From: Wang Mingyu <[email protected]> Changelog: =========== - Multiple hardening fixes across PureDB, the IP access checker, PAM, LDAP, quota handling, and pure-pwconvert. - IP access rules now support IPv6 patterns. Hostname rules are resolved using the client's address family, so AAAA records can match IPv6 clients; previously this path was IPv4-only. - Malformed CIDR widths in PureDB allow/deny lists now fail closed and a warning is logged identifying the offending pattern. - LDAP searches that return more than one entry are now rejected as ambiguous and a warning is logged identifying the offending uid. - Malformed quota files no longer reset usage to zero; the failure surfaces during quota checks instead. - PureDB virtual users with a non-numeric or partially numeric uid or gid field are now rejected. Records with uid or gid 0 continue to require ACCEPT_ROOT_VIRTUAL_USERS at build time, as documented. - Anonymous LDAP binds work again after a regression introduced in 1.0.53. - Pure-pwconvert skips entries whose fields contain ':' or newline characters rather than emitting corrupted records.
igned-off-by: Wang Mingyu <[email protected]> --- .../pure-ftpd/{pure-ftpd_1.0.53.bb => pure-ftpd_1.0.54.bb} | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) rename meta-networking/recipes-daemons/pure-ftpd/{pure-ftpd_1.0.53.bb => pure-ftpd_1.0.54.bb} (90%) diff --git a/meta-networking/recipes-daemons/pure-ftpd/pure-ftpd_1.0.53.bb b/meta-networking/recipes-daemons/pure-ftpd/pure-ftpd_1.0.54.bb similarity index 90% rename from meta-networking/recipes-daemons/pure-ftpd/pure-ftpd_1.0.53.bb rename to meta-networking/recipes-daemons/pure-ftpd/pure-ftpd_1.0.54.bb index 02a10f8e84..222a0bb731 100644 --- a/meta-networking/recipes-daemons/pure-ftpd/pure-ftpd_1.0.53.bb +++ b/meta-networking/recipes-daemons/pure-ftpd/pure-ftpd_1.0.54.bb @@ -11,7 +11,7 @@ SRC_URI = "http://download.pureftpd.org/pub/pure-ftpd/releases/pure-ftpd-${PV}.t file://0001-Remove-hardcoded-usr-local-includes-from-configure.a.patch \ file://nostrip.patch \ " -SRC_URI[sha256sum] = "b3f2b0194223b1e88bf8b0df9e91ffb5d1b9812356e9dd465f2f97b72b21265f" +SRC_URI[sha256sum] = "dc9140420ec44f7829579591ff378aa6396b4604b9c6aeae847368e0f35bd7b2" inherit autotools -- 2.43.0
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#126906): https://lists.openembedded.org/g/openembedded-devel/message/126906 Mute This Topic: https://lists.openembedded.org/mt/119292623/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-devel/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
