diff mbox series

[meta-networking,21/56] pure-ftpd: upgrade 1.0.53 -> 1.0.54

Message ID 20260513040555.377-21-wangmy@fujitsu.com
State New
Headers show
Series [meta-oe,01/56] botan: upgrade 3.11.1 -> 3.12.0 | expand

Commit Message

Wang Mingyu May 13, 2026, 4:05 a.m. UTC
From: Wang Mingyu <wangmy@fujitsu.com>

Changelog:
===========
- Multiple hardening fixes across PureDB, the IP access checker, PAM, LDAP,
  quota handling, and pure-pwconvert.
- IP access rules now support IPv6 patterns. Hostname rules are resolved
  using the client's address family, so AAAA records can match IPv6 clients;
  previously this path was IPv4-only.
- Malformed CIDR widths in PureDB allow/deny lists now fail closed and a
  warning is logged identifying the offending pattern.
- LDAP searches that return more than one entry are now rejected as
  ambiguous and a warning is logged identifying the offending uid.
- Malformed quota files no longer reset usage to zero; the failure
  surfaces during quota checks instead.
- PureDB virtual users with a non-numeric or partially numeric uid or
  gid field are now rejected. Records with uid or gid 0 continue to require
  ACCEPT_ROOT_VIRTUAL_USERS at build time, as documented.
- Anonymous LDAP binds work again after a regression introduced in 1.0.53.
- Pure-pwconvert skips entries whose fields contain ':' or newline
  characters rather than emitting corrupted records.

igned-off-by: Wang Mingyu <wangmy@fujitsu.com>
---
 .../pure-ftpd/{pure-ftpd_1.0.53.bb => pure-ftpd_1.0.54.bb}      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)
 rename meta-networking/recipes-daemons/pure-ftpd/{pure-ftpd_1.0.53.bb => pure-ftpd_1.0.54.bb} (90%)
diff mbox series

Patch

diff --git a/meta-networking/recipes-daemons/pure-ftpd/pure-ftpd_1.0.53.bb b/meta-networking/recipes-daemons/pure-ftpd/pure-ftpd_1.0.54.bb
similarity index 90%
rename from meta-networking/recipes-daemons/pure-ftpd/pure-ftpd_1.0.53.bb
rename to meta-networking/recipes-daemons/pure-ftpd/pure-ftpd_1.0.54.bb
index 02a10f8e84..222a0bb731 100644
--- a/meta-networking/recipes-daemons/pure-ftpd/pure-ftpd_1.0.53.bb
+++ b/meta-networking/recipes-daemons/pure-ftpd/pure-ftpd_1.0.54.bb
@@ -11,7 +11,7 @@  SRC_URI = "http://download.pureftpd.org/pub/pure-ftpd/releases/pure-ftpd-${PV}.t
            file://0001-Remove-hardcoded-usr-local-includes-from-configure.a.patch \
            file://nostrip.patch \
 "
-SRC_URI[sha256sum] = "b3f2b0194223b1e88bf8b0df9e91ffb5d1b9812356e9dd465f2f97b72b21265f"
+SRC_URI[sha256sum] = "dc9140420ec44f7829579591ff378aa6396b4604b9c6aeae847368e0f35bd7b2"
 
 inherit autotools