44ffe22ac1
- Clean-up the init.d support to be bit more readable and add missing dep
Tomáš Chvátal
2015-09-21 11:35:52 +00:00
a4221ef9a4
- Clean-up the init.d support to be bit more readable and add missing dep
Tomáš Chvátal
2015-09-21 11:35:52 +00:00
71ffe127d6
Accepting request 332591 from home:worldcitizen:branches:network
Tomáš Chvátal
2015-09-21 11:27:21 +00:00
f8d4ada2f8
Accepting request 332591 from home:worldcitizen:branches:network
Tomáš Chvátal
2015-09-21 11:27:21 +00:00
e15069f3f5
Accepting request 329655 from network
Stephan Kulow
2015-09-19 04:53:10 +00:00
33ed393706
Accepting request 329655 from network
Stephan Kulow
2015-09-19 04:53:10 +00:00
7cbe902ddd
- Version bump to 3.0.3: * Increase VSFTP_AS_LIMIT to 200MB; various reports. * Make the PWD response more RFC compliant; report from Barry Kelly <barry@modeltwozero.com>. * Remove the trailing period from EPSV response to work around BT Internet issues; report from Tim Bishop <tdb@mirrorservice.org>. * Fix syslog_enable issues vs. seccomp filtering. Report from Michal Vyskocil <mvyskocil@suse.cz>. At least, syslogging seems to work on my Fedora now. * Allow gettimeofday() in the seccomp sandbox. I can't repro failures, but I probably have a different distro / libc / etc. and there are multiple reports. * Some kernels support PR_SET_NO_NEW_PRIVS but not PR_SET_SECCOMP, so handle this case gracefully. Report from Vasily Averin <vvs@odin.com>. * List the TLS1.2 cipher AES128-GCM-SHA256 as first preference by default. * Make some compile-time SSL defaults (such as correct client shutdown handling) stricter. * Disable Nagle algorithm during SSL data connection shutdown, to avoid 200ms delays. From Tim Kosse <tim.kosse@filezilla-project.org>. * Kill the FTP session if we see HTTP protocol commands, to avoid cross-protocol attacks. A report from Jann Horn <jann@thejh.net>. * Kill the FTP session if we see session re-use failure. A report from Tim Kosse <tim.kosse@filezilla-project.org>. * Enable ECDHE, Tim Kosse <tim.kosse@filezilla-project.org>. * Default cipher list is now just ECDHE-RSA-AES256-GCM-SHA384. * Minor SSL logging improvements. * Un-default tunable_strict_ssl_write_shutdown again. We still have tunable_strict_ssl_read_eof defaulted now, which is the important one to prove upload integrity. - Drop patch vsftpd-allow-dev-log-socket.patch should be included upstream, se above bullet with mvyskocil's email
Tomáš Chvátal
2015-09-08 11:05:12 +00:00
bca8b26961
- Version bump to 3.0.3: * Increase VSFTP_AS_LIMIT to 200MB; various reports. * Make the PWD response more RFC compliant; report from Barry Kelly <barry@modeltwozero.com>. * Remove the trailing period from EPSV response to work around BT Internet issues; report from Tim Bishop <tdb@mirrorservice.org>. * Fix syslog_enable issues vs. seccomp filtering. Report from Michal Vyskocil <mvyskocil@suse.cz>. At least, syslogging seems to work on my Fedora now. * Allow gettimeofday() in the seccomp sandbox. I can't repro failures, but I probably have a different distro / libc / etc. and there are multiple reports. * Some kernels support PR_SET_NO_NEW_PRIVS but not PR_SET_SECCOMP, so handle this case gracefully. Report from Vasily Averin <vvs@odin.com>. * List the TLS1.2 cipher AES128-GCM-SHA256 as first preference by default. * Make some compile-time SSL defaults (such as correct client shutdown handling) stricter. * Disable Nagle algorithm during SSL data connection shutdown, to avoid 200ms delays. From Tim Kosse <tim.kosse@filezilla-project.org>. * Kill the FTP session if we see HTTP protocol commands, to avoid cross-protocol attacks. A report from Jann Horn <jann@thejh.net>. * Kill the FTP session if we see session re-use failure. A report from Tim Kosse <tim.kosse@filezilla-project.org>. * Enable ECDHE, Tim Kosse <tim.kosse@filezilla-project.org>. * Default cipher list is now just ECDHE-RSA-AES256-GCM-SHA384. * Minor SSL logging improvements. * Un-default tunable_strict_ssl_write_shutdown again. We still have tunable_strict_ssl_read_eof defaulted now, which is the important one to prove upload integrity. - Drop patch vsftpd-allow-dev-log-socket.patch should be included upstream, se above bullet with mvyskocil's email
Tomáš Chvátal
2015-09-08 11:05:12 +00:00
abd20973e8
- bnc#925963 stat is sometimes run on wrong path and results with ENOENT: * vsftpd-path-normalize.patch
Tomáš Chvátal
2015-04-05 10:34:03 +00:00
39ac467b43
- bnc#925963 stat is sometimes run on wrong path and results with ENOENT: * vsftpd-path-normalize.patch
Tomáš Chvátal
2015-04-05 10:34:03 +00:00
ef6c0131cb
- Update patch bit more for sanity checks. Done by rsassu@suse.de: * vsftpd-path-normalize.patch
Tomáš Chvátal
2015-03-25 10:08:56 +00:00
748432c9ba
- Update patch bit more for sanity checks. Done by rsassu@suse.de: * vsftpd-path-normalize.patch
Tomáš Chvátal
2015-03-25 10:08:56 +00:00
fa040448aa
- Add back patch attempting to fix bnc#900326 bnc#915522 and bnc#922538: * vsftpd-path-normalize.patch
Tomáš Chvátal
2015-03-23 20:22:32 +00:00
58b084c206
- Add back patch attempting to fix bnc#900326 bnc#915522 and bnc#922538: * vsftpd-path-normalize.patch
Tomáš Chvátal
2015-03-23 20:22:32 +00:00
8c317ca736
- Reset filter patch to match fedora, my work will be restarted in one-off patch to make the changes stand out. Add rest of RH filtering patches: * vsftpd-2.2.0-wildchar.patch * vsftpd-2.3.4-sqb.patch * vsftpd-2.1.0-filter.patch
Tomáš Chvátal
2015-03-23 20:10:51 +00:00
15ac57fba2
- Reset filter patch to match fedora, my work will be restarted in one-off patch to make the changes stand out. Add rest of RH filtering patches: * vsftpd-2.2.0-wildchar.patch * vsftpd-2.3.4-sqb.patch * vsftpd-2.1.0-filter.patch
Tomáš Chvátal
2015-03-23 20:10:51 +00:00
c67fd3688c
- Work on the filter patch and split out the normalisation of the path to separate str function, currently commented out so I avoid huge diffing. * vsftpd-2.1.0-filter.patch
Tomáš Chvátal
2015-03-23 19:57:06 +00:00
ae1b61b94b
- Work on the filter patch and split out the normalisation of the path to separate str function, currently commented out so I avoid huge diffing. * vsftpd-2.1.0-filter.patch
Tomáš Chvátal
2015-03-23 19:57:06 +00:00
de2ebfe3ec
- Udate filter patch to work as expected: from fedora. bnc#900326 bnc#915522 CVE-2015-1419
Tomáš Chvátal
2015-02-24 14:52:29 +00:00
06b34e4698
- Udate filter patch to work as expected: from fedora. bnc#900326 bnc#915522 CVE-2015-1419
Tomáš Chvátal
2015-02-24 14:52:29 +00:00
e1041567b4
- Add service calls for other unit files too - WIP udate filter patch to work as expected: * vsftpd-2.1.0-filter.patch
Tomáš Chvátal
2015-02-20 12:14:28 +00:00
2635a8b4a3
- Add service calls for other unit files too - WIP udate filter patch to work as expected: * vsftpd-2.1.0-filter.patch
Tomáš Chvátal
2015-02-20 12:14:28 +00:00
67c49824e6
- Try to fix deny_file parsing to do more what is expected. Taken from fedora. bnc#900326 * vsftpd-2.1.0-filter.patch
Tomáš Chvátal
2015-01-02 10:33:48 +00:00
8b924de059
- Try to fix deny_file parsing to do more what is expected. Taken from fedora. bnc#900326 * vsftpd-2.1.0-filter.patch
Tomáš Chvátal
2015-01-02 10:33:48 +00:00
cf9eabb97f
Accepting request 247114 from network
Stephan Kulow
2014-09-03 16:21:32 +00:00
67ba12ebc2
Accepting request 247114 from network
Stephan Kulow
2014-09-03 16:21:32 +00:00
473a538edc
Accepting request 246751 from home:matejcik:branches:network
Marcus Meissner2014-09-01 15:38:56 +00:00
26ed579d8e
Accepting request 246751 from home:matejcik:branches:network
Marcus Meissner2014-09-01 15:38:56 +00:00
fa0b1f8c7e
Accepting request 235383 from network
Stephan Kulow
2014-05-27 10:03:19 +00:00
14311aecdc
Accepting request 235383 from network
Stephan Kulow
2014-05-27 10:03:19 +00:00
210c375786
- Cleanup with spec-cleaner - Remove conditions about init files as we do not build for < 12.1 anyway. - Update the README.SUSE file to describe more the listen option.
Tomáš Chvátal
2014-05-26 13:22:17 +00:00
c926e6564f
- Cleanup with spec-cleaner - Remove conditions about init files as we do not build for < 12.1 anyway. - Update the README.SUSE file to describe more the listen option.
Tomáš Chvátal
2014-05-26 13:22:17 +00:00
9c280be826
- Add socket service for vsftpd to avoid the need for xinetd here.
Tomáš Chvátal
2014-05-26 13:00:04 +00:00
41b21464c9
- Add socket service for vsftpd to avoid the need for xinetd here.
Tomáš Chvátal
2014-05-26 13:00:04 +00:00
66115111e4
- Add comment about listen variables for xinetd configuration. Fixes bnc#872221. - Add default configuration as arg to xinetd started vsftpd. - Updated patch: * vsftpd-2.0.4-xinetd.diff
Tomáš Chvátal
2014-05-26 12:48:36 +00:00
92bd32195a
- Add comment about listen variables for xinetd configuration. Fixes bnc#872221. - Add default configuration as arg to xinetd started vsftpd. - Updated patch: * vsftpd-2.0.4-xinetd.diff
Tomáš Chvátal
2014-05-26 12:48:36 +00:00
68185af8ed
Accepting request 229628 from network
Stephan Kulow
2014-04-11 11:42:43 +00:00
85926135ec
Accepting request 229628 from network
Stephan Kulow
2014-04-11 11:42:43 +00:00
10243a939a
Accepting request 229627 from home:scarabeus_iv
Michal Hrusecky (old before rename to _miska_)
2014-04-10 13:24:27 +00:00
9d47d1a520
Accepting request 229627 from home:scarabeus_iv
Michal Hrusecky (old before rename to _miska_)
2014-04-10 13:24:27 +00:00
5f771a3cf6
Accepting request 183971 from network
Stephan Kulow
2013-07-22 12:56:49 +00:00
6105948665
Accepting request 183971 from network
Stephan Kulow
2013-07-22 12:56:49 +00:00
bf16e86507
Accepting request 183859 from home:elvigia:branches:network
Marcus Meissner2013-07-22 09:06:23 +00:00
92084e5113
Accepting request 183859 from home:elvigia:branches:network
Marcus Meissner2013-07-22 09:06:23 +00:00
6a3abd6e08
Accepting request 162591 from network
Stephan Kulow
2013-04-05 05:43:21 +00:00
7cb0319247
Accepting request 162591 from network
Stephan Kulow
2013-04-05 05:43:21 +00:00
4d064f5b44
Accepting request 162590 from home:mvyskocil:branches:network
Michal Vyskocil2013-04-04 10:09:44 +00:00
1df11d3a3a
Accepting request 162590 from home:mvyskocil:branches:network
Michal Vyskocil2013-04-04 10:09:44 +00:00
40abef61e5
Accepting request 157548 from network
Stephan Kulow
2013-03-07 06:35:30 +00:00
98d508db5a
Accepting request 157548 from network
Stephan Kulow
2013-03-07 06:35:30 +00:00