Commit Graph

  • b892d82db3 - Fix bnc#970982 hanging on pam_exec in pam.d * Add patch vsftpd-3.0.2-wnohang.patch Tomáš Chvátal 2016-03-21 12:54:56 +00:00
  • 04f51a215b Accepting request 369732 from network Dominique Leuenberger 2016-03-16 09:26:34 +00:00
  • c796f9d946 Accepting request 369732 from network Dominique Leuenberger 2016-03-16 09:26:34 +00:00
  • 5578944fcf - Fix memory leaks in ls.c bnc#968138 * Add patch vsftpd-ls-memleak.patch * Update patch vsftpd-path-normalize.patch - Fix wildcard ? matching bnc#969411 * Update patch vsftpd-2.3.4-sqb.patch Tomáš Chvátal 2016-03-10 18:20:17 +00:00
  • bcdfc11973 - Fix memory leaks in ls.c bnc#968138 * Add patch vsftpd-ls-memleak.patch * Update patch vsftpd-path-normalize.patch - Fix wildcard ? matching bnc#969411 * Update patch vsftpd-2.3.4-sqb.patch Tomáš Chvátal 2016-03-10 18:20:17 +00:00
  • 04dcd130a7 Accepting request 334376 from network Dominique Leuenberger 2015-10-14 14:38:04 +00:00
  • e1bf4a4642 Accepting request 334376 from network Dominique Leuenberger 2015-10-14 14:38:04 +00:00
  • 44ffe22ac1 - Clean-up the init.d support to be bit more readable and add missing dep Tomáš Chvátal 2015-09-21 11:35:52 +00:00
  • a4221ef9a4 - Clean-up the init.d support to be bit more readable and add missing dep Tomáš Chvátal 2015-09-21 11:35:52 +00:00
  • 71ffe127d6 Accepting request 332591 from home:worldcitizen:branches:network Tomáš Chvátal 2015-09-21 11:27:21 +00:00
  • f8d4ada2f8 Accepting request 332591 from home:worldcitizen:branches:network Tomáš Chvátal 2015-09-21 11:27:21 +00:00
  • e15069f3f5 Accepting request 329655 from network Stephan Kulow 2015-09-19 04:53:10 +00:00
  • 33ed393706 Accepting request 329655 from network Stephan Kulow 2015-09-19 04:53:10 +00:00
  • 7cbe902ddd - Version bump to 3.0.3: * Increase VSFTP_AS_LIMIT to 200MB; various reports. * Make the PWD response more RFC compliant; report from Barry Kelly <barry@modeltwozero.com>. * Remove the trailing period from EPSV response to work around BT Internet issues; report from Tim Bishop <tdb@mirrorservice.org>. * Fix syslog_enable issues vs. seccomp filtering. Report from Michal Vyskocil <mvyskocil@suse.cz>. At least, syslogging seems to work on my Fedora now. * Allow gettimeofday() in the seccomp sandbox. I can't repro failures, but I probably have a different distro / libc / etc. and there are multiple reports. * Some kernels support PR_SET_NO_NEW_PRIVS but not PR_SET_SECCOMP, so handle this case gracefully. Report from Vasily Averin <vvs@odin.com>. * List the TLS1.2 cipher AES128-GCM-SHA256 as first preference by default. * Make some compile-time SSL defaults (such as correct client shutdown handling) stricter. * Disable Nagle algorithm during SSL data connection shutdown, to avoid 200ms delays. From Tim Kosse <tim.kosse@filezilla-project.org>. * Kill the FTP session if we see HTTP protocol commands, to avoid cross-protocol attacks. A report from Jann Horn <jann@thejh.net>. * Kill the FTP session if we see session re-use failure. A report from Tim Kosse <tim.kosse@filezilla-project.org>. * Enable ECDHE, Tim Kosse <tim.kosse@filezilla-project.org>. * Default cipher list is now just ECDHE-RSA-AES256-GCM-SHA384. * Minor SSL logging improvements. * Un-default tunable_strict_ssl_write_shutdown again. We still have tunable_strict_ssl_read_eof defaulted now, which is the important one to prove upload integrity. - Drop patch vsftpd-allow-dev-log-socket.patch should be included upstream, se above bullet with mvyskocil's email Tomáš Chvátal 2015-09-08 11:05:12 +00:00
  • bca8b26961 - Version bump to 3.0.3: * Increase VSFTP_AS_LIMIT to 200MB; various reports. * Make the PWD response more RFC compliant; report from Barry Kelly <barry@modeltwozero.com>. * Remove the trailing period from EPSV response to work around BT Internet issues; report from Tim Bishop <tdb@mirrorservice.org>. * Fix syslog_enable issues vs. seccomp filtering. Report from Michal Vyskocil <mvyskocil@suse.cz>. At least, syslogging seems to work on my Fedora now. * Allow gettimeofday() in the seccomp sandbox. I can't repro failures, but I probably have a different distro / libc / etc. and there are multiple reports. * Some kernels support PR_SET_NO_NEW_PRIVS but not PR_SET_SECCOMP, so handle this case gracefully. Report from Vasily Averin <vvs@odin.com>. * List the TLS1.2 cipher AES128-GCM-SHA256 as first preference by default. * Make some compile-time SSL defaults (such as correct client shutdown handling) stricter. * Disable Nagle algorithm during SSL data connection shutdown, to avoid 200ms delays. From Tim Kosse <tim.kosse@filezilla-project.org>. * Kill the FTP session if we see HTTP protocol commands, to avoid cross-protocol attacks. A report from Jann Horn <jann@thejh.net>. * Kill the FTP session if we see session re-use failure. A report from Tim Kosse <tim.kosse@filezilla-project.org>. * Enable ECDHE, Tim Kosse <tim.kosse@filezilla-project.org>. * Default cipher list is now just ECDHE-RSA-AES256-GCM-SHA384. * Minor SSL logging improvements. * Un-default tunable_strict_ssl_write_shutdown again. We still have tunable_strict_ssl_read_eof defaulted now, which is the important one to prove upload integrity. - Drop patch vsftpd-allow-dev-log-socket.patch should be included upstream, se above bullet with mvyskocil's email Tomáš Chvátal 2015-09-08 11:05:12 +00:00
  • 5a2482fd2a Accepting request 313269 from network Dominique Leuenberger 2015-07-02 20:45:27 +00:00
  • a52619997a Accepting request 313269 from network Dominique Leuenberger 2015-07-02 20:45:27 +00:00
  • b1b099bd31 OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=87 Tomáš Chvátal 2015-06-23 11:59:00 +00:00
  • 3dcc0185d7 OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=87 Tomáš Chvátal 2015-06-23 11:59:00 +00:00
  • 00561d057d - Fix logrotate script to not fail when vsftpd is not running, bnc#935279 Tomáš Chvátal 2015-06-23 08:52:14 +00:00
  • 4e200bdfc8 - Fix logrotate script to not fail when vsftpd is not running, bnc#935279 Tomáš Chvátal 2015-06-23 08:52:14 +00:00
  • d1cb551b4c Accepting request 297784 from network Dominique Leuenberger 2015-04-21 23:13:40 +00:00
  • e76562001e Accepting request 297784 from network Dominique Leuenberger 2015-04-21 23:13:40 +00:00
  • e99b855311 - Fix hide_file option wrt bnc#927612: * vsftpd-path-normalize.patch Tomáš Chvátal 2015-04-17 16:36:11 +00:00
  • eee4a0f058 - Fix hide_file option wrt bnc#927612: * vsftpd-path-normalize.patch Tomáš Chvátal 2015-04-17 16:36:11 +00:00
  • a51ff1a0fe Accepting request 294583 from network Dominique Leuenberger 2015-04-07 07:28:55 +00:00
  • 1d4d75a135 Accepting request 294583 from network Dominique Leuenberger 2015-04-07 07:28:55 +00:00
  • 1cbf7ab3a0 ENOENT, ensure we sent both dir+file to filter verification: Tomáš Chvátal 2015-04-05 11:40:52 +00:00
  • 17f8798b60 ENOENT, ensure we sent both dir+file to filter verification: Tomáš Chvátal 2015-04-05 11:40:52 +00:00
  • e939f108e5 OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=81 Tomáš Chvátal 2015-04-05 10:35:19 +00:00
  • c0ec3c43fe OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=81 Tomáš Chvátal 2015-04-05 10:35:19 +00:00
  • abd20973e8 - bnc#925963 stat is sometimes run on wrong path and results with ENOENT: * vsftpd-path-normalize.patch Tomáš Chvátal 2015-04-05 10:34:03 +00:00
  • 39ac467b43 - bnc#925963 stat is sometimes run on wrong path and results with ENOENT: * vsftpd-path-normalize.patch Tomáš Chvátal 2015-04-05 10:34:03 +00:00
  • ef6c0131cb - Update patch bit more for sanity checks. Done by rsassu@suse.de: * vsftpd-path-normalize.patch Tomáš Chvátal 2015-03-25 10:08:56 +00:00
  • 748432c9ba - Update patch bit more for sanity checks. Done by rsassu@suse.de: * vsftpd-path-normalize.patch Tomáš Chvátal 2015-03-25 10:08:56 +00:00
  • 6cd1b030f0 OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=78 Tomáš Chvátal 2015-03-25 08:45:22 +00:00
  • fa522d628b OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=78 Tomáš Chvátal 2015-03-25 08:45:22 +00:00
  • 915fc9626d OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=77 Tomáš Chvátal 2015-03-23 20:59:56 +00:00
  • 2d8658d1a0 OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=77 Tomáš Chvátal 2015-03-23 20:59:56 +00:00
  • fa040448aa - Add back patch attempting to fix bnc#900326 bnc#915522 and bnc#922538: * vsftpd-path-normalize.patch Tomáš Chvátal 2015-03-23 20:22:32 +00:00
  • 58b084c206 - Add back patch attempting to fix bnc#900326 bnc#915522 and bnc#922538: * vsftpd-path-normalize.patch Tomáš Chvátal 2015-03-23 20:22:32 +00:00
  • 8c317ca736 - Reset filter patch to match fedora, my work will be restarted in one-off patch to make the changes stand out. Add rest of RH filtering patches: * vsftpd-2.2.0-wildchar.patch * vsftpd-2.3.4-sqb.patch * vsftpd-2.1.0-filter.patch Tomáš Chvátal 2015-03-23 20:10:51 +00:00
  • 15ac57fba2 - Reset filter patch to match fedora, my work will be restarted in one-off patch to make the changes stand out. Add rest of RH filtering patches: * vsftpd-2.2.0-wildchar.patch * vsftpd-2.3.4-sqb.patch * vsftpd-2.1.0-filter.patch Tomáš Chvátal 2015-03-23 20:10:51 +00:00
  • c67fd3688c - Work on the filter patch and split out the normalisation of the path to separate str function, currently commented out so I avoid huge diffing. * vsftpd-2.1.0-filter.patch Tomáš Chvátal 2015-03-23 19:57:06 +00:00
  • ae1b61b94b - Work on the filter patch and split out the normalisation of the path to separate str function, currently commented out so I avoid huge diffing. * vsftpd-2.1.0-filter.patch Tomáš Chvátal 2015-03-23 19:57:06 +00:00
  • c74dd85729 Accepting request 287539 from network Dominique Leuenberger 2015-02-27 10:03:46 +00:00
  • fcaad4793f Accepting request 287539 from network Dominique Leuenberger 2015-02-27 10:03:46 +00:00
  • de2ebfe3ec - Udate filter patch to work as expected: from fedora. bnc#900326 bnc#915522 CVE-2015-1419 Tomáš Chvátal 2015-02-24 14:52:29 +00:00
  • 06b34e4698 - Udate filter patch to work as expected: from fedora. bnc#900326 bnc#915522 CVE-2015-1419 Tomáš Chvátal 2015-02-24 14:52:29 +00:00
  • e1041567b4 - Add service calls for other unit files too - WIP udate filter patch to work as expected: * vsftpd-2.1.0-filter.patch Tomáš Chvátal 2015-02-20 12:14:28 +00:00
  • 2635a8b4a3 - Add service calls for other unit files too - WIP udate filter patch to work as expected: * vsftpd-2.1.0-filter.patch Tomáš Chvátal 2015-02-20 12:14:28 +00:00
  • 6e7def679d Accepting request 267273 from network Dominique Leuenberger 2015-01-08 22:20:01 +00:00
  • 172e33c389 Accepting request 267273 from network Dominique Leuenberger 2015-01-08 22:20:01 +00:00
  • 67c49824e6 - Try to fix deny_file parsing to do more what is expected. Taken from fedora. bnc#900326 * vsftpd-2.1.0-filter.patch Tomáš Chvátal 2015-01-02 10:33:48 +00:00
  • 8b924de059 - Try to fix deny_file parsing to do more what is expected. Taken from fedora. bnc#900326 * vsftpd-2.1.0-filter.patch Tomáš Chvátal 2015-01-02 10:33:48 +00:00
  • faaeb4136e Accepting request 261591 from network Dominique Leuenberger 2014-11-24 10:11:13 +00:00
  • d8f79cf95d Accepting request 261591 from network Dominique Leuenberger 2014-11-24 10:11:13 +00:00
  • eaca6cd4e5 Accepting request 261557 from home:dimstar:gpg2 Vítězslav Čížek 2014-11-14 12:23:22 +00:00
  • a40daae452 Accepting request 261557 from home:dimstar:gpg2 Vítězslav Čížek 2014-11-14 12:23:22 +00:00
  • cf9eabb97f Accepting request 247114 from network Stephan Kulow 2014-09-03 16:21:32 +00:00
  • 67ba12ebc2 Accepting request 247114 from network Stephan Kulow 2014-09-03 16:21:32 +00:00
  • 473a538edc Accepting request 246751 from home:matejcik:branches:network Marcus Meissner 2014-09-01 15:38:56 +00:00
  • 26ed579d8e Accepting request 246751 from home:matejcik:branches:network Marcus Meissner 2014-09-01 15:38:56 +00:00
  • fa0b1f8c7e Accepting request 235383 from network Stephan Kulow 2014-05-27 10:03:19 +00:00
  • 14311aecdc Accepting request 235383 from network Stephan Kulow 2014-05-27 10:03:19 +00:00
  • 210c375786 - Cleanup with spec-cleaner - Remove conditions about init files as we do not build for < 12.1 anyway. - Update the README.SUSE file to describe more the listen option. Tomáš Chvátal 2014-05-26 13:22:17 +00:00
  • c926e6564f - Cleanup with spec-cleaner - Remove conditions about init files as we do not build for < 12.1 anyway. - Update the README.SUSE file to describe more the listen option. Tomáš Chvátal 2014-05-26 13:22:17 +00:00
  • 9c280be826 - Add socket service for vsftpd to avoid the need for xinetd here. Tomáš Chvátal 2014-05-26 13:00:04 +00:00
  • 41b21464c9 - Add socket service for vsftpd to avoid the need for xinetd here. Tomáš Chvátal 2014-05-26 13:00:04 +00:00
  • 66115111e4 - Add comment about listen variables for xinetd configuration. Fixes bnc#872221. - Add default configuration as arg to xinetd started vsftpd. - Updated patch: * vsftpd-2.0.4-xinetd.diff Tomáš Chvátal 2014-05-26 12:48:36 +00:00
  • 92bd32195a - Add comment about listen variables for xinetd configuration. Fixes bnc#872221. - Add default configuration as arg to xinetd started vsftpd. - Updated patch: * vsftpd-2.0.4-xinetd.diff Tomáš Chvátal 2014-05-26 12:48:36 +00:00
  • 68185af8ed Accepting request 229628 from network Stephan Kulow 2014-04-11 11:42:43 +00:00
  • 85926135ec Accepting request 229628 from network Stephan Kulow 2014-04-11 11:42:43 +00:00
  • 10243a939a Accepting request 229627 from home:scarabeus_iv Michal Hrusecky (old before rename to _miska_) 2014-04-10 13:24:27 +00:00
  • 9d47d1a520 Accepting request 229627 from home:scarabeus_iv Michal Hrusecky (old before rename to _miska_) 2014-04-10 13:24:27 +00:00
  • 5f771a3cf6 Accepting request 183971 from network Stephan Kulow 2013-07-22 12:56:49 +00:00
  • 6105948665 Accepting request 183971 from network Stephan Kulow 2013-07-22 12:56:49 +00:00
  • bf16e86507 Accepting request 183859 from home:elvigia:branches:network Marcus Meissner 2013-07-22 09:06:23 +00:00
  • 92084e5113 Accepting request 183859 from home:elvigia:branches:network Marcus Meissner 2013-07-22 09:06:23 +00:00
  • 6a3abd6e08 Accepting request 162591 from network Stephan Kulow 2013-04-05 05:43:21 +00:00
  • 7cb0319247 Accepting request 162591 from network Stephan Kulow 2013-04-05 05:43:21 +00:00
  • 4d064f5b44 Accepting request 162590 from home:mvyskocil:branches:network Michal Vyskocil 2013-04-04 10:09:44 +00:00
  • 1df11d3a3a Accepting request 162590 from home:mvyskocil:branches:network Michal Vyskocil 2013-04-04 10:09:44 +00:00
  • 40abef61e5 Accepting request 157548 from network Stephan Kulow 2013-03-07 06:35:30 +00:00
  • 98d508db5a Accepting request 157548 from network Stephan Kulow 2013-03-07 06:35:30 +00:00
  • 8ba24f68c9 Accepting request 157236 from home:lnussel:branches:network Ismail Dönmez 2013-03-06 18:42:15 +00:00
  • e714b1641d Accepting request 157236 from home:lnussel:branches:network Ismail Dönmez 2013-03-06 18:42:15 +00:00
  • 1265a2b4ae Accepting request 156829 from network Stephan Kulow 2013-03-01 08:06:02 +00:00
  • a1601711d9 Accepting request 156829 from network Stephan Kulow 2013-03-01 08:06:02 +00:00
  • 861f8bae8f - add vsftpd-allow-dev-log-socket.patch (bnc#786024) * whitelist /dev/log related socket syscall Michal Vyskocil 2013-02-28 13:31:50 +00:00
  • cc95d00156 - add vsftpd-allow-dev-log-socket.patch (bnc#786024) * whitelist /dev/log related socket syscall Michal Vyskocil 2013-02-28 13:31:50 +00:00
  • 0a4005396e Accepting request 145730 from network Stephan Kulow 2012-12-19 12:42:31 +00:00
  • 284656b12a Accepting request 145730 from network Stephan Kulow 2012-12-19 12:42:31 +00:00
  • a423e9b8bd Accepting request 143938 from home:sbrabec:gpg-offline-verify Michal Vyskocil 2012-12-18 10:10:02 +00:00
  • af0bebf23b Accepting request 143938 from home:sbrabec:gpg-offline-verify Michal Vyskocil 2012-12-18 10:10:02 +00:00
  • 7dba396ae8 Accepting request 142032 from network Stephan Kulow 2012-11-20 19:19:24 +00:00
  • 8722794d26 Accepting request 142032 from network Stephan Kulow 2012-11-20 19:19:24 +00:00
  • 5c7f501f37 Accepting request 142025 from home:dimstar:branches:network Sascha Peilicke 2012-11-20 09:46:06 +00:00
  • 5dd1f9dd11 Accepting request 142025 from home:dimstar:branches:network Sascha Peilicke 2012-11-20 09:46:06 +00:00
  • 112be97403 Accepting request 138998 from network Stephan Kulow 2012-10-24 05:19:35 +00:00