Source-Changes archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
CVS commit: othersrc/libexec/tnftpd/src
Module Name: othersrc
Committed By: lukem
Date: Sun Sep 21 14:20:11 UTC 2008
Update of /cvsroot/othersrc/libexec/tnftpd/src
In directory ivanova.netbsd.org:/tmp/cvs-serv23198
Log Message:
Sync to NetBSD-ftpd 20080921:
* Don't split large commands into multiple commands; just fail on them.
This prevents CSRF-like attacks, when a web browser is used to access
an ftp server.
Reported by Maksymilian Arciemowicz <cxib%securityreason.com@localhost>.
Fix mostly derived from OpenBSD, written by Moritz Jodeit
<moritz%OpenBSD.org@localhost>
* Enhance -C to support an optional @host ('-C user[@host]'):
checks whether user as connecting from host would be granted
access by ftpusers(5).
Support IPv6 in the host directive of ftpusers(5).
Both features from Rudolf Cejka <cejkar%fit.vutbr.cz@localhost>
(FreeBSD's tnftpd port maintainer).
Status:
Vendor Tag: TNF
Release Tags: NetBSD-20080921
C othersrc/libexec/tnftpd/src/Makefile
C othersrc/libexec/tnftpd/src/cmds.c
U othersrc/libexec/tnftpd/src/conf.c
C othersrc/libexec/tnftpd/src/extern.h
C othersrc/libexec/tnftpd/src/ftpcmd.y
C othersrc/libexec/tnftpd/src/ftpd.8
C othersrc/libexec/tnftpd/src/ftpd.c
C othersrc/libexec/tnftpd/src/ftpd.conf.5
C othersrc/libexec/tnftpd/src/ftpusers.5
U othersrc/libexec/tnftpd/src/logutmp.c
U othersrc/libexec/tnftpd/src/logwtmp.c
U othersrc/libexec/tnftpd/src/pathnames.h
C othersrc/libexec/tnftpd/src/popen.c
C othersrc/libexec/tnftpd/src/version.h
10 conflicts created by this import.
Use the following command to help the merge:
cvs checkout -jTNF:yesterday -jTNF othersrc/libexec/tnftpd/src
Home |
Main Index |
Thread Index |
Old Index