pure-ftpd: upgrade 1.0.53 -> 1.0.54

Changelog:
===========
- Multiple hardening fixes across PureDB, the IP access checker, PAM, LDAP,
  quota handling, and pure-pwconvert.
- IP access rules now support IPv6 patterns. Hostname rules are resolved
  using the client's address family, so AAAA records can match IPv6 clients;
  previously this path was IPv4-only.
- Malformed CIDR widths in PureDB allow/deny lists now fail closed and a
  warning is logged identifying the offending pattern.
- LDAP searches that return more than one entry are now rejected as
  ambiguous and a warning is logged identifying the offending uid.
- Malformed quota files no longer reset usage to zero; the failure
  surfaces during quota checks instead.
- PureDB virtual users with a non-numeric or partially numeric uid or
  gid field are now rejected. Records with uid or gid 0 continue to require
  ACCEPT_ROOT_VIRTUAL_USERS at build time, as documented.
- Anonymous LDAP binds work again after a regression introduced in 1.0.53.
- Pure-pwconvert skips entries whose fields contain ':' or newline
  characters rather than emitting corrupted records.

igned-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This commit is contained in:
Wang Mingyu
2026-05-13 12:05:20 +08:00
committed by Khem Raj
parent 3d65906189
commit 76e632e2c9
@@ -11,7 +11,7 @@ SRC_URI = "http://download.pureftpd.org/pub/pure-ftpd/releases/pure-ftpd-${PV}.t
file://0001-Remove-hardcoded-usr-local-includes-from-configure.a.patch \
file://nostrip.patch \
"
SRC_URI[sha256sum] = "b3f2b0194223b1e88bf8b0df9e91ffb5d1b9812356e9dd465f2f97b72b21265f"
SRC_URI[sha256sum] = "dc9140420ec44f7829579591ff378aa6396b4604b9c6aeae847368e0f35bd7b2"
inherit autotools