From 231644e0d5db221f70bf279e80bd3435a5f2d89d Mon Sep 17 00:00:00 2001 From: Gavin Atkinson Date: Fri, 5 Dec 2014 22:34:15 +0000 Subject: Import tnftp-20141031. --- NEWS | 12 ++++++++++-- 1 file changed, 10 insertions(+), 2 deletions(-) (limited to 'NEWS') diff --git a/NEWS b/NEWS index f6d42c7e274f..108fffedb395 100644 --- a/NEWS +++ b/NEWS @@ -1,6 +1,14 @@ -$NetBSD: NEWS,v 1.9 2013/05/05 13:53:38 lukem Exp $ +$NetBSD: NEWS,v 1.10 2014/10/31 04:06:54 lukem Exp $ -This is tnftp version 20130505. +This is tnftp version 20141031. + +Changes in tnftp from 20130505 to 20141031: + + Ignore special character behaviour in filenames not provided + by the user. + Fixes CVE-2014-8517. + + Fix timeout on HTTP fetches. Changes in tnftp from 20100108 to 20130505: -- cgit v1.2.3