$NetBSD: NEWS,v 1.15 2020/07/04 06:49:19 lukem Exp $

This is tnftpd version 20200704.

Changes in tnftpd from 20190602 to 20200704:

	Adapt to NetBSD blocklistd(8) service rename.

	Increase some buffer sizes.

Changes in tnftpd from 20130325 to 20190602:

	Security fixes to avoid resource exhaustion when globbing paths,
	traversing directories, or parsing numbers.

	Support NetBSD blacklistd(8).

	Add -f option to ftpd to stay in foreground with -D.

Changes in tnftpd from 20130322 to 20130325:

	Fix incorrect use of test(1) in configure.

Changes in tnftpd from 20100324 to 20130322:

	Security fix to avoid resource exhaustion when globbing paths.
	Fix in NetBSD from Maksymilian Arciemowicz.  See CVE-2011-0418

Changes in tnftpd from 20091122 to 20100324:

	Security fix when globbing paths.
	NetBSD PR/43023.

	Install example configuration files.

Changes in tnftpd from 20081009 to 20091122:

	Portability improvements.

	Security fixes for fts in the internal ls.
	Received from OpenBSD via US-CERT as VU #590371.

	Add support for Tru64 Security Integration Architecture (SIA)
	authentication.

	Fix shadow password expiry check for users with
	large sp_max values.

	Install to libexec not sbin.

Changes in tnftpd from 20080929 to 20081009:

	Portability improvements.

Changes in tnftpd from 20080609 to 20080929:

	Don't split large commands into multiple commands; just fail on them.
	This prevents cross-site request forgery (CSRF)-like attacks,
	when a web browser is used to access an ftp server.

	Enhance -C to support an optional @host ('-C user[@host]'):
	checks whether user as connecting from host would be granted
	access by ftpusers(5).

	Support IPv6 in the host directive of ftpusers(5).

	Fix pathnames in the installed manual pages to contain
	the appropriate $(prefix) substitution.

	Portability improvements for Mac OS X 10.3.x and Solaris 10.

	Fix memory leak in fts(3) on Solaris.

Changes in tnftpd from 20061217 to 20080609:

	Implement -n to disable hostname lookups.

	Add configure --with-pam to enable PAM authentication support.
	Defaults to checking for PAM.

	Add configure --with-skey to enable S/Key authentication support.
	Incompatible with --with-pam, defaults to no.

	Convert to autoconf 2.61.

	Improve detection of large file support.

	Disable SOCKS support; I don't have the ability to test it,
	and the autoconf checks were very out of date.

	Update the fts(3) replacement.

	Use fcntl(3) locking instead of flock(3) or lockf(3).

	Portability fixes and improvements.

Changes in tnftpd from 20061204 to 20061217:

	Portability fix: provide a replacement daemon(3) if necessary.

Changes in tnftpd from 20040810 to 20061204:

	Fix buffer overflow in local version of glob(3).

	Implement -D to run as a stand-alone daemon.

	Add ftpd.conf(5) options:
		hidesymlinks
		recvbufsize

	Enforce account expiration, and support shadow password aging
	where appropriate.

	Return 450 instead of 550 upon NLST error.

	Portability fixes and improvements.
