Bug Fix Advisory vsftpd bug fix update

Advisory: RHBA-2007:0757-2
Type: Bug Fix Advisory
Severity: N/A
Issued on: 2007-07-27
Last updated on: 2007-07-27
Affected Products: Red Hat Enterprise Linux AS (v. 3)
Red Hat Enterprise Linux ES (v. 3)
OVAL: N/A

Details

An updated vsftpd package that fixes a bug is now available.

The vsftpd package includes a Very Secure FTP (File Transfer Protocol) daemon.

All uploaded files were appearing with wrong permissions regardless of the
umask variable.

All users of vsftpd should upgrade to this updated package, which resolves
this issue.


Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

To update all RPMs for your particular architecture, run:

rpm -Fvh [filenames]

where [filenames] is a list of the RPMs you wish to upgrade. Only those
RPMs which are currently installed will be updated. Those RPMs which are
not installed but included in the list will not be updated. Note that you
can also use wildcards (*.rpm) if your current directory *only* contains the
desired RPMs.

Please note that this update is also available via Red Hat Network. Many
people find this an easier way to apply updates. To use Red Hat Network,
launch the Red Hat Update Agent with the following command:

up2date

This will start an interactive process that will result in the appropriate
RPMs being upgraded on your system.

If up2date fails to connect to Red Hat Network due to SSL
Certificate Errors, you need to install a version of the
up2date client with an updated certificate. The latest version of
up2date is available from the Red Hat FTP site and may also be
downloaded directly from the RHN website:

https://rhn.redhat.com/help/latest-up2date.pxt

Updated packages

Red Hat Enterprise Linux AS (v. 3)

SRPMS:
vsftpd-1.2.1-3E.14.src.rpm
File outdated by:  RHSA-2008:0579
    3cc1f06b12971f92b3d15b7e1942e470
 
IA-32:
vsftpd-1.2.1-3E.14.i386.rpm
File outdated by:  RHSA-2008:0579
    8a957343578263ee2d38da4bc4821247
 
IA-64:
vsftpd-1.2.1-3E.14.ia64.rpm
File outdated by:  RHSA-2008:0579
    17c020e3d408b653a9c6903679372d2b
 
PPC:
vsftpd-1.2.1-3E.14.ppc.rpm
File outdated by:  RHSA-2008:0579
    12d37db6ed71147378fc2e66a34332dd
 
s390:
vsftpd-1.2.1-3E.14.s390.rpm
File outdated by:  RHSA-2008:0579
    6454793432aa5c913833ce308c95d841
 
s390x:
vsftpd-1.2.1-3E.14.s390x.rpm
File outdated by:  RHSA-2008:0579
    affac493de123874a32328b2d11b6138
 
x86_64:
vsftpd-1.2.1-3E.14.x86_64.rpm
File outdated by:  RHSA-2008:0579
    af67f5cad1479190e651c0bb8a2a8f3b
 
Red Hat Enterprise Linux ES (v. 3)

SRPMS:
vsftpd-1.2.1-3E.14.src.rpm
File outdated by:  RHSA-2008:0579
    3cc1f06b12971f92b3d15b7e1942e470
 
IA-32:
vsftpd-1.2.1-3E.14.i386.rpm
File outdated by:  RHSA-2008:0579
    8a957343578263ee2d38da4bc4821247
 
IA-64:
vsftpd-1.2.1-3E.14.ia64.rpm
File outdated by:  RHSA-2008:0579
    17c020e3d408b653a9c6903679372d2b
 
x86_64:
vsftpd-1.2.1-3E.14.x86_64.rpm
File outdated by:  RHSA-2008:0579
    af67f5cad1479190e651c0bb8a2a8f3b
 
(The unlinked packages above are only available from the Red Hat Network)

Bugs fixed (see bugzilla for more information)

244686 - Uploaded files are created with wrong perms in vsftpd 1.2.1-3E.12



These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/