- Update to version 0.7.5 [bsc#1190522, CVE-2021-41054]
* text files: mark/convert all textfiles to UTF-8
* fix some compiler warnings
* fix buffer overflow in atftpd (CVE-2021-41054)
* test.sh: check for root no longer necessary
* tftpd.c: Only drop privs if requested or running as root + check for failure
* fix invalid read of 1 byte in tftp_send_request.
* Check return value of fseek(), abort if != 0
* options.c: Proper fix for the read-past-end-of-array
* configure.ac: Add -std=gnu89 if gcc/clang is detected
* tftpd.c: Fix memleak if thread spawning fails
* atftp: Check return value of fgets, buffer might be uninitialized on NULL
* Fix check for argz support (HAVE_ARGZ -> HAVE_ARGZ_H)
* replace LICENSE with current version
* Remove patches fixed upstream:
- atftp-0.7-sorcerers_apprentice.patch
- atftp-0.7-server_receive_race.patch
- atftp-0.7-ack_heuristic.patch
* Rebase patches:
- atftp-drop_privileges_non-daemon.patch
- atftp-0.7-default_dir_man.patch
- atftp-0.7-default_user_man.patch
OBS-URL: https://build.opensuse.org/request/show/919255
OBS-URL: https://build.opensuse.org/package/show/network/atftp?expand=0&rev=51
- create capabilites provided by both tftp and atftp
(bnc#801481 or bnc#725378)
- change ownership of /srv/tftpboot, because atftpd running as
tftp:tftp can't write to that directory
- create pid directory on service start
- manpage changes:
* substitute /tftpboot with /srv/tftpboot
* default user is now tftp:tftp
* added patches:
atftp-0.7-default_user_man.patch
atftp-0.7-default_dir_man.patch
- use Vladimir Nadvornik's heuristic for packet retransmission
by default (see bnc#774376)
The RFC1350 compliant behaviour stays optional.
(added atftp-0.7-ack_heuristic.patch)
- merged the two sorcerer's apprentice syndrome patches to one
(removed atftp-0.7-prevent-sas.patch)
OBS-URL: https://build.opensuse.org/request/show/155400
OBS-URL: https://build.opensuse.org/package/show/network/atftp?expand=0&rev=18
