ELSA-2008-0680

ELSA-2008-0680 - vsftpd security and bug fix update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2008-08-01

Description

[2.0.1-6]
- add option max_login_fails that kicks the session after few login fails
- Resolves: #197141
- fix bad handling of unique files
- Resolves: #250727
- increase maximum length of allowed username
- Resolves: #236326
- fix create/lock race condition when more clients are uploading to a file
- Resolves: #240550
- document lock_upload_files option
- Resolves: #316381
- allow usernames to begin with underscore or dot
- Resolves: #339911
- dont reply with code 150 two times when uploading files with STOU
- Resolves: #387021
- fix memory leak in ls.c
- Resolves: #408431
- daemonize correctly and report startup failure correctly
- Resolves: #206843
- fix init script
- Resolves: #431450

Related CVEs

CVE-2008-2375

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 4 (i386)	vsftpd-2.0.1-6.el4.src.rpm	4372207e2e7e676e799217bc6f1de48b30b03ef7917247c1f67671195c31874b	ELSA-2011-0337	el4_i386_latest
	vsftpd-2.0.1-6.el4.src.rpm	4372207e2e7e676e799217bc6f1de48b30b03ef7917247c1f67671195c31874b	ELSA-2011-0337	el4_u7_i386_base
	vsftpd-2.0.1-6.el4.i386.rpm	00f1ae83e8732d32d431c5158e71d482da80b9f6c553719f7a736bb8cdbfd862	ELSA-2011-0337	el4_i386_latest
	vsftpd-2.0.1-6.el4.i386.rpm	00f1ae83e8732d32d431c5158e71d482da80b9f6c553719f7a736bb8cdbfd862	ELSA-2011-0337	el4_u7_i386_base
Oracle Linux 4 (ia64)	vsftpd-2.0.1-6.el4.src.rpm	4372207e2e7e676e799217bc6f1de48b30b03ef7917247c1f67671195c31874b	ELSA-2011-0337	el4_ia64_latest
	vsftpd-2.0.1-6.el4.src.rpm	4372207e2e7e676e799217bc6f1de48b30b03ef7917247c1f67671195c31874b	ELSA-2011-0337	el4_u7_ia64_base
	vsftpd-2.0.1-6.el4.ia64.rpm	1ebe0dbd3d029401b4d86f77b196b162891207c7492baa7107b2edc00af762b1	ELSA-2011-0337	el4_ia64_latest
	vsftpd-2.0.1-6.el4.ia64.rpm	1ebe0dbd3d029401b4d86f77b196b162891207c7492baa7107b2edc00af762b1	ELSA-2011-0337	el4_u7_ia64_base
Oracle Linux 4 (x86_64)	vsftpd-2.0.1-6.el4.src.rpm	4372207e2e7e676e799217bc6f1de48b30b03ef7917247c1f67671195c31874b	ELSA-2011-0337	el4_u7_x86_64_base
	vsftpd-2.0.1-6.el4.src.rpm	4372207e2e7e676e799217bc6f1de48b30b03ef7917247c1f67671195c31874b	ELSA-2011-0337	el4_x86_64_latest
	vsftpd-2.0.1-6.el4.x86_64.rpm	dfa01e40f6be05907cd98038264fae6d29b4238d41bfe90455f42758bc2d15da	ELSA-2011-0337	el4_u7_x86_64_base
	vsftpd-2.0.1-6.el4.x86_64.rpm	dfa01e40f6be05907cd98038264fae6d29b4238d41bfe90455f42758bc2d15da	ELSA-2011-0337	el4_x86_64_latest

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team