Package Release Info

proftpd-1.3.5e-bp151.4.3.1

Update Info: openSUSE-2019-1870
Available in Package Hub : 15 SP1 Update

platforms

AArch64
ppc64le
s390x
x86-64

subpackages

proftpd
proftpd-devel
proftpd-doc
proftpd-lang
proftpd-ldap
proftpd-mysql
proftpd-pgsql
proftpd-radius
proftpd-sqlite

Change Logs

Version: 1.3.5e-bp150.3.3.1
* Fri Aug 02 2019 chris@computersalat.de
- fix for boo#1142281 (CVE-2019-12815, bpo#4372)
  arbitrary file copy in mod_copy allows for remote code execution
  and information disclosure without authentication
- add patch
  * proftpd-CVE-2019-12815.patch
    taken from:
  - http://bugs.proftpd.org/show_bug.cgi?id=4372
  - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3
* Tue Jul 10 2018 chris@computersalat.de
- update to 1.3.5e
  * Fixed SFTP issue with umac-64@openssh.com digest/MAC.
  * Fixed regression with mod_sftp rekeying.
  * Backported fix for "AllowChrootSymlinks off" checking each component
    for symlinks (CVE-2017-7418).
- remove obsolete patch
  * proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
  * proftpd-dist.patch
  * proftpd-no_BuildDate.patch
  * proftpd_include-in-limit-section.patch
Version: 1.3.5d-bp150.2.3
* Fri Jul 21 2017 bwiedemann@suse.com
- Sort SHARED_MODS list to fix build compare (boo#1041090)
* Fri Jun 16 2017 nmoudra@suse.com
- Removed xinetd service
* Fri Apr 07 2017 chris@computersalat.de
- fix for boo#1032443 (CVE-2017-7418)
  * AllowChrootSymlinks not enforced by replacing a path component
    with a symbolic link
  * add upstream commit (ecff21e0d0e84f35c299ef91d7fda088e516d4ed)
    as proftpd-AllowChrootSymlinks.patch
- fix proftpd-tls.template
  * reduce TLS protocols to TLSv1.1 and TLSv1.2
  * disable TLSCACertificateFile
  * add TLSCertificateChainFile
* Thu Mar 23 2017 jengelh@inai.de
- Remove --with-pic, there are no static libs.
- Replace %__-type macro indirections.
- Replace old $RPM shell vars by macros.
* Mon Mar 06 2017 chris@computersalat.de
- fix and update proftpd-basic.conf.patch
- add some sample config and templates for tls
  * proftpd-tls.template
  * proftpd-limit.conf
  * proftpd-ssl.README
* Sun Feb 05 2017 chris@computersalat.de
- backport upstream feature
  * include-in-limit-section (gh#410)
  * add proftpd_include-in-limit-section.patch
* Tue Jan 17 2017 chris@computersalat.de
- update to 1.3.5d
  * gh#4283 - All FTP logins treated as anonymous logins again.  This is a
  regression of gh#3307.
* Sun Jan 15 2017 chris@computersalat.de
- update to 1.3.5c
  * SSH rekey during authentication can cause issues with clients.
  * Recursive SCP uploads of multiple directories not handled properly.
  * LIST returns different results for file, depending on path syntax.
  * "AuthAliasOnly on" in server config breaks anonymous logins.
  * CapabilitiesEngine directive not honored for <IfUser>/<IfGroup>
    sections.
  * Support OpenSSL 1.1.x API.
  * Memory leak when mod_facl is used.
-rebase proftpd-no_BuildDate.patch
* Sat Aug 27 2016 chris@computersalat.de
- fix systemd vs SysVinit
* Sun May 08 2016 jengelh@inai.de
- Remove redundant spec sections
- Ensure systemd-tmpfiles is called for the provied config file
* Sun May 08 2016 chris@computersalat.de
- fix for boo#970890 (CVE-2016-3125)
- update to 1.3.5b:
  http://www.proftpd.org/docs/RELEASE_NOTES-1.3.5b
  * SSH RSA hostkeys smaller than 2048 bits now work properly.
  * MLSD response lines are now properly CRLF terminated.
  * Fixed selection of DH groups from TLSDHParamFile.
- rebase proftpd-no_BuildDate.patch
* Sun May 31 2015 chris@computersalat.de
- fix for boo#927290 (CVE-2015-3306)
- update to 1.3.5a:
  See http://www.proftpd.org/docs/NEWS-1.3.5a
- rebase patches
  * proftpd-ftpasswd.patch
  * proftpd-no_BuildDate.patch
- remove gpg-offline dependency
- fix permissions on passwd file
  * unable to use world-readable AuthUserFile '.../passwd' (perms 0644):
  * 0644 -> 0440
* Mon Sep 01 2014 andreas.stieger@gmx.de
- ProFTPD 1.3.5
  * Added support for SHA-256, SHA-512 password hashes to the ftpasswd tool
  * New Modules
    mod_geoip, mod_log_forensic, mod_rlimit, mod_snmp, mod_dnsbl
  * mod_sftp now supports ECC, ECDSA, ECDH
  * Improved FIPS support in mod_sftp.
  * mod_sftp module now honors the MaxStoreFileSize directive.
  * Many new and changed configuration directives
- update proftpd-no_BuildDate.patch
* Mon Sep 01 2014 andreas.stieger@gmx.de
- proftpd 1.3.4e:
  Multiple other backported fix from the 1.3.5 branch.
  See http://www.proftpd.org/docs/NEWS-1.3.4e
- The fix for the mod_sftp/mod_sftp_pam memory allocation
  (CVE-2013-4359) contained in this release was previously patched
  into the package.
- adjust proftpd-no_BuildDate.patch for context changes
- remove proftpd-sftp-kbdint-max-responses-bug3973.patch, upstream
* Tue Mar 25 2014 crrodriguez@opensuse.org
- Remove tcpd-devel from buildRequires and mod_wrap.
  support for tcp_wrappers style /etc/hosts.* is provided
  by mod_wrap2_file instead, the latter does not require tcpd.
* Mon Mar 17 2014 chris@computersalat.de
- fix for bnc#844183
  * proftpd fails to start due to missing /run/proftpd
- add own tmpfiles.d file
  * proftpd.tmpfile
* Thu Oct 03 2013 chris@computersalat.de
- update to 1.3.4d
  * Fixed broken build when using --disable-ipv6 configure option
  * Fixed mod_sql "SQLAuthType Backend" MySQL issues
- fix for bnc#843444 (CVE-2013-4359)
  * http://bugs.proftpd.org/show_bug.cgi?id=3973
  * add proftpd-sftp-kbdint-max-responses-bug3973.patch
* Mon Jul 29 2013 crrodriguez@opensuse.org
- Improve systemd service file
- use upstream tmpfiles.d file. related to [bnc#811793]
- Use /run instead of /var/run
* Wed May 01 2013 chris@computersalat.de
- update to 1.3.4c
  * Added Spanish translation.
  * Fixed several mod_sftp issues, including SFTPPassPhraseProvider,
    handling of symlinks for REALPATH requests, and response code logging.
  * Fixed symlink race for creating directories when UserOwner is in effect.
  * Increased performance of FTP directory listings.
- rebase and rename patches (remove version string)
  * proftpd-1.3.4a-dist.patch -> proftpd-dist.patch
  * proftpd-1.3.4a-ftpasswd.patch -> proftpd-ftpasswd.patch
  * proftpd-1.3.4a-strip.patch -> proftpd-strip.patch
* Fri Feb 08 2013 chris@computersalat.de
- fix proftpd.conf (rebase basic.conf patch)
  * IdentLookups is now a seperate module
    <IfModule mod_ident.c> IdentLookups on/off </IfModule>
    is needed and module is not built cause crrodriguez disabled it.