2022-02-03 – FileZilla Client 3.58.0-rc1 released
New features:
- Negotiate custom ALPN with FileZilla Server >=1.3.0 during TLS handshake to save some roundtrips during connection establishment
- Prepare FileZilla to support TOTP-based 2FA authentication on future FileZilla Server versions
Bugfixes and minor changes:
- Made downloading updates more robust if the network connection is unreliable
- Updated to libfilezilla 0.36.0
2022-02-03 – FileZilla Server 1.3.0-rc1 released
Fixed vulnerabilities:
- The internal tool filezilla-server-crypt now accepts the password from stdin, not anymore as a parameter, to avoid password leaking.
- Mountpoints are now impossible to rename or delete.
New features:
- The configuration files can now be reloaded without shutting down the service first. To make it work, send the SIGHUP signal to the service process on nix, send the paramchange control message to the service on Windows (i.e. ‘sc control filezilla-server paramchange’).
- The UI now automatically attempts to reconnect to the server if the connection is lost
- MSW: users are now case-insensitive
- Mac: created an installer
- Display the administration TLS certificate fingerprints at installation time, so that they can be taken note of.
- Negotiate custom ALPN with FileZilla Client, this allows saving a few round-trips during connection establishment
Bugfixes and minor changes:
- Warn if no administration password has been given during installation.
- In TVFS, fixed implicit root “/” not being accessible, trac #12617.
- In TVFS, an implicit mountpoint whose parent is non-recursive is now able to be listed and cwd’d into.
- Solved off-by-one bug in path normalization.
- Reported filesystem errors are permanent, hence use 5yz error codes rather than 4yz error codes in command replies.
- Permissions are now correctly updated in the UI when the current selected user changes.
- Fixed regressions in the UI related to the TLS certificates generation.
- MSW: the installer now correctly support the /D parameter, used to define a different default installation directory from the command line.
- Debian: the installer now asks for an administration password.
- Errors during ACME certificates generation are now properly displayed in the UI.
转自 https://filezilla-project.org/index.php