Commit Graph

  • d34b251e5d Accepting request 138998 from network Stephan Kulow 2012-10-24 05:19:35 +00:00
  • cc0b3b4805 - update to 3.0.2 (bnc#786024) * Fix some seccomp related build errors on certain CentOS and Debian versions. * Seccomp filter sandbox: missing munmap() -- oops. Did you know that qsort() opens and maps /proc/meminfo but only for larger item counts? * Seccomp filter sandbox: deny socket() gracefully for text_userdb_names. * Fix various NULL crashes with nonsensical config settings. Noted by Tianyin Xu <tixu@cs.ucsd.edu>. * Force cast to unsigned char in is* char functions. * Fix harmless integer issues in strlist.c. * Started on a (possibly ill-advised?) crusade to compile cleanly with Wconversion. Decided to suspend the effort half-way through. * One more seccomp policy fix: mremap (denied). * Support STOU with no filename, uses a STOU. prefix. Michal Vyskocil 2012-10-22 13:40:00 +00:00
  • 59ccc76869 - update to 3.0.2 (bnc#786024) * Fix some seccomp related build errors on certain CentOS and Debian versions. * Seccomp filter sandbox: missing munmap() -- oops. Did you know that qsort() opens and maps /proc/meminfo but only for larger item counts? * Seccomp filter sandbox: deny socket() gracefully for text_userdb_names. * Fix various NULL crashes with nonsensical config settings. Noted by Tianyin Xu <tixu@cs.ucsd.edu>. * Force cast to unsigned char in is* char functions. * Fix harmless integer issues in strlist.c. * Started on a (possibly ill-advised?) crusade to compile cleanly with Wconversion. Decided to suspend the effort half-way through. * One more seccomp policy fix: mremap (denied). * Support STOU with no filename, uses a STOU. prefix. Michal Vyskocil 2012-10-22 13:40:00 +00:00
  • d195e8e869 Accepting request 131864 from network Stephan Kulow 2012-08-31 08:02:42 +00:00
  • 9b4e19fdcc Accepting request 131864 from network Stephan Kulow 2012-08-31 08:02:42 +00:00
  • 6b7e1c71a7 remove unused sandbox patch Michal Vyskocil 2012-08-28 13:15:01 +00:00
  • 74b51b07f0 remove unused sandbox patch Michal Vyskocil 2012-08-28 13:15:01 +00:00
  • e34dbaa3d7 - make seccomp sandbox enabled by default * dropped vsftpd-3.0.0-turn-seccomp-sandbox-off.patch Michal Vyskocil 2012-08-24 07:10:05 +00:00
  • 736c79429f - make seccomp sandbox enabled by default * dropped vsftpd-3.0.0-turn-seccomp-sandbox-off.patch Michal Vyskocil 2012-08-24 07:10:05 +00:00
  • 1f1a63d012 Accepting request 116233 from network Stephan Kulow 2012-05-08 04:49:05 +00:00
  • b0d51ef310 Accepting request 116233 from network Stephan Kulow 2012-05-08 04:49:05 +00:00
  • afb6927f52 Accepting request 115133 from home:aljex:branches:network Michal Vyskocil 2012-04-24 13:17:54 +00:00
  • 362a9f2f63 Accepting request 115133 from home:aljex:branches:network Michal Vyskocil 2012-04-24 13:17:54 +00:00
  • a6cf2efa47 Accepting request 113215 from network Stephan Kulow 2012-04-12 07:55:49 +00:00
  • db732681af Accepting request 113215 from network Stephan Kulow 2012-04-12 07:55:49 +00:00
  • cf83fc9250 - update to upstream 3.0.0: * Make listen mode the default. * Fix missing "const" in ssl.c * Add seccompsandbox.c to support a seccomp filter sandbox; works against Ubuntu 12.04 ABI. * Rearrange ftppolicy.c a bit so the syscall list is easily comparable with seccompsandbox.c * Rename deprecated "sandbox" to "ptrace_sandbox". * Add a few more state checks to the privileged helper processes. * Add tunable "seccomp_sandbox", default on. * Use hardened build flags. * Retry creating a PASV socket upon port reuse race between bind() and listen(), patch from Ralph Wuerthner <ralph.wuerthner@de.ibm.com>. * Don't die() if recv() indicates a closed remote connection. Problem report on a Windows client from Herbert van den Bergh, <herbert.van.den.bergh@oracle.com>. * Add new config setting "allow_writeable_chroot" to help people in a bit of a spot with the v2.3.5 defensive change. Only applies to non-anonymous. * Remove a couple of fixed things from BUGS. * strlen() trunction fix -- no particular impact. * Apply some tidyups from mmoufid@yorku.ca. * Fix delete_failed_uploads if there is a timeout. Report from Alejandro Hernández Hdez <aalejandrohdez@gmail.com>. * Fix other data channel bugs such as failure to log failure upon timeout. * Use exit codes a bit more consistently. * Fix bad interaction between SSL and trans_chunk_size. * Redo data timeout to fire properly for SSL sessions. * Redo idle timeout to fire properly for SSL sessions. * Make sure PROT_EXEC isn't allowed, thanks to Will Drewry for noticing. * Use 10 minutes as a max linger time just in case an alarm gets lost. * Change PR_SET_NO_NEW_PRIVS define, from Kees Cook. * Add AES128-SHA to default SSL cipher suites for FileZilla compatibility. Unfortunately the default vsftpd SSL confiuration still doesn't fully work with FileZilla, because FileZilla has a data connection security problem: no client certificate presentation and no session reuse. At least the error message is now very clear. * Add restart_syscall to seccomp policy. Triggers reliably if you strace whilst a data transfer is in progress. * Fix delete_failed_uploads for anonymous sessions. * Don't listen for urgent data if the control connection is SSL, due to possible protocol synchronization issues. - SUSE specific changes: * turn off the listen mode (listen=NO) by default and change README.SUSE * merge new hardended flags for build and linking * fix the wrong Type=forking from systemd service file * turn off the seccomp_sandbox off by default as SUSE kernel does not support it (yet) Michal Vyskocil 2012-04-11 12:03:42 +00:00
  • 6ce3661ad8 - update to upstream 3.0.0: * Make listen mode the default. * Fix missing "const" in ssl.c * Add seccompsandbox.c to support a seccomp filter sandbox; works against Ubuntu 12.04 ABI. * Rearrange ftppolicy.c a bit so the syscall list is easily comparable with seccompsandbox.c * Rename deprecated "sandbox" to "ptrace_sandbox". * Add a few more state checks to the privileged helper processes. * Add tunable "seccomp_sandbox", default on. * Use hardened build flags. * Retry creating a PASV socket upon port reuse race between bind() and listen(), patch from Ralph Wuerthner <ralph.wuerthner@de.ibm.com>. * Don't die() if recv() indicates a closed remote connection. Problem report on a Windows client from Herbert van den Bergh, <herbert.van.den.bergh@oracle.com>. * Add new config setting "allow_writeable_chroot" to help people in a bit of a spot with the v2.3.5 defensive change. Only applies to non-anonymous. * Remove a couple of fixed things from BUGS. * strlen() trunction fix -- no particular impact. * Apply some tidyups from mmoufid@yorku.ca. * Fix delete_failed_uploads if there is a timeout. Report from Alejandro Hernández Hdez <aalejandrohdez@gmail.com>. * Fix other data channel bugs such as failure to log failure upon timeout. * Use exit codes a bit more consistently. * Fix bad interaction between SSL and trans_chunk_size. * Redo data timeout to fire properly for SSL sessions. * Redo idle timeout to fire properly for SSL sessions. * Make sure PROT_EXEC isn't allowed, thanks to Will Drewry for noticing. * Use 10 minutes as a max linger time just in case an alarm gets lost. * Change PR_SET_NO_NEW_PRIVS define, from Kees Cook. * Add AES128-SHA to default SSL cipher suites for FileZilla compatibility. Unfortunately the default vsftpd SSL confiuration still doesn't fully work with FileZilla, because FileZilla has a data connection security problem: no client certificate presentation and no session reuse. At least the error message is now very clear. * Add restart_syscall to seccomp policy. Triggers reliably if you strace whilst a data transfer is in progress. * Fix delete_failed_uploads for anonymous sessions. * Don't listen for urgent data if the control connection is SSL, due to possible protocol synchronization issues. - SUSE specific changes: * turn off the listen mode (listen=NO) by default and change README.SUSE * merge new hardended flags for build and linking * fix the wrong Type=forking from systemd service file * turn off the seccomp_sandbox off by default as SUSE kernel does not support it (yet) Michal Vyskocil 2012-04-11 12:03:42 +00:00
  • c2aa5ce3b4 Accepting request 106294 from network Stephan Kulow 2012-02-22 14:55:42 +00:00
  • fe8b6a2bc4 Accepting request 106294 from network Stephan Kulow 2012-02-22 14:55:42 +00:00
  • b0fe1b3a11 - add $local_fs and $remote_fs to init script Michal Vyskocil 2012-02-21 11:17:29 +00:00
  • 1ad68ad406 - add $local_fs and $remote_fs to init script Michal Vyskocil 2012-02-21 11:17:29 +00:00
  • a3f253c076 add forgotten vsftpd.service Michal Vyskocil 2012-02-21 11:09:27 +00:00
  • a61390f3de add forgotten vsftpd.service Michal Vyskocil 2012-02-21 11:09:27 +00:00
  • f9dd88708e - follow Systemd Packaging guidelines http://en.opensuse.org/openSUSE:Systemd_packaging_guidelines Michal Vyskocil 2012-02-21 10:52:18 +00:00
  • cd2f63c71a - follow Systemd Packaging guidelines http://en.opensuse.org/openSUSE:Systemd_packaging_guidelines Michal Vyskocil 2012-02-21 10:52:18 +00:00
  • e5b3faff0a - revert a part oc changes utf converting ˇ IPv6 support, so drop our patch ˇ Many bugfixes and tunings ˇ Build fixes Michal Vyskocil 2012-02-15 16:46:06 +00:00
  • acd4d6b736 - revert a part oc changes utf converting ˇ IPv6 support, so drop our patch ˇ Many bugfixes and tunings ˇ Build fixes Michal Vyskocil 2012-02-15 16:46:06 +00:00
  • 468d05d65a OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=32 Michal Vyskocil 2012-02-15 16:43:49 +00:00
  • 0bf7c8b352 OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=32 Michal Vyskocil 2012-02-15 16:43:49 +00:00
  • e020b9f862 - use the original tarball, because the bz2 repacking madness disables gpg --verify Michal Vyskocil 2012-02-15 16:42:34 +00:00
  • 7de9e09680 - use the original tarball, because the bz2 repacking madness disables gpg --verify Michal Vyskocil 2012-02-15 16:42:34 +00:00
  • 9b2771a587 Accepting request 98058 from home:AndreasStieger:branches:network Cristian Rodríguez 2011-12-25 22:14:07 +00:00
  • 13eb6aef4f Accepting request 98058 from home:AndreasStieger:branches:network Cristian Rodríguez 2011-12-25 22:14:07 +00:00
  • e1b264f17e Accepting request 93775 from home:elvigia:branches:network Cristian Rodríguez 2011-11-27 20:24:40 +00:00
  • c9aa7377f5 Accepting request 93775 from home:elvigia:branches:network Cristian Rodríguez 2011-11-27 20:24:40 +00:00
  • 20f58e7e8a trigger service run Michal Vyskocil 2011-10-11 10:14:47 +00:00
  • 0bbb094c2d trigger service run Michal Vyskocil 2011-10-11 10:14:47 +00:00
  • f824c15238 Autobuild autoformatter for 84442 Sascha Peilicke 2011-09-22 12:48:12 +00:00
  • 7a21defe25 Autobuild autoformatter for 84442 Sascha Peilicke 2011-09-22 12:48:12 +00:00
  • cbab1585ac Accepting request 84442 from network OBS User buildservice-autocommit 2011-09-22 12:48:07 +00:00
  • d4fb62b687 Accepting request 84442 from network OBS User buildservice-autocommit 2011-09-22 12:48:07 +00:00
  • cb25971f02 Accepting request 84442 from network Sascha Peilicke 2011-09-22 12:48:06 +00:00
  • f43f5ca875 Accepting request 84442 from network Sascha Peilicke 2011-09-22 12:48:06 +00:00
  • 3f0e2115fc - change the url and service file to the new location at security.appspot.com/vsftpd Michal Vyskocil 2011-09-22 11:33:04 +00:00
  • f09b130781 - change the url and service file to the new location at security.appspot.com/vsftpd Michal Vyskocil 2011-09-22 11:33:04 +00:00
  • d66ce68241 Autobuild autoformatter for 62761 Sascha Peilicke 2011-02-25 10:57:21 +00:00
  • a9fc638c4d Autobuild autoformatter for 62761 Sascha Peilicke 2011-02-25 10:57:21 +00:00
  • 79e70eb1af Updating link to change in openSUSE:Factory/vsftpd revision 24.0 OBS User buildservice-autocommit 2011-02-25 10:57:21 +00:00
  • f1154d0d4a Updating link to change in openSUSE:Factory/vsftpd revision 24.0 OBS User buildservice-autocommit 2011-02-25 10:57:21 +00:00
  • 9441dff225 Accepting request 62761 from network Sascha Peilicke 2011-02-25 10:57:14 +00:00
  • 3aea47cfbf Accepting request 62761 from network Sascha Peilicke 2011-02-25 10:57:14 +00:00
  • 7d3d450ec2 Accepting request 62760 from home:elvigia:branches:network Cristian Rodríguez 2011-02-25 01:39:16 +00:00
  • 75fdda4cee Accepting request 62760 from home:elvigia:branches:network Cristian Rodríguez 2011-02-25 01:39:16 +00:00
  • 29011c873e Accepting request 48701 from network OBS User autobuild 2010-09-21 21:42:38 +00:00
  • dc6b27db0c Accepting request 48701 from network OBS User autobuild 2010-09-21 21:42:38 +00:00
  • d77971a489 Updating link to change in openSUSE:Factory/vsftpd revision 21.0 OBS User buildservice-autocommit 2010-09-21 21:42:38 +00:00
  • 7d463f67bb Updating link to change in openSUSE:Factory/vsftpd revision 21.0 OBS User buildservice-autocommit 2010-09-21 21:42:38 +00:00
  • 88cf4973ab Accepting request 48701 from network OBS User autobuild 2010-09-21 21:42:37 +00:00
  • 08187ec98a Accepting request 48701 from network OBS User autobuild 2010-09-21 21:42:37 +00:00
  • edd32a8418 Accepting request 48700 from home:elvigia:branches:network Cristian Rodríguez 2010-09-21 16:41:38 +00:00
  • da2bd3586a Accepting request 48700 from home:elvigia:branches:network Cristian Rodríguez 2010-09-21 16:41:38 +00:00
  • 1c5bc48896 Accepting request 45399 from network OBS User autobuild 2010-08-13 00:40:10 +00:00
  • a785e3fd44 Accepting request 45399 from network OBS User autobuild 2010-08-13 00:40:10 +00:00
  • 55a2a44d4c Updating link to change in openSUSE:Factory/vsftpd revision 20.0 OBS User buildservice-autocommit 2010-08-13 00:40:10 +00:00
  • 6bd1d3d172 Updating link to change in openSUSE:Factory/vsftpd revision 20.0 OBS User buildservice-autocommit 2010-08-13 00:40:10 +00:00
  • 0ea8a10129 Accepting request 45399 from network OBS User autobuild 2010-08-13 00:40:09 +00:00
  • 95a774417f Accepting request 45399 from network OBS User autobuild 2010-08-13 00:40:09 +00:00
  • 4961c8276d Accepting request 45245 from home:elvigia:branches:network Marcus Meissner 2010-08-11 15:31:04 +00:00
  • 6711064050 Accepting request 45245 from home:elvigia:branches:network Marcus Meissner 2010-08-11 15:31:04 +00:00
  • bd02c3a964 Accepting request 40900 from network OBS User autobuild 2010-05-31 16:20:59 +00:00
  • e92e50eee6 Accepting request 40900 from network OBS User autobuild 2010-05-31 16:20:59 +00:00
  • a367833e69 Accepting request 40900 from network OBS User autobuild 2010-05-31 16:20:58 +00:00
  • 6a49bbadae Accepting request 40900 from network OBS User autobuild 2010-05-31 16:20:58 +00:00
  • 06f3ce81a4 Accepting request 40625 from home:elvigia:branches:network Michal Seben 2010-05-31 09:16:46 +00:00
  • e781cb5038 Accepting request 40625 from home:elvigia:branches:network Michal Seben 2010-05-31 09:16:46 +00:00
  • 289d783226 Accepting request 38025 from network OBS User autobuild 2010-04-16 08:42:19 +00:00
  • 17983d75c1 Accepting request 38025 from network OBS User autobuild 2010-04-16 08:42:19 +00:00
  • 7b3e586791 Updating link to change in openSUSE:Factory/vsftpd revision 16.0 OBS User buildservice-autocommit 2010-04-16 08:42:19 +00:00
  • 93c069f18c Updating link to change in openSUSE:Factory/vsftpd revision 16.0 OBS User buildservice-autocommit 2010-04-16 08:42:19 +00:00
  • f24a260a84 Accepting request 38025 from network OBS User autobuild 2010-04-16 08:42:18 +00:00
  • bf9b739b25 Accepting request 38025 from network OBS User autobuild 2010-04-16 08:42:18 +00:00
  • 341f12808c * Change "File receive OK." to "Transfer complete." to placate some broken clients. Thanks Holger Kiehl <Holger.Kiehl@dwd.de>. * Fix erroneous "child died" upon FTP client connect, when under load. Awesome thanks to Holger Kiehl <Holger.Kiehl@dwd.de> for running diagnostic tests on his live server. * Boot the session if an overly long line is encountered. - see Changelog file for changes in 2.1.0, 2.1.1, 2.1.2 and 2.2.0 releases Michal Seben 2010-04-16 06:40:04 +00:00
  • f45f58705a * Change "File receive OK." to "Transfer complete." to placate some broken clients. Thanks Holger Kiehl <Holger.Kiehl@dwd.de>. * Fix erroneous "child died" upon FTP client connect, when under load. Awesome thanks to Holger Kiehl <Holger.Kiehl@dwd.de> for running diagnostic tests on his live server. * Boot the session if an overly long line is encountered. - see Changelog file for changes in 2.1.0, 2.1.1, 2.1.2 and 2.2.0 releases Michal Seben 2010-04-16 06:40:04 +00:00
  • 1862a11661 Accepting request 37575 from server:ftp Michal Seben 2010-04-09 15:17:29 +00:00
  • 3b63d1797c Accepting request 37575 from server:ftp Michal Seben 2010-04-09 15:17:29 +00:00
  • b19d8512cb Updating link to change in openSUSE:Factory/vsftpd revision 15.0 OBS User buildservice-autocommit 2010-03-18 15:34:31 +00:00
  • 1c8ec02267 Updating link to change in openSUSE:Factory/vsftpd revision 15.0 OBS User buildservice-autocommit 2010-03-18 15:34:31 +00:00
  • 709fdca097 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=15 OBS User autobuild 2010-03-18 15:34:31 +00:00
  • 134dcc6afe OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=15 OBS User autobuild 2010-03-18 15:34:31 +00:00
  • a990a427e6 Accepting request 30749 from network OBS User autobuild 2010-01-29 16:57:14 +00:00
  • e855c3a60d Accepting request 30749 from network OBS User autobuild 2010-01-29 16:57:14 +00:00
  • c8a6c3d09c Accepting request 30297 from network OBS User autobuild 2010-01-25 15:41:53 +00:00
  • 34f1e9daea Accepting request 30297 from network OBS User autobuild 2010-01-25 15:41:53 +00:00
  • 1021706daa OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=11 OBS User unknown 2008-09-15 13:56:22 +00:00
  • 310a05a9aa OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=11 OBS User unknown 2008-09-15 13:56:22 +00:00
  • 5d7e7a661d OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=10 OBS User unknown 2008-09-13 10:26:56 +00:00
  • 4f69a3749d OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=10 OBS User unknown 2008-09-13 10:26:56 +00:00
  • e6d7caf088 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=9 OBS User unknown 2008-06-25 22:23:20 +00:00
  • 3254cbb6f2 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=9 OBS User unknown 2008-06-25 22:23:20 +00:00
  • a1d374a745 OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=8 OBS User unknown 2008-05-04 23:14:37 +00:00