Overview
Introduction
Welcome to the homepage of FileZilla, the free FTP solution. Both a client and a server are available. FileZilla is open source software distributed under the terms of the GNU General Public License
Support is available through our forums, the wiki and the bug and feature request trackers.
In addition, you will find documentation on how to compile FileZilla and nightly builds for multiple platforms in the development section.
Quick download links
News 
2008-08-30 - FileZilla Client 3.1.2 released
Bugfixes and minor changes:
- Allow drive labels with more than one letter for servertype DOS
- Slight speedup of transfer queue, defer redrawing of UI elements to idle time
2008-08-24 - FileZilla Client 3.1.2-rc1 released
New features:
- Add directory listing filter condition to match on containing path name
- Implement kiosk mode in which FileZilla will not write any passwords to disk. Can be enabled through fzdefaults.xml
- Add option to disable update checks to fzdefaults.xml
- Vast performance improvements if handling queues and directories with thousands of files
- Faster TLS/SSL handshake on data connections
Bugfixes and minor changes:
- Queue should no longer get mixed up if LIST command fails during recursive downloads
- Fix crash if using -s commandline argument
- Fix spurious transfer failures if multiple engines try to list the same directory
- Loading invalid filters could crash FileZilla
- User/pass authentication for SOCKS5 proxy support was not working properly
- If stopping queue processing while recursively downloading directories, files added by the recursive operation will no longer reenable queue processing
- MSW: Keep site manager wide enough so that all notebook tabs fit
- Fix crash if server does not support resuming of large files
- SFTP uploads did not fail if server ran out of diskspace
- If compiled for some 64bit systems, SFTP resumes of files larger than 2^32 did not work properly
2008-08-11 - FileZilla Client 3.1.1.1 released
Bugfixes and minor changes:
- Fix crash if a connection attempt gets aborted
2008-07-24 - Security Advisory
FileZilla 3.1.0.1 fixes a vulnerability regarding the way some errors are handled on SSL/TLS secured data transfers.
If the data connection of a transfer gets closed, FileZilla did not check if the server performed an orderly TLS shutdown.
Impact
An attacker could send spoofed FIN packets to the client. Even though GnuTLS detects this with GNUTLS_E_UNEXPECTED_PACKET_LENGTH, FileZilla did not record a transfer failure in all cases.
Unfortunately not all servers perform an orderly SSL/TLS shutdown. Since this cannot be distinguished from an attack, FileZilla will not be able to download listings or files from such servers.
Affected versions
All versions prior to 3.1.0.1 are affected. This vulnerability has been fixed in 3.1.0.1
