gpp_maybe Security update for vsftpd

SUSE-SLE-SERVER-12-SP5-2022-3383

This update for vsftpd fixes the following issues: - CVE-2021-3618: Enforced security checks against ALPACA attack (PM-3322, bsc#1187686, bsc#1187678). Bugfixes: - Fixed a seccomp failure in FIPS mode when SSL was enabled (bsc#1052900). - Allowed wait4() to be called so that the broker can wait for its child processes (bsc#1021387). - Allowed sendto() syscall when /dev/log support is enabled (bsc#786024).

• Release Date
  Sep 26 2022
• References
  Bugzilla: 1187686, 1052900, 1021387, 786024, 1187678
  CVEs: CVE-2021-3618
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 12.5 x86_64

• Packages
  vsftpd
  Very Secure FTP Daemon - Written from Scratch

  3.0.5-47.7.1

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.5 aarch64

• Packages
  vsftpd
  Very Secure FTP Daemon - Written from Scratch

  3.0.5-47.7.1

  lock rpm

  lock src

  3.0.5-47.7.1

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.5 ppc64le

• Packages
  vsftpd
  Very Secure FTP Daemon - Written from Scratch

  3.0.5-47.7.1

  lock rpm

  lock src

SUSE Linux Enterprise Server 12.5 s390x

• Packages
  vsftpd
  Very Secure FTP Daemon - Written from Scratch

  3.0.5-47.7.1

  lock rpm

  lock src