baserev update by copy to link target

• Files Changed
• Browse Source

Prepare for RPM 4.20

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Add pure-ftpd.ftpusers, the netcfg one is not maintained, outdated
  and will be removed.
- pure-ftpd.pam: use own copy of ftpusers.
- Remove hard systemd requires, it's not necessary.

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Migration of PAM settings to /usr/lib/pam.d. 

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- update to 1.0.51:
  * Compatibility with OpenSSL 1.1.0 was improved.
  * PostgreSQL: the port number is not escaped any more in connection
    strings.
  * TLS tickets are issued but not renewed - This fixes compatibility
    issues with some clients.
  * PureDB: additional checks for corrupted databases have been added,
    and synchronization to disk uses F_FULLFSYNC on macOS X.

• Files Changed
• Browse Source

- Update to version 1.0.50:
  * Support for MD5, SHA1 and MySQL PASSWORD() function were removed for
    password hashing. You should now use scrypt, argon2 or the system crypt(3)
    function.
  * Soft fail if a USER command is received without TLS and the server is
    configured to enforce TLS. Previously, the session was immediately closed,
    but that was too brutal for some clients.
  * Allow connections from the class E network range -- apparently
    required in some cases when using Linux containers.
  * Large file listings used to require way more stack allocations than
    necessary, possibly reaching hard-coded limits and causing a forced
    session close. This has been fixed. (boo#1160111, CVE-2019-20176)
  * The SPSV command has been removed.
  * Under some circunstances, the server would not start when configured
    with directory aliases. This has been fixed.
  * PostgreSQL: hard-coded global configuration strings were not escaped.
    This has been fixed.
  * A warning is now printed when a transfer happens in ASCII mode, as
    this is rarely intentional.
  * Compilation with --without-ascii is now possible again.
  * Configuration options for features that have been disabled at
    compile-time are not parsed any more.
  * When virtual quotas were configured, files were removed after an
    upload if the size quota was exceeded, but not during the upload. This
    has been fixed. (boo#1190205, CVE-2021-40524)
  * A configuration file can now include other files with the `Include`
    directive.
  * Fix an out-of-bound read (boo#1164805, CVE-2020-9365).
  * Fix a potential uninitialized pointer vulnerability (boo#1165134,
    CVE-2020-9274).

• Files Changed
• Browse Source

Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

- Add log entry to make Factory happy

• Files Changed
• Browse Source

initialized devel package after accepting 889723

• Files Changed
• Browse Source

Clean up work remnants in the specfile

• Files Changed
• Browse Source

Resurrecting the package

• Files Changed
• Browse Source

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source

update change log

• Files Changed
• Browse Source

Update to upstream version 1.0.49, build with ExtAuth support

• Files Changed
• Browse Source

baserev update by copy to link target

• Files Changed
• Browse Source