Path to this page:
Subject: CVS commit: pkgsrc/net/bftpd
From: Nia Alarie
Date: 2021-06-12 10:10:52
Message id: 20210612081052.C31DFFA95@cvs.NetBSD.org
Log Message:
bftpd: Update to 5.7
This file contains all major changes made during the development of bftpd.
The uppermost change is the newest one.
Jesse Smith <jessefrgsmith@yahoo.ca> -> 5.7
- A malicious client could cause a buffer overflow with
a lot of EPSV commands sent in a row. We now close
the pasv socket before each new use to avoid accumulating
more than 1023.
Thanks to Shisong Qin for reporting this issue and suggesting
a fix.
Files: