Changelog for
tnftp-20230507-27.26.i586.rpm :
* Sat May 13 2023 Martin Hauke
- Update to version 20230507
* Add timeout for SSL connection setup, defaulting to 60 seconds.
* Consistently use poll(2) instead of select(2).
* Check EAGAIN as well as EINTR.
* Simplify includes.- Update to version 20230409
* Add option sslnoverify to control validation of SSL certificates.
* Add netrc processing to fetch-mode (URL on command line) to enable options and autologin via netrc.
* Fix SSL cleanup in some error paths.
* Support SSL certificate validation by default. FTPSSLNOVERIFY=1 in the environment to disable validation.
* Handle relative URLs.
* Improve ftp(1) markup.
* Fix -? in a more portable manner.
* Fri May 20 2022 Ferdinand Thiessen - Update to version 20210827
* Validate address in server\'s PASV and LPSV responses. Previously a hostile server could cause ftp to open a data connection elsewhere.
* Avoid intermittent crashes by fixing signal handler restoration.
* Fix intermittent failures in -q QUITTIME by not using restartable signals.
* Set SO_KEEPALIVE on control connection to attempt to avoid timeouts.
* Display usage to stdout with -?.- Update to version 20200705:
* Avoid crashes by exiting if lostpeer due to a signal
* Issue PWD commands to the server only when we actually need the results, not speculatively, just in case we might.
* Use \"anonymous\" instead of the local username for anonymous ftp. Avoids unnecesary information leak.
* Use the first name we requested the http/https URL for, not any name we ended up with after random redirects.
* Support using CONNECT for https:// via proxy.
* Improve SSL error reporting, and IPv6 endpoint reporting.
* Use the system glob() if required extensions are supported.- Drop upstream fixed tnftp-20100108-am_and_libedit.patch- Drop upstream fixed tnftp-verify_hostname.patch
* Tue May 26 2020 Cristian RodrÃguez - tnftp ssl client should validate hostnames and certificates, so for example tnftp -d https://revoked.badssl.com/example fails to connect. (tnftp-verify_hostname.patch), There are at least two reports about this misbehaviour online but it has never been fixed. Patch targets openSSL 1.1.x and later so specify requirement in spec file.
* Mon Aug 08 2016 asterios.dramisAATTgmail.com- Update to version 20151004:
* Implement \'-x xferbufsize\' to set xferbuf size.
* Add Server Name Indication (SNI) support for https.
* Increase buffer limit used for response handling.- Removed post/pre requirement coreutils (not needed).- Fixes for update-alternatives usage.
* Tue Apr 07 2015 p.drouandAATTgmail.com- Update to version 20141104
* Portability fixes- Changes from version 20141031
* Ignore special character behaviour in filenames not provided by the user.
* Fixes CVE-2014-8517.
* Fix timeout on HTTP fetches.- Remove tnftp-cve-2014-8517.patch; fixed on upstream release
* Thu Oct 30 2014 tchvatalAATTsuse.com- Apply fix for bnc#903011 CVE-2014-8517
* tnftp-cve-2014-8517.patch- Version bump to 20130505:
* various triv fixes
* more ssl support
* refresh tnftp-20100108-am_and_libedit.patch- Cleanup with spec-cleaner- Use update-alternatives properly- Do not verify the sig in spec, just let OBS do it
* Mon Apr 29 2013 mvyskocilAATTsuse.com- verify tarball using gpg-offline- remove obsoleted PreReq and reformat spec
* Wed Apr 11 2012 andreas.stiegerAATTgmx.de- fix openSUSE builds- add autoconf, automake, libtool build requirements- remove INSTALL file from package
* Mon Aug 01 2011 crrodriguezAATTopensuse.org- There is no need to check for ncurses, not directly used by this package but by libedit for which we use the system version.
* Sun Jul 31 2011 crrodriguezAATTopensuse.org- First package version, this is the segue from lukemftp
