[SECURITY] Fedora 8 Update: filezilla-3.1.0.1-1.fc8
updates at fedoraproject.org
updates at fedoraproject.org
Fri Aug 1 01:47:26 UTC 2008
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-6812
2008-07-31 23:44:17
--------------------------------------------------------------------------------
Name : filezilla
Product : Fedora 8
Version : 3.1.0.1
Release : 1.fc8
URL : http://filezilla-project.org/
Summary : FileZilla FTP, FTPS and SFTP client
Description :
FileZilla is a FTP, FTPS and SFTP client for Linux with a lot of features.
- Supports FTP, FTP over SSL/TLS (FTPS) and SSH File Transfer Protocol (SFTP)
- Cross-platform
- Available in many languages
- Supports resume and transfer of large files >4GB
- Easy to use Site Manager and transfer queue
- Drag & drop support
- Speed limits
- Filename filters
- Network configuration wizard
--------------------------------------------------------------------------------
Update Information:
According to the NEWS in this release: ---------------- ! Do not report
success on SSL/TLS transfers if server did not perform orderly SSL/TLS shutdown.
Previously, an attacker could cause truncated files with FileZilla thinking the
transfer was successful. All versions prior to this were affected
---------------- None SA number has been mentioned yet.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 25 2008 kwizart < kwizart at gmail.com > - 3.1.0.1-1
- Update to 3.1.0.1 - Security update
* Mon Jul 14 2008 kwizart < kwizart at gmail.com > - 3.1.0-0.1.beta2
- Update to 3.1.0-beta2
* Tue Jul 8 2008 kwizart < kwizart at gmail.com > - 3.0.11.1-1
- Update to 3.0.11.1
* Mon Jun 16 2008 kwizart < kwizart at gmail.com > - 3.0.11-1
- Update to 3.0.11
- Create patch for a shared tinyxml.
- Add support for hicolor icons.
- Downgrade gnutls requirement
(assuming a fixed version is used - see #451952 ).
* Wed May 21 2008 kwizart < kwizart at gmail.com > - 3.0.10-1
- Update to 3.0.10
* Wed May 7 2008 kwizart < kwizart at gmail.com > - 3.0.9.3-1
- Update to 3.0.9.3
* Sat Apr 19 2008 kwizart < kwizart at gmail.com > - 3.0.9.2-1
- Update to 3.0.9.2
* Mon Apr 7 2008 kwizart < kwizart at gmail.com > - 3.0.9.1-1
- Update to 3.0.9.1
* Mon Apr 7 2008 kwizart < kwizart at gmail.com > - 3.0.9-1
- Update to 3.0.9
* Mon Mar 31 2008 kwizart < kwizart at gmail.com > - 3.0.9-0.1.rc1
- Update to 3.0.9-rc1
* Tue Mar 18 2008 kwizart < kwizart at gmail.com > - 3.0.8.1-1
- Update to 3.0.8.1
- Add patch for make check
* Fri Mar 14 2008 kwizart < kwizart at gmail.com > - 3.0.8-1
- Update to 3.0.8
* Fri Mar 7 2008 kwizart < kwizart at gmail.com > - 3.0.8-0.1.rc1
- Update to 3.0.8-rc1
* Wed Feb 20 2008 kwizart < kwizart at gmail.com > - 3.0.7.1-1
- Update to 3.0.7.1
* Thu Jan 31 2008 kwizart < kwizart at gmail.com > - 3.0.6-1
- Update to 3.0.6
* Thu Jan 17 2008 kwizart < kwizart at gmail.com > - 3.0.5.2-1
- Update to 3.0.5.2
- Drop update desktop file in post and postun
* Thu Jan 10 2008 kwizart < kwizart at gmail.com > - 3.0.4-1
- Update to 3.0.4
* Wed Nov 7 2007 kwizart < kwizart at gmail.com > - 3.0.3-1
- Update to 3.0.3
* Fri Oct 19 2007 kwizart < kwizart at gmail.com > - 3.0.2.1-1
- Update to 3.0.2.1
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #457274 - filezilla: unhandled SSL/TLS errors causing unnoticed incomplete downloads
https://bugzilla.redhat.com/show_bug.cgi?id=457274
--------------------------------------------------------------------------------
This update can be installed with the "yum" update program. Use
su -c 'yum update filezilla' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
http://fedoraproject.org/keys
--------------------------------------------------------------------------------
More information about the Fedora-package-announce
mailing list