| AArch64 | |
| ppc64le | |
| s390x | |
| x86-64 |
- Update to version 20210827
* Validate address in server's PASV and LPSV responses. Previously
a hostile server could cause ftp to open a data connection elsewhere.
* Avoid intermittent crashes by fixing signal handler restoration.
* Fix intermittent failures in -q QUITTIME by not using restartable
signals.
* Set SO_KEEPALIVE on control connection to attempt to avoid timeouts.
* Display usage to stdout with -?.
- Update to version 20200705:
* Avoid crashes by exiting if lostpeer due to a signal
* Issue PWD commands to the server only when we actually need the
results, not speculatively, just in case we might.
* Use "anonymous" instead of the local username for anonymous
ftp. Avoids unnecesary information leak.
* Use the first name we requested the http/https URL for, not any
name we ended up with after random redirects.
* Support using CONNECT for https:// via proxy.
* Improve SSL error reporting, and IPv6 endpoint reporting.
* Use the system glob() if required extensions are supported.
- Drop upstream fixed tnftp-20100108-am_and_libedit.patch
- Drop upstream fixed tnftp-verify_hostname.patch
- tnftp ssl client should validate hostnames and certificates, so for example tnftp -d https://revoked.badssl.com/example fails to connect. (tnftp-verify_hostname.patch), There are at least two reports about this misbehaviour online but it has never been fixed. Patch targets openSSL 1.1.x and later so specify requirement in spec file.
- Update to version 20151004: * Implement '-x xferbufsize' to set xferbuf size. * Add Server Name Indication (SNI) support for https. * Increase buffer limit used for response handling. - Removed post/pre requirement coreutils (not needed). - Fixes for update-alternatives usage.
- Update to version 20141104 * Portability fixes - Changes from version 20141031 * Ignore special character behaviour in filenames not provided by the user. * Fixes CVE-2014-8517. * Fix timeout on HTTP fetches. - Remove tnftp-cve-2014-8517.patch; fixed on upstream release
- Apply fix for bnc#903011 CVE-2014-8517 * tnftp-cve-2014-8517.patch - Version bump to 20130505: * various triv fixes * more ssl support * refresh tnftp-20100108-am_and_libedit.patch - Cleanup with spec-cleaner - Use update-alternatives properly - Do not verify the sig in spec, just let OBS do it
- verify tarball using gpg-offline - remove obsoleted PreReq and reformat spec
- fix openSUSE builds - add autoconf, automake, libtool build requirements - remove INSTALL file from package
- There is no need to check for ncurses, not directly used by this package but by libedit for which we use the system version.
- First package version, this is the segue from lukemftp