Package: vsftpd / 3.0.2-17+deb8u1

Metadata

Package Version Patches format
vsftpd 3.0.2-17+deb8u1 3.0 (quilt)

Patch series

view the series file
Patch File delta Description
0025 unconditional_utf8_report.patch | (download)

features.c | 1 0 + 1 - 0 !
1 file changed, 1 deletion(-)

 remove unconditional utf-8 report
0020 manpage hyphen.patch | (download)

vsftpd.8 | 6 3 + 3 - 0 !
vsftpd.conf.5 | 4 2 + 2 - 0 !
2 files changed, 5 insertions(+), 5 deletions(-)

 manpage escaped minus
0001 builddefs.patch | (download)

builddefs.h | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 build with tcpwrapper and ssl support.

0002 config.patch | (download)

tunables.c | 4 2 + 2 - 0 !
vsftpd.conf | 46 38 + 8 - 0 !
vsftpd.conf.5 | 4 2 + 2 - 0 !
3 files changed, 42 insertions(+), 12 deletions(-)

 set default configuration.

0003 db doc.patch | (download)

EXAMPLE/VIRTUAL_USERS/README | 5 4 + 1 - 0 !
1 file changed, 4 insertions(+), 1 deletion(-)

 A short explanation how to find out the right db version (Closes: #478282).

0004 link local.patch | (download)

standalone.c | 12 12 + 0 - 0 !
sysutil.c | 13 13 + 0 - 0 !
sysutil.h | 3 3 + 0 - 0 !
3 files changed, 28 insertions(+)

 vsftpd does not accept IPv6 scope identifier in listen_address6
 (Closes: #544993).
 .
 When specifying a link-local address, you need a scope identifier (tha name of
 the index usually), thus you cannot use the following:
 listen_address6=fe80::21f:16ff:fe06:3aab
 but you have to use:
 listen_address6=fe80::21f:16ff:fe06:3aab%eth0
 so that it is clear on which interface this link-local address should be used.
 .
 Unfortunately, vsftpd does not correctly parse the address mentioned above and
 thus fails to be useful in link-local-only environments.
 .
 This patch fixes it.

0005 whitespaces.patch | (download)

parseconf.c | 2 1 + 1 - 0 !
str.c | 12 12 + 0 - 0 !
str.h | 1 1 + 0 - 0 !
sysutil.c | 12 12 + 0 - 0 !
sysutil.h | 1 1 + 0 - 0 !
5 files changed, 27 insertions(+), 1 deletion(-)

 trim white spaces from option values (closes: #419857, #536803).

0006 greedy.patch | (download)

ls.c | 19 19 + 0 - 0 !
1 file changed, 19 insertions(+)

 fix file listing issue with wildcard (bugzilla: #392181).

0007 utf8.patch | (download)

features.c | 4 4 + 0 - 0 !
parseconf.c | 1 1 + 0 - 0 !
tunables.c | 2 2 + 0 - 0 !
tunables.h | 1 1 + 0 - 0 !
4 files changed, 8 insertions(+)

 adding support for utf8.

0008 manpage.patch | (download)

vsftpd.8 | 1 0 + 1 - 0 !
vsftpd.conf.5 | 2 1 + 1 - 0 !
2 files changed, 1 insertion(+), 2 deletions(-)

 fixing manpage formating.

0009 s390.patch | (download)

sysdeputil.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 fix vsftpd on s390 (closes: #602726).

0010 remote dos.patch | (download)

sysdeputil.c | 38 36 + 2 - 0 !
1 file changed, 36 insertions(+), 2 deletions(-)

 remote dos on linux 2.6.32 (closes: #629373).

0011 alpha.patch | (download)

sysdeputil.c | 3 3 + 0 - 0 !
1 file changed, 3 insertions(+)

 fixing ftbfs on alpha (closes: #656182).

0012 buildflags.patch | (download)

Makefile | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 avoid overwriting build environment.

0013 listen.patch | (download)

vsftpd.conf | 14 8 + 6 - 0 !
vsftpd.conf.5 | 5 3 + 2 - 0 !
2 files changed, 11 insertions(+), 8 deletions(-)

 removes exclusivity between listen and listen_ipv6 bz#450853

0014 ssl cert.patch | (download)

vsftpd.conf | 4 3 + 1 - 0 !
1 file changed, 3 insertions(+), 1 deletion(-)

 using ssl-cert for snakeoil certificate.

0015 disable clone newpid.patch | (download)

sysdeputil.c | 4 2 + 2 - 0 !
1 file changed, 2 insertions(+), 2 deletions(-)

 drop clone_newpid from clone call
 Kernel audit system prohibits the processes created with CLONE_NEWPID, so an
 attempt to log into ftp server ends with
 .
   audit_log_acct_message() failed: Operation not permitted
 .
 https://bugzilla.novell.com/show_bug.cgi?id=786024#c38

0030 kfreebsd.patch | (download)

sysdeputil.c | 4 4 + 0 - 0 !
1 file changed, 4 insertions(+)

  Neither FreeBSD nor GNU/kFreeBSD have libpcap.  Avoid confusing
  sys/capability.h kernel header with libpcap's
0035 address_space_limit.patch | (download)

defs.h | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 increase address space limit
0040 disable anonymous.patch | (download)

EXAMPLE/INTERNET_SITE/vsftpd.conf | 2 1 + 1 - 0 !
EXAMPLE/INTERNET_SITE_NOINETD/vsftpd.conf | 2 1 + 1 - 0 !
vsftpd.conf | 6 3 + 3 - 0 !
vsftpd.conf.5 | 2 1 + 1 - 0 !
4 files changed, 6 insertions(+), 6 deletions(-)

 disable anonymous login
0045 seccomp gettimeofday.patch | (download)

seccompsandbox.c | 1 1 + 0 - 0 !
1 file changed, 1 insertion(+)

 permit gettimeofday() in seccomp sandbox
 This permits log message generation, without which vsftpd fails completely.
0050 CVE 2015 1419.patch | (download)

ls.c | 37 36 + 1 - 0 !
str.c | 11 11 + 0 - 0 !
str.h | 1 1 + 0 - 0 !
3 files changed, 48 insertions(+), 1 deletion(-)

 cve-2015-1419: config option deny_file is not handled correctly
0055 set_default_listen.patch | (download)

tunables.c | 2 1 + 1 - 0 !
1 file changed, 1 insertion(+), 1 deletion(-)

 change the default of tunable_listen.
 Change the default of tunable_listen to the same as in
 man page vsftpd.conf.