From 2a9f4f9c5784e408b2c31604816f163be03b83dc Mon Sep 17 00:00:00 2001 From: CentOS Sources Date: Mar 31 2020 12:25:26 +0000 Subject: import lftp-4.4.8-12.el7_8.1 --- diff --git a/SOURCES/lftp-4.4.8-gnutls-termination.patch b/SOURCES/lftp-4.4.8-gnutls-termination.patch new file mode 100644 index 0000000..686b633 --- /dev/null +++ b/SOURCES/lftp-4.4.8-gnutls-termination.patch @@ -0,0 +1,13 @@ +diff --git a/src/lftp_ssl.cc.old b/src/lftp_ssl.cc +index f9bd594..b412ae5 100644 +--- a/src/lftp_ssl.cc.old ++++ b/src/lftp_ssl.cc +@@ -569,7 +569,7 @@ int lftp_ssl_gnutls::read(char *buf,int size) + { + if(res==GNUTLS_E_AGAIN || res==GNUTLS_E_INTERRUPTED) + return RETRY; +- else if(res==GNUTLS_E_UNEXPECTED_PACKET_LENGTH) ++ else if(res==GNUTLS_E_UNEXPECTED_PACKET_LENGTH || res==GNUTLS_E_PREMATURE_TERMINATION) + { + Log::global->Format(7,"gnutls_record_recv: %s; assuming EOF\n",gnutls_strerror(res)); + return 0; diff --git a/SPECS/lftp.spec b/SPECS/lftp.spec index 92965b5..e3a80d2 100644 --- a/SPECS/lftp.spec +++ b/SPECS/lftp.spec @@ -1,7 +1,7 @@ Summary: A sophisticated file transfer program Name: lftp Version: 4.4.8 -Release: 12%{?dist} +Release: 12%{?dist}.1 License: GPLv3+ Group: Applications/Internet Source0: ftp://ftp.yar.ru/lftp/lftp-%{version}.tar.xz @@ -21,6 +21,7 @@ Patch9: lftp-4.4.8-hangs-mirror.patch Patch10: lftp-4.4.8-mirror-file-size-decrease.patch Patch11: lftp-4.4.8-max-retries.patch Patch12: lftp-4.4.8-reverse-mirror.patch +Patch13: lftp-4.4.8-gnutls-termination.patch %description LFTP is a sophisticated ftp/http file transfer program. Like bash, it has job @@ -52,6 +53,7 @@ Utility scripts for use with lftp. %patch10 -p1 -b .mirror-file-size-decrease %patch11 -p1 -b .max-retries %patch12 -p1 -b .reverse-mirror +%patch13 -p1 -b .gnutls-termination #sed -i.rpath -e '/lftp_cv_openssl/s|-R.*lib||' configure sed -i.norpath -e \ @@ -114,6 +116,9 @@ rm -rf $RPM_BUILD_ROOT %changelog +* Fri Feb 21 2020 Michal Ruprich - 4.4.8-12.1 +- Resolves: #1797964 - lftp with ssl gives error Fatal error: gnutls_record_recv: The TLS connection was non-properly terminated + * Wed Jul 24 2019 Michal Ruprich - 4.4.8-12 - Resolves: #1611641 - CVE-2018-10916 lftp: particular remote file names may lead to current working directory erased