We will continue our vigilance to provide excellent security as we continue to expand our products and services.” “Security is paramount for FileZilla even the smallest anomalies get fixed promptly. “We are proud to have participated in the bug bounty program,” he said in a press statement published on Monday. Not all issues carried a security impact, Kosse added.

Seven flaws, all now amended, were reported in detail by FileZilla in its latest update to the application’s participation in the open source bug bounty scheme, administered by the EU. The batch of bugs included one that caused filenames to be interpreted as commands within versions of the FTP client, an issue that was fixed within 24 hours, according to FileZilla founder Tim Kosse.Ī second patched security issue was threatening the application’s memory security if a “custom external LIP address resolver sent invalid chunk sizes”, Kosse explained, resulting in the FileZilla application crashing if enabled by default.Īnother bug caused FileZilla to crash when a sever sent large files via its directory listings. ‘We appreciate the opportunity to be part of this program,’ says FTP application founderĪ European Union (EU) supported bug bounty program has helped FileZilla fix numerous security issues, founders of the open source software application announced this week.

Filezilla malware issues