proftpd-pgsql-1.3.6e-bp153.1.17 >
A `L%u!M@eee* (T53Qu1E w$G7xoٞsh S
ܣzd: [ fK9 oQ
{ -|Zbr5|~&; 2HP6C}
faǹ *p`d< }&0V{ܶϏ|yyJÉU4[92223cc7b8690c2a26f5f1acbbab2cf887629a80 404934c9116ae0eb2dd3e776da7a527ec7928767d7110b258b10fb042efe6a7b Uh `L%u!M@eee C]!m@s^b r1kq?{~smh֭<?]UZ- 8yз K44Bffr
SRp0NN]V
Gq{aH3a0 ĵo }8\O4 2 B3
Bfvޟ e[ |Fjv3nQϵQkA1&)i\>f %
̣U %t49vJډ D > p > *x ? *h d " @ l p |
"
$ ( i
l p u z ( 8 9 L : F ' G ' H ' I ' X ' Y ' \ ( ] ( ^ ( b (, c ( d ); e )@ f )C l )E u )X v )\ w ) x ) y ) z * * * *" *d C proftpd-pgsql 1.3.6e bp153.1.17 PostgreSQL Module for ProFTPD This is the PostgreSQL Module for ProFTPD `L%Pold-atreju2 0SUSE Linux Enterprise 15 SP3 openSUSE GPL-2.0-or-later https://bugs.opensuse.org Productivity/Networking/Ftp/Servers http://www.proftpd.org/ linux x86_64 0 `L%Ic495eccb509c833dd759935c503744f1ee06def5a83029ec0ad4b4f10d0454fe root root proftpd-1.3.6e-bp153.1.17.src.rpm proftpd-pgsql proftpd-pgsql(x86-64) @ @ @ @
libc.so.6()(64bit) libc.so.6(GLIBC_2.2.5)(64bit) libc.so.6(GLIBC_2.4)(64bit) libpq.so.5()(64bit) proftpd rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 1.3.6e 3.0.4-1 4.6.0-1 4.0-1 5.2-1 4.14.1 _^@^3^S^5h@^C]@]o]@]D%]\@\+@[E@[DYqYC@X@XӸXO@XX~@X{d@WW/*@W/*@UjDominique Leuenberger chris@computersalat.de chris@computersalat.de chris@computersalat.de chris@computersalat.de chris@computersalat.de Martin Hauke Bernhard Wiedemann chris@computersalat.de chris@computersalat.de Jan Engelhardt Jan Engelhardt chris@computersalat.de chris@computersalat.de bwiedemann@suse.com nmoudra@suse.com chris@computersalat.de jengelh@inai.de chris@computersalat.de chris@computersalat.de chris@computersalat.de chris@computersalat.de chris@computersalat.de jengelh@inai.de chris@computersalat.de chris@computersalat.de - Update to version 1.3.6e:
+ Invalid SCP command leads to null pointer dereference.
- Do not limit to openSSL < 1.1: proftpd has had support for
openSSL 1.1 sice version 1.3.6a.
- Rebase proftpd-no_BuildDate.patch. - update to 1.3.6d
* Issue 857 - Fixed regression in the handling of `%{env:...}` configuration
variables when the environment variable is not present.
* Issue 940 - Second LIST of the same symlink shows different results.
* Issue 959 - FTPS uploads using TLSv1.3 are likely to fail unexpectedly.
* Issue 980 - mod_sftp sends broken response when CREATETIME attribute is
requested.
* Bug 4398 - Handle zero-length SFTP WRITE requests without error.
* Issue 1018 - PidFile should not be world-writable.
* Issue 1014 - TLSv1.3 handshake fails due to missing session ticket key on
some systems.
* Issue 1023 - Lowercased FTP commands not properly identified.
- rebase proftpd-no_BuildDate.patch - fix for boo#1164572 (CVE-2020-9272, gh#902)
- fix for boo#1164574 (CVE-2020-9273, gh#903)
- update to 1.3.6c
* Fixed regression in directory listing latency (Issue #863).
* Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
converting them to supported format.
* Fixed use-after-free vulnerability during data transfers (Issue #903).
* Fixed out-of-bounds read in mod_cap by updating the bundled libcap
(Issue #902).
- remove obsolete proftpd-tls-crls-issue859.patch
- rebase patches
* proftpd-ftpasswd.patch
* proftpd-no_BuildDate.patch
* proftpd_env-script-interpreter.patch - cleanup tls.template
* remove deprecated NoCertRequest from TLSOptions - fix changes file
* add missing info about boo#1155834
* add missing info about boo#1154600
- fix for boo#1156210
* GeoIP has been discontinued by Maxmind
* remove module build for geoip
see https://support.maxmind.com/geolite-legacy-discontinuation-notice/
- fix for boo#1157803 (CVE-2019-19269), boo#1157798 (CVE-2019-19270)
* add upstream patch proftpd-tls-crls-issue859.patch - fix for boo#1154600 (CVE-2019-18217, gh#846)
- update to 1.3.6b
* Fixed pre-authentication remote denial-of-service issue (Issue #846).
* Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
- update to 1.3.6a
* Fixed symlink navigation (Bug#4332).
* Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
* Fixed SITE COPY honoring of restrictions (Bug#4372).
* Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
* Fixed restarts when using mod_facl as a static module
- remove obsolete proftpd-CVE-2019-12815.patch
* included in 1.3.6a (Bug#4372)
- add proftpd_env-script-interpreter.patch
* RPMLINT fix for env-script-interpreter (Badness: 9) - fix for boo#1155834
* Add missing Requires(pre): group(ftp) for Leap 15 and Tumbleweed
* Add missing Requires(pre): user(ftp) for Leap 15 and Tumbleweed - Update proftpd-dist.patch to use pam_keyinit.so (boo#1144056) - fix for boo#1142281 (CVE-2019-12815, bpo#4372)
arbitrary file copy in mod_copy allows for remote code execution
and information disclosure without authentication
- add patch
* proftpd-CVE-2019-12815.patch
taken from:
- http://bugs.proftpd.org/show_bug.cgi?id=4372
- https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3 - update changes file
* add missing info about bugzilla 1113041 - Fix the Factory build: select the appropriate OpenSSL version
to build with. (fix for boo#1113041) - Reduce hard dependency on systemd to only that which is
necessary for building and installation.
- Modernize RPM macro use (%make_install, %tmpfiles_create).
- Strip emphasis from description and trim other platform mentions. - update to 1.3.6
* Support for using Redis for caching, logging; see the doc/howto/Redis.html
documentation.
* Fixed mod_sql_postgres SSL support (Issue #415).
* Support building against LibreSSL instead of OpenSSL (Issue #361).
* Better support on AIX for login restraictions (Bug #4285).
* TimeoutLogin (and other timeouts) were not working properly for SFTP
connections (Bug#4299).
* Handling of the SIGILL and SIGINT signals, by the daemon process, now causes
the child processes to be terminated as well (Issue #461).
* RPM .spec file naming changed to conform to Fedora guidelines.
* Fix for "AllowChrootSymlinks off" checking each component for symlinks
(CVE-2017-7418).
- New Modules:
* mod_redis, mod_tls_redis, mod_wrap2_redis
With Redis now supported as a caching mechanism, similar to Memcache,
there are now Redis-using modules: mod_redis (for configuring the Redis
connection information), mod_tls_redis (for caching SSL sessions and
OCSP information using Redis), and mod_wrap2_redis (for using ACLs stored
in Redis).
- Changed Modules:
* mod_ban
The mod_ban module's BanCache directive can now use Redis-based caching;
see doc/contrib/mod_ban.html#BanCache.
- New Configuration Directives
* SQLPasswordArgon2, SQLPasswordScrypt
The key lengths for Argon2 and Scrypt-based passwords are now configurable
via these new directives; previously, the key length had been hardcoded
to be 32 bytes, which is not interoperable with all other implementations
(Issue #454).
- Changed Configuration Directives
* AllowChrootSymlinks
When "AllowChrootSymlinks off" was used, only the last portion of the
DefaultRoot path would be checked to see if it was a symlink. Now,
each component of the DefaultRoot path will be checked to see if it is
a symlink when "AllowChrootSymlinks off" is used.
* Include
The Include directive can now be used within a section, e.g.:
Include /path/to/allowed.txt
DenyAll
- API Changes
* A new JSON API has been added, for use by third-party modules.
- remove obsolete proftpd_include-in-limit-section.patch
- rebase patches
* proftpd-ftpasswd.patch
* proftpd-no_BuildDate.patch - update to 1.3.5e
* Fixed SFTP issue with umac-64@openssh.com digest/MAC.
* Fixed regression with mod_sftp rekeying.
* Backported fix for "AllowChrootSymlinks off" checking each component
for symlinks (CVE-2017-7418).
- remove obsolete patch
* proftpd-AllowChrootSymlinks.patch (now included)
- rebase patches
* proftpd-dist.patch
* proftpd-no_BuildDate.patch
* proftpd_include-in-limit-section.patch - Sort SHARED_MODS list to fix build compare (boo#1041090) - Removed xinetd service - fix for boo#1032443 (CVE-2017-7418)
* AllowChrootSymlinks not enforced by replacing a path component
with a symbolic link
* add upstream commit (ecff21e0d0e84f35c299ef91d7fda088e516d4ed)
as proftpd-AllowChrootSymlinks.patch
- fix proftpd-tls.template
* reduce TLS protocols to TLSv1.1 and TLSv1.2
* disable TLSCACertificateFile
* add TLSCertificateChainFile - Remove --with-pic, there are no static libs.
- Replace %__-type macro indirections.
- Replace old $RPM shell vars by macros. - fix and update proftpd-basic.conf.patch
- add some sample config and templates for tls
* proftpd-tls.template
* proftpd-limit.conf
* proftpd-ssl.README - backport upstream feature
* include-in-limit-section (gh#410)
* add proftpd_include-in-limit-section.patch - update to 1.3.5d
* gh#4283 - All FTP logins treated as anonymous logins again. This is a
regression of gh#3307. - update to 1.3.5c
* SSH rekey during authentication can cause issues with clients.
* Recursive SCP uploads of multiple directories not handled properly.
* LIST returns different results for file, depending on path syntax.
* "AuthAliasOnly on" in server config breaks anonymous logins.
* CapabilitiesEngine directive not honored for /
sections.
* Support OpenSSL 1.1.x API.
* Memory leak when mod_facl is used.
-rebase proftpd-no_BuildDate.patch - fix systemd vs SysVinit - Remove redundant spec sections
- Ensure systemd-tmpfiles is called for the provied config file - fix for boo#970890 (CVE-2016-3125)
- update to 1.3.5b:
http://www.proftpd.org/docs/RELEASE_NOTES-1.3.5b
* SSH RSA hostkeys smaller than 2048 bits now work properly.
* MLSD response lines are now properly CRLF terminated.
* Fixed selection of DH groups from TLSDHParamFile.
- rebase proftpd-no_BuildDate.patch - fix for boo#927290 (CVE-2015-3306)
- update to 1.3.5a:
See http://www.proftpd.org/docs/NEWS-1.3.5a
- rebase patches
* proftpd-ftpasswd.patch
* proftpd-no_BuildDate.patch
- remove gpg-offline dependency
- fix permissions on passwd file
* unable to use world-readable AuthUserFile '.../passwd' (perms 0644):
* 0644 -> 0440 old-atreju2 1615603024 1.3.6e-bp153.1.17 1.3.6e-bp153.1.17 mod_sql_postgres.so /usr/lib64/proftpd/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection obs://build.opensuse.org/openSUSE:Backports:SLE-15-SP3/standard/e4b1b4a41abce4c0d963ca75ba162d4b-proftpd cpio xz 5 x86_64-suse-linux ELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=cf7ea870c9a2777e4c20c7b3262fa2c0f2548f4b, not stripped R R R R :A+Sq/9&MG utf-8 4d194150f608dbb234084ce48fdf92d47afa18e5c4b3eb1cf21956dd89773471 ? 7zXZ
! t/C&]
crv9w{t4ǯv$IyX!>8IW<įb~֠X# eTrk,H x岹{K
XfR?-y#-ٲk:;%8'?wgN1CnW`547(&bXqhץdmpN4w)CB=+&}>~zWz`boFɜG߭ߠ- r"S SM<56Ҡv
hkSPᔪ,G`0~~ܓ Z;,6f:=7N24 1seEc5(+B\{3Z?|SFPMWߋ?~҅~n[խ5"BK!r*zr| `k|$7;3,ugyk#& 1eu;=4ͨ N|:5 N#!k? k\~آoyмhZזe'MH^ZpyZD%} p(#NkAe:C o+
ݏ]͖ Khė(VUUU>O](E]}9qjت9sGrm~&lv+MEs)5bE-H:9!BS#kz(EQ A)R^bR~IcgR? JP,Ap4 +fIXsú:Km'_p{Ȍ }l#[{Qi/Oڶfq#vB
^J
6lWkvRR 6J8p`2 FtH/w]QD}f5[
#wplLW6{W L\ 2)K9vYCM#I@"BsUu[Ǜ毴/1jƟͶ NH4Kh de M85
n+f)WeUгOuL âpHwtYrW 9s";;79(P8ᧈ%!ڥwd5;$
6eH/r=rux٣6vt <:sX>b%SN #. xDc]0 z3ɗ ),%:+M D~a}ŁhcDQ?Du ?ZEChAh9KҔ=3fh:$.+⯖
>=Z$) j81Z㺜Te:6|@.H6l; ɛwb
c6PBpaA]|u&}rgkOydɌlX]9(e?TUqhd19^%\jwءya|)X.@ aIhdŕRI +xH56l.W֨J~.G{ȓm,耆h,Ê"Fzyx蔧6d5 L|]]#(] A^:Z4pw`[:4\z2Xg'
p={zM
8lv {
Lɭ `]
V fJ.BiH
ĩVi/7')sC ?މ0i=AJ;eNmk_78 +%~ )g&Ck9;VkM@lk2dEo!~?v%I5?Sy?HBSJ[y+⃯Bw xf-Pީns[`Ga'3JO >b͑uZxSy&*#aK&L> _/ 29}% ~S X^mzyH|
#Fc]PS
*};8 cCu ; .#* S1`0c7X1 H !{֍:Uiqy-LB5! A/NivM?4X lʶM>CVIL23l!';{7`+6 kh8]/z+Ź AђFYNƔrv-őYI(aԸ̓}dA ʚ2i5#iAmJ^K:%{Hcl$o/z#K= ; Qi8Anء2s.n,y!n8 4oxr{g{5{+QlVCmؔ(p7_! iSo-8dnz5[le"f[望
Cx\=M+rIS eL1}ۋ[Q\qc#OLV1x=5=q.Z\WNEBӀtX~ ~
TدN쉉@WV+ a)Ml_ .3 .'U紼 `8Baʛ-W8dҀ
4+zVpQHWյGJ/^%4g%vʝ ̦ >GJs̹i^*'sV7jͣ7w 1x)Lj*2b'ōӋ엎ҫX*b?-|.'$9/ @
+[aYL d*gLṶǓ ñs/
FGZ<ŘCά2%8^F_V[Ǵ5ݫ^"cE(gB|y$sh)F4a%.sE
^MG3,~XeoN yݶ̉TB ǯn䨝h+7ٔ#Ƣ락NLdJ9s4'vkɣF ҿ~ Ʊw bD(LNB
ddI(KJ@GrnX 6a'9BV {n ~S(Gr2'0؊_! 3<閑:dv+ na{Rf]]ms7D^U;qM1qٝfX0$CrTw- 2c% 6g75I`0(5E@՝ Y,/U6zf-N禟eF5.άQؽp-R1}Bgab@ c@nƎsۦlҹ"5L"raꎃFXA8e}=3 P ;$ >wS셟QCd
ݐz\L4%hZ t-ZqEݖ 7 ʈv_:gɇljED>m\* (+B~hegԀWeDuXAzJn MyB©zp))inZƺ߷10y>
/GELZn- "!}#sp)!=Fd" {Fܚj [vD+p[r҃HyK/愚>+/Q"-D9#Dw^ HRc0W}7\i5:)0 {`E% [(ڤ=^ 6 V(`T *u$鐬<mAAGQ{k7h{ySlެ [8fҮK76 O[K@iF4tg32muۀgw/տRK-b,\x]F7Ix$C+p
?H&O"QL) Vllcip %b<)uM>;MJ,}seID3eEP87.n j-Z 3 kR {*%p~ #a*
M6ľ/D83>$ϩz+EÚ1m b2 C7NuGQ \؋Enobḿ 90p&҂)?I~B;Ǖ 5ͮ/(@ t$dӏ ,4=Ck |`M:MW xɇ;2> ].Mt7sK"GItt2Yxn!n_dU}m | 1nn<ZZA4XqIϯQ= Q.jllhcZ+S$ Չl9}`e;ۄ@b|^lFϫn
}JTֵ/ {
b0)zWa ~
qd}f<z~
C;zH(.)<ȂIftxSE"ͺ]'o0q,ċ-UϜtZ â; $
>HHT8emDޯ|2mЃqD"g4v W,Lq L&]JnB_Зc%%(#ɖ}Uk5W
K" ΒLd?O
^e>0?W}%lKC8RY3^t A \Rac3G4>Ld
]'Kp..r2KF ɬ_Zފm
?!a{kf{){@
G#Xqαu `$e}
g:F*Go]SW7,QM F_+Z#CuњjpsZB!N_/}d.&BEMr8[ I>0cS7iz`҆ CXy>Ʉ+]\qK.
T?>ЌO60vծK,| ڄ7W܊^2J 4$NWSW<+[g M8XRS`'
g3(ԃl(ڧ1Xs'mt==1<
3U]\ty
[WMԼ
3Ot
M@Gc({9ToS5rD|8b;¯wf;2^ skQF7[O5ӓGʒ[_S;̺GL. 2^HcDSlZe}B C)@MwFӪ=9S7 }*6
|>:
+j" k=&i8Xq= x/k\~Ií]Wi"f?2#t*:Π(ɣCQrk"D``R̬!Df+}s_YᲙf Xޏ> 4N/p2W*xK$O0D Db hl {A
ѡgQ>X [|Wcm*5}
fIa+F
{wq*=1GΎe[koϒ9p$ +FM `.O@qTru8fz9Rmc0~>Uc
0DYt=S-P`ؾB\3xH܄۳oj똭S@ ajэPAW+Ac<1 ~ ;VOs76M$ K6Q#JgXmM;,w)
=,"B`_! ]q'cO >-ԳE/ X1ϒDr`L
* 88p^1rU*%hg $'{Vb1+sF"I
v4&(. ]u:qݔ Ϯ8ˬ"Gm>eI졍{tPeo6fp}Dac wl{VH
q[>j F<рh7?T
J#'X SIdNxV`VB'\A_YSK,Jh~]9e=O!JAc .{x{~<]Ơ=)PTWnlWI}
fZyQFc1fJr5O<|d7g
{TCz MG9跜V"OɃ꽰[ bV28ؒ!ьLڭrf4\{q&'M=!Xd!DEeQ݇eU?e-Tj]UbAդǻ'YGAY~Ul,\] t ~)9lRLY7TjV'0)q'B$% ;K 1 $tmN*"\z^[LōE~ y5 $X%[_@EWN@:Lknޕ<*fX_3!] =m.Ɇ,
]&툭_yV~-Pri< nX-z҈~a1f72]b㱾p٦c )Xp`2ܠɼ+Kջ"G,%o} {[ۭ,: )7+}˚)6C 42)Lg2ݨ'?
>x~_ET ƄP}qǎENR%ut
Gw[*BA%21XT7 m%{ qO"Ʌ%Tl }7? KLv]PBpw
p %7а,@cgGL;
"dKE"\k"r*s$`_rWh:x8U yZnj_SgSaTC{ >/+-2*O)zMlJSmhWFY uƪV;c{y5x ?NKw*
Ck9sB|%Ҳa]s8xPĴl:5+h\iz Q<)L]$0z*zw'XH\q+ؓR 9Sδ*[T%6_Vy[[ o>o-kYTFU_r8XMo?ke;^g6ǝDbT o&WWQPlq*^5`1%Hߐa\ xT?x vD"9,Z,<tW(: 2Q!.r̔V}zǼ&1DE4͓H3hX&ZYXQ_t9&)O[ 5+OYG