openSUSE Recommended Update: vsftpd. ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1718-1 Rating: low References: #870122 #872215 #872221 #890469 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has four recommended fixes can now be installed. Description: This recommended update for vsftpd fixes the following issues: - solves bnc#910128. - No longer perform gpg validation; osc source_validator does it implicit: + Drop gpg-offline BuildRequires. + No longer execute gpg_verify. - force using fork() instead of clone() on s390 - fixes bnc#890469 - Cleanup with spec-cleaner - Remove conditions about init files as we do not build for 12.1 anyway. - Update the README.SUSE file to describe more the listen option. - Add socket service for vsftpd to avoid the need for xinetd here. - Add comment about listen variables for xinetd configuration. Fixes bnc#872221. - Add default configuration as arg to xinetd started vsftpd. - Move the enabling of timeofday and alarm one level deeper to be sure it is whitelisted everytime. Also should possibly fix bnc#872215. - Remove forking from service type as it hangs in endless loop. - Updated patches - Fix warning about dangling symlink on rcvsftpd from rpmlint and Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-818 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): vsftpd-3.0.2-10.4.1 vsftpd-debuginfo-3.0.2-10.4.1 vsftpd-debugsource-3.0.2-10.4.1 References: https://bugzilla.suse.com/show_bug.cgi?id=870122 https://bugzilla.suse.com/show_bug.cgi?id=872215 https://bugzilla.suse.com/show_bug.cgi?id=872221 https://bugzilla.suse.com/show_bug.cgi?id=890469