gpp_maybe Security update for vsftpd

SUSE-SLE-Module-Server-Applications-15-SP4-2022-3320

This update for vsftpd fixes the following issues: - CVE-2021-3618: Enforced security checks against ALPACA attack (bsc#1187678, bsc#1187686, PM-3322). Bugfixes: - Fixed a seccomp failure in FIPS mode when SSL was enabled (bsc#1052900). - Allowed wait4() to be called so that the broker can wait for its child processes (bsc#1021387). - Allowed sendto() syscall when /dev/log support is enabled (bsc#786024).

• Release Date
  Sep 20 2022
• References
  Bugzilla: 1187686, 1052900, 1021387, 786024, 1187678
  CVEs: CVE-2021-3618
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.4 s390x

• Packages
  vsftpd
  Very Secure FTP Daemon - Written from Scratch

  3.0.5-150400.3.3.1 lock rpm lock src

Server Applications Module 15.4 aarch64

• Packages
  vsftpd
  Very Secure FTP Daemon - Written from Scratch

  3.0.5-150400.3.3.1 lock rpm lock src

Server Applications Module 15.4 ppc64le

• Packages
  vsftpd
  Very Secure FTP Daemon - Written from Scratch

  3.0.5-150400.3.3.1 lock rpm lock src

Server Applications Module 15.4 x86_64

• Packages
  vsftpd
  Very Secure FTP Daemon - Written from Scratch

  3.0.5-150400.3.3.1 lock rpm lock src