Skip to content

uftpd v2.17

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 09 Sep 17:01
v2.17
This tag was signed with the committer’s verified signature.
troglobit Joachim Wiberg
GPG key ID: ECA826A37B6C7409
Verified
Learn about vigilant mode.
54e08e7
This commit was signed with the committer’s verified signature.
troglobit Joachim Wiberg
GPG key ID: ECA826A37B6C7409
Verified
Learn about vigilant mode.

Changes

  • Debian packaging modernized: debhelper compat 13, machine-readable
    copyright, translatable debconf prompts, lintian clean
  • The .deb is built and lintian checked in CI, and attached to each
    GitHub release
  • New tests for TFTP option negotiation and malformed requests
  • make package no longer fails where the kernel denies unprivileged
    user namespaces; the test suite skips instead

Fixes

  • TFTP: reject packets too short for the header their opcode implies
  • TFTP: bound RRQ/WRQ option parsing to the received packet, and defer
    the buffer reallocation until parsing is done
  • TFTP: clamp a negotiated blksize to the RFC 2348 maximum, 65464
  • TFTP: ignore DATA packets when no transfer is open
  • TFTP: ERROR replies were malformed, and never sent at all on hardened
    builds
  • TFTP: ERROR messages used strerror() text for what are protocol codes
  • The ftp user is only removed on purge, no longer on every removal
  • Missing #DEBHELPER# token in the maintainer scripts
Assets 4
Loading