LWN.net Logo

Fedora alert FEDORA-2008-6812 (filezilla)

From:  updates@fedoraproject.org
To:  fedora-package-announce@redhat.com
Subject:  [SECURITY] Fedora 8 Update: filezilla-3.1.0.1-1.fc8
Date:  Fri, 01 Aug 2008 01:47:26 +0000
Message-ID:  <20080801014726.C52461AD0F7@bastion.fedora.phx.redhat.com>

-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2008-6812 2008-07-31 23:44:17 -------------------------------------------------------------------------------- Name : filezilla Product : Fedora 8 Version : 3.1.0.1 Release : 1.fc8 URL : http://filezilla-project.org/ Summary : FileZilla FTP, FTPS and SFTP client Description : FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features. - Supports FTP, FTP over SSL/TLS (FTPS) and SSH File Transfer Protocol (SFTP) - Cross-platform - Available in many languages - Supports resume and transfer of large files >4GB - Easy to use Site Manager and transfer queue - Drag & drop support - Speed limits - Filename filters - Network configuration wizard -------------------------------------------------------------------------------- Update Information: According to the NEWS in this release: ---------------- ! Do not report success on SSL/TLS transfers if server did not perform orderly SSL/TLS shutdown. Previously, an attacker could cause truncated files with FileZilla thinking the transfer was successful. All versions prior to this were affected ---------------- None SA number has been mentioned yet. -------------------------------------------------------------------------------- ChangeLog: * Fri Jul 25 2008 kwizart < kwizart at gmail.com > - 3.1.0.1-1 - Update to 3.1.0.1 - Security update * Mon Jul 14 2008 kwizart < kwizart at gmail.com > - 3.1.0-0.1.beta2 - Update to 3.1.0-beta2 * Tue Jul 8 2008 kwizart < kwizart at gmail.com > - 3.0.11.1-1 - Update to 3.0.11.1 * Mon Jun 16 2008 kwizart < kwizart at gmail.com > - 3.0.11-1 - Update to 3.0.11 - Create patch for a shared tinyxml. - Add support for hicolor icons. - Downgrade gnutls requirement (assuming a fixed version is used - see #451952 ). * Wed May 21 2008 kwizart < kwizart at gmail.com > - 3.0.10-1 - Update to 3.0.10 * Wed May 7 2008 kwizart < kwizart at gmail.com > - 3.0.9.3-1 - Update to 3.0.9.3 * Sat Apr 19 2008 kwizart < kwizart at gmail.com > - 3.0.9.2-1 - Update to 3.0.9.2 * Mon Apr 7 2008 kwizart < kwizart at gmail.com > - 3.0.9.1-1 - Update to 3.0.9.1 * Mon Apr 7 2008 kwizart < kwizart at gmail.com > - 3.0.9-1 - Update to 3.0.9 * Mon Mar 31 2008 kwizart < kwizart at gmail.com > - 3.0.9-0.1.rc1 - Update to 3.0.9-rc1 * Tue Mar 18 2008 kwizart < kwizart at gmail.com > - 3.0.8.1-1 - Update to 3.0.8.1 - Add patch for make check * Fri Mar 14 2008 kwizart < kwizart at gmail.com > - 3.0.8-1 - Update to 3.0.8 * Fri Mar 7 2008 kwizart < kwizart at gmail.com > - 3.0.8-0.1.rc1 - Update to 3.0.8-rc1 * Wed Feb 20 2008 kwizart < kwizart at gmail.com > - 3.0.7.1-1 - Update to 3.0.7.1 * Thu Jan 31 2008 kwizart < kwizart at gmail.com > - 3.0.6-1 - Update to 3.0.6 * Thu Jan 17 2008 kwizart < kwizart at gmail.com > - 3.0.5.2-1 - Update to 3.0.5.2 - Drop update desktop file in post and postun * Thu Jan 10 2008 kwizart < kwizart at gmail.com > - 3.0.4-1 - Update to 3.0.4 * Wed Nov 7 2007 kwizart < kwizart at gmail.com > - 3.0.3-1 - Update to 3.0.3 * Fri Oct 19 2007 kwizart < kwizart at gmail.com > - 3.0.2.1-1 - Update to 3.0.2.1 -------------------------------------------------------------------------------- References: [ 1 ] Bug #457274 - filezilla: unhandled SSL/TLS errors causing unnoticed incomplete downloads https://bugzilla.redhat.com/show_bug.cgi?id=457274 -------------------------------------------------------------------------------- This update can be installed with the "yum" update program. Use su -c 'yum update filezilla' at the command line. For more information, refer to "Managing Software with yum", available at http://docs.fedoraproject.org/yum/. All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at http://fedoraproject.org/keys -------------------------------------------------------------------------------- _______________________________________________ Fedora-package-announce mailing list Fedora-package-announce@redhat.com http://www.redhat.com/mailman/listinfo/fedora-package-ann...


(Log in to post comments)

Copyright © 2013, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds