Opened 5 years ago

Closed 5 years ago

Last modified 5 years ago

#15096 closed enhancement (fixed)

vsftpd-3.0.4

Reported by: Bruce Dubbs Owned by: Bruce Dubbs
Priority: normal Milestone: 11.0
Component: BOOK Version: git
Severity: medium Keywords:
Cc:

Description

New point version.

Change History (5)

comment:1 by Bruce Dubbs, 5 years ago

Owner: changed from blfs-book to Bruce Dubbs
Status: new → assigned

comment:2 by Bruce Dubbs, 5 years ago

v3.0.4 released!

  • Fix build on Fedora 33 (one warning, one incorrect libcap used).
  • Fix SSL build (terrible grep for symbol in vsf_findlibs.sh)!
  • Fix runtime SIGSYS crashes on Fedora 33 (seccomp sandbox policy tweaks).
  • Reject HTTP verbs pre-login.
  • Disable TLS prior to v1.2 by default.
  • Close the control connection after 10 unknown commands pre-login.
  • Reject any TLS ALPN advertisement that's not 'ftp'.
  • Add ssl_sni_hostname option to require a match on incoming SNI hostname.

comment:3 by Bruce Dubbs, 5 years ago

Summary: vsftpd-30.4 → vsftpd-3.0.4

comment:4 by Bruce Dubbs, 5 years ago

Resolution: → fixed
Status: assigned → closed

Fixed at revision b278caafeaa4c34c5585ce31233e6dee4ccc6c88 

Update to:
      cryptsetup-2.3.6
      gnutls-3.7.2
      nss-3.66
      vsftpd-3.0.4

comment:5 by Bruce Dubbs, 5 years ago

Milestone: 10.2 → 11.0

Milestone renamed

Note: See TracTickets for help on using tickets.