---
- branch: MAIN
  date: Sun Sep 21 14:20:11 UTC 2008
  files:
  - new: '0'
    old: '0'
    path: othersrc/libexec/tnftpd/src/conf.c
    pathrev: othersrc/libexec/tnftpd/src/conf.c@0
    type: imported
  - new: '0'
    old: '0'
    path: othersrc/libexec/tnftpd/src/logutmp.c
    pathrev: othersrc/libexec/tnftpd/src/logutmp.c@0
    type: imported
  - new: '0'
    old: '0'
    path: othersrc/libexec/tnftpd/src/logwtmp.c
    pathrev: othersrc/libexec/tnftpd/src/logwtmp.c@0
    type: imported
  - new: '0'
    old: '0'
    path: othersrc/libexec/tnftpd/src/pathnames.h
    pathrev: othersrc/libexec/tnftpd/src/pathnames.h@0
    type: imported
  id: 20080921T142011Z.182ee5bd9898aab8f15bac205abb98b830de6a52
  log: "Sync to NetBSD-ftpd 20080921:\n* Don't split large commands into multiple
    commands; just fail on them.\n  This prevents CSRF-like attacks, when a web browser
    is used to access\n  an ftp server.\n  Reported by Maksymilian Arciemowicz <cxib@securityreason.com>.\n
    \ Fix mostly derived from OpenBSD, written by Moritz Jodeit\n  <moritz@OpenBSD.org>\n*
    Enhance -C to support an optional @host ('-C user[@host]'):\n  checks whether
    user as connecting from host would be granted\n  access by ftpusers(5).\n  Support
    IPv6 in the host directive of ftpusers(5).\n  Both features from Rudolf Cejka
    <cejkar@fit.vutbr.cz>\n  (FreeBSD's tnftpd port maintainer).\n\nStatus:\n\nVendor
    Tag:\tTNF\nRelease Tags:\tNetBSD-20080921\n"
  module: othersrc
  subject: 'CVS commit: othersrc/libexec/tnftpd/src'
  unixtime: '1222006811'
  user: lukem