Version history for FileZilla Server

<<Back to software description

Changes for v0.9.39 - v0.9.40

• The service no longer crashes if onnecting with the administration interface when there are clients connected over IPv6
• Close the connection if there is additional data in the input buffers when processing the AUTH command.
• Display correct connection state item in administration interface when getting initial list of connected clients

Changes for v0.9.38 - v0.9.39

• Bugfixes and minor changes:
• Do not attempt to display a message box if creating an administration interface binding fails. This freezes the service on some machines.
• On FTP over TLS connections, the socket address family was not initialized from the underlaying socket
• Fix a bug in IPv4 address filters and increase their performance

Changes for v0.9.36 - v0.9.37

• Advertise support for PBSZ and PROT in FEAT reply
• Allow PROT after PORT/PASV/EPRT/EPSV but before transfer command
• Use correct replies for RNTO, EPRT and MKD command
• Reply with correct error code in response to transfer commands if PROT P is required but not set
• Fix display of non-ASCII characters in log
• Ignore read-only attribute on DELE

Changes for v0.9.35 - v0.9.36

• Fix welcome message

Changes for v0.9.34 - v0.9.35

• New features:
• Administration interface is now Unicode enabled.
• Bugfixes and minor changes:
• Fix saving of speed-limit rules

Changes for v0.9.33 - v0.9.34

• Show address of server in title bar of administration interface (patch submitted by eyebex)
• Bugfixes and minor changes:
• Disable some weak TLS/SSL ciphers such as DES-CBC-SHA which shouldn't be used anymore
• Work around some obscure error reported by OpenSSL, fixes spurious transfer failures
• Use case-insensitive comparison instead of always converting to lowercase in permissions handling. Fixes problems with sharing case-sensitive network resources.
• Settings with empty data were not loaded from settings file correctly and reverted back to default values (patch submitted by eyebex)
• Improve performance of (re-)loading settings

Changes for v0.9.31 - v0.9.32

• New features:
• Use thousands separator in output of large numbers.
• Fixed bugs:
• Disallow weak SSLv2.
• Slightly reword FTP over TLS/SSL settings page
• Adjust width of user and group lists on permissions dialogs.

Changes for v0.9.30 - v0.9.31

• Fix buffer overflow in SSL code leading to a potential security vulnerability

Changes for v0.9.29 - v0.9.30

• Fix a rare case in which SSL shutdown notifications were created but not actually sent.

Changes for v0.9.28 - v0.9.29

• Executable path did not get quoted properly in service creation leading to a local privilege escalation vulnerability.

Changes for v0.9.26 - v0.9.28

• Directly reject PROT C if PROT P is required instead of complaining after a transfer command
• Fix race in transfer connection initialization leading to timeouts
• No-transfer timeouts could not be disabled in 0.9.27
• Server startup options in installer had no effect

Changes for v0.9.24 - v0.9.25

• Implement OPTS MLST as required by RFC 3659
• Add some more validation to prevent "Protocol Error, invalid data" errors
• Attempt to fix problems with certificate loading some users are experiencing

<<Back to software description