proftpd-devel-1.3.8b-150600.13.15.1 < > , , ip9|BD#,ن3gŶ~F - w:J)M0n7{ j}*Ђܮn$ù
q~N yi^?a~p { [)Q
jtd0?{fO $?
(]x*\SN\2 X @":U > > u ? t d & D x | ) / 8 t t t
t t # t
$ t % t ($ t *h * t ,` , , -/ ( -S 8 -\ * 9 . * : 1p * F b G b t H d| t I fL t X f Y f \ g t ] h t ^ l b mL c m d nw e n| f n l n u n t v pd w p t x r t y t z t t t t t C proftpd-devel 1.3.8b 150600.13.15.1 Development files for ProFTPD This package contains Development files for ProFTPD iibs-power9-21 SUSE Linux Enterprise 15 SUSE LLC GPL-2.0-or-later https://www.suse.com/ Development/Libraries/C and C++ http://www.proftpd.org/ linux ppc64le * +
s
[ ] o l _
y I
A JZ # ~ 6 ! w
1 ! o X s ' 0 _
e : j Q - B w
Q
8
> 3 *
5 % - >Q I Q D N ~ a -
* u C F ^ A큤A큤 iiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiii ffd38015d03de51ccc4f620af0a1619d308bda4c63705a6910faffa5744c7c5c fba407442242060e9e29fe400a46ef62b3ca41cc85fa10e8b496b7dbc817fee4 85dd768a6b9a29c5cb0eec0b07e37cc9b09b780f17b6f86a75778c6eaf881234 90e6411dd72991a82aa834de10a5dbec48c640cc3ac92e9c0201e728011a1363 476bbd88bafd775203516f772987ce77425db3473c7bc67cfb423c56c5f46bf0 52761cb052a569b031863f91237375235cc7e1ff1a486e43585210ea32690a3d 061440e49970954a81946a510bf6061a15e7cb0e4c990dacf9539533f68e1173 768548c9482d4dd631d2453d1a31a5a73f475412fc989eda9ee9c9186379d231 eee4a625bf947235d40846c9b49ccd459cc67403abc8eb9beafb8ef273fd9951 3be486dbee3826a27f837b911d8572cce8562b351bc93b8d85f447a532264677 4173546386b6a23e6a1ce37f702400b0f98d05a2e3b15e5a05ebf178917139e9 84cec5fc5f0a670547689e38bdae46dc1898e00ebc384c7a2e47b027856d6994 9f5331a6f55bcc92f69a1a1237d9d2e890206d7d0d3b8f3b6e30c4b4883a4f4a ee353a223b39de280f9cb37e4b8104c2a59f61bee89ef98f2c435ccdce57abff c6c2d0e41078c76f858c44a29000a1d80c6bac7e15122c4eed3da347a32f076b fb2f9590e06fa7d45e2f6ca01e5c80b47f5f460a49c740e40084c1c3fa799f74 4fac7e70410244b11da4adc13c0cea4522e6b6535485f56a472834203b0edd60 22070cb8d95bbfdd17c429ceb849bdab88718ba9a8a9fc44aa2123c6824e8dbd bffc2d64c8173b066fc42af51882232b71fff452bfa29ad6261478315e6fb80f 1918128c15a10bd258c15ceae41afbfc1f420d63a3e53f95a14e83dba947b8c3 9e203612d98996a64fe246b16080dcb8532cde4b475e2c87800ebbf91d9612e5 0459740edc17e9bb6132d65d5a3e61f240fef727724e618827eb53af452b9f06 9752b67f3ce51742636601b5cf0f4f7b462db6cc908c18ff700f15952673a8b4 e7366a266fcef01acbbf999114c3217a2c86534fef008e3f595e04ecb7f66f12 e7fcad049a8d9f62c29287bd431deaef22e0f93fe3c775d809fc4b4331ca83b4 14146ec5879ba5a05dfeb785ee4199d79ec3eacb9971fc406e593414ff45f887 6c5124f0512327d0f45a38a726091d0994b9eddddbedbb6a6bbe35391a1f1f63 6508e78f8074c1db2528b897a5c3ae0d21f8c8fc49f0cb0e4c855588894815f5 7841aaf14386aca37cb14131595a100edf545feaef47780c03dbcc2adc90d9c9 8578c1dcaa62f43edf3a20231be0e02bcb610cb38ea1c3e7a2bb565f3d68ccbd 8528b2d48fab5e1dd52da00a7707992e79fa036e0c1d39838c62d0e1fab1b948 8b9c21006073547d4c5cc223aff50d858784c37b0d6c6737e987d33c2f54ed89 25723e04fc825a4d73d41f04fa865a4e41a28958017265158d615dee70ab7784 7cfe741bcc7b012f3910c60a97a7f7118a62c5e2c9a10b5176efbf8f0be60d1c 5c2ffaad0e81340d0688a05f4d72ef3a08b2f27886d76096005383cc59d95ce1 2fb51e501439b1fc23663a4e72171bfaa0587a93f7388992e6f950a7a89c2d2b a7c8b78f66a3972790458012274022e10a2a5d642a79e1cbfc41fb5e5b35e860 3ca75ea9b6143b67535ad33e4aa91c02000f2e2d7fb90be508a31cbc3ab72de6 ec9a53b287f15cc6538c88d1ffaab40aa12d6c5172ebfcaa4f444c85d5f3d2b5 053a86d843cf4b1fb17d96a1d1119427a4a68fc2fad87f518343c3e6b22b052c f1fe87484847f7207f135cc003516b9f19ac15958ee6ab5e78a647e49b69daf4 d27f3de67fadb1a690a99830293228443ed0e2d5cb6d3bc03b705ef8bcce3810 d579f6042b58cc7caaa1e9531e552efeaa35eef64760d7065bf7650970e4b681 9d522ed9942f998428655b9de160b5a47aebf74f0c1024ef807b740b14d03cef b0fa34e741a14deb37bbf8fc4d08525f8180ee9158700a9e9fefd8dcb944476c b6ca56cfad1e0faebb69fd163954d5db7f7c01e64bcca775375e238b33c46fc8 0ee6f7f5fe29b397b2f87b9f1e681e7b455ca15413264040d88e5c102a803a25 021175a8db80922798968704694b7b5d7fa64aee378e7bb146c93b76c8a7777d 06a80d939e472b7c6ad52dc759c728962abd9b41f70bdc8d0eb973d22eebfe65 7fcae623a0d8c9f108092b3951313e31ceb2498dbb614defd2868a465aa3511f 066f2324cba6677d2a736d65bcb41e07f8618c1e3ebd2d22131e8cd087e154f9 70645083e6a01ef195002af2a3ff5dcb08a278a56d13ebcd7ab0286e8ba300ba 989d578938bec4b13bfb4f52ec29bad01c474ae8d5dfe7a69e12e1d245c7c888 5d81dc6475b9619247fbac71bceb773ef30e240762c4f8433f9ac795d5bc8ee5 2fc2a2c4177019f2f2de049aacbab995d1542b063e39b8e0907ce643ab742cd4 6388570715cc1570546487be1981f4fa0f2eb195a1683f348fa1e51d1f960982 61608101ca9fea72782ef25d9c55ac8863f5cbf6009f5bbe44bfd04072738dc1 e4bb8641f7abaf4704ebb48af415efe8e5550eb28b483bfa2f5bcf2a90dd75a0 fcd1ee93f48759498fef72c6beb6e2a401d3e799036a35dbd36d8875ff0ae397 b6927593e20f9a885f2ec6a1b20788707d250c0e9c14e432709ad0d242171d6c 1346cd1c0bcda715825a61662db624dfca5cbd3cb4118a602a4f261a1f1b76ab d78145227860bf980d1e55f500d48f8f38960afd70f7df25881666f88243aaf0 782365c180c98c0d7ab6f1b8fbecc790ff0615a86de5fc007a1245dc31ab2d5d 6c0de90c176f0af5b5c88d8dfdbae321d6c93718f7a8d560b26ccf9af68909c2 f01091026e5d2516f81d0d5cfbbef8953b027ee706dce2c0dc04a6a31a6c62cf 5d06d78f4bad3d8774b0a2ff11f0f4db7edf69ba27bff50fb19011d208e666d5 daa1f02e7b1e89cef6cc5630ff7c31ef1df6c75f00f695c6bd82c6e9540151ff f69c57bb53b74e019b14645bab3b34db398383e623cec6c66d702e5aac9391ea 2dfcb6f51d9194bdc434e0262ed18c8e510b8dc831140206d027b780c58702cb cdabf050bf331e7684c350e3e02f2caacd2a619042f06a23a64553799d856d83 1d06a4b8e862e4025a67612d7f7d8bcb6d1e6e47dae083a577223e5ef3783f18 ded43953b02d0ce6ad6c485bfada62f2b0004b2e1119f4dc5ad6a77d7ee6f6ed 1f79533544c71e08e8d01b4ad91f0944dee7c6a6c49f7bf9df869116850cd8bf 92a2e67f5231a52efeedbebb1592ca2c63586d6cb2b49aa287d2bea838c24dca 8bc8456b89832c14f288b47a751aaac3fdd367a4d0b2fd6f53ef65f61c1d868d d01b8a49a919b44c6c9ed61654ee6186d7ada1bafd3f1d8187379f933decafaa 50660170f124af88af8379c549c94a7b27156159308d49954404ea2c11f7f789 2b3854b3387a10020d8a6dd11fa12d5d749caf2493719c38f5f4ce1295a1dfce d52b182fbffea4784d2ca4d2d717c1c178f95f8119e86950500b3863e3f4ba23 15bff6fdd478d692e940979f6cb0d3466b051b9b474b56d5415c7d066efced84 bcbad306c4ccc2ac8680a3975d80e50661a1c806fad81b70c660354b7c811718 d5e9d00decc603b4865ac767898297d892fe0b8e6dc1fbf033d93484de97173d 1dc372025b36a4073b369254d034a59f448fd5f9fd1552a49b95db3176b35155 6977d56e13d69d8cd96669dae37f22b44d707eaac4af9d846341ad099fe8015f f0178baf824530a2541276ecc3dd49fe1ed55ef975f72a92ef5f6e1bc195a0ea 439d53572b5bbdeb816f69e0ae340f5f4ee7b6ed9230f187c5ea329d9c7972a3 e8fa20ab81a2225a7861d2ee0ff91b9bea6c8f3921fb5da0630fc479b2497b9c 1f0919ee60e0ace0a3340421e9f9bfb7a05902fb18a8f151ee11a608273d7262 605b18c8f7b5a3de31a159259341ed05418a542b5ec4b805f3411d6e60099ac5 706e2a3d78c7ddd9547557c15b0319a4b659d675b02fc39ab9ecce6ab90bee8b 74ba3bc496284d7e349c6c7535f4ad5316f6c8ee928434fa12e432fc8260128f 52a29023a6017db30e6e1a8ebb30617f241442651835f7c202810d86ba5ae00c a56e3793fd54c1371d2ac093c235d81f17ab7d507bb1eb14cff5fef09a144fda 2063a9cf30e8ac6362d4899c0f3a83ab1465b381cfb8058b2d099724113597ea 1096aa3a5a4b4d78c92d8c85ee772558c639a563d0990f5787c4d7177d9996f4 7bea682b7b1e9bb63fba93661f90d0b1fe9f2b6828ddca9275a0113fe8a23061 fe238fcecd09091c39b0efc70cd3b7caf3c5311bad1fcf66f806304127cb8236 f05080a0447e39c13f24c2761a06c897b16fc944c34826655efddb5ceeb38dfb b3272be63de23ed412693af88c5868f2b363f973ef97dab3ed50364a2f437c21 0eaded0d6000587fe69952ef5b55bacac97ffe0f4202cfa58f107f6c581d8d5f ac4afd4ff416ef3c60fca4c989b77080e3eeb032e660d3d8ddc8b253bb3eb02a 5f98a3f89cb0c0522be7c6a303b951e508d63c5ade65d28036aaaa966bf52194 61d006ace8a6d58cda226fd0c789c2f7df1052bc220f38b9740f479f246eb1bc 528df1abae0fcb61f02ee513a7a377ecbab092c6c5f1ab5f965ee54035630360 651302a6a0a6892cf7893409fa9d64e254b5c84c865570c6bab24b7f1065016e 38c3e1142f47de1c66d124296574ca594f7726e2e1a735025bcd32fad1bcaefa c33b834cd0f3eac2ca28fbc5ea9abf80a1736b6754f0dcee3993a05a3d23746e 846fffdd99823e9d87cadb8ae738e9dfb77b2aa02c97c2a26b13bd62a9ca89ab a8a02d6b8a7769033af4c4cf69c4e8419ec6180342a50647cf197810f515af6d acc278d63fd85f9f456c99f65eefb903360dae01a180207fa97b5ca72af624aa 84430256fc913021db6552e383816e43640c08e6ef4456d82c75ac0efc7764b4 6b5f0513a7285e0f36afab167a87b25a87e5347eb0285a9197300930e2963052 92b41d58cb5b35bb5a741984404b2c6f31ad1b7c27e7289ab2868fdc728c099b 460dc51545afc1c142de6e0b0424dd3ae63625ce4ebb2e933f946d8b640c27b5 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root proftpd-1.3.8b-150600.13.15.1.src.rpm pkgconfig(proftpd) proftpd-devel proftpd-devel(ppc-64) @
/usr/bin/pkg-config proftpd rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 1.3.8b 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 io@h}@hnYgeqeL@eeC@cc<@cbL@b@Qb? @b
ap_^@^3^S^5h@^C]@]o]@]D%]\@\+@[E@[DYqYC@X@XӸXO@XX~@X{d@WW/*@W/*@Ujpsimons@suse.com psimons@suse.com psimons@suse.com psimons@suse.com dimstar@opensuse.org chris@computersalat.de chris@computersalat.de chris@computersalat.de chris@computersalat.de schubi@suse.com chris@computersalat.de chris@computersalat.de chris@computersalat.de chris@computersalat.de chris@computersalat.de jsegitz@suse.com dimstar@opensuse.org chris@computersalat.de chris@computersalat.de chris@computersalat.de chris@computersalat.de chris@computersalat.de mardnh@gmx.de bwiedemann@suse.com chris@computersalat.de chris@computersalat.de jengelh@inai.de jengelh@inai.de chris@computersalat.de chris@computersalat.de bwiedemann@suse.com nmoudra@suse.com chris@computersalat.de jengelh@inai.de chris@computersalat.de chris@computersalat.de chris@computersalat.de chris@computersalat.de chris@computersalat.de jengelh@inai.de chris@computersalat.de chris@computersalat.de - Removed "ProtectSystem=full" from proftpd.service. That directive
prevents proftpd from writing to the /usr directory hierarchy,
which means that logged-in and properly authorized FTP users
cannot upload files or create directories there either. This is
not what system administrators who set up FTP access for local
users expect and it's inconsistent with how others FTP servers
like vsftpd are configured by default. [bsc#1256827] - The previously applied "fix-crash-in-sftp-module.patch" patch
broke the build such that mod_sftp.so was no longer installed.
This change updates the patch to remedy that issue. [bsc#1246853] - Apply "fix-crash-in-sftp-module.patch" from upstream commit
18defffde5 to fix a long-hidden bug in mod_sftp, where the list
of GIDs for the logged-in user was not being appropriately copied
out of the session pool. This issue could potentially crash the
proftpd server. [bsc#1244559] - Apply upstream commit cec01cc0a252345 as "CVE-2024-48651.patch"
to fix a security issue where proftpd would grant unintended
access to group id 0 in mod_sql. [bsc#1238141, CVE-2024-48651]
- Apply upstream commit 981a37916fdb7b73 as "CVE-2024-57392.patch"
to fix a security vulnerability where a maliciously crafted
message could result in proftpd dereferencing a NULL pointer and
thereby crashing the process. [bsc#1238143, CVE-2024-57392] - Use %autosetup macro. Allows to eliminate the usage of deprecated
%patchN. - Update changes file
* add missing boo#1218144 (CVE-2023-48795) info
* add missing CVE-2023-51713 info - 1.3.8b - Released 19-Dec-2023
fix for boo#1218144 (CVE-2023-48795)
* http://proftpd.org/docs/NEWS-1.3.8b
* Implemented mitigations for "Terrapin" SSH attack (CVE-2023-48795).
- rebase patch
* proftpd-no_BuildDate.patch - 1.3.8a - Released 08-Oct-2023
fix for boo#1218344 (CVE-2023-51713):
gh#1683 - Out-of-bounds buffer read when handling FTP commands.
https://github.com/proftpd/proftpd/issues/1683
* http://proftpd.org/docs/NEWS-1.3.8a
* Fixed builds when using OpenSSL 3.x - 1.3.7f - Released 04-Dec-2022
* Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
authentication in some configurations.
* Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
not match publickey algorithm 'ssh-rsa'. - Migration of PAM settings to /usr/lib/pam.d. - Update proftpd-basic.conf.patch
* remove obsolete config option, LoginPasswordPrompt
- rework proftpd-dist.patch - 1.3.7e - Released 23-Jul-2022
* Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- 1.3.7d - Released 23-Apr-2022
* Issue 1321 - Crash with long lines in AuthGroupFile due to large realloc(3).
* Issue 1325 - NLST does not behave consistently for relative paths.
* Issue 1346 - Implement AllowForeignAddress class matching for passive data
transfers.
* Bug 4467 - DeleteAbortedStores removes successfully transferred files
unexpectedly.
* Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
SOL_SOCKET.
* Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
data connection.
* Issue 1396 - ProFTPD always uses the same PassivePorts port for first
transfer.
* Issue 1369 - Name-based virtual hosts not working as expected after upgrade
from 1.3.7a to 1.3.7b.
- rebase proftpd-no_BuildDate.patch - fix deps for SLES - remove configure --disable-static - Update to version 1.3.7c:
* http://proftpd.org/docs/NEWS-1.3.7c
* http://proftpd.org/docs/RELEASE_NOTES-1.3.7c
- Update patches
* harden_proftpd.service.patch
* proftpd-ftpasswd.patch
* proftpd-no_BuildDate.patch
* proftpd.spec
* proftpd_env-script-interpreter.patch - Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
* harden_proftpd.service.patch
Modified:
* proftpd.service - Update to version 1.3.6e:
+ Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL < 1.1: proftpd has had support for
openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch. - update to 1.3.6d
* Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
variables when the environment variable is not present.
* Issue 940 - Second LIST of the same symlink shows different results.
* Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
* Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
requested.
* Bug 4398 - Handle zero-length SFTP WRITE requests without error.
* Issue 1018 - PidFile should not be world-writable.
* Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
some systems.
* Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch - fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
* Fixed regression in directory listing latency (Issue #863).
* Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
converting them to supported format.
* Fixed use-after-free vulnerability during data transfers (Issue #903).
* Fixed out-of-bounds read in mod_cap by updating the bundled libcap
(Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
* proftpd-ftpasswd.patch
* proftpd-no_BuildDate.patch
* proftpd_env-script-interpreter.patch - cleanup tls.template
* remove deprecated NoCertRequest from TLSOptions - fix changes file
* add missing info about boo#1155834
* add missing info about boo#1154600
- fix for boo#1156210
* GeoIP has been discontinued by Maxmind
* remove module build for geoip
see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
* add upstream patch proftpd-tls-crls-issue859.patch - fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
* Fixed pre-authentication remote denial-of-service issue (Issue #846).
* Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
* Fixed symlink navigation (Bug#4332).
* Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
* Fixed SITE COPY honoring of restrictions (Bug#4372).
* Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
* Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
* included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
* RPMLINT fix for env-script-interpreter (Badness: 9) - fix for boo#1155834
* Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
* Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed - Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056) - fix for boo#1142281 (CVE-2019-12815, bpo#4372)
arbitrary file copy in mod_copy allows for remote code execution
and information disclosure without authentication
- add patch
* proftpd-CVE-2019-12815.patch
taken from:
- http://bugs.proftpd.org/show_bug.cgi?id=4372
- https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3 - update changes file
* add missing info about bugzilla 1113041 - Fix the Factory build: select the appropriate OpenSSL version
to build with. (fix for boo#1113041) - Reduce hard dependency on systemd to only that which is
necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions. - update to 1.3.6
* Support for using Redis for caching, logging; see the doc/howto/Redis.html
documentation.
* Fixed mod_sql_postgres SSL support (Issue #415).
* Support building against LibreSSL instead of OpenSSL (Issue #361).
* Better support on AIX for login restraictions (Bug #4285).
* TimeoutLogin (and other timeouts) were not working properly for SFTP
connections (Bug#4299).
* Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
the child processes to be terminated as well (Issue #461).
* RPM .spec file naming changed to conform to Fedora guidelines.
* Fix for "AllowChrootSymlinks off" checking each component for symlinks
(CVE-2017-7418).
- New Modules:
* mod_redis, mod_tls_redis, mod_wrap2_redis
With Redis now supported as a caching mechanism, similar to Memcache,
there are now Redis-using modules: mod_redis (for configuring the Redis
connection information), mod_tls_redis (for caching SSL sessions and
OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
in Redis).
- Changed Modules:
* mod_ban
The mod_ban module's BanCache directive can now use Redis-based caching;
see doc/contrib/mod_ban.html#BanCache.
- New Configuration Directives
* SQLPasswordArgon2, SQLPasswordScrypt
The key lengths for Argon2 and Scrypt-based passwords are now configurable
via these new directives; previously, the key length had been hardcoded
to be 32 bytes, which is not interoperable with all other implementations
(Issue #454).
- Changed Configuration Directives
* AllowChrootSymlinks
When "AllowChrootSymlinks off" was used, only the last portion of the
DefaultRoot path would be checked to see if it was a symlink. Now,
each component of the DefaultRoot path will be checked to see if it is
a symlink when "AllowChrootSymlinks off" is used.
* Include
The Include directive can now be used within a section, e.g.:
Include /path/to/allowed.txt
DenyAll
- API Changes
* A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
* proftpd-ftpasswd.patch
* proftpd-no_BuildDate.patch - update to 1.3.5e
* Fixed SFTP issue with umac-64@openssh.com digest/MAC.
* Fixed regression with mod_sftp rekeying.
* Backported fix for "AllowChrootSymlinks off" checking each component
for symlinks (CVE-2017-7418).
- remove obsolete patch
* proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
* proftpd-dist.patch
* proftpd-no_BuildDate.patch
* proftpd_include-in-limit-section.patch - Sort SHARED_MODS list to fix build compare (boo#1041090) - Removed xinetd service - fix for boo#1032443 (CVE-2017-7418)
* AllowChrootSymlinks not enforced by replacing a path component
with a symbolic link
* add upstream commit (ecff21e0d0e84f35c299ef91d7fda088e516d4ed)
as proftpd-AllowChrootSymlinks.patch
- fix proftpd-tls.template
* reduce TLS protocols to TLSv1.1 and TLSv1.2
* disable TLSCACertificateFile
* add TLSCertificateChainFile - Remove --with-pic, there are no static libs.
- Replace %__-type macro indirections.
- Replace old $RPM shell vars by macros. - fix and update proftpd-basic.conf.patch
- add some sample config and templates for tls
* proftpd-tls.template
* proftpd-limit.conf
* proftpd-ssl.README - backport upstream feature
* include-in-limit-section (gh#410)
* add proftpd_include-in-limit-section.patch - update to 1.3.5d
* gh#4283 - All FTP logins treated as anonymous logins again. This is a
regression of gh#3307. - update to 1.3.5c
* SSH rekey during authentication can cause issues with clients.
* Recursive SCP uploads of multiple directories not handled properly.
* LIST returns different results for file, depending on path syntax.
* "AuthAliasOnly on" in server config breaks anonymous logins.
* CapabilitiesEngine directive not honored for /
sections.
* Support OpenSSL 1.1.x API.
* Memory leak when mod_facl is used.
-rebase proftpd-no_BuildDate.patch - fix systemd vs SysVinit - Remove redundant spec sections
- Ensure systemd-tmpfiles is called for the provied config file - fix for boo#970890 (CVE-2016-3125)
- update to 1.3.5b:
http://www.proftpd.org/docs/RELEASE_NOTES-1.3.5b
* SSH RSA hostkeys smaller than 2048 bits now work properly.
* MLSD response lines are now properly CRLF terminated.
* Fixed selection of DH groups from TLSDHParamFile.
- rebase proftpd-no_BuildDate.patch - fix for boo#927290 (CVE-2015-3306)
- update to 1.3.5a:
See http://www.proftpd.org/docs/NEWS-1.3.5a
- rebase patches
* proftpd-ftpasswd.patch
* proftpd-no_BuildDate.patch
- remove gpg-offline dependency
- fix permissions on passwd file
* unable to use world-readable AuthUserFile '.../passwd' (perms 0644):
* 0644 -> 0440 ibs-power9-21 1770825442
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t 1.3.8b 1.3.8b-150600.13.15.1 1.3.8b-150600.13.15.1 proftpd Make.rules acconfig.h ascii.h auth.h base.h bindings.h ccan-json.h child.h class.h cmd.h compat.h conf.h config.h configdb.h ctrls.h data.h default_paths.h dirtree.h display.h encode.h env.h error.h event.h expr.h feat.h filter.h fsio.h ftp.h glibc-glob.h hanson-tpl.h help.h ident.h inet.h jot.h json.h lastlog.h log.h logfmt.h memcache.h mkhome.h mod_auth_otp.h mod_ctrls.h mod_dnsbl.h mod_load.h mod_quotatab.h mod_sftp mod_sftp.h agent.h auth.h bcrypt.h blacklist.h channel.h cipher.h compress.h crypto.h date.h disconnect.h display.h fxp.h interop.h kbdint.h kex.h keys.h keystore.h mac.h misc.h msg.h packet.h rfc4716.h scp.h service.h session.h ssh2.h tap.h umac.h utf8.h mod_snmp.h mod_sql.h mod_tls.h mod_wrap2.h modules.h netacl.h netaddr.h netio.h openbsd-blowfish.h options.h os.h parser.h pidfile.h pool.h pr-syslog.h privs.h proctitle.h proftpd.h random.h redis.h regexp.h response.h rlimit.h scoreboard.h session.h sets.h signals.h stash.h str.h support.h table.h throttle.h timers.h trace.h utf8.h var.h version.h xferlog.h proftpd.pc /usr/include/ /usr/include/proftpd/ /usr/include/proftpd/mod_sftp/ /usr/lib64/pkgconfig/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:42656/SUSE_SLE-15-SP6_Update/4e90fd3a76bba20ffd089899466d80cd-proftpd.SUSE_SLE-15-SP6_Update drpm xz 5 ppc64le-suse-linux directory makefile script, ASCII text, with very long lines C source, ASCII text C source, ASCII text, with very long lines pkgconfig file P R qa{_O)c9x utf-8 9a5d3f6cae6f5cb9317ae591a8f58f5516c6a0f73efbbaf49f060fb2d3294285 ? 7zXZ
! t/] "k%4HU&jPzBLnLXKH8XZf-Lw6ǃߒMllD 0T%*'kܳ>u)\lxy~+9ؗCID3äUbA$D֭&Oplk^ t(7[=q Iׄ"g/=\E*KxYUAO:G]DїX AJ` TdͷMw'?(>} +lra
. jvDfzO
>,E4-y}=Srl~4߂&GS[4jXD0f]?Y::3
YH:Va\t\m+-K ]^`.7~ U\*^>[
27FAwuv#1CFyk/øXAfW;s}0,0Z巏DOo9&/Xj}# ?KED2hga{LrҰF*x6ԚadCM. Z\fyPV盒;X
)TVz% a!喹~ 2%hx2̀luPc
r%p"/{oQd=lx3Ф^ƈ]Y;VyplW^GȢHwV][HAue\;3q-\Pt?4i`)µ
O k] ޭU% _aioaz^et#W}zxw}l T- 5qsEkDdg j]p
m2;߲ݮ0' vg)_ⴷ{4 /~ kp>C2`P
˨"-
r"^)Z'qUQ @s7&aMjN5oZ3<.C%?ND-XԦ27
/Dhc2_-'dU0@F]|eM,W1w `}Y c&ToPn.dOS Ì`&ޒa}[R;ڻ"elf?4W(%lg)eķUX/Y$eJZrMJE8b7̺HKnzGخ+7 s٪ ;&#]jGpcp[\]~K}7 HNuS@Z 7k u/A Z^*OI> o T";\`| "èWpΛ -JпXKI7%9Ru$ ʫ4B+ Xij'\\
Q~&~; TY=Hk|1:r-='q >E ~S 9c$&@c K6 ݯK㧏Z7!!"Ѕ"渚&Eu&Ҳ7hVQT~#Zy8jZ'>D t0A|yշ&X?\=..$O!b]9Էu]F
pJ 1Z5v+
ee棴5ĶJ^;6 VB25TkD&3[wG7$MH}'i0iŷޟoc _ |VaKLG: йkoWd C.h8WVrLɩ h$[Fs?f}2d ^wb%mc <+XXA )
j
YZ