diff --git a/vsftpd-2.0.5.tar.bz2 b/vsftpd-2.0.5.tar.bz2 deleted file mode 100644 index 0adcbf1..0000000 --- a/vsftpd-2.0.5.tar.bz2 +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:4b2bc1126b4aa71fb00322646e88228b095e1ce57340c6a34d80fff4d1afb76e -size 116330 diff --git a/vsftpd-2.0.6.tar.bz2 b/vsftpd-2.0.6.tar.bz2 new file mode 100644 index 0000000..6b2dab1 --- /dev/null +++ b/vsftpd-2.0.6.tar.bz2 @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:08a00c726f74f68c5682d826dcb3f038c307ffef59ab88753e3ac0c462b08cd8 +size 118231 diff --git a/vsftpd.changes b/vsftpd.changes index c9e27fe..6463627 100644 --- a/vsftpd.changes +++ b/vsftpd.changes @@ -1,3 +1,41 @@ +------------------------------------------------------------------- +Tue Mar 11 20:56:47 CET 2008 - crrodriguez@suse.de + +- version 2.0.6 +- Fix delay_failed_login typo. Oops. +- Patch the getcwd and readlink sysutil helpers to reflect that they wouldn't +like a 0-sized buf. No caller is affected. Thanks Ilja van Sprundel +. +- Allow a (fake) reauth as the same user as the logged in user. Should resolve +.NET related report from Sabo Jim . +- Tweak from Lucian Adrian Grijincu to take +unnecessary port calculations out of a loop. +- Fix byte I/O accounting in the error path of do_file_send_rwloop, thanks to +. +- Don't log FireFox's attempts to RETR directories! Reported by +Nixdorf, Tim . +- Fix STOU sending the same 150 status line twice - oops! Reported by +. +- Fix xferlog format for virtual (guest) users, reported by Andy Fletcher +. +- Fix bug with empty user list file and userlist_deny=NO. Reported by +Marcin Zawadzki/GlobalVanet.com . +- Pretend we have proper UTF8 support and respond positively to OPTS UTF8 ON. +Thanks Stanislav Maslovski . +- Add control over the file permissions used in the chown()ing of anonymous +uploads: chown_upload_mode (default 0600 as before). Suggestion from +An Pham . +- Do a retry getting the active ftp socket in vsf_privop_get_ftp_port_sock(); +should help buggy Solaris systems. Reported by Michael Masterson +. +- Add debug_ssl option to dump out some SSL connection details. +- Use code 522, not 521, to indicate that the server requires an encrypted +data connection. Still does not seem to coax lftp to retry :( +- Recognize OPTS pre-login. +- A whole ton of SSL improvements, including ability to force requirement of +a client cert; data and control channel client cert cross checking. Ability +to require fully valid / authentic client certs. No cert-based auth yet. + ------------------------------------------------------------------- Tue Mar 27 14:45:11 CEST 2007 - mskibbe@suse.de diff --git a/vsftpd.init b/vsftpd.init index e895d34..a41637b 100644 --- a/vsftpd.init +++ b/vsftpd.init @@ -28,6 +28,7 @@ # Required-Stop: $syslog $remote_fs # Default-Start: 3 5 # Default-Stop: 0 1 2 6 +# Description: very secure ftp daemon # Short-Description: very secure ftp daemon ### END INIT INFO # Note on runlevels: diff --git a/vsftpd.spec b/vsftpd.spec index 3512760..dcdeb66 100644 --- a/vsftpd.spec +++ b/vsftpd.spec @@ -1,7 +1,7 @@ # -# spec file for package vsftpd (Version 2.0.5) +# spec file for package vsftpd (Version 2.0.6) # -# Copyright (c) 2007 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2008 SUSE LINUX Products GmbH, Nuernberg, Germany. # This file and all modifications and additions to the pristine # package are under the same license as the package itself. # @@ -10,6 +10,7 @@ # norootforbuild + Name: vsftpd BuildRequires: openssl-devel pam-devel %if 0%{?suse_version} < 1001 @@ -17,12 +18,12 @@ BuildRequires: libcap %else BuildRequires: libcap-devel %endif -Version: 2.0.5 -Release: 41 +Version: 2.0.6 +Release: 1 Summary: Very Secure FTP Daemon - Written from Scratch -License: GNU General Public License (GPL) +License: GPL v2 or later Group: Productivity/Networking/Ftp/Servers -URL: http://vsftpd.beasts.org +Url: http://vsftpd.beasts.org Source: %name-%version.tar.bz2 Source1: %name.pam Source2: %name.logrotate @@ -36,9 +37,9 @@ Patch2: %name-2.0.4-nowarn.patch Patch3: %name-2.0.4-xinetd.diff Patch4: %name-2.0.4-enable-ssl.patch Patch5: %name-2.0.4-dmapi.patch -Patch6: %name-%{version}-vuser.patch -Patch7: %name-%{version}-enable-debuginfo.patch -Patch8: %name-%{version}-utf8-log-names.patch +Patch6: %name-2.0.5-vuser.patch +Patch7: %name-2.0.5-enable-debuginfo.patch +Patch8: %name-2.0.5-utf8-log-names.patch BuildRoot: %{_tmppath}/%{name}-%{version}-build Provides: ftp-server PreReq: %insserv_prereq @@ -125,50 +126,85 @@ rm -rf $RPM_BUILD_ROOT %{_sysconfdir}/sysconfig/SuSEfirewall2.d/services/%{name} %changelog -* Tue Mar 27 2007 - mskibbe@suse.de +* Tue Mar 11 2008 crrodriguez@suse.de +- version 2.0.6 +- Fix delay_failed_login typo. Oops. +- Patch the getcwd and readlink sysutil helpers to reflect that they wouldn't + like a 0-sized buf. No caller is affected. Thanks Ilja van Sprundel + . +- Allow a (fake) reauth as the same user as the logged in user. Should resolve + .NET related report from Sabo Jim . +- Tweak from Lucian Adrian Grijincu to take + unnecessary port calculations out of a loop. +- Fix byte I/O accounting in the error path of do_file_send_rwloop, thanks to + . +- Don't log FireFox's attempts to RETR directories! Reported by + Nixdorf, Tim . +- Fix STOU sending the same 150 status line twice - oops! Reported by + . +- Fix xferlog format for virtual (guest) users, reported by Andy Fletcher + . +- Fix bug with empty user list file and userlist_deny=NO. Reported by + Marcin Zawadzki/GlobalVanet.com . +- Pretend we have proper UTF8 support and respond positively to OPTS UTF8 ON. + Thanks Stanislav Maslovski . +- Add control over the file permissions used in the chown()ing of anonymous + uploads: chown_upload_mode (default 0600 as before). Suggestion from + An Pham . +- Do a retry getting the active ftp socket in vsf_privop_get_ftp_port_sock(); + should help buggy Solaris systems. Reported by Michael Masterson + . +- Add debug_ssl option to dump out some SSL connection details. +- Use code 522, not 521, to indicate that the server requires an encrypted + data connection. Still does not seem to coax lftp to retry :( +- Recognize OPTS pre-login. +- A whole ton of SSL improvements, including ability to force requirement of + a client cert; data and control channel client cert cross checking. Ability + to require fully valid / authentic client certs. No cert-based auth yet. +* Tue Mar 27 2007 mskibbe@suse.de - change path to firewall script (#247352) -* Fri Mar 02 2007 - mskibbe@suse.de +* Fri Mar 02 2007 mskibbe@suse.de - change path to firewall script (#247352) -* Wed Feb 28 2007 - mskibbe@suse.de +* Wed Feb 28 2007 mskibbe@suse.de - vsftpd - Support for FATE #300687: Ports for SuSEfirewall added via packages (#246932) -* Mon Jan 15 2007 - mskibbe@suse.de +* Mon Jan 15 2007 mskibbe@suse.de - fix cryptic symbol in package - description - build against libcap on suse < 10.1 -* Fri Jan 12 2007 - mskibbe@suse.de +* Fri Jan 12 2007 mskibbe@suse.de - vsftp could not log any file name other then ascii (#229320) -* Thu Jan 11 2007 - mskibbe@suse.de +* Thu Jan 11 2007 mskibbe@suse.de - change path to xml service document (fate #301713) -* Mon Jan 08 2007 - mskibbe@suse.de +* Mon Jan 08 2007 mskibbe@suse.de - fix Bug #230220 - vsftp no debuginfo -* Mon Jan 08 2007 - mskibbe@suse.de +* Mon Jan 08 2007 mskibbe@suse.de - xml document should readable to all (fate #301713) -* Wed Dec 06 2006 - mskibbe@suse.de +* Wed Dec 06 2006 mskibbe@suse.de - add service xml document (fate #301713 ) -* Mon Oct 23 2006 - mskibbe@suse.de +* Mon Oct 23 2006 mskibbe@suse.de - fix Bug 213894 - vsftpd and pam -* Mon Sep 04 2006 - kukuk@suse.de +* Mon Sep 04 2006 kukuk@suse.de - Include common PAM config files, add pam_loginuid.so -* Fri Jul 14 2006 - mskibbe@suse.de +* Fri Jul 14 2006 mskibbe@suse.de - udpate to version 2.0.5 which o IE should now show the login dialog again o configurable login attempt limits and delays were added o a bad intereaction with DMAPI filesystems was fixed and chained certs should now work. -* Fri May 26 2006 - schwab@suse.de +* Fri May 26 2006 schwab@suse.de - Don't strip binaries. -* Thu Apr 20 2006 - hvogel@suse.de +* Thu Apr 20 2006 hvogel@suse.de - revert the rename to vsftp for the xinetd config file. chkconfig knows on for init and xinetd. So this wasnt a bug but a misusage of chkconfig -* Thu Apr 20 2006 - hvogel@suse.de +* Thu Apr 20 2006 hvogel@suse.de - add support for DMAPI filesystems [#167632] -* Wed Apr 19 2006 - hvogel@suse.de +* Wed Apr 19 2006 hvogel@suse.de - rename xinetd config from vsftpd to vsftp to avoid name clashes in chkconfig [#165745] -* Thu Feb 16 2006 - hvogel@suse.de +* Thu Feb 16 2006 hvogel@suse.de - enable ssl for real [#151453] -* Mon Feb 06 2006 - hvogel@suse.de +* Mon Feb 06 2006 hvogel@suse.de - The switch to standalone should not happen in update. Installed xinetd config file again. The configuration file is marked as noreplace anyway so if you are updating you will @@ -177,12 +213,12 @@ rm -rf $RPM_BUILD_ROOT for new installations. [#148201] - redirect standalone parent output to /var/log/rcvsftp.log so the init script can return properly. -* Wed Jan 25 2006 - mls@suse.de +* Wed Jan 25 2006 mls@suse.de - converted neededforbuild to BuildRequires -* Fri Jan 13 2006 - hvogel@suse.de +* Fri Jan 13 2006 hvogel@suse.de - Make use of Stack Protector - fix some uninitialized variables -* Wed Jan 11 2006 - hvogel@suse.de +* Wed Jan 11 2006 hvogel@suse.de - Update to version 2.0.4 including: o Add explicit "This FTP server does not allow anonymous logins" message. @@ -196,19 +232,19 @@ rm -rf $RPM_BUILD_ROOT DNS resolved once at startup. o Apply patch to fix timezone issues (caused by chroot() interacting badly with newer glibc versions). -* Wed Sep 28 2005 - mmj@suse.de +* Wed Sep 28 2005 mmj@suse.de - Add init script, and make it standalone -* Sun Sep 18 2005 - kukuk@suse.de +* Sun Sep 18 2005 kukuk@suse.de - Add libcap-devel to nfb -* Tue Aug 09 2005 - mmj@suse.de +* Tue Aug 09 2005 mmj@suse.de - Document that /etc/xinet.d/vsftpd is for xinetd conf [#102953] -* Mon Aug 08 2005 - uli@suse.de +* Mon Aug 08 2005 uli@suse.de - build with -fPIE, not -fpie (fixes s390x) -* Mon Jun 27 2005 - ro@suse.de +* Mon Jun 27 2005 ro@suse.de - use libcap -* Fri Jun 17 2005 - mmj@suse.de +* Fri Jun 17 2005 mmj@suse.de - Compile with -fpie, link with -pie -* Tue Apr 19 2005 - mmj@suse.de +* Tue Apr 19 2005 mmj@suse.de - Update to 2.0.3 including: o Document what regex expressions are supported in the man page. o New settings rsa_private_key_file and dsa_private_key_file to @@ -237,7 +273,7 @@ rm -rf $RPM_BUILD_ROOT passwords as credentials). o Use SSL BIO callbacks to fix data connection timeout checks; the checks weren't all occurring promply. -* Thu Mar 03 2005 - mmj@suse.de +* Thu Mar 03 2005 mmj@suse.de - Update to 2.0.2 including: o Emit data transfer status messages (success / failure) after flushing and waiting for the full data transfer to @@ -258,10 +294,10 @@ rm -rf $RPM_BUILD_ROOT o Note that the SSL / bandwidth limiter bug fixed a much more serious bug: SSL data connection dropouts after data_connection_timeout seconds. -* Fri Feb 18 2005 - mmj@suse.de +* Fri Feb 18 2005 mmj@suse.de - Glibc doesn't cache the timezone as much as it used to, so export the TZ variable after doing chroot. [#49878] -* Thu Aug 12 2004 - mmj@suse.de +* Thu Aug 12 2004 mmj@suse.de - Update to 2.0.1 including: o Add -lcrypto for the SSL build; needed for some systems o Oops; fix session bale out if an empty length password is given. @@ -270,7 +306,7 @@ rm -rf $RPM_BUILD_ROOT o Clarify licensing: I allow linking of my GPL software with the OpenSSL libraries. o Fix build where PAM build is enabled but PAM headers are missing. -* Fri Jul 02 2004 - mmj@suse.de +* Fri Jul 02 2004 mmj@suse.de - Update to 2.0.0 including: o Improve logging (log deletes, renames, chmods, etc. as requested by users). @@ -303,9 +339,9 @@ rm -rf $RPM_BUILD_ROOT o Add documentation for new SSL options to vsftpd.conf.5. o Add support for CWD ~ o Fix compile warnings. -* Sun May 30 2004 - mmj@suse.de +* Sun May 30 2004 mmj@suse.de - Add logrotate file [#41432] -* Tue Apr 27 2004 - mmj@suse.de +* Tue Apr 27 2004 mmj@suse.de - Update to 1.2.2 including: o Fix nasty issue resulting in listener instability under extreme load (root cause was re-entering malloc/free). @@ -316,69 +352,69 @@ rm -rf $RPM_BUILD_ROOT doing. o For above run-as-launching-user support: make CDUP re-use CWD code so that deny_file of *..* is useful. -* Mon Jan 26 2004 - hvogel@suse.de +* Mon Jan 26 2004 hvogel@suse.de - reworked the log part of the conf file patch. Enabled syslog as default log destination, clarify xferlog settings. -* Mon Jan 19 2004 - mmj@suse.de +* Mon Jan 19 2004 mmj@suse.de - -D_LARGEFILE_SOURCE to get LFS support. Also make sure the offset bits are set correct. -* Fri Jan 16 2004 - kukuk@suse.de +* Fri Jan 16 2004 kukuk@suse.de - Add pam-devel to neededforbuild -* Thu Nov 13 2003 - mmj@suse.de +* Thu Nov 13 2003 mmj@suse.de - Update to 1.2.1 -* Wed Oct 15 2003 - mmj@suse.de +* Wed Oct 15 2003 mmj@suse.de - Don't build as root -* Mon Jul 28 2003 - mmj@suse.de +* Mon Jul 28 2003 mmj@suse.de - Add EXAMPLE/ and FAQ - Don't strip explicitly -* Fri May 30 2003 - mmj@suse.de +* Fri May 30 2003 mmj@suse.de - Update to vsftpd-1.2.0 including: · IPv6 support, so drop our patch · Many bugfixes and tunings · Build fixes -* Thu Mar 06 2003 - mmj@suse.de +* Thu Mar 06 2003 mmj@suse.de - Fix the xinetd conf file [#24774] -* Fri Feb 07 2003 - kukuk@suse.de +* Fri Feb 07 2003 kukuk@suse.de - Use pam_unix2.so instead of pam_unix.so -* Fri Jan 24 2003 - mmj@suse.de +* Fri Jan 24 2003 mmj@suse.de - Correct xinetd conffile -* Tue Jan 14 2003 - mmj@suse.de +* Tue Jan 14 2003 mmj@suse.de - Install xinetd.d/vsftpd -* Sat Oct 26 2002 - mmj@suse.de +* Sat Oct 26 2002 mmj@suse.de - Use better configuration defaults, thanks henne. -* Fri Oct 25 2002 - mmj@suse.de +* Fri Oct 25 2002 mmj@suse.de - Add $RPM_OPT_FLAGS to CFLAGS when building -* Thu Oct 24 2002 - mmj@suse.de +* Thu Oct 24 2002 mmj@suse.de - Update to 1.1.2 including: o Addition of per-IP connection limits in standalone mode. o Add logging of refused connect due to global or IP connection limits. o Make connection limit exceeded messages nonblocking. o Don't exit the listener if fork fails. -* Tue Oct 08 2002 - mmj@suse.de +* Tue Oct 08 2002 mmj@suse.de - Update to 1.1.1 -* Fri Aug 02 2002 - mmj@suse.de +* Fri Aug 02 2002 mmj@suse.de - Update to 1.1.0 -* Tue Jul 09 2002 - okir@suse.de +* Tue Jul 09 2002 okir@suse.de - Added a patch to get rid of lots of warnings caused by -Wshadow - Added a patch to implement IPv6 support -* Tue Apr 30 2002 - mmj@suse.de +* Tue Apr 30 2002 mmj@suse.de - And now without detection of pam in /lib/libpam.so.0, which is bogus. -* Sun Feb 17 2002 - mmj@suse.de +* Sun Feb 17 2002 mmj@suse.de - Added a patch to the vsftpd library detection function to make it build with /usr/lib64. Fixes build on S/390. -* Tue Feb 12 2002 - mmj@suse.de +* Tue Feb 12 2002 mmj@suse.de - Remove Requires: ftpdir -* Mon Feb 04 2002 - choeger@suse.de +* Mon Feb 04 2002 choeger@suse.de - do not set e(x)ecute bit on textfiles -* Fri Feb 01 2002 - choeger@suse.de +* Fri Feb 01 2002 choeger@suse.de - declare config file as %%config(noreplace) -* Thu Jan 17 2002 - mmj@suse.de +* Thu Jan 17 2002 mmj@suse.de - Update to version 1.0.1 -* Fri Nov 30 2001 - mmj@suse.de +* Fri Nov 30 2001 mmj@suse.de - Use /etc/pam.d/vsftpd -* Tue Nov 13 2001 - mmj@suse.de +* Tue Nov 13 2001 mmj@suse.de - Updated to version 1.0.0 -* Mon Oct 22 2001 - mmj@suse.de +* Mon Oct 22 2001 mmj@suse.de - Initial package