1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
|
8-Jul-2000:
Fix misused printf-function call (not %n-exploitable though).
14-Dec-1999:
netkit-ftp-0.16 is released.
13-Dec-1999:
Add fix from Olaf Kirch for some rather severe lossage with
aliased file descriptors.
12-Dec-1999:
Add Olaf Kirch's ftp mget fix on top of the existing one.
Portions of the old fix probably ought to be backed out.
However, what's really needed is a massive cleanup of the
code...
14-Sep-1999:
Extensive small fixes and cleanups. (Alan Curry, pacman@londo.cqc.com)
Security fix relating to passive mode. (Alan Cox, alan@redhat.com)
1-Aug-1999:
Complete y2k and y2038 audit.
31-Jul-1999:
Redid makefiles/config stuff for new confgen version.
23-Sep-1997:
Fix some suspicious strncpys.
Don't print an uninitialized buffer if someone EOFs at the
username prompt. (Olaf Kirch, okir@ns.lst.de)
Added a netrc(5) man page.
Added -h option to ftp for help, and -e option to inhibit
editing support. Cleaned up readline handling.
Various fixes to the ftp(1) man page. (Larry Doolittle,
ldoolitt@jlab.org)
17-Aug-1997:
Fixed security holes: automatically generated local file paths
(those that are supplied by the server or copies of server
filenames) are filtered so that they cannot:
1. be pipes or "-" for standard output.
2. be absolute paths.
3. contain ".." path elements.
12-Jun-1997:
netkit-ftp-0.10 released.
08-Jun-1997:
Fixed doc for "newer" command. (Roderick Schertler,
roderick@argon.org)
05-Apr-1997:
Added configure script to generate MCONFIG.
glibc fixes from HJ Lu.
20-Mar-1997:
If using readline, pass it the terminal type, so certain .inputrc
constructions work. (Christian Groessler, chris@fast-ag.de)
08-Mar-1997:
Split from full NetKit package.
Generated this change log from NetKit's.
07-Mar-1997
Changed order of includes in ftp/cmds.c due to a report of
breakage with libc 5.4.x.
Fixed crash in ftp caused by certain syntax errors in .netrc.
Fix symbol name conflict on "trace" between ftp and ncurses.
29-Dec-1996
NetKit-0.09 released.
Assorted alpha/glibc patches. (Erik Troan, ewt@redhat.com)
Assorted bug fixes from Debian. (Peter Tobias,
tobias@et-inf.fho-emden.de)
Hardened programs against DNS h_length spoofing attacks.
Use inet_aton() everywhere instead of inet_addr().
Fixed crash in ftp if you did "lcd" with no args.
Fixed bug in ftp where you couldn't abort an mget.
Fixed /tmp security problem in ftp.
22-Aug-1996
NetKit-B-0.08 released.
(almost) everything now compiles with lots of warnings turned on.
Fixed some memory allocation bugs in ftp.
25-Jul-1996
NetKit-B-0.07A released.
23-Jul-1996
NetKit-B-0.07 released.
Integrated a collection of patches that had been lurking on the net,
including the 256-ptys support for telnetd and passive mode ftp.
Major security fixes, including to fingerd, lpr, rlogin, rsh, talkd,
and telnetd. Do *not* use the sliplogin from earlier versions of this
package, either.
Much of the code builds without libbsd.a or bsd includes.
Massive code cleanup. Almost everything compiles clean with gcc
-Wall now. rusers and rusersd do not; patches to rpcgen to fix
this would be appreciated if anyone feels like it.
New maintainer: David A. Holland, dholland@hcs.harvard.edu
date not known
NetKit-B-0.06 released.
date not known
NetKit-B-0.05 released.
date not known
NetKit-B-0.04 released.
date not known
NetKit-B-0.03 released.
|
