Forms\web.config

If you install Update 6 over the release version of Laserfiche Forms 10.2.1 (10.2.1.157), and you then decide to uninstall Update 6, the process may remove the above configuration files. Manually copy the backups from the TempFile folder to the appropriate locations to restore your Forms installation. This uninstall issue does not apply when you install Update 6 over Laserfiche Forms 10.2.1 Update 1, 2, 3, 4, or 5.

Note: The web.config backups are renamed to denote the source location of the web.config. When restoring, remember to remove the prefix from the file name.

Related Links

Laserfiche Forms Portal File Upload Vulnerability.

Release Notes for Laserfiche Forms 10.2.1.

List of Changes for Forms 10.2.1.