8-Jul-2000: Fix misused printf-function call (not %n-exploitable though). 14-Dec-1999: netkit-ftp-0.16 is released. 13-Dec-1999: Add fix from Olaf Kirch for some rather severe lossage with aliased file descriptors. 12-Dec-1999: Add Olaf Kirch's ftp mget fix on top of the existing one. Portions of the old fix probably ought to be backed out. However, what's really needed is a massive cleanup of the code... 14-Sep-1999: Extensive small fixes and cleanups. (Alan Curry, pacman@londo.cqc.com) Security fix relating to passive mode. (Alan Cox, alan@redhat.com) 1-Aug-1999: Complete y2k and y2038 audit. 31-Jul-1999: Redid makefiles/config stuff for new confgen version. 23-Sep-1997: Fix some suspicious strncpys. Don't print an uninitialized buffer if someone EOFs at the username prompt. (Olaf Kirch, okir@ns.lst.de) Added a netrc(5) man page. Added -h option to ftp for help, and -e option to inhibit editing support. Cleaned up readline handling. Various fixes to the ftp(1) man page. (Larry Doolittle, ldoolitt@jlab.org) 17-Aug-1997: Fixed security holes: automatically generated local file paths (those that are supplied by the server or copies of server filenames) are filtered so that they cannot: 1. be pipes or "-" for standard output. 2. be absolute paths. 3. contain ".." path elements. 12-Jun-1997: netkit-ftp-0.10 released. 08-Jun-1997: Fixed doc for "newer" command. (Roderick Schertler, roderick@argon.org) 05-Apr-1997: Added configure script to generate MCONFIG. glibc fixes from HJ Lu. 20-Mar-1997: If using readline, pass it the terminal type, so certain .inputrc constructions work. (Christian Groessler, chris@fast-ag.de) 08-Mar-1997: Split from full NetKit package. Generated this change log from NetKit's. 07-Mar-1997 Changed order of includes in ftp/cmds.c due to a report of breakage with libc 5.4.x. Fixed crash in ftp caused by certain syntax errors in .netrc. Fix symbol name conflict on "trace" between ftp and ncurses. 29-Dec-1996 NetKit-0.09 released. Assorted alpha/glibc patches. (Erik Troan, ewt@redhat.com) Assorted bug fixes from Debian. (Peter Tobias, tobias@et-inf.fho-emden.de) Hardened programs against DNS h_length spoofing attacks. Use inet_aton() everywhere instead of inet_addr(). Fixed crash in ftp if you did "lcd" with no args. Fixed bug in ftp where you couldn't abort an mget. Fixed /tmp security problem in ftp. 22-Aug-1996 NetKit-B-0.08 released. (almost) everything now compiles with lots of warnings turned on. Fixed some memory allocation bugs in ftp. 25-Jul-1996 NetKit-B-0.07A released. 23-Jul-1996 NetKit-B-0.07 released. Integrated a collection of patches that had been lurking on the net, including the 256-ptys support for telnetd and passive mode ftp. Major security fixes, including to fingerd, lpr, rlogin, rsh, talkd, and telnetd. Do *not* use the sliplogin from earlier versions of this package, either. Much of the code builds without libbsd.a or bsd includes. Massive code cleanup. Almost everything compiles clean with gcc -Wall now. rusers and rusersd do not; patches to rpcgen to fix this would be appreciated if anyone feels like it. New maintainer: David A. Holland, dholland@hcs.harvard.edu date not known NetKit-B-0.06 released. date not known NetKit-B-0.05 released. date not known NetKit-B-0.04 released. date not known NetKit-B-0.03 released.