vsftpd-3.0.5-150400.3.9.1 < > , dp9|%*tid|Π7@hr;ވa^e4AhcN['AFdF"2@T|_ EEF`#/CsʄP\^& u*ə'y>QH<`unߒz >,!cEQ d~®l(xR}*J #{%%gwP3&hjIc/o4wb4b0v8*rtK
T
SL(u+N 㬮!x"' > F l ? l d J ) J n
( E 8 8 8
d 8 D 8 8
< 8 8 4 8 L p 8 !P ! " $o ( $ 8 $ 2 9 % 2 : ) 2 = ^c > ^k ? ^s @ ^{ F ^ G ^ 8 H _x 8 I `X 8 X ` Y ` \ ` 8 ] a 8 ^ c b f c gP d g e g f g l g u g 8 v h w j, 8 x k 8 y k z l$ l4 l8 l> l C vsftpd 3.0.5 150400.3.9.1 Very Secure FTP Daemon - Written from Scratch Vsftpd is an FTP server, or daemon. The "vs" stands for Very Secure.
Obviously this is not a guarantee, but the entire codebase was written
with security in mind, and carefully designed to be resilient to
attack.
Recent evidence suggests that vsftpd is also extremely fast (and this
is before any explicit performance tuning!). In tests against wu-ftpd,
vsftpd was always faster, supporting over twice as many users in some
tests. ds390zp35 _SUSE Linux Enterprise 15 SUSE LLC SUSE-GPL-2.0-with-openssl-exception https://www.suse.com/ Productivity/Networking/Ftp/Servers https://security.appspot.com/vsftpd.html linux s390x getent passwd ftpsecure >/dev/null || useradd -r -g nobody -s /bin/false -c "Secure FTP User" -d /var/lib/empty ftpsecure
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
for service in vsftpd.service vsftpd.socket ; do
sysv_service=${service%.*}
if [ ! -e /usr/lib/systemd/system/$service ] &&
[ ! -e /etc/init.d/$sysv_service ]; then
mkdir -p /run/systemd/rpm/needs-preset
touch /run/systemd/rpm/needs-preset/$service
elif [ -e /etc/init.d/$sysv_service ] &&
[ ! -e /var/lib/systemd/migrated/$sysv_service ]; then
/usr/sbin/systemd-sysv-convert --save $sysv_service || :
mkdir -p /run/systemd/rpm/needs-sysv-convert
touch /run/systemd/rpm/needs-sysv-convert/$service
fi
done
fi
if [ -x /usr/bin/systemctl ]; then
test -n "$FIRST_ARG" || FIRST_ARG="$1"
[ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || :
if [ "$YAST_IS_RUNNING" != "instsys" ]; then
/usr/bin/systemctl daemon-reload || :
fi
for service in vsftpd.service vsftpd.socket ; do
sysv_service=${service%.*}
if [ -e /run/systemd/rpm/needs-preset/$service ]; then
/usr/bin/systemctl preset $service || :
rm "/run/systemd/rpm/needs-preset/$service" || :
elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then
/usr/sbin/systemd-sysv-convert --apply $sysv_service || :
rm "/run/systemd/rpm/needs-sysv-convert/$service" || :
touch /var/lib/systemd/migrated/$sysv_service || :
fi
done
fi
test -f /usr/bin/firewall-cmd && firewall-cmd --reload --quiet || :
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then
# Package removal, not upgrade
/usr/bin/systemctl --no-reload disable vsftpd.service vsftpd.socket || :
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services
test "$DISABLE_STOP_ON_REMOVAL" = yes -o \
"$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0
/usr/bin/systemctl stop vsftpd.service vsftpd.socket
) || :
fi
test -n "$FIRST_ARG" || FIRST_ARG="$1"
if [ $1 -eq 0 ]; then
# Package removal
for service in vsftpd.service vsftpd.socket ; do
sysv_service="${service%.*}"
rm -f "/var/lib/systemd/migrated/$sysv_service" || :
done
fi
if [ -x /usr/bin/systemctl ]; then
/usr/bin/systemctl daemon-reload || :
fi
if [ "$FIRST_ARG" -ge 1 ]; then
# Package upgrade, not uninstall
if [ -x /usr/bin/systemctl ]; then
(
test "$YAST_IS_RUNNING" = instsys && exit 0
test -f /etc/sysconfig/services -a \
-z "$DISABLE_RESTART_ON_UPDATE" && . /etc/sysconfig/services
test "$DISABLE_RESTART_ON_UPDATE" = yes -o \
"$DISABLE_RESTART_ON_UPDATE" = 1 && exit 0
/usr/bin/systemctl try-restart vsftpd.service vsftpd.socket
) || :
fi
fi m J > h p 6 } 5 / p e 2 Q $ p } 6 ) Gp 8 + AA큤A큤AA큤A큤A큤A큤A큤A큤A큤AA큤 ddddddddddddGǿOraqGGGGGGGGGGGGGGdGGGdGGNadGGǿJ`iJ`hGGGGGǿO|GddGGdd43cb24f9420d9ee73c22dafe29fd25616e4df55b38e450764fb1c5b8b0578003 a56c55569c44f61aeee475344dce61f4ea18df08c26782a1013f78a0f14d9a0b 54a2643bf511596dabed3454abb2bd3774041a5d3b90044cf015e6e60469e6fc ff59cefeded709da635c1212256e6d417d82fa456319f90e4db85ddb03f7d1a2 76ea0d69babf59d696c5bdf853b1a2a8a898c0ce177ad971b1742174de21bcee 9fdbfd2ec0207170371ca3cf2b0ddca2dc2fe3d062e5792e0d3e51474c3198c9 6f5f21db930b9a8d89b56a6654780954bdc2a41d2bc9529c0b8efb3817c45ef1 4971b64dd05d8587d91e2cff091d341d4ce1fa64c38090938789cb7b7f855558 7dedf833fb8a3bcfa96b48d309f3892b3ae3340d271e518ecd998750fe11a0b7 4690662cf0bbf289900b0ddb4c2e0cfc555dda870633440d852f7d4b1b783d61 fb32f8176eda6b27a54a61d14165b03aeaeae8c6d81a4c995cb121ecabe2a884 8b12b05b7d664e344d4d59a26c3f6b13c645f1b53ce6045780791350b278606b 4326d89a39bea92a0dbcaaee0f658d7bf810c8f322688b6b1303f3b357a0971f fb26bd0055e5875fb2d1083326b272685de7b017da65000a21f99081c1a30015 6ed67ebc32ca688633732308ba23c7601a463df9a8f6d4d349cf1e0fc770c8f5 ee162751cf714e1ab6b5894fd08b0a95e788a462311cf7da47988ee5fa55aa62 47ffd29f468e22eb304a368bb987510fd44f0486894de293dc7dbd3d48e78f5c 4935bc943f442e358d7a9c81f4ce2ae1ec098543e726868d423eac55beb91b7b 87274257549cc60d5fd2d873326b22eb89a4d8199bb5841fed3bf6c82b5494f2 519b63d63c4f1517a1e7cf3373f19df4c8a697d1823814f425340bbebf5fa8f1 7dad436bf918a2f81a540847a9a46946370c2d796ffd5bb5d98cb8a69b2e926e 181e70be2fcc7d0dbf34f8626e2e026b10ee91108f84dea93670caac57b394c2 182acb8b70a360dda945df11a1598cf493774f017db569a57f07447119bb0713 c55f01df06b2d4ef2c26d0d679c6782a60331fcb0f3991d0015458820819893b 60b8129dd74b2e4779f1ac8344127e47a7847584b8cd79eb36a055208ca553e3 517941f8d5bbb5970cedbef05d0593cada2185557053b9574c11524841d80749 041f854a654fc72e6d173d62da1907dd14d6f39d276b20e02b0b1ddca6f54b5b 61de85b72629f20996b3124be21877871518388548636459df9ad6cb5a3e31ba 1f0b372b2f63fc08f5e195f0d1e958dfed03c57d8868a3f90317bcb312585228 9cf0afbf0552928f37cd4b068a2cc039f4200175d65dcead6701de158a17c957 97d0cab32f477176059b7799b3f92c90136440aa84ee7c5005f0d964a311df66 595fd71183207e0297b8ea5d1f0f2ad1681e16c1df530ac11844e7fa010e7d54 90c4a70c9df7c3b090e7a1822f3bb0cdff5a559a4cdd58f98c9536f23c5f43ba 47a2ac8924cec7a864d3482f2fdb9bbef552c8c0123b8647b6ccbfc2d3cf717c 0662397b33b84f9827d238703e7ac36fa9f129fa227640956bbf87e0233cdd82 1ce6627358df144f933424c8b81c40d70729bed51f634c6205ac6b8da43eec41 3bc084f62d987705c810dc2512fd4eec4269ae5e1373c19b9b21e5e089f31e17 3f54cac8362cd97c646c8e034e4676c2a053660b033e2011fe24297e93e0a74e c9cf119e2f9dbcf187fb805ba5aded105db26a693803636fb7228c98460ffbf2 2225485a2ca5e00cafd96ecb4336cfd34dc6064ec16f560c1d7b26d213de6e81 3e8e5022a5d658f5fcddc8d9a969c838df2ad5a74c772e7b3fc32df749e83f2e 6477bf3ae7199ce5c0604dc83fb34b04de1f91f96929532c4918c32caaf94bba service root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root vsftpd-3.0.5-150400.3.9.1.src.rpm config(vsftpd) ftp-server vsftpd vsftpd(s390-64) @ @ @ @ @ @ @ @ @ @ @ @ @ @
/bin/sh /bin/sh /bin/sh /bin/sh config(vsftpd) group(nobody) group(nobody) libc.so.6()(64bit) libc.so.6(GLIBC_2.15)(64bit) libc.so.6(GLIBC_2.2)(64bit) libc.so.6(GLIBC_2.28)(64bit) libc.so.6(GLIBC_2.3)(64bit) libc.so.6(GLIBC_2.4)(64bit) libc.so.6(GLIBC_2.7)(64bit) libcap.so.2()(64bit) libcrypto.so.1.1()(64bit) libcrypto.so.1.1(OPENSSL_1_1_0)(64bit) libpam.so.0()(64bit) libpam.so.0(LIBPAM_1.0)(64bit) libssl.so.1.1()(64bit) libssl.so.1.1(OPENSSL_1_1_0)(64bit) logrotate rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) shadow systemd systemd systemd systemd user(ftp) 3.0.5-150400.3.9.1 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.3 dC@cc$e@cd@b>b a aՈ@a;H`Ȗ@`D_@_u@_=@]@]@] @[
@[4[+@Z @ZmZlZ1@Y4YA%@Y>@Y.@YtW@WWV@V3V3V@VaU@U@UUJ@U0U!#U@U @U @U @T!T@Tepsimons@suse.com david.anes@suse.com psimons@suse.com psimons@suse.com schubi@suse.com psimons@suse.com psimons@suse.com jsegitz@suse.com fvogt@suse.com psimons@suse.com psimons@suse.com idonmez@suse.com psimons@suse.com dimstar@opensuse.org josef.moellers@suse.com psimons@suse.com dimstar@opensuse.org suse-beta@cboltz.de psimons@suse.com psimons@suse.com psimons@suse.com psimons@suse.com vcizek@suse.com tchvatal@suse.com psimons@suse.com tchvatal@suse.com daniel.molkentin@suse.com psimons@suse.com kukuk@suse.de psimons@suse.com dimstar@opensuse.org tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com jcejka@suse.com tchvatal@suse.com joop.boonen@opensuse.org tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com tchvatal@suse.com dimstar@opensuse.org - Apply "0001-Fix-default-value-of-strict_ssl_read_eof-in-man-page.patch"
to fix the documentation of the strict_ssl_read_eof option. The
documentation says option would be disabled by default, but it is
in fact enabled. [bsc#1200075] - Use valid separator for logrotate config file. [bsc#1192179] - systemd versions prior to 244 do not support the ProtectXYZ
directives we use in our vsftpd.service file and log warnings
every time the daemon starts, which confuses our users. We avoid
this issue by removing the unsupported options from the service
file when installing on a distribution that comes with such an
older version of systemd. [bsc#1196918] - Apply "disable-tls13-to-support-older-openssl-versions.patch"
when building on SLE-15. This is necessary, because openssl_1_1
on that codestream is version 1.1.0 rather than 1.1.1 and that
older version has no TLSv1.3 support. [bsc#1187686] - When building on Tumbleweed, move logrotate files from user
specific directory /etc/logrotate.d to vendor specific directory
/usr/etc/logrotate.d. Builds on other codestreams still use the
original location. - Use rpm conditional to build against the proper OpenSSL version
on all distributions. This allows us to update vsftpd in all
maintained SLE codestreams to the current Factory version and
mitigate the newly discovered ALPACA attack. [jsc#SLE-24275,
jsc#PM-3322, bsc#1187686] - Add "seccomp-fixes.patch" to fix the syscall architecture offset
from 4 to 5, this change was documented in
.
- Add "vsftpd-openlog-force.patch" to a logic error in the way the
force option for syslog's openlog() call was handled.
- Add "vsftpd-seccomp-getrandom.patch" to fix a seccomp failure in
FIPS mode when SSL was enabled. [bsc#1052900]
- Add "vsftpd-seccomp-ssl.patch" to allow stat() to be called,
which is required during SSL initialization by RAND_load_file().
- Add "vsftpd-seccomp-wait4.patch" to allow wait4() to be called so
that the broker can wait for its child processes. [bsc#1021387]
- Refresh patches to -p1 style so that we can use %autosetup:
* vsftpd-2.0.4-dmapi.patch
* vsftpd-2.0.4-enable-ssl.patch
* vsftpd-2.0.5-enable-debuginfo.patch
* vsftpd-2.0.5-utf8-log-names.patch
* vsftpd-2.0.5-vuser.patch
* vsftpd-2.3.5-conf.patch
- Apply "revert-undocumented-config-file-format-changes.patch" to
revert the "ssl_tlsv1_X"-style config file options back to their
original spelling. The changes that dropped the underscore from
the version numbers in release 3.0.4 breaks existing
configurations and it was never documented anywhere -- not in the
package's changelog and not in the packages's own man page.
- Apply "use-system-wide-tls-cipher-policy.patch" so that vsftpd
follows the system-wide TLS cipher policy "DEFAULT_SUSE" by
default. Run the command "openssl ciphers -v DEFAULT_SUSE" to see
which ciphers this includes.
- Apply "vsftpd-allow-dev-log-socket.patch" to allow sendto()
syscall when /dev/log support is enabled. [bnc#786024]
- Apply "vsftpd-enable-sendto-for-prelogin-syslog.patch" to allow
sendto() to be called from check_limits(), which is necessary for
vsftpd to write to the system log. - Added hardening to systemd service(s) (bsc#1181400). Modified:
* vsftpd.service - Update to version 3.0.5:
* Fix ALPN callback to correctly select the 'ftp' string if present.
Works with FileZilla-3.55.0.
* Fix a couple of seccomp policy issues with Fedora 34. - Update to version 3.0.4.
* Fix runtime SIGSYS crashes (seccomp sandbox policy tweaks).
* Reject HTTP verbs pre-login.
* Disable TLS prior to v1.2 by default.
* Close the control connection after 10 unknown commands pre-login.
* Reject any TLS ALPN advertisement that's not 'ftp'.
* Add ssl_sni_hostname option to require a match on incoming SNI hostname.
* The options "ssl_tlsv1_1", "ssl_tlsv1_2", and "ssl_tlsv1_3"
have been renamed to "ssl_tlsv11", "ssl_tlsv12", and
"ssl_tlsv13" respectively. Note that the man page has not been
updated accordingly.
- Upstream has a new GPG key (7B89011BCAE1CFEA).
- "0001-Introduce-TLSv1.1-and-TLSv1.2-options.patch" is now obsolete.
- "0001-Introduce-TLSv1.3-option.patch" is now obsolete.
- "vsftpd-seccomp-syslog.patch" is now obsolete. - OpenSSL was updated to version 1.1.1 in SLE-15-SP2, adding
support for the TLSv1.3 protocol. As a consequence, some SLE-15
applications that link OpenSSL for TLS support -- like vsftpd --,
gained the ability to use the newer TLS protocol, which created
interoperability problems with FTP clients in some cases. To
remedy the situation, "0001-Introduce-TLSv1.3-option.patch" was
applied in a forked SLE-15-SP2 version of vsftpd. The patch adds
the configuration option "ssl_tlsv1_3" that system administrators
can use to disable TLSv1.3 support on their servers.
[bsc#1187188] - Add seccomp-fixes.patch to allow getdents64 syscall in seccomp
sandbox, fixes bsc#1179553
Also in the same patch, fix the architecture offset from 4 to 5,
this change was documented in https://lore.kernel.org/patchwork/patch/554803/ - Apply "0001-Introduce-TLSv1.1-and-TLSv1.2-options.patch" and
"0001-When-handling-FEAT-command-check-ssl_tlsv1_1-and-ssl.patch",
which add the "ssl_tlsv1_1" and "ssl_tlsv1_2" options to the
configuration file. Both options default to true. [SLE-4182] - Use %{_prefix}/lib instead of misused %{_libexecdir}. - Add pam_keyinit.so to PAM config file.
[vsftpd.pam, bsc#1144062] - Apply "vsftpd-avoid-bogus-ssl-write.patch" to fix a segmentation
fault that occurred while trying to write to an invalid TLS
context. [bsc#1125951] - BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
shortcut the build queues by allowing usage of systemd-mini - firewall-macros should be BuildRequires, not Requires(post)
(the macro gets expanded during package build) - Extend "vsftpd-3.0.3-address_space_limit.patch" to mention the
new 'address_space_limit' option in the installed vsftpd.conf(5)
man page. [bsc#1075060] - Apply "vsftpd-support-dsa-only-setups.patch" to disable the
problematic default setting for rsa_cert_file. Upstream
initializes that value to "/usr/share/ssl/certs/vsftpd.pem" and
vsftpd won't start up if that file does not exist (or if it does
not contain an RSA certificate). Therefore, users who copy a DSA
certificate into that location or properly configure a DSA
certificate via dsa_cert_file without explicitly disabling the
RSA certificate won't be able to start vsftpd. [bsc#975538] - Don't start/stop parameterized systemd units in pre/post actions.
These units cannot be used without an explicit parameter and
attempts to do so lead to a confusing "failed to try-restart"
error message. [bsc#1093179, bsc#1010177] - vsftpd-enable-syscalls-needed-by-sle15.patch: Enable wait4(),
sysinfo(), and shutdown() syscalls in seccomp sandbox. These are
required for the daemon to work properly on SLE-15. [bsc#1089088,
bsc#1180314] - Add firewalld service file (bsc#1083705) - Make sure to also require group nobody and user ftp bsc#1070653 - Add "vsftpd-die-with-session.patch" to fix a bug in vsftpd that
would cause SSL protocol errors, aborting the connection, whenever
system errors occurred that were supposed to be non-fatal.
[bsc#1044292]
- Add "vsftpd-mdtm-in-utc.patch" to fix interoperability issue with
various ftp clients that arose when vsftpd is configured with
option "use_localtime=YES". Basically, it's fine to use local time
stamps in directory listings, but responding to MDTM commands with
any time zone other than UTC directly violates RFC3659 and leads
FTP clients to misinterpret the file's time stamp. [bsc#1024961]
- Add "vsftpd-append-seek-pipe.patch" to allow the FTP server to
append to a file system pipe. [bsc#1048427]
- Add "vsftpd-3.0.3-address_space_limit.patch" to create the new
configuration option "address_space_limit", which determines the
memory limit vsftpd configures for its own process (given in
bytes). The previously hard-coded limit (100 MB) may not be
sufficient for vsftpd servers running with certain PAM modules
enabled, and in such cases administrators may wish to raise the
limit to match their system's requirements. [bsc#1042137]
- Don't rely on the vsf_findlibs.sh script to figure out the list
of libraries the build needs to link. The script is wildly
unreliable and it's hard to predict what results it will produce.
Also, the results it *does* produce are invisble in the build
log. We stumbled across this issue when vsftpd suddendly had
build failures on i586 platforms because the script decided to
try and link "-lnsl" even though the library was neither
installed nor required.
- Drop the explicit specification of the LDFLAGS and LINK variables
from the call to make. The value of LDFLAGS we passed is the
default anyway and giving LINK has no effect since it's not used
anywhere in the Makefile. - Conditionally install xinetd service only on older releases
* On current distributions we support the same functionality
via systemd socket activation - Fix build against OpenSSL 1.1. Remove lock on 1.0.x libs
adds vsftpd-3.0.3-build-with-openssl-1.1.patch
(bsc#1042673) - Explicitly depend on OpenSSL version 1.0.x since vsftpd doesn't
compile against the API provided by newer versions. - Adjust to new system user/group RPMs - Add vsftpd-3.0.2-fix-chown-uploads.patch to fix a bug in vsftpd
where files uploaded by an anonymous user could not be chown()ed
to the desired UID as specified in the daemon's configuration
file. [bnc#996370] - Extend vsftpd-2.0.4-lib64.diff to also find libcap.so.* in
/usr/lib64. - Do not bother with omc xml configs, useless nowdays - Require shadow and do not output the error out of useradd - Fix hang when using seccomp and syslog bnc#971784:
* vsftpd-seccomp-syslog.patch - Fix user creation to not report error when user alredy exist
bnc#972169 - Fix bnc#970982 hanging on pam_exec in pam.d
* Add patch vsftpd-3.0.2-wnohang.patch - Fix memory leaks in ls.c bnc#968138
* Add patch vsftpd-ls-memleak.patch
* Update patch vsftpd-path-normalize.patch
- Fix wildcard ? matching bnc#969411
* Update patch vsftpd-2.3.4-sqb.patch - Clean-up the init.d support to be bit more readable and add missing dep - Brought back additional systemv support so it also builds for SLES 10 and 11 - Version bump to 3.0.3:
* Increase VSFTP_AS_LIMIT to 200MB; various reports.
* Make the PWD response more RFC compliant; report from Barry Kelly
.
* Remove the trailing period from EPSV response to work around BT Internet
issues; report from Tim Bishop .
* Fix syslog_enable issues vs. seccomp filtering. Report from Michal Vyskocil
. At least, syslogging seems to work on my Fedora now.
* Allow gettimeofday() in the seccomp sandbox. I can't repro failures, but I
probably have a different distro / libc / etc. and there are multiple reports.
* Some kernels support PR_SET_NO_NEW_PRIVS but not PR_SET_SECCOMP, so handle
this case gracefully. Report from Vasily Averin .
* List the TLS1.2 cipher AES128-GCM-SHA256 as first preference by default.
* Make some compile-time SSL defaults (such as correct client shutdown
handling) stricter.
* Disable Nagle algorithm during SSL data connection shutdown, to avoid 200ms
delays. From Tim Kosse .
* Kill the FTP session if we see HTTP protocol commands, to avoid
cross-protocol attacks. A report from Jann Horn .
* Kill the FTP session if we see session re-use failure. A report from
Tim Kosse .
* Enable ECDHE, Tim Kosse .
* Default cipher list is now just ECDHE-RSA-AES256-GCM-SHA384.
* Minor SSL logging improvements.
* Un-default tunable_strict_ssl_write_shutdown again. We still have
tunable_strict_ssl_read_eof defaulted now, which is the important one to prove
upload integrity.
- Drop patch vsftpd-allow-dev-log-socket.patch should be included
upstream, se above bullet with mvyskocil's email - Fix logrotate script to not fail when vsftpd is not running,
bnc#935279 - Fix hide_file option wrt bnc#927612:
* vsftpd-path-normalize.patch - bnc#925963 stat is sometimes run on wrong path and results with
ENOENT, ensure we sent both dir+file to filter verification:
* vsftpd-path-normalize.patch - Update patch bit more for sanity checks. Done by rsassu@suse.de:
* vsftpd-path-normalize.patch - Add back patch attempting to fix bnc#900326 bnc#915522 and
bnc#922538:
* vsftpd-path-normalize.patch - Reset filter patch to match fedora, my work will be restarted
in one-off patch to make the changes stand out. Add rest of
RH filtering patches:
* vsftpd-2.2.0-wildchar.patch
* vsftpd-2.3.4-sqb.patch
* vsftpd-2.1.0-filter.patch - Work on the filter patch and split out the normalisation of the
path to separate str function, currently commented out so I
avoid huge diffing.
* vsftpd-2.1.0-filter.patch - Add service calls for other unit files too
- Udate filter patch to work as expected:
* vsftpd-2.1.0-filter.patch - Try to fix deny_file parsing to do more what is expected. Taken
from fedora. bnc#900326 bnc#915522 CVE-2015-1419
* vsftpd-2.1.0-filter.patch - No longer perform gpg validation; osc source_validator does it
implicit:
+ Drop gpg-offline BuildRequires.
+ No longer execute gpg_verify. /bin/sh /bin/sh /bin/sh /bin/sh s390zp35 1687855318
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 3.0.5-150400.3.9.1 3.0.5-150400.3.9.1 3.0.5-150400.3.9.1
vsftpd vsftpd vsftpd.conf firewalld services vsftpd.xml vsftpd.service vsftpd.socket vsftpd@.service rcvsftpd vsftpd vsftpd AUDIT BUGS Changelog EXAMPLE INTERNET_SITE README vsftpd.conf vsftpd.xinetd INTERNET_SITE_NOINETD README vsftpd.conf PER_IP_CONFIG README hosts.allow README VIRTUAL_HOSTS README VIRTUAL_USERS README logins.txt vsftpd.conf vsftpd.pam VIRTUAL_USERS_2 README FAQ README README.SUSE README.security REWARD SECURITY DESIGN IMPLEMENTATION OVERVIEW TRUST SIZE SPEED TODO TUNING empty vsftpd COPYING LICENSE vsftpd.conf.5.gz vsftpd.8.gz /etc/logrotate.d/ /etc/pam.d/ /etc/ /usr/lib/ /usr/lib/firewalld/ /usr/lib/firewalld/services/ /usr/lib/systemd/system/ /usr/sbin/ /usr/share/doc/packages/ /usr/share/doc/packages/vsftpd/ /usr/share/doc/packages/vsftpd/EXAMPLE/ /usr/share/doc/packages/vsftpd/EXAMPLE/INTERNET_SITE/ /usr/share/doc/packages/vsftpd/EXAMPLE/INTERNET_SITE_NOINETD/ /usr/share/doc/packages/vsftpd/EXAMPLE/PER_IP_CONFIG/ /usr/share/doc/packages/vsftpd/EXAMPLE/VIRTUAL_HOSTS/ /usr/share/doc/packages/vsftpd/EXAMPLE/VIRTUAL_USERS/ /usr/share/doc/packages/vsftpd/EXAMPLE/VIRTUAL_USERS_2/ /usr/share/doc/packages/vsftpd/SECURITY/ /usr/share/ /usr/share/licenses/ /usr/share/licenses/vsftpd/ /usr/share/man/man5/ /usr/share/man/man8/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:29626/SUSE_SLE-15-SP4_Update/ff9bc716c1ac7a9e15f60a388af29e45-vsftpd.SUSE_SLE-15-SP4_Update drpm xz 5 s390x-suse-linux ASCII text directory XML 1.0 document, ASCII text ELF 64-bit MSB shared object, IBM S/390, version 1 (SYSV), dynamically linked, interpreter /lib/ld64.so.1, BuildID[sha1]=9599b7f0bd582729ae63722bfec8ecdc6ddc4248, for GNU/Linux 3.2.0, stripped ISO-8859 text troff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) R R R R R
R R
R R R R R R R +Cͤ:y3 utf-8 2bf2a3f62f72ec60315f6ee2059616efdfe65ef422f66ac98197dfdc23f197cd ? 7zXZ
! t/[] "k%w0j(}A㜦"{3-^:0;}gŷ9&R;;-3 ^{\ vzrQA} 99r)FImJܦ_Yr@VlߟV aU|vՖNgFSr;# a ES՜8r*id
, ʯ_EvIZx܁}}`U:-py+K1-lW@OjRap tW\V6q R#@U;i?PGvZHMqgcpa C ?FL9i9%a-iqE2)ڑJ8/P-X̭aɿWQK7NT
g+R*h{S qTչx=qT 8f(סc!YrzVD7*'9#lw-ti=qWyzR 2"+Hܳt.i4r^H@EIwBiDD@q bߴ.X{ 3_d!fTg怂7ްoQSI,w5i20&P0$B3ew}ס+6qN1`|,{Yh@@d5h+ `fǢc#P=`P%'Fﳯ
q FVslYKٜI9:@v?`myP Pr)7UwmI_[.rsIk}Os5s^VR#"Pbf5, \?B%1
iֲ)ui\c:? Fб.\36HsC@YwwPa@4bfxzhPv$Bӑ[8iCp8Q0,5|$f r彎!<
$qA2
[NȲ38>{sTQ.P#fR0 *HH\ᩐ< l#
,U0tLP߈ ]VK1GsH@eжK E<2Z'9*=J ّXِ9EIM; MϪtm"Rfcum834Pb!
+lk4W
JN >sWBY5*u癨AJ3ݿ$w +[<@/مix@MKw-c.U$t "Фȟ^9ɳ"dElpi;Mq9NRZ)\p? '"LkJqħSaQ]F6fj(UǢkֈ:B6+;|H{རlKV3]}|kc34o6g:?FLq[27flé̉%' fqDENnܵL$Mx \%Y1֦cꜗ,*re' ڇ 8Ĝ`<d J%IqXEω=I
klQp F8sX=$VJ9?MZ6*ߊ; @z PLNO@jE ?uiF@͢?jMtb݅ްL6s
(uZI5GnsxY.%Dy?5P2{Ygي ϝdGDr21'dq-Iί̠;#>]绌9:?jguʭO"F"rkGLyhf kZ4ht-{?d\!+'z;b#ś^ɯX킫Cx;Xv$s-|xN4BVuc!0DU[9 t8c- Z)G;,?]bͳ786J @`.]U =7Lnb_5AM4~jK~Lҙ"ёMؙ8R CvS?K7ݙ <$|Z3d.c65\Yq& E? f3j\H>VX)rkmaa q FoO7 Lpɺl
=A#B|}ߛ@E%WnH 롻@ECvq؞zGJ$vHvJ]Uz]Y;F"v~џZ }&7!?Muei@@ՙsNE'UC
K4R{߷j JzR(bb p1?,e.Ш
Wmp68;} 9e|h[A(و% Q*~6;3M0`ꀧ@#d߳cTB2=)U_3/#V\WgÜw2PJTF #ŗZ|b*J5g(3Qm ZڰH/{y\٨ӫ㡕0jFE\0qHp,9qE_5 )` !"v!./Gԑੵ1 ĂF Mp:7>Uϊ>nj sC\0ßc=\2Ķ)fIC`4j ˽ X. QwdқaMUq(!
CRB lxN9֕3v`^[FZJ 1л۴B ^P2)T"(nÿ/fQ>BX-bR{~@/?1"b Q.$f5N
S7PWm;O4% Btqa$dunppf}DԱ7 *VM{ vnvF.>n<0VE/GMl a5Ъ#Arn+c6=ͪ}Y)CVb;RѤql*Q x9Py=5u@ ?v7WgPȵY\+60C;aVn[#$ 0NcFJh3VnKDĺR=?] FT 6 ĹK+DU`TpERzt𬴟ä9~5
+fY8Ը#`<2;*@Q$AB"-=>> ~ !,wt D{ mdg4Xҋneh;PTkAͽr\{~Y
X+ .O$u hU/ :"蚖ա Gُb^v=eC>a#N-,Y0nfʤ}ŀTbcnD+<ފ7VbJpí4 = : 2TP/r2kkd`Um j[iΙJ
ٔ&c|? ?.[j 辭B hOolp%
RD;o,/:i[yH ZC*C>0eX0_nWj%o<#$YwgL+P=#}JJ@S)K]EM2< |Ɇu, ?ҳC)n7-V^
ϭ [pc: #QٛHK*'7mjpȇ N4>]n߄\@6ށ)R b)eF$\x am~{DT,_4Ho ?Bjt4aF7fW8@!̷E #G.ғ7[t͌Ny9kpGbwc*ݡ IM)ikq8wH [P2iD ՙLv lo7X/u!)M LۥzT-<#+ T ~EB&['lh/E*~nj oɅ'`]_CWF w_}eso%6 xwA;TPu dW[C~LWY@hٻndFדq;s6F f .Oh067a4LCS]\/{_-Ld?>p/UQBy}D寍DBCFaVs"1ņºŕ:ع9Uc"7:7_TT0.O氕Y JuQ NVr/@rbQoa@/)"A3FCQ>7$Uu $+ҨKO3[g骹#^tUFDKN5
&&xH^ "C1B33m w?stۢ9y ҫ z?=ܺQ6ږz 褈}_B} /hCB1Vz"sK2K9M*;bDmIUtuX]77o(֜0'^ 3C.s[3MH@hh^1#`I
C/.*eK .IW%q/%;Cf,+ "f-v~ JyruEaL*=KwW_,e9j z6 }F)b0a䴚gmf&ԉ bpe:듏R9.5ՂN5v
=N͈Rr/xK]$ fp)%W^[wU$ oY{0(ndmVc¸ÏB q C
+ɉO Z6D E(jN2pVxpֆj+k~\16HN ,+]B
;|4
w2Z +,"LS}TIZif@¸~^GVfd&OgV0u(و!MPN-De-)lm mLPCO
Q>Q0
Ninf'1 :p٩ĝ;cBAl_x ypYX<4r`Bd3(&7AS!h֥̽k~9H
U(f#hdIIr*ڹ\f*̥+ HےO 9S'Z<z j.?XT5 >)2h&uiVpߌ(p] ʳChΪWb:5~zXQU<;m b/M1A.
AbU
;x#v+\('m(DڊsS(?l1:xec"p$%1 @]uAҼ.@ zRdxr*<=YcxwMӑh\l}v sUb5 ߖX *%FE'pM]9&Hjw+q(ۯ7Xd8pM9BfJ`;k{1nї $à1+G%yz]˵qxq%հD("ߓhAW2AHM!f;R YPQ-Dpbò sw/ X4\컧6'|CUayy"z͕̅8J ͺJK4ӂGȹW[|; lcKv;êOɂ7 bN ca;1|E QͥJz&})>&ڛ
75cC Hgct/<(A컇Դm92D%вR x
~7D
^zCeՌr=N)KvF b mUb~ ڢ0'lt'XP-'9Obnd`h W) gL˫nP?ɛH _#l!S XK"
+0X̟ep\Whu7CGh '̡ՒH6N@m >/fu]H:&30߸N0_I V :PK]Ϙ<% YN)vq6𮧔 mYbW~^[!̞և -R8 AwpL.uͺ~==θM43Sٶm }kh._,X&~w G\֬_qҮ -ĿS= w z}<) v=`d]mĴR^|.߸AU0$usyR.K<\ɭV$itT=Rn5/Y+Y&M[꧋\} :(!ky=vj/,Up[3YU)jO=Nf:Fvm6ҬYsPu+Pn.m}
VzxT)`Q[f=AʢTb^Gw8tϾj/F#ιnJ=
kE/~x4+:fz0EA#q 2J7ogk#(pz!"lOؐ99j$fS D^\(>ܠrS5A0E%1wP(|![`%I$TeV XW0?^Wկ0[H/zgIj">ş:
L=F~'>7Bڙ>R%)i : o`9 $tc}رm3f/ Zzqr]ovI{dtir'(NLhCG@L*FqQB%#dEɾ [͚w7P3c&vUv+9q6 |yLP]|}hwvj.IgJ0֝6Gcٍz s D + aDj9Fz@!|,\2[jSUnHh"h` JI[dy
gIE[:< aEIh~ TZqD6i&) yٹℴQS4ڪ i/?tI>)x*
9[mNv WJ.1}I[
+γ%8fЇe_E67c46 VDZ'˸|>XA\(Poe+= M}a=-AMj; 5"RW?6۵W5?^\'G"X7M
"2p&KY1"v: ;2Bʄ.{Zq?ؘcDS[~ݗqbP_ܗ2BK £SDGq"r x71 * $=C/C^cq ՞=C&w,r9Dra!j /)Li0ĐU'rco&j\V> bV:VĦVŘ $. eH**O)sP3.ӦϨ2 ʒWݾoŖ5G Z 9ɻןK&RAKފj R4l kig:>n$ AXIj*B@fl?7<CG'syQ, &Q̚s~
ϦI}`Zc{PFSW AXgQ@r Z%ѿ1\AKY*cw.۔&ܡ'Q& :%wE ;7} ( SͿO0qM}ts9|k~B;;-Rdiۜ.ryQ\fDStU"W TEՙN$8jL&Gq 5ιUW'&b0϶C @h;Xx^PGT{Y_} j dt&A-0 GAݴ`]7 P&|˷m֓|BY-r($b s^z BBw 0q.` 8' $t ڤRTe
k
' 1Y ~nL>2f Dx)'k_ؔsK/
}~wt6Gc٩%w'~?`s'
^`%R\t-
T4g"f|VVhTǛlo. '(O]4旝Nmjlk(_u?k>f\j:=- ]fKR`59w-hx7+RA
~ڜ< !? ,тė=AI>Yr3v K Z-gxqBCcqSDWB`G}Z͟7
ÒMSv7x̉&!][*ݣX;y&V8.Q y. !Ō C/{~g?
ZC&cO K DD,H㡩|LX=jv\R-* Mm U48z\3;xQ], AMy7hNF8J8ɂfi|7 5X& ,y- LH;F'ǀV )h-u6ݮI*@Bwt < `C9rGc w H7eh tAftWsz@#Q̅ -Ji>+zTÙ pU|Ru!h_%ٯY"_fbp>٭'Y&FׅQ κ?趡-H9c?$߃)^3؍?q@JӰy $2'{ %soZMYܹNXprͅXJ|*ٌ|E/ ܻc!drP]*=9 K4W-^bv^4lgl2mS$:Q*weop9 k*_PH~n|A O9PJ[+q2[YʫV*Hײج VuО)3
)5 ֠@֟No2rk!o
@e4 BNp>Tۦ__vC$yFQ:Ş߷WPk#(i܇wm3!)՟^J.?lp wpdSQbKlƷ/H"}
k\z
,Kdśr (yB6bp _ԑTäqR"mˣJc{ѓJ B$3* _JI)EϕQ? PxmlRDfF Vx?)zI`I֊[
:D^rcO. 5WC "4
Z@:Szx'ۖ$yGѵ[JxKϽPs 8!#sL@=Ia9b!5I&+"[OTu !'Ol_rMb`6DoKD\K\1~>g JRbLaDeO{]X:3 bft,s): عB Й/p& p)vzdwgCF!o"U6q#1ྃ;iC1"; (۾=|.Db3*t)$ jZ*Q [֜'Ls^ c']T-)D|[Yzk}8I 6}$/amw#_o)cAuݞ
Gn(kJsӦ-Ȧ)E}JM$q,ۣpYU5#<F:z\SsZ!1l|SRttҭ{-uʛ-J2 6h
wV ût}W<5Uu
ۮ ˡk1- AB Bx] &f}H/ru1.}7G~$ \fҨ6'SGܕ 6@হ8NE< Qw*Atȱrhto5[[ZW&W[x~<,3?dd鿥c9taW'v z=y$K% .ULb퐂ͨ=V*ss~rotj e+$NBɣCVo+*xLs>V$VBTX9K8KLL2Iׄ9m7ald7K0$'2!_k ''w~G>M -؞9u, 5g'Bci Z9PGթS|TXX{f"Y&d*A-+XS#O(5F(B+@[/tbEn{ŗ0hƊY2U |/{Ķ|@6: jTFȃ6
?n rKDԋ~gDGPЅ8V.atx cr烑ћ&jwk; uu?m 1o#pKVv$%+>^H,"!j|fg `Q[HNrElr5̑m;ך:5;+ L}u '1]mJrީ! luQLa|T5E9\̟@D;Dơlq3zj SՂfׁfwˋǜI
y&f'_Vи\)"K w=|lBA6u6uHuEи*uc [d!*lM'DD4ElE$ȭ;fVpw)ś@l&7(^Y
xN}߅
RSyėR Z: s t &ԶpL + 2&+6 5+bu< @ZmܮFFL0PKQln {t{r< ;5 6#Oxg 85\, 4ף~i4u
#.DAT([N܍j}CX/z%IX[`i5LrNxI`,>ozxfPr~Z{ :/WR"RWYܝd|-;Rs'%\{d!pgQ )Bk~ 0"n};f׆_7Ca+CQd, 42 3,RrUݭauY۰ً:Wz6MB(c 1) ߆$x ǜ
5t.m g#~cgkmC:%/ F/S:;| ,^SN0\u=Es1w':E1 ̭= x61 FD%"v\ZjW,uzs|Aթߟ ep 凡"nS"_ O`]6$\vciK"p`M3SHTgB nY!9 LdOb]"F*F95Ϡ(5 @xB)b{ϨۊP @4 F
F|Mb)k'k8(^LzQ&js' cMPM\3CmN6`g cAާ"w'KV b" (B
z&ԋL0e>D=jRA:[0+8`0x:y4.O7ӻNIH`n$5nlUKǘ, {@}"cyҴy 3{ؙ=2ukI !> "dXUT K ўOڼpɛå>GgY(Jz'1qƉr=]h`߰no4b YIoĨR Z H# {#yɛֶ VPeV :J-Dz_vX4nT ukb9[Θ!Rxt撗i͡qNG|rTHƆUlY ŗVJ OJޒ6z {O_W1o^GK[]E8%e?vEC:-vXVޛՓF!P˩O |4a8oQEW~*as~'ʙ[C./ɫu-Pšl>
d Iu bbCi 1䶾_x +i ,װJR-#4RW8lB\beWϙ pBueBn 3ԓWSF3{Be0K#xVPScem{1ʾ_ꇼuj$o6C%uoġ W8c%] a
R6?:[) Mxx8%*%:db-Xb4xrXKDK}qHơ *deBVkK6Y;x'ć
@է+(n!Vؿ N*
Eo,Q6[ġ7 :9T{2d-F"LC442Su3Sn&wEgisha&*m.?py|J)<=Z*+\b/hz_5
EčB&,4
r8_s!s$ygj7
ysI.斄/N 4QKaB!ͭ< *yOHe=]E6`TZY GV\s75 G3+AUH)M*[ 9̾2~Q7SDb﹜*">Yo[^٬3؍EOW(p`7%P 4\ph^s AYry[Ck7b'Z'&Q_gDxb
I|[+!k_y$Ёl;kC'q Jb% QXg˞u\y|:JNE [ ˁ l\{)JѩKuSź ERGz8*1yWA:ZYLSD`wg
y&g5{ ޗpGVNtP}SGM
BAUAT'dd(#@
lJ+k"݇ yo8JC?k\5QU1/xCIleAF MYXG$9d$doAN9p
8 !I пu@]t̲۳*Grlxf'V{ ;!5W.b2P $
GMU\q5! ʍ'њD#{ޤBbV"Z\\a7Iu#µ Mx̦k!) mQfI#!~yds*ZYXJҕL;tj(6_Ѣ~/n3F>r;2JWpۃ1[U|9E;RN{!I,p4u5T6_E(
Ɗ@ꯐFDžkf"
b G-W鬋
d&s
voFy` KqY Di *i4n(+#
yDZG-wJ
^$J\^q@>1Ǝ Ck"/Q0;A̴9 O[2}]]CD˩Y) 31D`+fhUagն~17Z@
tǿ x-X]"RW@?HF1&
M!b=Lm%l5 h~pIFl-9ܠt(k3 RJ|DcC@1q
X,Ҷesۥ2*Im/6qA\:[̈[ 1 hive`+m-= <*9L*7t2jGCFTUS"}h59j4.M 8m|AZ f> H$ I6̈́MԄ*mB:U_VxփMlXA Z (\
٠$hrXv/c
>B%}}^l
A)#ƅ<̾9B
TXv5طQ2מQ4=6ezϰ إ ]c&ԝ=QL7)6R(HyZ(l Z {sq(R:ǧi?WD=.dov)c 8]YAq#&,B
xN?Df/,4qt!jEhi Ų~p1h9o 1r[yp>jr,K0X {qݳT"xeL"oH
@Cʹ5m媴̧ #Ij@6kΓuO a0#N˝ޢNz|:P in*mokWm8
U=[< !XIL1n8 څsyJޏp ւDm1-1sWиh -&ٙʖ.l a
W!}TV+$=
-wvXJO(L`%ׄ {=H۷& kĸP^ nQ-PVPEKWv{h5o +{֠%hMU @Pw i|p_Z,e] %G
PMzCr+KnϷA^r_g4n9xFQeX\Ɋ_U&I*:!x) # (cK4c)I6?U Y& 0lX[o:uh;C
R#êhwKrVWCzxZ7d=8~aw 4p .>96NC`OBL{! 5O7!ݩ=ջFߓٚ&)$[`i`~ c4 t-$?Q%8%vNJ亝7^Ѹv/_b#/HFk.E"FKpc"Rg p=@请Jt%[_l`,߰3d$hLe~k:%'eBX_cGbq6IPsDW G+w,G #{h"8֪]H
Ѷ&X0`g7Jl ^J* 60T(j ة3ηaʃ ȼ$ ӽҊ[EɽK\AsGk":_eܐH8_$-PMhyJ.]:,Ϸ^
-FSW~痨kǂ< #؞?(ޏ< 7+ٙAYeȩ#ZNv[O Gb6r?t#/5Ʀf{9ھ*yC+0 ;_mlNW%U("
RM@bA<%sl
Am ; (v?,PlPGo;f % MIR*Ps: oȍ&-sdtߩ
~1BC uw
YZ