$NetBSD: NEWS,v 1.18 2023/05/07 18:32:11 lukem Exp $

This is tnftp version 20230507.

Changes in tnftp from 20230409 to 20230507:

	Add timeout for SSL connection setup, defaulting to 60 seconds.

	Update to NetBSD-ftp 20230505.

Changes in tnftp from 20210827 to 20230409:

	Validate SSL certificates by default, disabled with
	FTPSSLNOVERIFY=1 in the environment, or option sslnoverify.

	Add netrc processing to fetch-mode (URL on command line)
	to enable options and autologin via netrc.

	Handle relative URLs in fetch.

	Improve formatting of manual page.

	Update to NetBSD-ftp 20230225.

Changes in tnftp from 20200705 to 20210827:

	Validate address in server's PASV and LPSV responses. Previously a
	hostile server could cause ftp to open a data connection elsewhere.

	Avoid intermittent crashes by fixing signal handler restoration.

	Fix intermittent failures in -q QUITTIME by not using restartable
	signals.

	Set SO_KEEPALIVE on control connection to attempt to avoid timeouts.

	Update to NetBSD-ftp 20210826.

	Improve configure tests.

	Improve manual page.

	Display usage to stdout with -?.

Changes in tnftp from 20151004 to 20200705:

	Avoid crashes by exiting if lostpeer due to a signal
	(e.g., remote server disconnection).

	Issue PWD commands to the server only when we actually
	need the results, not speculatively, just in case we might.
	Works around broken servers, and is quicker too.

	Use "anonymous" instead of the local username for anonymous
	ftp. Avoids unnecesary information leak.

	Use the first name we requested the http/https URL for,
	not any name we ended up with after random redirects.

	Support using CONNECT for https:// via proxy.

	Improve SSL error reporting, and IPv6 endpoint reporting.

	Use the system glob() if required extensions are supported.

	Use the system libedit library by default, instead of
	the local (embedded) libedit.

	Update to NetBSD-ftp 20200608.

	Update local (embedded) libedit to NetBSD as at 2020-07-04.
	Fixes various crashes.

	Portability improvements.

Changes in tnftp from 20141104 to 20151004:

	Implement '-x xferbufsize' to set xferbuf size.

	Add Server Name Indication (SNI) support for https.

	Increase buffer limit used for response handling.

Changes in tnftp from 20141031 to 20141104:

	Portability fixes.

Changes in tnftp from 20130505 to 20141031:

	Ignore special character behaviour in filenames not provided
	by the user.
	Fixes CVE-2014-8517.

	Fix timeout on HTTP fetches.

Changes in tnftp from 20100108 to 20130505:

	Support https:// fetch if OpenSSL is available and enabled.

	Allow -R to restart non-existent ftp:// URIs.

	Parse HTTP 'Date' entries in the `C' locale rather than the user's.

	When using the response to SYST to decide whether to default
	to 'binary' be a lot less specific.

	Portability fixes.

Changes in tnftp from 20091122 to 20100108:

	Portability fixes.

Changes in tnftp from 20090606 to 20091122:

	Portability fixes.

Changes in tnftp from 20090520 to 20090606:

	Portability fixes.

Changes in tnftp from 20070806 to 20090520:

	Fix intermittent "Alarm clock" error.

	Add epsv6 and epsv to disable extended passive mode for IPv6 or
	both IPv4 and IPv6 respectively.

	Improve parsing of HTTP chunked transfers per RFC2616.

	Use the service name to getaddrinfo() (along with the host name),
	so that features such as DNS Service Discovery will work.

	Fix various compiler warnings.

Changes in tnftp from 20050625 to 20070806:

	Implement '-s srcaddr' to set the local IP address for
	all connections.

	Support '-q quittime' when waiting for server replies.

	Use IEC 60027-2 "KiB", "MiB" (etc) instead of "KB", "MB", ...

	Portability fixes, including for FreeBSD, Mac OS X, and Solaris.
