Fixed vulnerabilities:
- FileZilla Server now requires that the configuration directory is owned either by the operating system user account the server runs under, or a more privileged user (SYSTEM, Amdministrators, TrustedInstaller on Windows, root elsewhere)
- MSW: Mount points are now case-insensitive so that restrictions on sub mounts cannot be bypassed by a change of character case
Bugfixes and minor changes:
- Fixed a potential deadlock during transfers
- FTP: Fixed potential crash if the session gets closed
|