Important security fix in FileZilla 2.2.8
Tim Kosse <[email protected]> Sat, 07 Aug 2004 21:47:31 +0200
| Newsgroups | gmane.network.filezilla.newsletter |
|---|---|
| Message-ID | <[email protected]> |
Recently, a security vulnerability in PuTTY was found (read http://www.chiark.greenend.org.uk/~sgtatham/putty/ for details) which allows attackers to execute malicious code on anyone using PuTTY. Since the SFTP support in FileZilla is based on PuTTY, FileZilla was vulnerable as well if connecting to SFTP servers. Version 2.2.8 of FileZilla fixes the security holes. Here's the complete release notes: New features: - experimental IPv6 support, only works under Windows XP or 2003 Server or newer. Based on patch by Yi-Kwan Chen - Timestamps in message log - added IBM MVS support - On VMS based servers, display of all file revisions can be enabled Fixed bugs: - fixed security issues caused by PuTTY - File transfers did not work on servers returning unquoted paths in the PWD reply ------------------------------------------------------- This SF.Net email is sponsored by OSTG. Have you noticed the changes on Linux.com, ITManagersJournal and NewsForge in the past few weeks? Now, one more big change to announce. We are now OSTG- Open Source Technology Group. Come see the changes on the new OSTG site. www.ostg.com