Bugfixes and minor changes:
Fix parsing of IP address filters ending with :0 or equivalent substringss.
Allow speed limits larger than 64 MiB/s.
Show more verbose error messages if transfer connection cannot be established.
2012-01-08 - FileZilla Client 3.5.3 released
New features:
Ctrl+Shift+O can be used to toggle between modification time and filesize based directory comparison
Bugfixes and minor changes:
It is now possible to use custom passwords if using "anonymous" as user name
After un-hiding toolbar, update toolbar button states
Fix TLS compatibility issues with TLS 1.2 servers
MSW: Unset hidden attribute on FileZilla's settings files
Building FileZilla from source now requires wxWidgets 2.8.12 or higher.
2011-11-08 - FileZilla Client 3.5.2 released
Bugfixes and minor changes:
Updated translations
2010-01-02 - Subversion repository moved
The address of the subversion repository has changed.
The old address, http(s)://filezilla.svn.sourceforge.net/svnroot/filezilla is no longer valid. The new address is http(s)://svn.filezilla-project.org/svn/
The new repository can be browsed using http://svn.filezilla-project.org/filezilla/.
2009-03-03 - Security advisory
FileZilla Server 0.9.31 fixes a buffer overflow in the SSL/TLS code.
This vulnerability could potentially be used for denial of service attacks.
Affected versions
All versions prior to 0.9.31 are affected. This vulnerability has been fixed in 0.9.31
2008-07-24 - Security Advisory
FileZilla 3.1.0.1 fixes a vulnerability regarding the way some errors are handled on SSL/TLS secured data transfers.
If the data connection of a transfer gets closed, FileZilla did not check if the server performed an orderly TLS shutdown.
Impact
An attacker could send spoofed FIN packets to the client. Even though GnuTLS detects this with GNUTLS_E_UNEXPECTED_PACKET_LENGTH, FileZilla did not record a transfer failure in all cases.
Unfortunately not all servers perform an orderly SSL/TLS shutdown. Since this cannot be distinguished from an attack, FileZilla will not be able to download listings or files from such servers.
Affected versions
All versions prior to 3.1.0.1 are affected. This vulnerability has been fixed in 3.1.0.1
Download
http://sourceforge.net/projects/filezilla/files/FileZilla_Client/3.5.3/FileZilla_3.5.3_win32.zip/download
Fix parsing of IP address filters ending with :0 or equivalent substringss.
Allow speed limits larger than 64 MiB/s.
Show more verbose error messages if transfer connection cannot be established.
2012-01-08 - FileZilla Client 3.5.3 released
New features:
Ctrl+Shift+O can be used to toggle between modification time and filesize based directory comparison
Bugfixes and minor changes:
It is now possible to use custom passwords if using "anonymous" as user name
After un-hiding toolbar, update toolbar button states
Fix TLS compatibility issues with TLS 1.2 servers
MSW: Unset hidden attribute on FileZilla's settings files
Building FileZilla from source now requires wxWidgets 2.8.12 or higher.
2011-11-08 - FileZilla Client 3.5.2 released
Bugfixes and minor changes:
Updated translations
2010-01-02 - Subversion repository moved
The address of the subversion repository has changed.
The old address, http(s)://filezilla.svn.sourceforge.net/svnroot/filezilla is no longer valid. The new address is http(s)://svn.filezilla-project.org/svn/
The new repository can be browsed using http://svn.filezilla-project.org/filezilla/.
2009-03-03 - Security advisory
FileZilla Server 0.9.31 fixes a buffer overflow in the SSL/TLS code.
This vulnerability could potentially be used for denial of service attacks.
Affected versions
All versions prior to 0.9.31 are affected. This vulnerability has been fixed in 0.9.31
2008-07-24 - Security Advisory
FileZilla 3.1.0.1 fixes a vulnerability regarding the way some errors are handled on SSL/TLS secured data transfers.
If the data connection of a transfer gets closed, FileZilla did not check if the server performed an orderly TLS shutdown.
Impact
An attacker could send spoofed FIN packets to the client. Even though GnuTLS detects this with GNUTLS_E_UNEXPECTED_PACKET_LENGTH, FileZilla did not record a transfer failure in all cases.
Unfortunately not all servers perform an orderly SSL/TLS shutdown. Since this cannot be distinguished from an attack, FileZilla will not be able to download listings or files from such servers.
Affected versions
All versions prior to 3.1.0.1 are affected. This vulnerability has been fixed in 3.1.0.1
Download
http://sourceforge.net/projects/filezilla/files/FileZilla_Client/3.5.3/FileZilla_3.5.3_win32.zip/download