Servu 15 5 4 Hotfix 1 Release Notes

Here's what's new in Serv-U 15.5.4 Hotfix 1. You can find the applicable system requirements here .

To view release notes, system requirements, and product guide PDFs for supported versions of Serv-U, see Serv-U versions . To view release notes for multiple versions and multiple SolarWinds Platform products on a single page, see the release notes aggregator .

Serv-U 15.5.4 Hotfix 1 provides bugfixes related to CVE-2026-28318. For information the 15.5.4 release, including EOL notices and upgrade information, see the Serv-U 15.5.4 release notes .

Customers who downloaded and installed Serv-U 15.5.4 should also download and install Serv-U 15.5.4 Hotfix 1.

There were no features or improvements added for Serv-U in this release.

At SolarWinds, we prioritize the swift resolution of CVEs to ensure the security and integrity of our software. In this release, we have successfully addressed the following CVEs.

SolarWinds would like to thank our Security Researchers below for reporting on the issue in a responsible manner and working with our security, product, and engineering teams to fix the vulnerability.

As you install this hotfix, take note of the files you add, remove, replace, or modify for your future reference should you decide to uninstall this hotfix at any point.

Shut down all running Serv-U processes.

Right-click the tray icon and select Stop Serv-U.

Right-click the tray icon and select Exit Tray.

Back up the following files:

\Serv-U.exe

\Serv-U-Tray.exe

\Serv-U.dll

\Serv-U-RES.dll

\RhinoNET.dll

\RhinoRES.dll

\Strings\Serv-U.str

\Strings\Serv-U-Strings.h

/Serv-U

/Strings/Serv-U.str

/Strings/Serv-U-Strings.h

Extract the hotfix archive to a temporary location.

Open the folder for the platform on which Serv-U is installed. For example, open the Linux/64-bit folder if Serv-U is installed on a 64-bit version of Linux.

On Linux, modify the permissions of the file by executing the following command: chmod u+xs Serv-U

Copy the contents of this folder to your Serv-U installation directory.

Start the Serv-U Tray application.

Right-click the Serv-U Tray icon and select Start Serv-U. The hotfix is installed.

An attacker can no longer crash the Serv-U service by sending a simple request to the server with Content-Encoding: deflate and some data.

Shut down all running Serv-U processes.

Right-click the tray icon and select Stop Serv-U.

Right-click the tray icon and select Exit Tray.

Replace the following files with the ones you backed up during installation:

\Serv-U.exe

\Serv-U-Tray.exe

\Serv-U.dll

\Serv-U-RES.dll

\RhinoNET.dll

\RhinoRES.dll

\Strings\Serv-U.str

\Strings\Serv-U-Strings.h

/Serv-U

/Strings/Serv-U.str

/Strings/Serv-U-Strings.h

Start the Serv-U Tray application.

Right-click the Serv-U Tray icon and select Start Serv-U. The hotfix is uninstalled.

For more information, Technical Support at .

See the End of Life Policy for information SolarWinds product life cycle phases. To see EoL dates for earlier Serv-U versions, see Serv-U release history .

This document may not be reproduced by any means nor modified, decompiled, disassembled, published or distributed, in whole or in part, or translated to any electronic medium or other means without the prior written consent of SolarWinds. All right, title, and interest in and to the software, services, and documentation are and shall remain the exclusive property of SolarWinds, its affiliates, and/or its respective licensors.

SOLARWINDS DISCLAIMS ALL WARRANTIES, CONDITIONS, OR OTHER TERMS, EXPRESS OR IMPLIED, STATUTORY OR OTHERWISE, ON THE DOCUMENTATION, INCLUDING WITHOUT LIMITATION NONINFRINGEMENT, ACCURACY, COMPLETENESS, OR USEFULNESS OF ANY INFORMATION CONTAINED HEREIN. IN NO EVENT SHALL SOLARWINDS, ITS SUPPLIERS, NOR ITS LICENSORS BE LIABLE FOR ANY DAMAGES, WHETHER ARISING IN TORT, CONTRACT OR ANY OTHER LEGAL THEORY, EVEN IF SOLARWINDS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

The SolarWinds, SolarWinds & Design, Orion, and THWACK trademarks are the exclusive property of SolarWinds Worldwide, LLC or its affiliates, are registered with the U.S. Patent and Trademark Office, and may be registered or pending registration in other countries. All other SolarWinds trademarks, service marks, and logos may be common law marks or are registered or pending registration. All other trademarks mentioned herein are used for identification purposes only and are trademarks of (and may be registered trademarks) of their respective companies.