Red Hat Product Errata RHBA-2009:1068 - Bug Fix Advisory
Issued:
2009-05-27
Updated:
2009-05-27

RHBA-2009:1068 - Bug Fix Advisory

Synopsis

vsftpd bug fix update

Type/Severity

Bug Fix Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An updated vsftpd package that fixes a bug is now available.

Description

The vsftpd package includes a Very Secure FTP (File Transfer Protocol) daemon.

This updated vsftpd package fixes the following bug:

  • previously, the length of vsftpd usernames was limited to 32 characters

in length. With this updated package, the maximum length of vsftpd
usernames has been increased to 128 characters. (BZ#496846)

All users of vsftpd are advised to upgrade to this updated package, which
resolves this issue.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

  • Red Hat Enterprise Linux Server 5 x86_64
  • Red Hat Enterprise Linux Server 5 ia64
  • Red Hat Enterprise Linux Server 5 i386
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.3 x86_64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.3 ia64
  • Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.3 i386
  • Red Hat Enterprise Linux Server - AUS 5.3 x86_64
  • Red Hat Enterprise Linux Server - AUS 5.3 ia64
  • Red Hat Enterprise Linux Server - AUS 5.3 i386
  • Red Hat Enterprise Linux Workstation 5 x86_64
  • Red Hat Enterprise Linux Workstation 5 i386
  • Red Hat Enterprise Linux for IBM z Systems 5 s390x
  • Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.3 s390x
  • Red Hat Enterprise Linux for Power, big endian 5 ppc
  • Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.3 ppc
  • Red Hat Enterprise Linux Server from RHUI 5 x86_64
  • Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

  • BZ - 496846 - maximum username length is too short for vsftpd user in RHEL5

CVEs

(none)

References

(none)

Red Hat Enterprise Linux Server 5

SRPM
vsftpd-2.0.5-12.el5_3.1.src.rpm SHA-256: cf6f85f48b50085bb843eb14b271e93987f95809135ad20b2e6b8c19f432ef76
x86_64
vsftpd-2.0.5-12.el5_3.1.x86_64.rpm SHA-256: fc1bda26d81efa6fb3f8f627d83c3e9a12a13bcb8b7e32af3fc82db0b13c058d
ia64
vsftpd-2.0.5-12.el5_3.1.ia64.rpm SHA-256: 2b04518750bdc74ce5193840fb9a3771ea816d07d830f8a58ce144128d6764c9
i386
vsftpd-2.0.5-12.el5_3.1.i386.rpm SHA-256: b20e6b75687c05be7a8c09c0e64e3d587e407e368db5e0ea6feb2e2673dbfbf7

Red Hat Enterprise Linux for x86_64 - Extended Update Support 5.3

SRPM
x86_64
ia64
i386

Red Hat Enterprise Linux Server - AUS 5.3

SRPM
x86_64
ia64
i386

Red Hat Enterprise Linux Workstation 5

SRPM
vsftpd-2.0.5-12.el5_3.1.src.rpm SHA-256: cf6f85f48b50085bb843eb14b271e93987f95809135ad20b2e6b8c19f432ef76
x86_64
vsftpd-2.0.5-12.el5_3.1.x86_64.rpm SHA-256: fc1bda26d81efa6fb3f8f627d83c3e9a12a13bcb8b7e32af3fc82db0b13c058d
i386
vsftpd-2.0.5-12.el5_3.1.i386.rpm SHA-256: b20e6b75687c05be7a8c09c0e64e3d587e407e368db5e0ea6feb2e2673dbfbf7

Red Hat Enterprise Linux for IBM z Systems 5

SRPM
vsftpd-2.0.5-12.el5_3.1.src.rpm SHA-256: cf6f85f48b50085bb843eb14b271e93987f95809135ad20b2e6b8c19f432ef76
s390x
vsftpd-2.0.5-12.el5_3.1.s390x.rpm SHA-256: 8d09ab3e7c08533f684466ce9dfe97dcb4993a89143b66bcbdd635af21d4fe43

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 5.3

SRPM
s390x

Red Hat Enterprise Linux for Power, big endian 5

SRPM
vsftpd-2.0.5-12.el5_3.1.src.rpm SHA-256: cf6f85f48b50085bb843eb14b271e93987f95809135ad20b2e6b8c19f432ef76
ppc
vsftpd-2.0.5-12.el5_3.1.ppc.rpm SHA-256: c824348697c89ab0f2f317831c689c8df91e6a3d5bdc9328309a0d8a6399264c

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 5.3

SRPM
ppc

Red Hat Enterprise Linux Server from RHUI 5

SRPM
vsftpd-2.0.5-12.el5_3.1.src.rpm SHA-256: cf6f85f48b50085bb843eb14b271e93987f95809135ad20b2e6b8c19f432ef76
x86_64
vsftpd-2.0.5-12.el5_3.1.x86_64.rpm SHA-256: fc1bda26d81efa6fb3f8f627d83c3e9a12a13bcb8b7e32af3fc82db0b13c058d
i386
vsftpd-2.0.5-12.el5_3.1.i386.rpm SHA-256: b20e6b75687c05be7a8c09c0e64e3d587e407e368db5e0ea6feb2e2673dbfbf7

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.