Index: ChangeLog
===================================================================
--- ChangeLog (nonexistent)
+++ ChangeLog (revision 5)
@@ -0,0 +1,116 @@
+28-Nov-2000:
+ IPv6 support. (Hiroyuki YAMAMORI <h-yamamo@db3.so-net.ne.jp>)
+
+8-Jul-2000:
+ Fix misused printf-function call (not %n-exploitable though).
+
+14-Dec-1999:
+ netkit-ftp-0.16 is released.
+
+13-Dec-1999:
+ Add fix from Olaf Kirch for some rather severe lossage with
+ aliased file descriptors.
+
+12-Dec-1999:
+ Add Olaf Kirch's ftp mget fix on top of the existing one.
+ Portions of the old fix probably ought to be backed out.
+ However, what's really needed is a massive cleanup of the
+ code...
+
+14-Sep-1999:
+ Extensive small fixes and cleanups. (Alan Curry, pacman@londo.cqc.com)
+ Security fix relating to passive mode. (Alan Cox, alan@redhat.com)
+
+1-Aug-1999:
+ Complete y2k and y2038 audit.
+
+31-Jul-1999:
+ Redid makefiles/config stuff for new confgen version.
+
+23-Sep-1997:
+ Fix some suspicious strncpys.
+ Don't print an uninitialized buffer if someone EOFs at the
+ username prompt. (Olaf Kirch, okir@ns.lst.de)
+ Added a netrc(5) man page.
+ Added -h option to ftp for help, and -e option to inhibit
+ editing support. Cleaned up readline handling.
+ Various fixes to the ftp(1) man page. (Larry Doolittle,
+ ldoolitt@jlab.org)
+
+17-Aug-1997:
+ Fixed security holes: automatically generated local file paths
+ (those that are supplied by the server or copies of server
+ filenames) are filtered so that they cannot:
+ 1. be pipes or "-" for standard output.
+ 2. be absolute paths.
+ 3. contain ".." path elements.
+
+12-Jun-1997:
+ netkit-ftp-0.10 released.
+
+08-Jun-1997:
+ Fixed doc for "newer" command. (Roderick Schertler,
+ roderick@argon.org)
+
+05-Apr-1997:
+ Added configure script to generate MCONFIG.
+ glibc fixes from HJ Lu.
+
+20-Mar-1997:
+ If using readline, pass it the terminal type, so certain .inputrc
+ constructions work. (Christian Groessler, chris@fast-ag.de)
+
+08-Mar-1997:
+ Split from full NetKit package.
+ Generated this change log from NetKit's.
+
+07-Mar-1997
+ Changed order of includes in ftp/cmds.c due to a report of
+ breakage with libc 5.4.x.
+ Fixed crash in ftp caused by certain syntax errors in .netrc.
+ Fix symbol name conflict on "trace" between ftp and ncurses.
+
+29-Dec-1996
+ NetKit-0.09 released.
+ Assorted alpha/glibc patches. (Erik Troan, ewt@redhat.com)
+ Assorted bug fixes from Debian. (Peter Tobias,
+ tobias@et-inf.fho-emden.de)
+ Hardened programs against DNS h_length spoofing attacks.
+ Use inet_aton() everywhere instead of inet_addr().
+ Fixed crash in ftp if you did "lcd" with no args.
+ Fixed bug in ftp where you couldn't abort an mget.
+ Fixed /tmp security problem in ftp.
+
+22-Aug-1996
+ NetKit-B-0.08 released.
+ (almost) everything now compiles with lots of warnings turned on.
+ Fixed some memory allocation bugs in ftp.
+
+25-Jul-1996
+ NetKit-B-0.07A released.
+
+23-Jul-1996
+ NetKit-B-0.07 released.
+ Integrated a collection of patches that had been lurking on the net,
+ including the 256-ptys support for telnetd and passive mode ftp.
+ Major security fixes, including to fingerd, lpr, rlogin, rsh, talkd,
+ and telnetd. Do *not* use the sliplogin from earlier versions of this
+ package, either.
+ Much of the code builds without libbsd.a or bsd includes.
+ Massive code cleanup. Almost everything compiles clean with gcc
+ -Wall now. rusers and rusersd do not; patches to rpcgen to fix
+ this would be appreciated if anyone feels like it.
+ New maintainer: David A. Holland, dholland@hcs.harvard.edu
+
+date not known
+ NetKit-B-0.06 released.
+
+date not known
+ NetKit-B-0.05 released.
+
+date not known
+ NetKit-B-0.04 released.
+
+date not known
+ NetKit-B-0.03 released.
+