SUSE-RU-2021:1186-1: moderate: Recommended update for vsftpd

[sle-updates at lists.suse.com]

   SUSE Recommended Update: Recommended update for vsftpd
______________________________________________________________________________

Announcement ID:    SUSE-RU-2021:1186-1
Rating:             moderate
References:         #1125951 #1144062 #1179553 #1180314 #1181512 
                    SLE-4182 
Affected Products:
                    SUSE Linux Enterprise Server for SAP 15
                    SUSE Linux Enterprise Server 15-LTSS
                    SUSE Linux Enterprise Module for Server Applications 15-SP2
                    SUSE Linux Enterprise High Performance Computing 15-LTSS
                    SUSE Linux Enterprise High Performance Computing 15-ESPOS
______________________________________________________________________________

   An update that has 5 recommended fixes and contains one
   feature can now be installed.

Description:

   This update for vsftpd fixes the following issues:

   - Fix an issue when vsftpd crashes as 'seccomp' blocks new syscall.
     (bsc#1179553)
   - Fixed a crash while trying to list a directory on SUSE Linux Enterprise
     15 with seccomp mode enabled. (bsc#1181512)
   - Users can now enable a specific version of TLS protocol. (jsc#SLE-4182)

     Add the options `ssl_tlsv1_1` and `ssl_tlsv1_2` to the configuration
   file. Both options are enabled.
   - Add `pam_keyinit.so` to PAM config file. (bsc#1144062)
   - Fix a memory error while trying to write to an invalid TLS context.
     (bsc#1125951)
   - Follow the system TLS cipher policy `DEFAULT_SUSE` by default.

     Run the command `openssl ciphers -v DEFAULT_SUSE` to see which ciphers
   this includes.


Patch Instructions:

   To install this SUSE Recommended Update use the SUSE recommended installation methods
   like YaST online_update or "zypper patch".

   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Server for SAP 15:

      zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2021-1186=1

   - SUSE Linux Enterprise Server 15-LTSS:

      zypper in -t patch SUSE-SLE-Product-SLES-15-2021-1186=1

   - SUSE Linux Enterprise Module for Server Applications 15-SP2:

      zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP2-2021-1186=1

   - SUSE Linux Enterprise High Performance Computing 15-LTSS:

      zypper in -t patch SUSE-SLE-Product-HPC-15-2021-1186=1

   - SUSE Linux Enterprise High Performance Computing 15-ESPOS:

      zypper in -t patch SUSE-SLE-Product-HPC-15-2021-1186=1



Package List:

   - SUSE Linux Enterprise Server for SAP 15 (ppc64le x86_64):

      vsftpd-3.0.3-7.16.1
      vsftpd-debuginfo-3.0.3-7.16.1
      vsftpd-debugsource-3.0.3-7.16.1

   - SUSE Linux Enterprise Server 15-LTSS (aarch64 s390x):

      vsftpd-3.0.3-7.16.1
      vsftpd-debuginfo-3.0.3-7.16.1
      vsftpd-debugsource-3.0.3-7.16.1

   - SUSE Linux Enterprise Module for Server Applications 15-SP2 (aarch64 ppc64le s390x x86_64):

      vsftpd-3.0.3-7.16.1
      vsftpd-debuginfo-3.0.3-7.16.1
      vsftpd-debugsource-3.0.3-7.16.1

   - SUSE Linux Enterprise High Performance Computing 15-LTSS (aarch64 x86_64):

      vsftpd-3.0.3-7.16.1
      vsftpd-debuginfo-3.0.3-7.16.1
      vsftpd-debugsource-3.0.3-7.16.1

   - SUSE Linux Enterprise High Performance Computing 15-ESPOS (aarch64 x86_64):

      vsftpd-3.0.3-7.16.1
      vsftpd-debuginfo-3.0.3-7.16.1
      vsftpd-debugsource-3.0.3-7.16.1


References:

   https://bugzilla.suse.com/1125951
   https://bugzilla.suse.com/1144062
   https://bugzilla.suse.com/1179553
   https://bugzilla.suse.com/1180314
   https://bugzilla.suse.com/1181512