- 
    Thu Jul 29 2010 Ondrej Vasik <ovasik@redhat.com> - 3.7.11-4.el5_5.3
    
- Related: CVE-2010-2251 - document change of xfer:clobber default
  value in manpage, respect xfer:clobber on with xfer:auto-rename on
  (old behaviour)
   
  
  - 
    Thu Jul 29 2010 Ondrej Vasik <ovasik@redhat.com> - 3.7.11-4.el5_5.2
    
- Related: CVE-2010-2251 - describe new option xfer:auto-rename 
  which could restore old behaviour in manpage
   
  
  - 
    Mon Jul 26 2010 Ondrej Vasik <ovasik@redhat.com> - 3.7.11-4.el5_5.1
    
- Resolves: CVE-2010-2251 - multiple HTTP client download filename
  vulnerability (#617870)
   
  
  - 
    Tue Jun 16 2009 Jiri Skala <jskala@redhat.com> - 3.7.11-4
    
- Resolves: #461922 - lftp 'help mirror' does not display all options defined in manpage
   
  
  - 
    Tue Jun 16 2009 Jiri Skala <jskala@redhat.com> - 3.7.11-3
    
- Resolves: #504594 - Alias ''edit' has multiple flaws
   
  
  - 
    Thu Jun 11 2009 Jiri Skala <jskala@redhat.com> - 3.7.11-2
    
- Resolves: #504591 - Problems with spaces in file names over HTTP
- Resolves: #504594 - Alias ''edit' has multiple flaws
   
  
  - 
    Wed Mar 25 2009 Jiri Skala <jskala@redhat.com> - 3.7.11-1
    
- Resolves: #468858 - Clean up lftp source code - corrected licensing
- Resolves: #458777 - License conflict between OpenSSL and GNU GPL v2 licenses in lftp
- Resolves: #461922 - lftp 'help mirror' does not display all options defined in manpage
- Resolves: #308721 - re-base to latest upstream 3.7.11
   
  
  - 
    Fri Jul 18 2008 Jiri Skala <jskala@redhat.com> - 3.7.3-1
    
- Resolves: #308721 rebase to latest upstream
- Resolves: #239334 solves CVE-2007-2348
- Resolves: #422881 fixes bug with -c options
- Resolves: #434294 fixes bug in (m)put with usage -c option
   
  
  - 
    Wed Aug 23 2006 Maros Barabas	<mbarabas@redhat.com> - 3.5.1-2
    
- remove .a & .la from libdir
   
  
  - 
    Mon Jul 17 2006 Jason Vas Dias <jvdias@redhat.com> - 3.5.1-1.fc6
    
- Upgrade to 3.5.1
   
  
  - 
    Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 3.4.7-2.FC6.1
    
- rebuild
   
  
  - 
    Mon Jun 12 2006 Jason Vas Dias <jvdias@redhat.com> - 3.4.7-2
    
- Add BuildRequires for broken Brew
   
  
  - 
    Wed May 31 2006 Jason Vas Dias <jvdias@redhat.com> - 3.4.7-1
    
- Upgrade to upstream version 3.4.7
   
  
  - 
    Fri Apr 28 2006 Jason Vas Dias <jvdias@redhat.com> - 3.4.6-1
    
- Upgrade to upstream version 3.4.6
   
  
  - 
    Fri Apr 21 2006 Jason Vas Dias <jvdias@redhat.com> - 3.4.4-1
    
- Upgrade to upstream version 3.4.4
   
  
  - 
    Thu Mar 16 2006 Jason Vas Dias <jvdias@redhat.com> - 3.4.3-1
    
- Upgrade to upstream version 3.4.3
   
  
  - 
    Fri Mar 10 2006 Bill Nottingham <notting@redhat.com> - 3.4.2-5
    
- rebuild for ppc TLS issue (#184446)
   
  
  - 
    Thu Feb 16 2006 Jason Vas Dias<jvdias@redhat.com> - 3.4.2-4
    
- Apply upstream fix for bug 181694.
   
  
  - 
    Wed Feb 15 2006 Jason Vas Dias<jvdias@redhat.com> - 3.4.2-2
    
- fix bug 181694: segfault on redirection to non-existent location
   
  
  - 
    Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 3.4.2-1.1
    
- bump again for double-long bug on ppc(64)
   
  
  - 
    Wed Feb 08 2006 Jason Vas Dias<jvdias@redhat.com> - 3.4.2-1
    
- Upgrade to upstream version 3.4.2, that fixes 3.4.1's coredump
   
  
  - 
    Tue Feb 07 2006 Jason Vas Dias<jvdias@redhat.com> - 3.4.1-1
    
- Upgrade to upstream version 3.4.1
- fix core dump
   
  
  - 
    Fri Jan 13 2006 Jason Vas Dias<jvdias@redhat.com> - 3.4.0-1
    
- Upgrade to upstream version 3.4.0
   
  
  - 
    Wed Dec 21 2005 Jason Vas Dias<jvdias@redhat.com> - 3.3.5-4
    
- fix bug 176315: openssl libraries not being picked up - gnutls was instead
- improvements to bug 172376 fix
   
  
  - 
    Tue Dec 20 2005 Jason Vas Dias<jvdias@redhat.com> - 3.3.5-2
    
- fix bug 176175: perl-String-CRC32 now in separate RPM
   
  
  - 
    Thu Dec 15 2005 Jason Vas Dias<jvdias@redhat.com> - 3.3.5-1
    
- Upgrade to version 3.3.5
- fix bug bz172376 : host lookups should use any address found after timeout
   
  
  - 
    Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>
    
- rebuilt
   
  
  - 
    Fri Nov 11 2005 Jason Vas Dias <jvdias@redhat.com> - 3.3.3-1
    
- Upgrade to upstream 3.3.3 release, fixing bug 171884 .
   
  
  - 
    Tue Oct 18 2005 Jason Vas Dias <jvdias@redhat.com> - 3.3.2-1
    
- *** PLEASE COULD ANYONE MODIFYING lftp TEST IT BEFORE SUBMITTING! ***
  (and preferably contact the lftp package maintainer (me) first - thank you!)
  bug 171096 : 'mget files in lftp causes abort' (core dump actually)
  resulted from not doing so .
  See http://lftp.yar.ru :
      Recent events:
      2005-10-17: lftp-3.3.2 released. Fixed a coredump caused by double-free.
   
  
  - 
    Sat Oct 15 2005 Florian La Roche <laroche@redhat.com> - 3.3.1-1
    
- 3.3.1
   
  
  - 
    Wed Aug 24 2005 Jason Vas Dias <jvdias@redhat.com> - 3.3.0-1
    
- Upgrade to upstream version 3.3.0
   
  
  - 
    Mon Aug 08 2005 Tomas Mraz <tmraz@redhat.com> - 3.2.1-2
    
- rebuild with new gnutls
   
  
  - 
    Thu Jun 30 2005 Warren Togami <wtogami@redhat.com> 3.2.1-1
    
- 3.2.1
   
  
  - 
    Mon Apr 25 2005 Jason Vas Dias <jvdias@redhat.com> 3.1.3-1
    
- Upgrade to upstream version 3.1.3
   
  
  - 
    Tue Mar 08 2005 Jason Vas Dias <jvdias@redhat.com> 3.1.0-1
    
- Upgrade to upstream verson 3.1.0; remove patch for broken libtool
   
  
  - 
    Tue Mar 08 2005 Joe Orton <jorton@redhat.com> 3.0.13-2
    
- rebuild
   
  
  - 
    Fri Jan 21 2005 Jason Vas Dias <jvdias@redhat.com> 3.0.13-1
    
- Upgrade to upstream version 3.0.13 .
   
  
  - 
    Wed Jan 12 2005 Tim Waugh <twaugh@redhat.com> 3.0.6-4
    
- Rebuilt for new readline.
   
  
  - 
    Mon Oct 18 2004 Jason Vas Dias <jvdias@redhat.com> 3.0.6-3
    
- rebuilding for current FC3 glibc fixes bug 136109
   
  
  - 
    Mon Aug 16 2004 Nalin Dahyabhai <nalin@redhat.com> 3.0.6-2
    
- rebuild
   
  
  - 
    Tue Jun 15 2004 Nalin Dahyabhai <nalin@redhat.com> 3.0.6-1
    
- update to 3.0.6
   
  
  - 
    Tue Jun 15 2004 Elliot Lee <sopwith@redhat.com>
    
- rebuilt
   
  
  - 
    Fri Mar 12 2004 Nalin Dahyabhai <nalin@redhat.com> 2.6.12-1
    
- update to 2.6.12
   
  
  - 
    Tue Mar 02 2004 Elliot Lee <sopwith@redhat.com>
    
- rebuilt
   
  
  - 
    Fri Feb 13 2004 Elliot Lee <sopwith@redhat.com>
    
- rebuilt
   
  
  - 
    Tue Dec 16 2003 Nalin Dahyabhai <nalin@redhat.com> 2.6.10-3
    
- add patch to avoid DoS when connecting to HTTP servers (or "HTTP" "servers")
  which don't provide status headers, or provide empty lines instead of status
  headers
   
  
  - 
    Fri Dec 12 2003 Nalin Dahyabhai <nalin@redhat.com> 2.6.10-2
    
- rebuild
   
  
  - 
    Fri Dec 12 2003 Nalin Dahyabhai <nalin@redhat.com> 2.6.10-1
    
- update to 2.6.10, which folds in the previous patches
- configure with --with-debug so that we get useful debug info
   
  
  - 
    Tue Dec 09 2003 Nalin Dahyabhai <nalin@redhat.com> 2.6.9-1
    
- include patch based on patch from Ulf Härnhammar to fix unsafe use of
  sscanf when reading http directory listings (CAN-2003-0963)
- include patch based on patch from Ulf Härnhammar to fix compile warnings
  modified based on input from Solar Designer
   
  
  - 
    Mon Dec 08 2003 Nalin Dahyabhai <nalin@redhat.com>
    
- update to 2.6.9
   
  
  - 
    Wed Aug 06 2003 Elliot Lee <sopwith@redhat.com>
    
- Fix libtool
   
  
  - 
    Wed Jun 04 2003 Elliot Lee <sopwith@redhat.com>
    
- rebuilt
   
  
  - 
    Wed Jan 22 2003 Tim Powers <timp@redhat.com>
    
- rebuilt
   
  
  - 
    Tue Jan 07 2003 Nalin Dahyabhai <nalin@redhat.com> 2.6.3-2
    
- rebuild
   
  
  - 
    Thu Dec 12 2002 Nalin Dahyabhai <nalin@redhat.com>
    
- use openssl's pkg-config data, if available
   
  
  - 
    Thu Nov 14 2002 Nalin Dahyabhai <nalin@redhat.com> 2.6.3-1
    
- update to 2.6.3
   
  
  - 
    Tue Nov 12 2002 Tim Powers <timp@redhat.com> 2.6.2-2
    
- remove files we aren't including from the $$RPM_BUILD_ROOT
   
  
  - 
    Fri Oct 04 2002 Nalin Dahyabhai <nalin@redhat.com> 2.6.2-1
    
- build with the system's libtool
   
  
  - 
    Thu Sep 26 2002 Nalin Dahyabhai <nalin@redhat.com>
    
- update to 2.6.2
   
  
  - 
    Sat Aug 10 2002 Elliot Lee <sopwith@redhat.com>
    
- rebuilt with gcc-3.2 (we hope)
   
  
  - 
    Tue Jul 23 2002 Tim Powers <timp@redhat.com> 2.5.2-4
    
- build using gcc-3.2-0.1
   
  
  - 
    Fri Jun 21 2002 Tim Powers <timp@redhat.com> 2.5.2-3
    
- automated rebuild
   
  
  - 
    Sun May 26 2002 Tim Powers <timp@redhat.com> 2.5.2-2
    
- automated rebuild
   
  
  - 
    Fri May 17 2002 Nalin Dahyabhai <nalin@redhat.com> 2.5.2-1
    
- update to 2.5.2
   
  
  - 
    Fri Feb 22 2002 Nalin Dahyabhai <nalin@redhat.com> 2.4.9-1
    
- update to 2.4.9
   
  
  - 
    Wed Jan 23 2002 Nalin Dahyabhai <nalin@redhat.com> 2.4.8-1
    
- update to 2.4.8
   
  
  - 
    Wed Jan 09 2002 Tim Powers <timp@redhat.com> 2.4.0-3
    
- automated rebuild
   
  
  - 
    Thu Aug 16 2001 Nalin Dahyabhai <nalin@redhat.com> 2.4.0-2
    
- remove the .la files from the final package -- these aren't libraries
  people link with anyway
   
  
  - 
    Mon Aug 06 2001 Nalin Dahyabhai <nalin@redhat.com> 2.4.0-1
    
- update to 2.4.0 (fixes some memory leaks and globbing cases)
   
  
  - 
    Thu Jul 05 2001 Nalin Dahyabhai <nalin@redhat.com>
    
- langify
   
  
  - 
    Fri Jun 29 2001 Nalin Dahyabhai <nalin@redhat.com>
    
- explicitly list the modules which are built when the package compiles, so
  that module build failures (for whatever reason) get caught
   
  
  - 
    Mon Jun 25 2001 Nalin Dahyabhai <nalin@redhat.com>
    
- merge in changes from ja .spec file
   
  
  - 
    Wed May 30 2001 Nalin Dahyabhai <nalin@redhat.com>
    
- update to 2.3.11
   
  
  - 
    Fri Apr 27 2001 Nalin Dahyabhai <nalin@redhat.com>
    
- update to 2.3.9
   
  
  - 
    Fri Mar 02 2001 Tim Powers <timp@redhat.com>
    
- rebuilt against openssl-0.9.6-1
   
  
  - 
    Fri Jan 19 2001 Nalin Dahyabhai <nalin@redhat.com>
    
- update to 2.3.7
   
  
  - 
    Thu Jan 04 2001 Nalin Dahyabhai <nalin@redhat.com>
    
- update to 2.3.6
   
  
  - 
    Fri Dec 01 2000 Nalin Dahyabhai <nalin@redhat.com>
    
- update to 2.3.5
   
  
  - 
    Mon Jul 24 2000 Prospector <prospector@redhat.com>
    
- rebuilt
   
  
  - 
    Thu Jul 13 2000 Tim Powers <timp@redhat.com>
    
- patched to build with gcc-2.96
- use gcc instead of c++ for CXX, otherwise you expose an ICE in gcc when
  using g++ on two files, one being a C++ source, and the other a C source.
  Using gcc does the correct thing.
   
  
  - 
    Mon Jul 10 2000 Tim Powers <timp@redhat.com>
    
- rebuilt
   
  
  - 
    Thu Jun 08 2000 Tim Powers <timp@redhat.com>
    
- fix man page location
- use %makeinstall
- use predefined macros wherever possible
   
  
  - 
    Mon May 15 2000 Tim Powers <timp@redhat.com>
    
- updated to 2.2.2
- added locales tofiles list
- built for 7.0
   
  
  - 
    Thu Jan 27 2000 Tim Powers <timp@redhat.com>
    
- fixed package description etc.
   
  
  - 
    Fri Jan 21 2000 Tim Powers <timp@redhat.com>
    
- ughh. didn't include /usr/lib/lftp in files list, fixed
   
  
  - 
    Thu Jan 13 2000 Tim Powers <timp@redhat.com>
    
- initial build for Powertools