| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: pure-ftpd | Distribution: SUSE Linux Enterprise 15 SP4 |
| Version: 1.0.49 | Vendor: openSUSE |
| Release: bp154.2.32 | Build date: Thu May 12 08:39:39 2022 |
| Group: Productivity/Networking/Ftp/Servers | Build host: s390zp21 |
| Size: 664862 | Source RPM: pure-ftpd-1.0.49-bp154.2.32.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://www.pureftpd.org | |
| Summary: A Lightweight, Fast, and Secure FTP Server | |
Pure-FTPd is a fast, production-quality, and standard-conforming FTP server, based-on Troll-FTPd. Unlike other popular FTP servers, it has no known security flaws, is trivial to set up, and is especially designed for modern Linux kernels (setfsuid and sendfile capabilities) . Features include: PAM support, IPv6, chroot()ed home directories, virtual domains, built-in LS, anti-warez system, bandwidth throttling, FXP, bounded ports for passive downloads, upload and download ratios, Apache log files, and more.
BSD-3-Clause
* Wed Oct 20 2021 Johannes Segitz <jsegitz@suse.com>
- Added hardening to systemd service(s) (bsc#1181400). Modified:
* pure-ftpd.service
* Mon May 03 2021 Luigi Baldoni <aloisio@gmx.com>
- Small cleanup
* Sat May 01 2021 Luigi Baldoni <aloisio@gmx.com>
- Fix build
* Wed May 06 2020 Peter Simons <psimons@suse.com>
- Update to version 1.0.49.
* Refresh pure-ftpd-1.0.20_ftpwho_path.patch to
pure-ftpd-1.0.49_ftpwho_path.patch.
* Tue Mar 17 2020 Max Lin <mlin@suse.com>
- BuildRequires postgresql-server-devel on Leap version >= 15.2
* Thu Dec 05 2019 Josef Möllers <josef.moellers@suse.com>
- Add pam_keyinit.so to PAM config file.
[pure-ftpd.pamd, bsc#1144058]
* Fri Jul 26 2019 matthias.gerstner@suse.com
- removal of version checks for outdated distributions
* Thu Jul 25 2019 matthias.gerstner@suse.com
- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
firewalld, see [1].
[1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html
* Tue Jun 18 2019 Peter Simons <psimons@suse.com>
- Add missing run-time dependency on system-user-ftp to ensure that
user exits. [boo#1136997]
- Processed the spec file with spec-cleaner version 1.1.3.
* Tue Apr 09 2019 Christophe Giboudeaux <christophe@krop.fr>
- Add the missing build dependency for Tumbleweed.
* Fri Mar 01 2019 psimons@suse.com
- Apply "pure-ftpd-malloc-limit.patch" to add a configuration
option that sets the process memory limit used by "ls" for
globbing. The value can be specified as optional third argument
to "-L" (or LimitRecursion in config file). Because it's
optional, the old configuration files will still work without
change with new binaries and update will be smooth. This change
allows sites that store an extremely large set of files inside a
single directory to tune their installation so that the "ls"
command in that directory will succeed without exceeding the ftpd
process memory limit. [bsc#1119187]
* Sun Feb 18 2018 avindra@opensuse.org
- Version update to 1.0.47:
* If TLS was only enabled on the control channel (-Y 1), the STAT
command would send its output as other directory listing
commands, breaking the TLS stream. This has been fixed.
* The system user “_ftp” can be used as an alternative to “ftp”
for anonymous sessions.
* Compatibility with libsodium > 1.0.12 was added (including
minimal mode).
* The prefix for Argon2-hashed passwords in LDAP has been changed
to “{argon2}” (from “{argon2i}”). Ditto for MySQL and
PostgreSQL: the authentication method is now called “argon2”
instead of “argon2i”, and includes both Argon2i and Argon2id.
- use https for main site and source download
- switch to bz2 tarball (smaller)
* Thu Jun 15 2017 tchvatal@suse.com
- Version update to 1.0.46:
* Fix build with openssl-1.1
* The Perl and Python wrappers are gone
* TLS v1.0 sessions are now refused
* Unmaintained contributions have been removed
* File globbing could take up to `GLOB_TIMEOUT` seconds
(17 seconds by default) when matching some patterns, no matter what the
configured recursion level was.
- Refresh patches:
* pure-ftpd-1.0.20_config.patch
* pure-ftpd-1.0.20_doc.patch
- Drop patch pure-ftpd-1.0.32-portrange.patch
* The upstream no longer provide pure-config.pl/py scripts for launching
* This also means the initscript and service were tweaked to reflect this
- Disable xinetd on systemd having versions where we can stick to socket
based services instead
* By default it does not make sense to have this service socket activated
tho so leave it to user to provide this
* Wed Jun 14 2017 psimons@suse.com
- Fix broken pure-ftpd.init script. We cannot use startproc to run
/usr/sbin/pure-config.pl, because the utility assumes that the
name of that executable matches the name of the started process,
which it does not in our case. Furthermore, the start script will
write a status message to stdout, so we don't have to do it in
the init script. [bsc#1042690]
* Sat May 27 2017 psimons@suse.com
- Fix build on SUSE:SLE-11, which doesn't define the RPM variable
%{_initddir}, so we have to use %{_sysconfdir}/init.d instead.
* Fri May 19 2017 psimons@suse.com
- pure-ftpd-apparmor.patch: Add an AppArmor profile (based on the
one from SLE11).
- The Factory version of pure-ftp will replace the older package in
SLE-11 as per fate#321125. That update brings the following
changes:
* These patches have been updated and renamed in the process:
* pure-ftpd-1.0.22-default_tcp_sedrcv_buffer_size.patch is now
in pure-ftpd-1.0.32-default_tcp_sedrcv_buffer_size.patch.
* pure-ftpd-1.0.21-portrange.patch is now in
pure-ftpd-1.0.32-portrange.patch.
* pure-ftpd-1.0.32-cap-audit-write.patch is now in
pure-ftpd-1.0.36-cap-audit-control.patch.
* These patches are obsolete now and have been removed:
* 0001-Act-like-a-server-even-in-TLS-mode-when-in-active-mo.patch
* 0002-Init-a-TLS-data-session-after-having-sent-the-go-ahe.patch
* 0003-add-opt_a-to-donlist.patch
* 0004-support-stat-over-tls.patch
* 0005-speedup-TLS-listing.patch
* pure-ftpd-1.0.20_config_minuid.patch
* pure-ftpd-1.0.22-fix-listing-if-directory-has-white-space-in-it.patch
* pure-ftpd-1.0.22-flush-cmd-after-tls.patch
* pure-ftpd-1.0.22-oes-bugfix-1.patch
* pure-ftpd-1.0.22-oes-bugfix-2.patch
* pure-ftpd-1.0.22-oes-bugfix.patch
* pure-ftpd-1.0.22-oes-disable-ascii.patch
* pure-ftpd-1.0.22-oes_remote_server.patch
* pure-ftpd-1.0.22-wait-on-tls-handshake.patch
* pure-ftpd-allow-crypto-settings.patch
* pure-ftpd-remove-gpl-code.patch
* Fri Aug 05 2016 tchvatal@suse.com
- Kill omc xml file useless nowdays
- Version update to 1.0.43:
* -J switch has been fixed
* openBSD compat changes
* Passwords are now hashed using Argon2i, default for puredb accounts now
* Tue May 10 2016 wr@rosenauer.org
- fix systemd unit file so the service actually starts (boo#872430)
* Thu Apr 14 2016 tchvatal@suse.com
- Add -fvisibility=hidden for bnc#971980
* Sat Jan 16 2016 mpluskal@suse.com
- Add gpg signature
* Fri Jan 08 2016 tchvatal@suse.com
- Version update to 1.0.42:
- Compilation fix for OpenBSD and Bitrig when Pure-FTPd is not
compiled with libsodium.
- The connection is now dropped if HTTP commands are received.
- LDAP force_default_gid and force_default_uid now work as documented.
- The ONLY_ACCEPT_REUSED_SSL_SESSIONS switch (introduced in Pure-FTPd
1.0.22 circa 2009, but disabled back then due to client compatibility
concerns) is now on by default, except in broken clients compatibility mode.
- libmariadb is looked for in addition to libmysqlclient
- MySQL: my_make_scrambled_password() is not always an exported
symbol any more, so pure-ftpd now ships a reimplementation.
- openssl/ec.h is not available on some Linux distributions that
disable EC in OpenSSL. This is being tested by autoconf.
- New command-line switch: -2/--certfile= to set the path to the
certificate file when using TLS.
- Support for TCP_FASTOPEN added on Linux
- The LDAP configuration file didn't allow a default gid without also
defining a default uid. This is no longer the case.
- OpenBSD's glob() left the glob_t structure uninitialized if the
pattern was larger than PATH_MAX, causing globfree() to free() an
unwanted pointer. The bug was introduced in Pure-FTPd 1.0.34.
- Refresh patch:
* pure-ftpd-1.0.20_config.patch
* Fri Jun 05 2015 tchvatal@suse.com
- Reenable sle11 builds I need for testing.
* Fri Jun 05 2015 tchvatal@suse.com
- Remove gpg/keyring, not provided now by upstream
- Cleanup with spec-cleaner
- Update to latest upstream 1.0.39:
* Explicitly include openssl/ec.h for OpenSSL 0.9.8 (CentOS 5)
* Retry if SSL_shutdown() returns -1 and SSL_ERROR_WANT_(READ|WRITE)
* The default cipher suite is now
ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SH
* TLS forward secrecy support was added. DH parameters are loaded from
TLS_DHPARAMS_FILE, if present. ECDH is also supported - Default curve
is prime256v1 (TLS_DEFAULT_ECDH_CURVE). The best curve is automatically
selected when using LibreSSL.
* scrypt hashed passwords can be used in the MySQL, PostgreSQL and
LDAP backends.
* The -C: prefix can be added to the cipher suite in order to make valid
client certificates mandatory. This is no longer a compile-time option.
* The Clear Command Channel (CCC) command is now supported.
* pure-config.py is compatible with Python 3.
* SSL (v2, v3) is refused by default.
* The PureDB backend supports the scrypt function in order to hash
passwords. This is the preferred algorithm, but requires the presence
of libsodium.
* DES-hashed passwords are not supported any more.
* LDAP uid and gid values can over overridden in the LDAP configuration file.
* RC4 was killed.
- Refreshed patches:
* pure-ftpd-1.0.20_config.patch
* pure-ftpd-1.0.20_doc.patch
* pure-ftpd-1.0.20_ftpwho_path.patch
/etc/apparmor /etc/apparmor/profiles /etc/apparmor/profiles/extras /etc/apparmor/profiles/extras/usr.sbin.pure-ftpd /etc/openldap /etc/openldap/schema /etc/openldap/schema/pureftpd.schema /etc/pam.d/pure-ftpd /etc/pure-ftpd /etc/pure-ftpd/pure-ftpd.conf /etc/pure-ftpd/vhosts /usr/bin/pure-pw /usr/bin/pure-pwconvert /usr/bin/pure-statsdecode /usr/lib/systemd/system/pure-ftpd.service /usr/sbin/pure-authd /usr/sbin/pure-certd /usr/sbin/pure-ftpd /usr/sbin/pure-ftpwho /usr/sbin/pure-mrtginfo /usr/sbin/pure-quotacheck /usr/sbin/pure-uploadscript /usr/sbin/rcpure-ftpd /usr/share/doc/packages/pure-ftpd /usr/share/doc/packages/pure-ftpd/AUTHORS /usr/share/doc/packages/pure-ftpd/FAQ /usr/share/doc/packages/pure-ftpd/HISTORY /usr/share/doc/packages/pure-ftpd/NEWS /usr/share/doc/packages/pure-ftpd/README /usr/share/doc/packages/pure-ftpd/README.AppArmor /usr/share/doc/packages/pure-ftpd/README.Authentication-Modules /usr/share/doc/packages/pure-ftpd/README.Configuration-File /usr/share/doc/packages/pure-ftpd/README.Donations /usr/share/doc/packages/pure-ftpd/README.LDAP /usr/share/doc/packages/pure-ftpd/README.MySQL /usr/share/doc/packages/pure-ftpd/README.PGSQL /usr/share/doc/packages/pure-ftpd/README.TLS /usr/share/doc/packages/pure-ftpd/README.Virtual-Users /usr/share/doc/packages/pure-ftpd/THANKS /usr/share/doc/packages/pure-ftpd/pureftpd-ldap.conf /usr/share/doc/packages/pure-ftpd/pureftpd-mysql.conf /usr/share/doc/packages/pure-ftpd/pureftpd-pgsql.conf /usr/share/licenses/pure-ftpd /usr/share/licenses/pure-ftpd/COPYING /usr/share/man/man8/pure-authd.8.gz /usr/share/man/man8/pure-certd.8.gz /usr/share/man/man8/pure-ftpd.8.gz /usr/share/man/man8/pure-ftpwho.8.gz /usr/share/man/man8/pure-mrtginfo.8.gz /usr/share/man/man8/pure-pw.8.gz /usr/share/man/man8/pure-pwconvert.8.gz /usr/share/man/man8/pure-quotacheck.8.gz /usr/share/man/man8/pure-statsdecode.8.gz /usr/share/man/man8/pure-uploadscript.8.gz
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Jul 9 16:14:43 2024