Opened 4 years ago
Closed 4 years ago
#15355 closed enhancement (fixed)
vsftpd-3.0.5
| Reported by: | Bruce Dubbs | Owned by: | Tim Tassonis |
|---|---|---|---|
| Priority: | normal | Milestone: | 11.0 |
| Component: | BOOK | Version: | git |
| Severity: | normal | Keywords: | |
| Cc: |
Description ¶
New point version
Change History (2)
comment:1 by , 4 years ago
| Owner: | changed from to |
|---|---|
| Status: | new → assigned |
- Fix build on Fedora 33 (one warning, one incorrect libcap used).
- Fix SSL build (terrible grep for symbol in vsf_findlibs.sh)!
- Fix runtime SIGSYS crashes on Fedora 33 (seccomp sandbox policy tweaks).
- Reject HTTP verbs pre-login.
- Disable TLS prior to v1.2 by default.
- Close the control connection after 10 unknown commands pre-login.
- Reject any TLS ALPN advertisement that's not 'ftp'.
- Add ssl_sni_hostname option to require a match on incoming SNI hostname.
- Fix ALPN callback to correctly select the 'ftp' string if present. Works with FileZilla-3.55.0.
- Fix a couple of seccomp policy issues with Fedora 34.
Note:
See TracTickets
for help on using tickets.
