gpp_maybe Security update for vsftpd

SUSE-SLE-Module-Server-Applications-15-SP3-2022-3457

This update for vsftpd fixes the following issues: - CVE-2021-3618: Enforced security checks against ALPACA attack (PM-3322, jsc#SLE-23896, bsc#1187686, bsc#1187678). - Added hardening to systemd services (bsc#1181400). Bugfixes: - Fixed a seccomp failure in FIPS mode when SSL was enabled (bsc#1052900). - Allowed wait4() to be called so that the broker can wait for its child processes (bsc#1021387). - Fixed hang when using seccomp and syslog (bsc#971784). - Allowed sendto() syscall when /dev/log support is enabled (bsc#786024).

• Release Date
  Sep 28 2022
• References
  Bugzilla: 1187686, 971784, 1181400, 786024, 1021387, 1052900, 1187678
  CVEs: CVE-2021-3618
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.3 aarch64

• Packages
  vsftpd
  Very Secure FTP Daemon - Written from Scratch

  3.0.5-150200.12.9.1 lock rpm lock src

Server Applications Module 15.3 ppc64le

• Packages
  vsftpd
  Very Secure FTP Daemon - Written from Scratch

  3.0.5-150200.12.9.1 lock rpm lock src

Server Applications Module 15.3 s390x

• Packages
  vsftpd
  Very Secure FTP Daemon - Written from Scratch

  3.0.5-150200.12.9.1 lock rpm lock src

Server Applications Module 15.3 x86_64

• Packages
  vsftpd
  Very Secure FTP Daemon - Written from Scratch

  3.0.5-150200.12.9.1 lock rpm lock src