Branches for Warty

Author: Noël Köthe
Revision Date: 2004-02-13 20:26:44 UTC

* made passive the default. sorry forgot again.:(
* corrected charset in de.po (thx Michael)
  (closes: Bug#225528)
* updated fr.po and corrected the requested words
  (closes: Bug#181788)
* --limit-rate is in the manpage
  (closes: Bug#222033)

Author: Martin Pitt
Revision Date: 2005-06-28 10:35:59 UTC

* SECURITY UPDATE: Fix arbitrary file overwriting and code execution.
* CAN-2004-1487:
  - Prevent hosts named ".." from writing to ../.
  - Prevent "%00" truncating C strings that hold URLs.
  - Patch backported from 1.10 release.
* CAN-2004-1488:
  - Filter and escape untrusted HTTP response strings.
  - Patch backported from 1.10 release.
* CAN-2004-2014:
  - Open output files with O_EXCL and give up if that fails. This prevents
    the overwriting of arbitrary files by creating a symlink between the
    output file name determination and the actual creation.
  - Patch backported from 1.10 release.