Source-Changes archive

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]

CVS commit: othersrc/libexec/tnftpd/src



Module Name:    othersrc
Committed By:   lukem
Date:           Sun Sep 21 14:20:11 UTC 2008

Update of /cvsroot/othersrc/libexec/tnftpd/src
In directory ivanova.netbsd.org:/tmp/cvs-serv23198

Log Message:
Sync to NetBSD-ftpd 20080921:
* Don't split large commands into multiple commands; just fail on them.
  This prevents CSRF-like attacks, when a web browser is used to access
  an ftp server.
  Reported by Maksymilian Arciemowicz <cxib%securityreason.com@localhost>.
  Fix mostly derived from OpenBSD, written by Moritz Jodeit
  <moritz%OpenBSD.org@localhost>
* Enhance -C to support an optional @host ('-C user[@host]'):
  checks whether user as connecting from host would be granted
  access by ftpusers(5).
  Support IPv6 in the host directive of ftpusers(5).
  Both features from Rudolf Cejka <cejkar%fit.vutbr.cz@localhost>
  (FreeBSD's tnftpd port maintainer).

Status:

Vendor Tag:     TNF
Release Tags:   NetBSD-20080921
                
C othersrc/libexec/tnftpd/src/Makefile
C othersrc/libexec/tnftpd/src/cmds.c
U othersrc/libexec/tnftpd/src/conf.c
C othersrc/libexec/tnftpd/src/extern.h
C othersrc/libexec/tnftpd/src/ftpcmd.y
C othersrc/libexec/tnftpd/src/ftpd.8
C othersrc/libexec/tnftpd/src/ftpd.c
C othersrc/libexec/tnftpd/src/ftpd.conf.5
C othersrc/libexec/tnftpd/src/ftpusers.5
U othersrc/libexec/tnftpd/src/logutmp.c
U othersrc/libexec/tnftpd/src/logwtmp.c
U othersrc/libexec/tnftpd/src/pathnames.h
C othersrc/libexec/tnftpd/src/popen.c
C othersrc/libexec/tnftpd/src/version.h

10 conflicts created by this import.
Use the following command to help the merge:

        cvs checkout -jTNF:yesterday -jTNF othersrc/libexec/tnftpd/src



Home | Main Index | Thread Index | Old Index