commit tnftp for openSUSE:Factory
Hello community,
here is the log from the commit of package tnftp for openSUSE:Factory checked
in at 2020-06-03 20:28:55
Comparing /work/SRC/openSUSE:Factory/tnftp (Old)
and /work/SRC/openSUSE:Factory/.tnftp.new.3606 (New)
Package is "tnftp"
Wed Jun 3 20:28:55 2020 rev:7 rq:809763 version:20151004
Changes:
--- /work/SRC/openSUSE:Factory/tnftp/tnftp.changes 2016-08-18
09:16:43.0 +0200
+++ /work/SRC/openSUSE:Factory/.tnftp.new.3606/tnftp.changes2020-06-03
20:29:07.404553620 +0200
@@ -1,0 +2,10 @@
+Tue May 26 13:49:20 UTC 2020 - Cristian RodrÃguez
+
+- tnftp ssl client should validate hostnames and certificates,
+ so for example tnftp -d https://revoked.badssl.com/example
+ fails to connect. (tnftp-verify_hostname.patch), There are
+ at least two reports about this misbehaviour online but it has
+ never been fixed. Patch targets openSSL 1.1.x and later
+ so specify requirement in spec file.
+
+---
New:
tnftp-verify_hostname.patch
Other differences:
--
++ tnftp.spec ++
--- /var/tmp/diff_new_pack.WNai6u/_old 2020-06-03 20:29:08.288556308 +0200
+++ /var/tmp/diff_new_pack.WNai6u/_new 2020-06-03 20:29:08.288556308 +0200
@@ -1,7 +1,7 @@
#
# spec file for package tnftp
#
-# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
+# Copyright (c) 2020 SUSE LLC
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -12,7 +12,7 @@
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
-# Please submit bugfixes or comments via http://bugs.opensuse.org/
+# Please submit bugfixes or comments via https://bugs.opensuse.org/
#
@@ -22,16 +22,17 @@
Summary:Enhanced FTP Client
License:BSD-3-Clause
Group: Productivity/Networking/Ftp/Clients
-Url:ftp://ftp.netbsd.org/pub/NetBSD/misc/tnftp/
+URL:ftp://ftp.netbsd.org/pub/NetBSD/misc/tnftp/
Source0:
ftp://ftp.netbsd.org/pub/NetBSD/misc/tnftp/%{name}-%{version}.tar.gz
Source1:
ftp://ftp.netbsd.org/pub/NetBSD/misc/tnftp/%{name}-%{version}.tar.gz.asc
Source2:tnftp.keyring
# PATCH-FIX-UPSTREAM: do not use bundled libedit
Patch0: tnftp-20100108-am_and_libedit.patch
+Patch1: tnftp-verify_hostname.patch
BuildRequires: autoconf
BuildRequires: automake
BuildRequires: libedit-devel
-BuildRequires: libopenssl-devel
+BuildRequires: libopenssl-devel >= 1.1
BuildRequires: libtool
BuildRequires: pkgconfig
BuildRequires: update-alternatives
@@ -53,6 +54,7 @@
%prep
%setup -q
%patch0 -p1
+%patch1 -p1
%build
#axe bundled library
++ tnftp-verify_hostname.patch ++
Index: tnftp-20151004/src/ssl.c
===
--- tnftp-20151004.orig/src/ssl.c
+++ tnftp-20151004/src/ssl.c
@@ -56,6 +56,7 @@ __RCSID(" NetBSD: ssl.c,v 1.5 2015/09/16
#include
#include
+#include
#include
#include
#include
@@ -559,34 +560,56 @@ fetch_start_ssl(int sock, const char *se
SSL_CTX *ctx;
int ret, ssl_err;
- /* Init the SSL library and context */
- if (!SSL_library_init()){
- fprintf(ttyout, "SSL library init failed\n");
+ OPENSSL_init_ssl(0, NULL);
+
+ ctx = SSL_CTX_new(SSLv23_client_method());
+
+ if(!ctx) {
+ fprintf(ttyout, "SSL_CTX context creation failed: %s\n",
ERR_error_string(ERR_get_error(), NULL));
return NULL;
}
+
+ SSL_CTX_set_mode(ctx, SSL_MODE_AUTO_RETRY|SSL_MODE_RELEASE_BUFFERS);
+ SSL_CTX_set_default_verify_paths(ctx);
+ SSL_CTX_set_min_proto_version(ctx, TLS1_VERSION);
- SSL_load_error_strings();
-
- ctx = SSL_CTX_new(SSLv23_client_method());
- SSL_CTX_set_mode(ctx, SSL_MODE_AUTO_RETRY);
ssl = SSL_new(ctx);
if (ssl == NULL){
- fprintf(ttyout, "SSL context creation failed\n");
+ fprintf(ttyout, "SSL context creation failed: %s\n",
ERR_error_string(ERR_get_error(), NULL));
+ SSL_CTX_free(ctx);
+ return NULL;
+ }
+ if(!SSL_set_fd(ssl, sock)) {
+ fprintf(ttyout, "SSL_set_fd() failed: %s\n",
ERR_error_string(ERR_get_error(), NULL));
SSL_CTX_free(ctx);
+ SSL_free(ssl);
return NULL;
}
- SSL_set_fd(ssl, sock);
if (!SSL_set_tlsext_host_name(ssl, __UNCONST(servername))) {
fprintf(ttyout, "SSL hostname setting failed\n");
SSL_CTX_free(ctx);
+ SSL_fre
commit tnftp for openSUSE:Factory
Hello community,
here is the log from the commit of package tnftp for openSUSE:Factory checked
in at 2016-08-18 09:16:41
Comparing /work/SRC/openSUSE:Factory/tnftp (Old)
and /work/SRC/openSUSE:Factory/.tnftp.new (New)
Package is "tnftp"
Changes:
--- /work/SRC/openSUSE:Factory/tnftp/tnftp.changes 2015-04-10
09:47:19.0 +0200
+++ /work/SRC/openSUSE:Factory/.tnftp.new/tnftp.changes 2016-08-18
09:16:43.0 +0200
@@ -1,0 +2,10 @@
+Mon Aug 8 21:21:36 UTC 2016 - asterios.dra...@gmail.com
+
+- Update to version 20151004:
+ * Implement '-x xferbufsize' to set xferbuf size.
+ * Add Server Name Indication (SNI) support for https.
+ * Increase buffer limit used for response handling.
+- Removed post/pre requirement coreutils (not needed).
+- Fixes for update-alternatives usage.
+
+---
Old:
tnftp-20141104.tar.gz
tnftp-20141104.tar.gz.asc
New:
tnftp-20151004.tar.gz
tnftp-20151004.tar.gz.asc
Other differences:
--
++ tnftp.spec ++
--- /var/tmp/diff_new_pack.PqZ9ab/_old 2016-08-18 09:16:44.0 +0200
+++ /var/tmp/diff_new_pack.PqZ9ab/_new 2016-08-18 09:16:44.0 +0200
@@ -1,7 +1,7 @@
#
# spec file for package tnftp
#
-# Copyright (c) 2015 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2016 SUSE LINUX GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,7 +17,7 @@
Name: tnftp
-Version:20141104
+Version:20151004
Release:0
Summary:Enhanced FTP Client
License:BSD-3-Clause
@@ -35,15 +35,13 @@
BuildRequires: libtool
BuildRequires: pkgconfig
BuildRequires: update-alternatives
-Requires(post): coreutils
Requires(post): update-alternatives
-Requires(pre): coreutils
-Requires(pre): update-alternatives
+Requires(postun): update-alternatives
+Conflicts: ftp
Provides: lukemftp = 1.6
Provides: nkitb:%{_bindir}/ftp
Obsoletes: lukemftp <= 1.5
BuildRoot: %{_tmppath}/%{name}-%{version}-build
-Conflicts: ftp
%description
%{name} is the FTP (File Transfer Protocol) client from NetBSD. FTP is a
widely
@@ -64,21 +62,22 @@
make %{?_smp_mflags}
%install
-make DESTDIR=%{buildroot} install %{?_smp_mflags}
+make %{?_smp_mflags} DESTDIR=%{buildroot} install
mkdir -p %{buildroot}%{_sysconfdir}/alternatives
+%if 0%{?suse_version} <= 1310
touch %{buildroot}%{_sysconfdir}/alternatives/ftp
-ln -sf %{_sysconfdir}/alternatives/ftp %{buildroot}%{_bindir}/ftp
touch %{buildroot}%{_sysconfdir}/alternatives/ftp.1.gz
+%endif
+ln -sf %{_sysconfdir}/alternatives/ftp %{buildroot}%{_bindir}/ftp
ln -sf %{_sysconfdir}/alternatives/ftp.1.gz
%{buildroot}%{_mandir}/man1/ftp.1.gz
%post
update-alternatives --install %{_bindir}/ftp ftp %{_bindir}/%{name} 10 \
--slave %{_mandir}/man1/ftp.1.gz ftp.1 %{_mandir}/man1/%{name}.1.gz
-update-alternatives --auto ftp
-%preun
-if [ $1 -eq 0 ]; then
+%postun
+if [ "$1" = 0 ] ; then
update-alternatives --remove ftp %{_bindir}/%{name}
fi
++ tnftp-20141104.tar.gz -> tnftp-20151004.tar.gz ++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/tnftp-20141104/ChangeLog new/tnftp-20151004/ChangeLog
--- old/tnftp-20141104/ChangeLog2014-11-03 22:48:49.0 +0100
+++ new/tnftp-20151004/ChangeLog2015-10-04 08:20:58.0 +0200
@@ -1,5 +1,13 @@
-$NetBSD: ChangeLog,v 1.66 2014/11/03 21:48:49 lukem Exp $
+$NetBSD: ChangeLog,v 1.67 2015/10/04 06:20:58 lukem Exp $
+Sun Oct 4 06:19:25 UTC 2015 lukem
+
+ * Release as "tnftp 20151004".
+
+ * Merge NetBSD usr.bin/ftp from 20141026 to 20151003:
+ - Add -x xferbufsize to set xferbuf size.
+ - Add Server Name Indication (SNI) support for https.
+ - Increase buffer limit used for response handling.
Mon Nov 3 21:43:20 UTC 2014 lukem
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/tnftp-20141104/NEWS new/tnftp-20151004/NEWS
--- old/tnftp-20141104/NEWS 2014-11-03 22:48:49.0 +0100
+++ new/tnftp-20151004/NEWS 2015-10-04 08:20:58.0 +0200
@@ -1,6 +1,14 @@
-$NetBSD: NEWS,v 1.11 2014/11/03 21:48:49 lukem Exp $
+$NetBSD: NEWS,v 1.12 2015/10/04 06:20:58 lukem Exp $
-This is tnftp version 20141104.
+This is tnftp version 20151004.
+
+Changes in tnftp 20141104 to 20151004:
+
+ Implement '-x xferbufsize' to set xferbuf size.
+
+ Add Server Name Indication (SNI) support for https.
+
+ Increase buffer limit used for response handling.
commit tnftp for openSUSE:Factory
Hello community,
here is the log from the commit of package tnftp for openSUSE:Factory checked
in at 2014-11-04 17:28:08
Comparing /work/SRC/openSUSE:Factory/tnftp (Old)
and /work/SRC/openSUSE:Factory/.tnftp.new (New)
Package is "tnftp"
Changes:
--- /work/SRC/openSUSE:Factory/tnftp/tnftp.changes 2013-05-07
07:38:05.0 +0200
+++ /work/SRC/openSUSE:Factory/.tnftp.new/tnftp.changes 2014-11-04
17:28:10.0 +0100
@@ -1,0 +2,13 @@
+Thu Oct 30 13:18:42 UTC 2014 - tchva...@suse.com
+
+- Apply fix for bnc#903011 CVE-2014-8517
+ * tnftp-cve-2014-8517.patch
+- Version bump to 20130505:
+ * various triv fixes
+ * more ssl support
+ * refresh tnftp-20100108-am_and_libedit.patch
+- Cleanup with spec-cleaner
+- Use update-alternatives properly
+- Do not verify the sig in spec, just let OBS do it
+
+---
Old:
tnftp-20100108.tar.gz
tnftp-20100108.tar.gz.asc
New:
tnftp-20130505.tar.gz
tnftp-20130505.tar.gz.asc
tnftp-cve-2014-8517.patch
Other differences:
--
++ tnftp.spec ++
--- /var/tmp/diff_new_pack.m92Mfm/_old 2014-11-04 17:28:10.0 +0100
+++ /var/tmp/diff_new_pack.m92Mfm/_new 2014-11-04 17:28:10.0 +0100
@@ -1,7 +1,7 @@
#
# spec file for package tnftp
#
-# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
+# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
@@ -17,59 +17,65 @@
Name: tnftp
-Version:20100108
+Version:20130505
Release:0
Summary:Enhanced FTP Client
License:BSD-3-Clause
Group: Productivity/Networking/Ftp/Clients
Url:ftp://ftp.netbsd.org/pub/NetBSD/misc/tnftp/
-Patch0: tnftp-20100108-am_and_libedit.patch
Source0:
ftp://ftp.netbsd.org/pub/NetBSD/misc/tnftp/%{name}-%{version}.tar.gz
Source1:
ftp://ftp.netbsd.org/pub/NetBSD/misc/tnftp/%{name}-%{version}.tar.gz.asc
Source2:tnftp.keyring
-BuildRequires: libedit-devel
-BuildRequires: pkgconfig
-BuildRequires: update-alternatives
+# PATCH-FIX-UPSTREAM: do not use bundled libedit
+Patch0: tnftp-20100108-am_and_libedit.patch
+# PATCH-FIX-UPSTREAM: fix cve2014-8517 bnc#903011
+Patch1: tnftp-cve-2014-8517.patch
BuildRequires: autoconf
BuildRequires: automake
+BuildRequires: libedit-devel
+BuildRequires: libopenssl-devel
BuildRequires: libtool
-%if 0%{?suse_version} >= 1230
-BuildRequires: gpg-offline
-%endif
-Conflicts: ftp
+BuildRequires: pkgconfig
+BuildRequires: update-alternatives
+Requires(post): coreutils
+Requires(post): update-alternatives
+Requires(pre): coreutils
+Requires(pre): update-alternatives
Provides: lukemftp = 1.6
-Provides: nkitb:/usr/bin/ftp
+Provides: nkitb:%{_bindir}/ftp
Obsoletes: lukemftp <= 1.5
-Requires(pre): update-alternatives
-Requires(pre): coreutils
-Requires(post): update-alternatives
-Requires(post): coreutils
BuildRoot: %{_tmppath}/%{name}-%{version}-build
+Conflicts: ftp
%description
-
+%{name} is the FTP (File Transfer Protocol) client from NetBSD. FTP is a
widely
+used protocol for transferring files over the Internet and for archiving files.
+%{name} provides some advanced features beyond the Linux netkit ftp client, but
+maintains a similar user interface to the traditional ftp client. It was
+formerly called lukemftp.
%prep
-%if 0%{?suse_version} >= 1230
-%gpg_verify %{SOURCE1}
-%endif
-
%setup -q
-%patch0
+%patch0 -p1
+%patch1 -p1
%build
#axe bundled library
-%__rm -rf libedit
+rm -rf libedit
autoreconf -fiv
%configure
-%__make %{?_smp_mflags}
+make %{?_smp_mflags}
%install
-%makeinstall
-touch ${RPM_BUILD_ROOT}%{_bindir}/ftp
+make DESTDIR=%{buildroot} install %{?_smp_mflags}
+
+mkdir -p %{buildroot}%{_sysconfdir}/alternatives
+touch %{buildroot}%{_sysconfdir}/alternatives/ftp
+ln -sf %{_sysconfdir}/alternatives/ftp %{buildroot}%{_bindir}/ftp
+touch %{buildroot}%{_sysconfdir}/alternatives/ftp.1.gz
+ln -sf %{_sysconfdir}/alternatives/ftp.1.gz
%{buildroot}%{_mandir}/man1/ftp.1.gz
%post
-test -L %{_bindir}/ftp || rm -f %{_bindir}/ftp
update-alternatives --install %{_bindir}/ftp ftp %{_bindir}/%{name} 10 \
--slave %{_mandir}/man1/ftp.1.gz ftp.1 %{_mandir}/man1/%{name}.1.gz
update-alternatives --auto ftp
@@ -79,14 +85,14 @@
update-alternatives --remove ftp %{_bindir}/%{name}
fi
-%clean
-%__rm -rf $RPM_BUILD_ROOT
-
%files
%defattr(-,root,root)
%doc COPYING ChangeLog NEWS README THANKS
-%ghost %attr(0755,root,root) %{_bindir}/ftp
+%ghost %{_sysconfd
commit tnftp for openSUSE:Factory
Hello community,
here is the log from the commit of package tnftp for openSUSE:Factory checked
in at 2013-05-07 07:38:04
Comparing /work/SRC/openSUSE:Factory/tnftp (Old)
and /work/SRC/openSUSE:Factory/.tnftp.new (New)
Package is "tnftp"
Changes:
New Changes file:
--- /dev/null 2013-04-05 00:01:41.916011506 +0200
+++ /work/SRC/openSUSE:Factory/.tnftp.new/tnftp.changes 2013-05-07
07:38:05.0 +0200
@@ -0,0 +1,24 @@
+---
+Mon Apr 29 08:21:42 UTC 2013 - mvysko...@suse.com
+
+- verify tarball using gpg-offline
+- remove obsoleted PreReq and reformat spec
+
+---
+Wed Apr 11 22:40:33 UTC 2012 - andreas.stie...@gmx.de
+
+- fix openSUSE builds
+- add autoconf, automake, libtool build requirements
+- remove INSTALL file from package
+
+---
+Mon Aug 1 21:06:10 UTC 2011 - crrodrig...@opensuse.org
+
+- There is no need to check for ncurses, not directly used
+ by this package but by libedit for which we use the system version.
+
+---
+Sun Jul 31 19:33:57 UTC 2011 - crrodrig...@opensuse.org
+
+- First package version, this is the segue from lukemftp
+
New:
tnftp-20100108-am_and_libedit.patch
tnftp-20100108.tar.gz
tnftp-20100108.tar.gz.asc
tnftp.changes
tnftp.keyring
tnftp.spec
Other differences:
--
++ tnftp.spec ++
#
# spec file for package tnftp
#
# Copyright (c) 2012 SUSE LINUX Products GmbH, Nuernberg, Germany.
#
# All modifications and additions to the file contributed by third parties
# remain the property of their copyright owners, unless otherwise agreed
# upon. The license for this file, and modifications and additions to the
# file, is the same license as for the pristine package itself (unless the
# license for the pristine package is not an Open Source License, in which
# case the license is the MIT License). An "Open Source License" is a
# license that conforms to the Open Source Definition (Version 1.9)
# published by the Open Source Initiative.
# Please submit bugfixes or comments via http://bugs.opensuse.org/
#
Name: tnftp
Version:20100108
Release:0
Summary:Enhanced FTP Client
License:BSD-3-Clause
Group: Productivity/Networking/Ftp/Clients
Url:ftp://ftp.netbsd.org/pub/NetBSD/misc/tnftp/
Patch0: tnftp-20100108-am_and_libedit.patch
Source0:
ftp://ftp.netbsd.org/pub/NetBSD/misc/tnftp/%{name}-%{version}.tar.gz
Source1:
ftp://ftp.netbsd.org/pub/NetBSD/misc/tnftp/%{name}-%{version}.tar.gz.asc
Source2:tnftp.keyring
BuildRequires: libedit-devel
BuildRequires: pkgconfig
BuildRequires: update-alternatives
BuildRequires: autoconf
BuildRequires: automake
BuildRequires: libtool
%if 0%{?suse_version} >= 1230
BuildRequires: gpg-offline
%endif
Conflicts: ftp
Provides: lukemftp = 1.6
Provides: nkitb:/usr/bin/ftp
Obsoletes: lukemftp <= 1.5
Requires(pre): update-alternatives
Requires(pre): coreutils
Requires(post): update-alternatives
Requires(post): coreutils
BuildRoot: %{_tmppath}/%{name}-%{version}-build
%description
%prep
%if 0%{?suse_version} >= 1230
%gpg_verify %{SOURCE1}
%endif
%setup -q
%patch0
%build
#axe bundled library
%__rm -rf libedit
autoreconf -fiv
%configure
%__make %{?_smp_mflags}
%install
%makeinstall
touch ${RPM_BUILD_ROOT}%{_bindir}/ftp
%post
test -L %{_bindir}/ftp || rm -f %{_bindir}/ftp
update-alternatives --install %{_bindir}/ftp ftp %{_bindir}/%{name} 10 \
--slave %{_mandir}/man1/ftp.1.gz ftp.1 %{_mandir}/man1/%{name}.1.gz
update-alternatives --auto ftp
%preun
if [ $1 -eq 0 ]; then
update-alternatives --remove ftp %{_bindir}/%{name}
fi
%clean
%__rm -rf $RPM_BUILD_ROOT
%files
%defattr(-,root,root)
%doc COPYING ChangeLog NEWS README THANKS
%ghost %attr(0755,root,root) %{_bindir}/ftp
%{_bindir}/%{name}
%{_mandir}/man1/*
%changelog
++ tnftp-20100108-am_and_libedit.patch ++
Index: configure.ac
===
--- configure.ac.orig
+++ configure.ac
@@ -62,10 +62,16 @@ AH_TEMPLATE([USE_SOCKS],
#
# Checks for programs.
#
-AC_PROG_CC
+AC_PROG_CC_STDC
+AC_USE_SYSTEM_EXTENSIONS
+AC_SYS_LARGEFILE
+AM_PROG_AR
+AM_PROG_CC_C_O
AC_PROG_AWK
AC_PROG_LIBTOOL
+PKG_CHECK_MODULES([LIBEDIT], [libedit])
+
#
# Checks for tool features.
#
@@ -86,13 +92,6 @@ AS_CASE([$target_os],
#
# Checks for libraries.
#
-AS_IF([test "$opt_editcomplete" = yes],
- [AC_SEARCH_LIBS([tgetent],
- [termcap termlib curses ncurses tinfo],
-
