AArch64 | |
ppc64le | |
s390x | |
x86-64 |
- Update to version 20210827 * Validate address in server's PASV and LPSV responses. Previously a hostile server could cause ftp to open a data connection elsewhere. * Avoid intermittent crashes by fixing signal handler restoration. * Fix intermittent failures in -q QUITTIME by not using restartable signals. * Set SO_KEEPALIVE on control connection to attempt to avoid timeouts. * Display usage to stdout with -?. - Update to version 20200705: * Avoid crashes by exiting if lostpeer due to a signal * Issue PWD commands to the server only when we actually need the results, not speculatively, just in case we might. * Use "anonymous" instead of the local username for anonymous ftp. Avoids unnecesary information leak. * Use the first name we requested the http/https URL for, not any name we ended up with after random redirects. * Support using CONNECT for https:// via proxy. * Improve SSL error reporting, and IPv6 endpoint reporting. * Use the system glob() if required extensions are supported. - Drop upstream fixed tnftp-20100108-am_and_libedit.patch - Drop upstream fixed tnftp-verify_hostname.patch
- tnftp ssl client should validate hostnames and certificates, so for example tnftp -d https://revoked.badssl.com/example fails to connect. (tnftp-verify_hostname.patch), There are at least two reports about this misbehaviour online but it has never been fixed. Patch targets openSSL 1.1.x and later so specify requirement in spec file.
- Update to version 20151004: * Implement '-x xferbufsize' to set xferbuf size. * Add Server Name Indication (SNI) support for https. * Increase buffer limit used for response handling. - Removed post/pre requirement coreutils (not needed). - Fixes for update-alternatives usage.
- Update to version 20141104 * Portability fixes - Changes from version 20141031 * Ignore special character behaviour in filenames not provided by the user. * Fixes CVE-2014-8517. * Fix timeout on HTTP fetches. - Remove tnftp-cve-2014-8517.patch; fixed on upstream release
- Apply fix for bnc#903011 CVE-2014-8517 * tnftp-cve-2014-8517.patch - Version bump to 20130505: * various triv fixes * more ssl support * refresh tnftp-20100108-am_and_libedit.patch - Cleanup with spec-cleaner - Use update-alternatives properly - Do not verify the sig in spec, just let OBS do it
- verify tarball using gpg-offline - remove obsoleted PreReq and reformat spec
- fix openSUSE builds - add autoconf, automake, libtool build requirements - remove INSTALL file from package
- There is no need to check for ncurses, not directly used by this package but by libedit for which we use the system version.
- First package version, this is the segue from lukemftp