Opened 3 weeks ago

Closed 2 weeks ago

#15096 closed enhancement (fixed)

vsftpd-3.0.4

Reported by: Bruce Dubbs Owned by: Bruce Dubbs
Priority: normal Milestone: 10.2
Component: BOOK Version: git
Severity: normal Keywords:
Cc:

Description

New point version.

Change History (4)

comment:1 by Bruce Dubbs, 2 weeks ago

Owner: changed from blfs-book to Bruce Dubbs
Status: newassigned

comment:2 by Bruce Dubbs, 2 weeks ago

v3.0.4 released!

  • Fix build on Fedora 33 (one warning, one incorrect libcap used).
  • Fix SSL build (terrible grep for symbol in vsf_findlibs.sh)!
  • Fix runtime SIGSYS crashes on Fedora 33 (seccomp sandbox policy tweaks).
  • Reject HTTP verbs pre-login.
  • Disable TLS prior to v1.2 by default.
  • Close the control connection after 10 unknown commands pre-login.
  • Reject any TLS ALPN advertisement that's not 'ftp'.
  • Add ssl_sni_hostname option to require a match on incoming SNI hostname.

comment:3 by Bruce Dubbs, 2 weeks ago

Summary: vsftpd-30.4vsftpd-3.0.4

comment:4 by Bruce Dubbs, 2 weeks ago

Resolution: fixed
Status: assignedclosed

Fixed at revision b278caafeaa4c34c5585ce31233e6dee4ccc6c88

Update to:
      cryptsetup-2.3.6
      gnutls-3.7.2
      nss-3.66
      vsftpd-3.0.4
Note: See TracTickets for help on using tickets.