From cc0b3b48059c6e3a07292babc4323d5f1232af91ee4aae6b0880e0ea61c82579 Mon Sep 17 00:00:00 2001 From: Michal Vyskocil Date: Mon, 22 Oct 2012 13:40:00 +0000 Subject: [PATCH] - update to 3.0.2 (bnc#786024) * Fix some seccomp related build errors on certain CentOS and Debian versions. * Seccomp filter sandbox: missing munmap() -- oops. Did you know that qsort() opens and maps /proc/meminfo but only for larger item counts? * Seccomp filter sandbox: deny socket() gracefully for text_userdb_names. * Fix various NULL crashes with nonsensical config settings. Noted by Tianyin Xu . * Force cast to unsigned char in is* char functions. * Fix harmless integer issues in strlist.c. * Started on a (possibly ill-advised?) crusade to compile cleanly with Wconversion. Decided to suspend the effort half-way through. * One more seccomp policy fix: mremap (denied). * Support STOU with no filename, uses a STOU. prefix. OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=45 --- vsftpd-3.0.0.tar.gz | 3 --- vsftpd-3.0.2.tar.gz | 3 +++ vsftpd-3.0.2.tar.gz.asc | 7 +++++++ vsftpd.changes | 17 +++++++++++++++++ vsftpd.spec | 5 +++-- 5 files changed, 30 insertions(+), 5 deletions(-) delete mode 100644 vsftpd-3.0.0.tar.gz create mode 100644 vsftpd-3.0.2.tar.gz create mode 100644 vsftpd-3.0.2.tar.gz.asc diff --git a/vsftpd-3.0.0.tar.gz b/vsftpd-3.0.0.tar.gz deleted file mode 100644 index 3a5b878..0000000 --- a/vsftpd-3.0.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:ef70205dcd0c7f03b008b9578fb44c0cbe31e66daab8cfafb9904747c17fc2a8 -size 193166 diff --git a/vsftpd-3.0.2.tar.gz b/vsftpd-3.0.2.tar.gz new file mode 100644 index 0000000..5c01dab --- /dev/null +++ b/vsftpd-3.0.2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:be46f0e2c5528fe021fafc8dab1ecfea0c1f183063a06977f8537fcd0b195e56 +size 192808 diff --git a/vsftpd-3.0.2.tar.gz.asc b/vsftpd-3.0.2.tar.gz.asc new file mode 100644 index 0000000..669ed96 --- /dev/null +++ b/vsftpd-3.0.2.tar.gz.asc @@ -0,0 +1,7 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v1.4.11 (GNU/Linux) + +iEYEABECAAYFAlBYSB8ACgkQqmLsRjwOdRwyzACdEOSXJgLVmiIZHZ/dFJfchX1R +Z3cAnjkRO3++zgZuG+CQ+FJx745IlazL +=UTJs +-----END PGP SIGNATURE----- diff --git a/vsftpd.changes b/vsftpd.changes index 88ef71c..3da391b 100644 --- a/vsftpd.changes +++ b/vsftpd.changes @@ -1,3 +1,20 @@ +------------------------------------------------------------------- +Mon Oct 22 13:38:57 UTC 2012 - mvyskocil@suse.com + +- update to 3.0.2 (bnc#786024) + * Fix some seccomp related build errors on certain CentOS and Debian versions. + * Seccomp filter sandbox: missing munmap() -- oops. Did you know that qsort() + opens and maps /proc/meminfo but only for larger item counts? + * Seccomp filter sandbox: deny socket() gracefully for text_userdb_names. + * Fix various NULL crashes with nonsensical config settings. Noted by Tianyin + Xu . + * Force cast to unsigned char in is* char functions. + * Fix harmless integer issues in strlist.c. + * Started on a (possibly ill-advised?) crusade to compile cleanly with + Wconversion. Decided to suspend the effort half-way through. + * One more seccomp policy fix: mremap (denied). + * Support STOU with no filename, uses a STOU. prefix. + ------------------------------------------------------------------- Fri Aug 24 07:07:55 UTC 2012 - mvyskocil@suse.cz diff --git a/vsftpd.spec b/vsftpd.spec index 2e27125..00c183c 100644 --- a/vsftpd.spec +++ b/vsftpd.spec @@ -27,13 +27,13 @@ BuildRequires: libcap-devel %if 0%{?suse_version} > 1140 BuildRequires: systemd %endif -Version: 3.0.0 +Version: 3.0.2 Release: 0 Summary: Very Secure FTP Daemon - Written from Scratch License: GPL-2.0+ Group: Productivity/Networking/Ftp/Servers Url: https://security.appspot.com/vsftpd.html -Source: %name-%version.tar.gz +Source0: https://security.appspot.com/downloads/%{name}-%{version}.tar.gz Source1: %name.pam Source2: %name.logrotate Source3: %name.init @@ -41,6 +41,7 @@ Source4: README.SUSE Source5: %name.xml Source6: %name.firewall Source7: vsftpd.service +Source1000: https://security.appspot.com/downloads/%{name}-%{version}.tar.gz.asc Patch1: vsftpd-2.0.4-lib64.diff Patch3: vsftpd-2.0.4-xinetd.diff Patch4: vsftpd-2.0.4-enable-ssl.patch