![[BACK]](/icons/back.gif){kind=icon}
Up to [cvs.NetBSD.org] / pkgsrc / net / proftpd
Request diff between arbitrary revisions
Default branch: MAIN
Revision 1.100 / (download) - annotate - [select for diffs], Sat Dec 23 23:30:57 2023 UTC (3 months, 3 weeks ago) by nros
Branch: MAIN
CVS Tags: pkgsrc-2024Q1-base,
pkgsrc-2024Q1,
pkgsrc-2023Q4-base,
pkgsrc-2023Q4,
HEAD
Changes since 1.99: +4 -1
lines
Diff to previous 1.99 (colored) to selected 1.40 (colored)
proftpd: fix implicit declaration of memset_s to fix solaris build mod_sftp breaks on solaris like platforms due to the declaration of memset_s not being seen by the compiler. Define __STDC_WANT_LIB_EXT1__ to 1 to make sure it is seen.
Revision 1.99 / (download) - annotate - [select for diffs], Wed Dec 20 17:05:00 2023 UTC (3 months, 3 weeks ago) by wiz
Branch: MAIN
Changes since 1.98: +1 -5
lines
Diff to previous 1.98 (colored) to selected 1.40 (colored)
proftpd*: update to 1.3.8b
1.3.8b - Released 19-Dec-2023
--------------------------------
- Issue 1735 - Compiling ProFTPD 1.3.8a mod_sftp, mod_tls using libressl 3.7.3
fails.
- Issue 1756 - Build system fails for specific module names.
- Issue 1760 - mod_sftp is affected by "Terrapin" Prefix Truncation Attacks in
SSH Specification (CVE-2023-48795).
1.3.8a - Released 08-Oct-2023
--------------------------------
- Issue 1581 - mod_sftp fails to handle SFTP requests to truncate files to
zero size.
- Issue 1584 - mod_sftp improperly handles SFTP WRITE requests for files opened
for appending.
- Issue 1568 - Build-time detection of Linux POSIX ACL support broken since
1.3.8rc2.
- Issue 1590 - Unable to load mod_rewrite as a dynamic module due to
incomplete/missing library linker flags.
- Issue 1597 - <Class> section is allowed to be in <Global>, but From directive
is not.
- Issue 1617 - ExtendedLog SSH, SFTP classes not working as expected.
- Issue 1646 - mod_sftp does not handle multiple concurrent open file
handles/transfers well for logging.
- Issue 1679 - "TLSRequired off" plus Protocols directive causes mod_tls to
terminate the session abruptly.
- Issue 1689 - mod_tls fails to compile against OpenSSL 3.0.8 due to missing
ENGINE_METHOD_ flags.
- Issue 1659 - Unknown named connection error when using different SQL backends.
- Issue 1697 - mod_sql is not properly closing all named backend connections on
session exit.
- Issue 1694 - SSH key exchanges fail unexpectedly with "unable to write X
bytes of raw data" errors due to small ProFTPD buffer.
- Issue 1678 - High session memory usage caused by SFTP outgoing data buffering.
- Issue 1683 - Out-of-bounds buffer read when handling FTP commands.
- Issue 1712 - SFTP algorithm settings in <Global> section not being used.
1.3.8 - Released 04-Dec-2022
--------------------------------
- Issue 1488 - 1.3.8rc4 failing to build mod_sftp with OpenSSL 1.1.0 due to
X448 check.
- Issue 1494 - 1.3.8rc4 failing to build on Solaris due to missing type
declarations.
- Issue 1500 - mod_ifsession doesn't change the effect of SFTPMaxChannels.
- Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
authentication in some configurations.
- Issue 1528 - Disable FSCachePolicy by default.
- Issue 1539 - Avoid logging "session closed" messages unless there is a
corresponding "session opened" log message, to avoid user confusion.
- Issue 1550 - Implement support for the CSID FTP command.
- Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
not match publickey algorithm 'ssh-rsa'.
- Issue 1560 - mod_auth_otp improperly allows keyboard-interactive logins for
users lacking OTP entries.
1.3.8rc4 - Released 23-Jul-2022
--------------------------------
- Issue 1434 - mod_sftp should fail on startup when SFTP and TLS are both
enabled for a vhost.
- Issue 1440 - DelayTable not properly using documented default value. This
is a regression caused by the changes for Bug#4020.
- Issue 1444 - Support customizing SSH ciphers, digests, key exchanges via
SFTPClientMatch.
- Issue 1448 - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x.
- Issue 1445 - BanOnEvent BadProtocol triggers segfault.
- Issue 1439 - SFTP "check-file" implementation computes incorrect results.
- Issue 1457 - Implement SFTPHostKeys directive for configuring the SSH host
key algorithms.
- Issue 1437 - Implement the "curve448-sha512" SSH key exchange algorithm.
- Issue 1472 - Include directive broken when using wildcards for directory
components.
- Bug 4485 - mod_sftp fails to build using OpenSSL 1.0.x: undefined reference
to `EVP_MD_CTX_reset'.
- Issue 1476 - Reload after omitting explicit ModulePath value causes fatal
module load failures.
1.3.8rc3 - Released 23-Apr-2022
--------------------------------
- Issue 1323 - Support SSH hostkey rotation via OpenSSH extensions.
- Issue 1325 - NLST does not behave consistently for relative paths.
- Bug 3759 - Support AES Galois Counter Mode (AES-GCM) in SSH. Support for
the "aes128-gcm@openssh.com" and "aes256-gcm@openssh.com" ciphers has been
added to mod_sftp.
- Issue 1333 - Implement an LDAPConnectTimeout directive, to configure the
timeout used when connecting to LDAP servers.
- Issue 1330 - Implement OpenSSH "Encrypt-Then-MAC" (ETM) algorithm extensions.
- Issue 1346 - Implement AllowForeignAddress class matching for passive data
transfers.
- Issue 1353 - Implement support for PCRE2.
- Bug 4466 - ProFTPD won't start with several locales.
- Issue 1367 - Auth sources providing space-bearing user/group names cause
compliance issues with MLSD/MLST responses.
- Bug 4467 - DeleteAbortedStores removes successfully transferred files
unexpectedly.
- Issue 1383 - Omit EPRT/EPSV from FEAT response when denied by <Limit>
configuration.
- Issue 1379 - Support uploading to symlinked files.
- Issue 1401 - Keepalive socket options should be set using IPPROTO_TCP, not
SOL_SOCKET.
- Issue 1402 - TCP keepalive SocketOptions should apply to control as well as
data connection.
- Issue 1396 - ProFTPD always uses the same PassivePorts port for first
transfer.
- Issue 1410 - mod_sftp needs to handle unknown SSH messages in an
RFC-compliant manner, ignoring rather than disconnecting.
- Issue 1418 - Improve handling of some globally applied configuration
directives.
- Issue 1369 - Name-based virtual hosts not working as expected after upgrade
from 1.3.7a to 1.3.7b.
1.3.8rc2 - Released 29-Aug-2021
--------------------------------
- Bug 4401 - mod_sftp crashes when handling aes256-ctr OpenSSH-specific key
with some old OpenSSL versions.
- Issue 1273 - Improve mod_tls log messages for unsupported older TLS protocol
requests.
- Issue 1284 - Fix memory disclosure to RADIUS servers by mod_radius.
- Issue 1282 - Properly handle <VirtualHost> sections that use interface/device
names.
- Bug 4315 - mod_ifsession fails to reset directory config lookup after
<Directory> section merges.
- Issue 1296 - Support <Limit> configurations for HELP command.
- Issue 1300 - PCRE expressions with capture groups are not being handled
properly.
- Issue 1307 - AuthUserFile permissions check fails during SIGHUP, causing
ProFTPD to stop.
- Issue 1286 - Add support for the libidn2 library, over libidn, for e.g.
mod_rewrite mappings.
- Bug 4443 - Changed the default behavior of mod_tls, such that TLS
renegotiations on control/data connections are not requested by default.
TLS renegotiations have a long and sordid history; many SSL/TLS libraries no
longer implement them, or disable them by default.
- Issue 1319 - mod_auth_otp should honor RequireTableEntry semantics for SFTP
logins.
1.3.8rc1 - Released 13-Jun-2021
--------------------------------
- Issue 1063 - FTPS data transfers using TLSv1.3 might segfault when session
tickets cannot be decrypted.
- Issue 1070 - Implement support for Redis 6.x AUTH semantics.
- Issue 1068 - Define an OpenSSL API version compatibility macro, currently
set to OpenSSL 1.0.0 and later.
- Bug 4405 - Memory use-after-free in mod_sftp causes unexpected
login/authentication issues.
- Bug 4402 - Inappropriate handling of aborted FTP data transfers causes issues
for some FTP clients.
- Issue 1084 - Implement support for configuring TLSv1.3 ciphersuites.
- Issue 1086 - Update TLSRenegotiate to work properly for TLSv1.3 sessions.
- Issue 1079 - prxs fails to detect module-specific configure/Makefile,
leading to unexpected module load errors.
- Issue 1074 - TLS SNI connections to name-based VirtualHosts with
TLSCertificateChainFile fail unexpectedly.
- Issue 1089 - Deprecate the MultilineRFC2228 directive.
- Issue 1067 - Generate new DH parameters for mod_tls, mod_sftp for 1.3.8.
- Issue 1101 - Update TLS minimum supported DH parameter size to 2048.
- Issue 811 - Support adding custom key/values to RedisLogOnCommand.
- Issue 1106 - TLS SNI can cause mod_quotatab to crash due to null pointer
dereferences.
- Issue 1076 - TLS client-initiated renegotiations are supported unexpectedly.
- Issue 1105 - Improper handling of multiple IP addresses, ServerAliases in
<VirtualHost> sections.
- Issue 1048 - Support using weak TLS certificates via the new AllowWeakSecurity
TLSOption.
- Issue 1149 - mod_quotatab_sql failing due to SQL syntax errors. This is a
regression caused by Issue #392.
- Issue 1061 - Freeing uninitialized memory causes SFTP issues with ed25519
keys.
- Issue 1111 - "Corrupted MAC on input" errors using SFTP umac-64@openssh.com
digest.
- Issue 1171 - PassivePort randomization is broken due to SO_REUSEPORT option.
- Issue 1072 - Support configurable certificate settings in Redis SSL/TLS
connections.
- Issue 369 - Provide function for obtaining memory pool information as e.g.
JSON.
- Issue 1134 - AuthUserFile-based logins, directory listings are very slow due
to unbuffered reads.
- Issue 1193 - Improper checking for reused TLS session for data transfers
using OpenSSL 1.1.1.
- Issue 1168 - Improve error handling of OpenSSH host keys converted to PEM
format.
- Issue 1179 - TLSRSACertificateKeyFile sanity checks fail unexpectedly for
passphrase-protected keys.
- Issue 1174 - ftptop segfaults when using libncursesw on Gentoo.
- Issue 1204 - Once TLSTimeoutHandshake is reached, internal "timed out" flag
never reset.
- Issue 1133 - Support include files in mod_wrap2 allow/deny tables.
- Issue 1200 - Disconnect SFTP clients that request unsupportable protocol
versions.
- Issue 1207 - On Gentoo, "./configure --disable-ncurses" fails to link ftptop,
due to "undefined reference to symbol 'stdscr'" error.
- Issue 1212 - mod_sql_mysql needs to quote table names due to reserved MySQL
keywords.
- Issue 1175 - Unable to set per-user TLSOptions using mod_ifsession.
- Issue 754 - Some mod_snmp counters were not being incremented properly.
- Issue 548 - `make install` target should install only, not recompile any code.
- Bug 4428 - <VirtualHost> name resolution does not include all associated
IPv6 records.
- Issue 1230 - Stack overflow due to unlimited recursion possible when parsing
JSON text.
- Issue 1232 - Unable to use %{env:FTPS} in a SQLNamedQuery. The fix is to now
use %{note:FTPS} instead.
- Issue 1170 - Implement support for user/host combination bans in mod_ban.
- Issue 1246 - mod_sftp_sql crashes (sigsegv) on NULL key.
- Issue 1237 - ftpasswd should default to SHA256, not MD5.
- Issue 490 - Support syntax checks on AuthUserFiles, AuthGroupFiles on startup.
Revision 1.98 / (download) - annotate - [select for diffs], Tue Oct 24 22:10:30 2023 UTC (5 months, 3 weeks ago) by wiz
Branch: MAIN
Changes since 1.97: +2 -1
lines
Diff to previous 1.97 (colored) to selected 1.40 (colored)
*: bump for openssl 3
Revision 1.97 / (download) - annotate - [select for diffs], Fri Jul 7 11:44:35 2023 UTC (9 months, 1 week ago) by jperkin
Branch: MAIN
CVS Tags: pkgsrc-2023Q3-base,
pkgsrc-2023Q3
Changes since 1.96: +1 -3
lines
Diff to previous 1.96 (colored) to selected 1.40 (colored)
proftpd: Update to 1.3.7f, and fix msgfmt. 1.3.7f ------- 1.3.7e ------- + Ensure that mod_sftp algorithms work properly when OpenSSL 3.x is used. 1.3.7d ------- + Improved consistency/support for name-based virtual hosts. + Fixed crashes due to very long lines in AuthGroupFiles (Issue #1321).
Revision 1.96 / (download) - annotate - [select for diffs], Mon Sep 19 17:36:25 2022 UTC (18 months, 3 weeks ago) by nia
Branch: MAIN
CVS Tags: pkgsrc-2023Q2-base,
pkgsrc-2023Q2,
pkgsrc-2023Q1-base,
pkgsrc-2023Q1,
pkgsrc-2022Q4-base,
pkgsrc-2022Q4,
pkgsrc-2022Q3-base,
pkgsrc-2022Q3
Changes since 1.95: +1 -3
lines
Diff to previous 1.95 (colored) to selected 1.40 (colored)
proftpd: Apply CHECK_RELRO_SKIP when building modules to fix their build.
Revision 1.95 / (download) - annotate - [select for diffs], Tue Jun 28 11:35:19 2022 UTC (21 months, 2 weeks ago) by wiz
Branch: MAIN
Changes since 1.94: +2 -1
lines
Diff to previous 1.94 (colored) to selected 1.40 (colored)
*: recursive bump for perl 5.36
Revision 1.94 / (download) - annotate - [select for diffs], Mon Mar 7 16:27:48 2022 UTC (2 years, 1 month ago) by nia
Branch: MAIN
CVS Tags: pkgsrc-2022Q2-base,
pkgsrc-2022Q2,
pkgsrc-2022Q1-base,
pkgsrc-2022Q1
Changes since 1.93: +3 -1
lines
Diff to previous 1.93 (colored) to selected 1.40 (colored)
proftpd: Disable some overzealous RELRO checks
Revision 1.93 / (download) - annotate - [select for diffs], Sat Oct 16 19:46:41 2021 UTC (2 years, 6 months ago) by tm
Branch: MAIN
CVS Tags: pkgsrc-2021Q4-base,
pkgsrc-2021Q4
Changes since 1.92: +2 -4
lines
Diff to previous 1.92 (colored) to selected 1.40 (colored)
Update proftpd to 1.3.7c
1.3.7c
+ Fix memory disclosure to RADIUS servers by mod_radius (Issue #1284).
+ PCRE expressions with capture groups were not being handled properly
(Issue #1300).
1.3.7b
+ Fixed occasional segfaults with FTPS data transfers using TLSv1.3, when
session tickets cannot be decrypted (Issue #1063).
+ Passive transfers fail unexpectedly due to use of SO_REUSEPORT socket
option (Issue #1171).
+ Implemented support for Redis 6.x AUTH semantics (Issue #1070).
+ Fixed memory use-after-free issue in mod_sftp which can cause unexpected
login/authentication issues.
+ Fixed SQL syntax regression for some generated SQL statements
(Issue #1149).
+ Fixed "Corrupted MAC on inptut" errors when SFTP uses the
umac-64@openssh.com digest (Issue #1111).
1.3.7a
+ Fix build-time regression when using the --localstatedir configure option.
1.3.7
+ Support the SOURCE_DATE_EPOCH environment variable, for reproducible
builds (Issue #1038).
1.3.7rc4
+ Implemented support for configuring certificate options for LDAP
connections using SSL/TLS.
+ Fixed issue with FTPS uploads of large files using TLSv1.3 (Issue #959).
+ Fixed handling of IPv6 addresses in From directives (Issue #682).
+ Added -b and -n command-line options to ftptop.
+ Ignore supplemental groups when run as non-root user (Issue #808).
+ Use re-entrant versions of time functions where available (Issue #983).
+ New Configuration Directives
BanOptions
The BanOptions directive is used to tune mod_ban behavior, such as
creating ban entries that match/apply to all <VirtualHost> sections.
See doc/contrib/mod_ban.html#BanOptions for more details.
LDAPUseSASL
The LDAPUseSASL directive configures a list of SASL authentication
mechanisms to use, when using the LDAPBindDN to bind to the LDAP
server. See doc/contrib/mod_ldap.html#LDAPUseSASL for details.
LogOptions
The LogOptions directive is used to modify the default logging format
for ProFTPD syslog, debug, and module logging. See
doc/modules/mod_log.html#LogOptions for more information.
SQLKeepAlive
The SQLKeepAlive directive configures a periodic "keepalive" query
for ensuring the connection between mod_sql and the backend database
server. See doc/contrib/mod_sql.html#SQLKeepAlive for more information.
+ Changed Configuration Directives
LDAPServer
The LDAPServer directive now supports configuring the trusted CA
file, client certificate and key files, SSL ciphers, and verification
policies for LDAP connections. See doc/contrib/mod_ldap.html#LDAPServer
for more details.
TraceOptions
The TraceOptions directive now supports a "Timestamp" option, for
disabling inclusion of timestamps in Trace logs.
+ Developer notes
When MaxLoginAttempts is reach, the POST_CMD_ERR/LOG_CMD_ERR command
handler phases will now run. This allows interested modules, such
as mod_exec and others, to react to these events (Issue #718).
1.3.7rc3
+ Fixed regression in directory listing latency (Issue #863).
+ Fixed use-after-free vulnerability during data transfers (Issue #903).
+ Addressed out-of-bounds read in mod_cap by removing bundled libcap, and
relying solely on the system-provided libcap (Issue #902). Note that
building ProFTPD from source will *not* automatically include the
mod_cap module, unless the libcap library is available.
+ mod_sftp now supports OpenSSH-specific private host keys (Issue #793).
Newer versions of OpenSSH ssh-keygen(1) automatically generate private
keys formatted with this OpenSSH-specific format.
+ mod_sftp now supports Ed25519 keys (Bug #4221).
+ mod_sftp now supports RSA SHA-2 publickey signatures, per RFC 8332
(Issue #907).
+ mod_tls now honors client-provided SNI as part of the TLS handshake,
for implementing name-based virtual hosts via TLS SNI.
+ Changed Configuration Directives
LogFormat %{transfer-port}
The LogFormat directive supports a %{transfer-port} variable for
logging the selected data transfer port.
SFTPOptions NoExtensionNegotiation
The mod_sftp module now supports SSH extension negotations (RFC 8332).
If there any issues with this support, it can be disabled using:
SFTPOptions NoExtensionNegotiation
SQLAuthTypes bcrypt
The mod_sql_passwd module now supports bcrypt-encrypted passwords.
This can be enabled using:
SQLAuthTypes bcrypt
in your mod_sql configuration. See doc/contrib/mod_sql_password.html
for more information.
TLSOption IgnoreSNI
The TLSOption directive now supports an "IgnoreSNI" setting, to
tell mod_tls to ignore/not use any SNI, provided by the client in the
TLS handshake, for determining any name-based virtual hosts. See
doc/contrib/mod_tls.html#TLSOption for more details.
+ Added API
FSIO pread(2), pwrite(2) (Issue#317)
1.3.7rc2
+ Fixed pre-authentication remote denial-of-service issue (Issue #846,
CVE-2019-18217).
1.3.7rc1
+ RootRevoke is now on by default, meaning that once authentication succeeds,
all root privileges are dropped by default, unless the UserOwner directive
(which requires root privileges) is used (Bug#4241).
+ The mod_ident module is no longer automatically built by default.
To include the mod_ident module in the build, it must be explicitly
requested via --enable-ident or --with-shared=mod_ident.
This means that configuration files using the IdentLookups directive
will now want to using an enclosing <IfModule> section, like so:
<IfModule mod_ident.c>
IdentLookups off
</IfModule>
+ The mod_tls module now performs basic sanity checks of configured TLS
files on startup (Issue#491).
+ The mod_deflate module now supports MODE Z data transfers when TLS
is used (Issue#505).
+ The mod_xfer module now supports the RANG FTP command; see
https://tools.ietf.org/html/draft-bryan-ftp-range-08 (Issue#351).
+ The ftpasswd script now supports a --change-home option, for changing
the home directory of a user in an AuthUserFile (Issue#566).
+ The ftpasswd script supports deleting a user from a group (Issue#620).
+ Refactored the LogFormat handling code so that it is not longer
duplicated by mod_log, mod_sql, etc. The new Jot API is the common API
to be used by modules for LogFormat variables and logging.
+ Generated new DH parameters for mod_sftp, mod_tls.
+ New Configuration Directives
AuthFileOptions
The mod_auth_file module supports a configuration directive for disabling
its requirement for secure permissions on configured
AuthUserFile/AuthGroupFile. See
doc/modules/mod_auth_file.html#AuthFileOptions for information.
RedisLogOnEvent
The mod_redis module can be configured to log JSON messages based on
specified events (Issue#392). See the
doc/modules/mod_redis.html#RedisLogOnEvent documentation for details.
RedisOptions
The mod_redis module now implements a RedisOptions directive, for tuning
some of the module behavior (Issue#477). The
doc/modules/mod_redis.html#RedisOptions documentation has more details.
RedisSentinel
The mod_redis module now supports use of Redis Sentinels (Issue#396);
see doc/modules/mod_redis.html#RedisSentinel.
+ Changed Configuration Directives
AllowForeignAddress class-name
The AllowForeignAddress directive supports a Class name, for finer-grained
control over which clients are allowed to use foreign/mismatching IP
addresses for transfers. See
doc/modules/mod_core.html#AllowForeignAddress for more information.
ExecEnviron %b
The ExecEnviron directive has been fixed to properly resolve the %b
LogFormat variable (Issue#515).
RedisServer db-index (Issue#550)
The mod_redis module can now be configured to select a database index
via the RedisServer directive (Issue#550). See the
doc/modules/mod_redis.html#RedisServer documentation for details.
RewriteMap idnatrans
The mod_rewrite module can now support rewriting `idn` to `idna`
formats (Issue#231). See the doc/modules/mod_rewrite#RewriteMap for
details on how to do so.
RootRevoke on
The RootRevoke directive is now enabled by default (Bug#4241). This
makes for more secure configurations/sessions out-of-the-box. See
doc/modules/mod_auth.html#RootRevoke for more information.
SFTPCiphers, SFTPDigests
Some weak algorithms are now disabled by default in mod_sftp (Bug#4279).
These algorithms, if need be, can be explicitly enabled by configuration;
they are just not enabled automatically. For list of the algorithms
affected, see doc/contrib/mod_sftp.html#SFTPCiphers,
doc/contrib/mod_sftp.html#SFTPDigests.
SFTPOptions IncludeSFTPTimes
The SFTOptions directive of mod_sftp now supports an option for explicitly
including the timestamps of files when SFTP protocol 4 and higher are
used, even if the SFTP client did not request these timestamps. This
works around a bug in the popular Rebex SFTP library; see
doc/contrib/mod_sftp.html#SFTPOptions for details.
TLSProtocol TLSv1.3
The mod_tls module, and its TLSProtocol directive, now support TLSv1.3
(Issue#536). See doc/contrib/mod_tls.html#TLSProtocol for more
information.
TLSServerCipherPreference
The TLSServerCipherPreference directive is now enabled by default.
See doc/contrib/mod_tls.html#TLSServerCipherPrefrence.
TLSStaplingOptions NoFakeTryLater
Some TLS clients have trouble with the "fake" OCSP response that mod_tls
might stable, when the client requested stapled OCSP responses and
mod_tls is unable to contact the OCSP responder. Use this option to
disable such fake responses (Issue#518):
TLSStaplingOptions NoFakeTryLater
See doc/contrib/mod_tls.html#TLSStaplingOptions for details.
+ Removed Configuration Directives
The following directives have been removed:
GroupPassword
LoginPasswordPrompt
TransferPriority
Revision 1.92 / (download) - annotate - [select for diffs], Mon May 24 19:53:36 2021 UTC (2 years, 10 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2021Q3-base,
pkgsrc-2021Q3,
pkgsrc-2021Q2-base,
pkgsrc-2021Q2
Changes since 1.91: +2 -2
lines
Diff to previous 1.91 (colored) to selected 1.40 (colored)
*: recursive bump for perl 5.34
Revision 1.91 / (download) - annotate - [select for diffs], Mon Aug 31 18:10:52 2020 UTC (3 years, 7 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2021Q1-base,
pkgsrc-2021Q1,
pkgsrc-2020Q4-base,
pkgsrc-2020Q4,
pkgsrc-2020Q3-base,
pkgsrc-2020Q3
Changes since 1.90: +2 -1
lines
Diff to previous 1.90 (colored) to selected 1.40 (colored)
*: bump PKGREVISION for perl-5.32.
Revision 1.90 / (download) - annotate - [select for diffs], Mon Apr 20 12:50:02 2020 UTC (3 years, 11 months ago) by christos
Branch: MAIN
CVS Tags: pkgsrc-2020Q2-base,
pkgsrc-2020Q2
Changes since 1.89: +1 -2
lines
Diff to previous 1.89 (colored) to selected 1.40 (colored)
Upgrade to 1.3.6c:
1.3.6c
---------
+ Fixed regression in directory listing latency (Issue #863).
+ Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
converting them to supported format.
+ Fixed use-after-free vulnerability during data transfers (Issue #903).
+ Fixed out-of-bounds read in mod_cap by updating the bundled libcap
(Issue #902).
1.3.6b
---------
+ Fixed pre-authentication remote denial-of-service issue (Issue #846).
+ Backported fix for building mod_sql_mysql using MySQL 8 (Issue #824).
1.3.6a
---------
+ Fixed symlink navigation (Bug#4332).
+ Fixed building of mod_sftp using OpenSSL 1.1.x releases (Issue#674).
+ Fixed SITE COPY honoring of <Limit> restrictions (Bug#4372).
+ Fixed segfault on login when using mod_sftp + mod_sftp_pam (Issue#656).
+ Fixed restarts when using mod_facl as a static module.
Revision 1.89 / (download) - annotate - [select for diffs], Sat Jan 18 21:50:24 2020 UTC (4 years, 2 months ago) by jperkin
Branch: MAIN
CVS Tags: pkgsrc-2020Q1-base,
pkgsrc-2020Q1
Changes since 1.88: +2 -1
lines
Diff to previous 1.88 (colored) to selected 1.40 (colored)
*: Recursive revision bump for openssl 1.1.1.
Revision 1.88 / (download) - annotate - [select for diffs], Mon Oct 7 19:29:47 2019 UTC (4 years, 6 months ago) by christos
Branch: MAIN
CVS Tags: pkgsrc-2019Q4-base,
pkgsrc-2019Q4
Changes since 1.87: +3 -3
lines
Diff to previous 1.87 (colored) to selected 1.40 (colored)
- update to 1.3.6 - add blacklistd support.
Revision 1.87 / (download) - annotate - [select for diffs], Sun Aug 11 13:22:28 2019 UTC (4 years, 8 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2019Q3-base,
pkgsrc-2019Q3
Changes since 1.86: +2 -2
lines
Diff to previous 1.86 (colored) to selected 1.40 (colored)
Bump PKGREVISIONs for perl 5.30.0
Revision 1.86 / (download) - annotate - [select for diffs], Wed Aug 22 09:46:06 2018 UTC (5 years, 7 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2019Q2-base,
pkgsrc-2019Q2,
pkgsrc-2019Q1-base,
pkgsrc-2019Q1,
pkgsrc-2018Q4-base,
pkgsrc-2018Q4,
pkgsrc-2018Q3-base,
pkgsrc-2018Q3
Changes since 1.85: +2 -1
lines
Diff to previous 1.85 (colored) to selected 1.40 (colored)
Recursive bump for perl5-5.28.0
Revision 1.84.6.1 / (download) - annotate - [select for diffs], Wed Apr 5 21:54:27 2017 UTC (7 years ago) by spz
Branch: pkgsrc-2017Q1
Changes since 1.84: +1 -2
lines
Diff to previous 1.84 (colored) next main 1.85 (colored) to selected 1.40 (colored)
Pullup ticket #5244 - requested by kim
net/proftpd-postgresql: security update
net/proftpd-sqlite; security update
net/proftpd: security update
Revisions pulled up:
- net/proftpd-postgresql/Makefile 1.3
- net/proftpd-sqlite/Makefile 1.6
- net/proftpd/Makefile 1.85
- net/proftpd/Makefile.common 1.5
- net/proftpd/distinfo 1.46
-------------------------------------------------------------------
Module Name: pkgsrc
Committed By: kim
Date: Wed Apr 5 17:36:00 UTC 2017
Modified Files:
pkgsrc/net/proftpd: Makefile Makefile.common distinfo
pkgsrc/net/proftpd-postgresql: Makefile
pkgsrc/net/proftpd-sqlite: Makefile
Log Message:
Update net/proftpd (and modules) to 1.3.5d with a fix for CVE-2017-7418
1.3.5d - Released 15-Jan-2017
--------------------------------
- Bug 4283 - All FTP logins treated as anonymous logins again. This is a
regression of Bug#3307.
1.3.5c - Released 14-Jan-2017
--------------------------------
- Bug 4254 - SSH rekey during authentication can cause issues with clients.
- Bug 4257 - Recursive SCP uploads of multiple directories not handled properly.
- Bug 4259 - LIST returns different results for file, depending on path syntax.
- Bug 4255 - "AuthAliasOnly on" in server config breaks anonymous logins.
- Bug 4272 - CapabilitiesEngine directive not honored for <IfUser>/<IfGroup>
sections.
- Bug 4275 - Support OpenSSL 1.1.x API.
- Bug 4278 - Memory leak when mod_facl is used.
To generate a diff of this commit:
cvs rdiff -u -r1.84 -r1.85 pkgsrc/net/proftpd/Makefile
cvs rdiff -u -r1.4 -r1.5 pkgsrc/net/proftpd/Makefile.common
cvs rdiff -u -r1.45 -r1.46 pkgsrc/net/proftpd/distinfo
cvs rdiff -u -r1.2 -r1.3 pkgsrc/net/proftpd-postgresql/Makefile
cvs rdiff -u -r1.5 -r1.6 pkgsrc/net/proftpd-sqlite/Makefile
Revision 1.85 / (download) - annotate - [select for diffs], Wed Apr 5 17:36:00 2017 UTC (7 years ago) by kim
Branch: MAIN
CVS Tags: pkgsrc-2018Q2-base,
pkgsrc-2018Q2,
pkgsrc-2018Q1-base,
pkgsrc-2018Q1,
pkgsrc-2017Q4-base,
pkgsrc-2017Q4,
pkgsrc-2017Q3-base,
pkgsrc-2017Q3,
pkgsrc-2017Q2-base,
pkgsrc-2017Q2
Changes since 1.84: +1 -2
lines
Diff to previous 1.84 (colored) to selected 1.40 (colored)
Update net/proftpd (and modules) to 1.3.5d with a fix for CVE-2017-7418 1.3.5d - Released 15-Jan-2017 -------------------------------- - Bug 4283 - All FTP logins treated as anonymous logins again. This is a regression of Bug#3307. 1.3.5c - Released 14-Jan-2017 -------------------------------- - Bug 4254 - SSH rekey during authentication can cause issues with clients. - Bug 4257 - Recursive SCP uploads of multiple directories not handled properly. - Bug 4259 - LIST returns different results for file, depending on path syntax. - Bug 4255 - "AuthAliasOnly on" in server config breaks anonymous logins. - Bug 4272 - CapabilitiesEngine directive not honored for <IfUser>/<IfGroup> sections. - Bug 4275 - Support OpenSSL 1.1.x API. - Bug 4278 - Memory leak when mod_facl is used.
Revision 1.84 / (download) - annotate - [select for diffs], Sat Jul 9 06:38:45 2016 UTC (7 years, 9 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2017Q1-base,
pkgsrc-2016Q4-base,
pkgsrc-2016Q4,
pkgsrc-2016Q3-base,
pkgsrc-2016Q3
Branch point for: pkgsrc-2017Q1
Changes since 1.83: +2 -1
lines
Diff to previous 1.83 (colored) to selected 1.40 (colored)
Bump PKGREVISION for perl-5.24.0 for everything mentioning perl.
Revision 1.83 / (download) - annotate - [select for diffs], Mon Mar 14 22:47:10 2016 UTC (8 years, 1 month ago) by wiedi
Branch: MAIN
CVS Tags: pkgsrc-2016Q2-base,
pkgsrc-2016Q2,
pkgsrc-2016Q1-base,
pkgsrc-2016Q1
Changes since 1.82: +1 -2
lines
Diff to previous 1.82 (colored) to selected 1.40 (colored)
Update net/proftpd (and modules) to 1.3.5b 1.3.5b - Released 10-Mar-2016 -------------------------------- - Bug 4187 - mod_geoip does not load all of the GeoIPTables properly. - Bug 4191 - "Incorrect string value" reported by mod_sql_mysql for some UTF8 characters. - Bug 4097 - SSH rekey fails when using RSA hostkey smaller than 2048 bits. - Bug 4198 - MLSD/MLST fact type "cdir" is incorrectly used for the current working directory. - Bug 4201 - HiddenStores temporary files not removed when exceeding quota using SCP. - Bug 4202 - MLSD lines not properly terminated with CRLF. - Bug 4209 - Zero-length memory allocation possible, with undefined results. - Bug 4210 - Avoid unbounded SFTP extended attribute key/values. - Bug 4212 - Ensure that FTP data transfer commands fail appropriately when "RootRevoke on" is in effect. - Bug 4217 - Handle FTP re-authentication attempts better. - Bug 4223 - Permissions on files uploaded via STOU do not honor configured Umask. - Bug 4227 - Support SFTP clients that send multiple INIT requests. - Bug 4230 - TLSDHParamFile directive appears ignored because unexpected DH is chosen.
Revision 1.82 / (download) - annotate - [select for diffs], Sat Mar 5 11:29:10 2016 UTC (8 years, 1 month ago) by jperkin
Branch: MAIN
Changes since 1.81: +2 -2
lines
Diff to previous 1.81 (colored) to selected 1.40 (colored)
Bump PKGREVISION for security/openssl ABI bump.
Revision 1.81 / (download) - annotate - [select for diffs], Fri Sep 25 10:01:37 2015 UTC (8 years, 6 months ago) by wiedi
Branch: MAIN
CVS Tags: pkgsrc-2015Q4-base,
pkgsrc-2015Q4
Changes since 1.80: +39 -36
lines
Diff to previous 1.80 (colored) to selected 1.40 (colored)
Package ProFTPD using DSO (Dynamic Shared Objects) support. This is preferable for binary package use as it allowes the user to choose which features to enable by changeing the configuration file instead of recompiling. This is also how ProFTPD is usually packaged in other systems. For details about ProFTPD and DSO see: http://www.proftpd.org/docs/howto/DSO.html This change removes the following PKG_OPTIONS.proftpd: ban, ldap, mysql, pgsql, proftpd-readme, quota, tls and wrap The modules that were previously compiled when enabling ban, proftpd-readme, quota or tls are now always included. To load them use a configuration directive like: LoadModule mod_ban.c In addition the proftpd package includes by default many other modules that were previously unavailble like: mod_load, mod_radius, mod_sftp and more. The module that was provided by the wrap option is replaced by the wrap2 module which is also always included. The ldap option is superseded by the proftpd-ldap package. The mysql option is superseded by the proftpd-mysql package. The pgsql option is superseded by the proftpd-postgresql package. Using proftpd-postgresql will create one binary package for each PostgreSQL version in pkgsrc. In addition the following added packages provide new functionality: - proftpd-geoip (access GeoIP details) - proftpd-memcached (mod_memcache and mod_tls_memcache) - proftpd-odbc (access any ODBC database) - proftpd-sqlite (access to sqlite3)
Revision 1.80 / (download) - annotate - [select for diffs], Tue Aug 18 07:31:15 2015 UTC (8 years, 8 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2015Q3-base,
pkgsrc-2015Q3
Changes since 1.79: +2 -1
lines
Diff to previous 1.79 (colored) to selected 1.40 (colored)
Bump all packages that depend on curses.bui* or terminfo.bui* since they might incur ncurses dependencies on some platforms, and ncurses just bumped its shlib. Some packages were bumped twice now, sorry for that.
Revision 1.79 / (download) - annotate - [select for diffs], Mon Jul 13 15:39:27 2015 UTC (8 years, 9 months ago) by he
Branch: MAIN
Changes since 1.78: +2 -3
lines
Diff to previous 1.78 (colored) to selected 1.40 (colored)
Update to version 1.3.5a.
Pkgsrc changes:
* adapt one patch to changes upstream.
* adapt PLIST to newly installed files.
* rename and adapt patch to Makefile.in.
Upstream changes:
1.3.5a - Released 27-May-2015
--------------------------------
- Bug 4055 - "error setting listen fd IPV6_TCLASS: Protocol not available" log
message.
- Bug 3944 - Session closed if active data transfer fails due to "Address
already in use" error.
- Bug 4068 - MaxClients directive doesn't work for <Anonymous> sessions.
- Bug 4069 - NLST -a shows / directory instead of the current directory.
- Bug 4063 - Unable to create directory on NFS/CIFS partition: Permission
denied.
- Bug 4073 - Polycom VOIP phones unable to use FTPS data transfers.
- Bug 4077 - ShaperLog not closed/reopened on SIGHUP, causing log rotation
problems.
- Bug 4079 - Invalid response encoding for SFTP space-available request.
- Bug 4083 - Using SQLDefaultHomedir with null home results in "No such user".
- Bug 4087 - mod_sftp does not handle "MaxLoginAttempts none" properly.
- Bug 4089 - mod_sftp does not allow multiple attempts using a given
authentication method.
- Bug 4090 - mod_wrap2_file does not support IPv6 addresses properly.
- Bug 4091 - Log "Operation not permitted" privs errors at NOTICE rather than
ERROR.
- Bug 4094 - Available space on file system using %f displays wrong value.
- Bug 4108 - SSL handshakes for data connections sometimes stall for 3-30
seconds.
- Bug 4109 - setsockopt() call for IPV6_TCLASS should use IPPROTO_IPV6.
- Bug 4112 - Failure to connect using mod_sftp sometimes due to too-small
buffers.
- Bug 4114 - mod_tls should not support SSLv3 by default.
- Bug 4116 - Report exact SSL/TLS protocol version used in client connections.
- Bug 4124 - DeleteAbortedStores defaults to "on" for all transfers, not just
HiddenStores.
- Bug 4129 - mod_sql caches incorrect UID/GID when name cannot be retrieved.
- Bug 4131 - mod_sftp's autoconf script does not detect OpenSSL SHA2 support.
- Bug 4133 - LDAPUsers directive does not honor uid-number-filter-template
parameter.
- Bug 4137 - GeoIPDenyFilter incorrectly takes precedence over GeoIPAllowFilter.
- Bug 4140 - SFTP READLINK requests to symlinks to directories fail.
- Bug 4143 - HTTPS/FTPS protocol confusion leads to XSS.
- Bug 4145 - Segfault if AuthUserFile is a relative symlink.
- Bug 4152 - Reduce logging of non-fatal "unable to open incoming connection"
errors.
- Bug 4155 - SSH keys with too-long Comment headers aren't recognized by
mod_sftp_sql.
- Bug 4156 - Segfault handling LIST/NLST FTP command on Mac OS X.
- Bug 4160 - Malformed response to SSH_FXP_REALPATH with SFTP version 6.
- Bug 4169 - Unauthenticated copying of files via SITE CPFR/CPTO allowed by
mod_copy.
- Bug 4178 - TLS session reuse requirement for data connections not properly
enforced.
1.3.5 - Released 15-May-2014
--------------------------------
- Bug 4018 - Implement checks for sensitive directories when chrooted.
- Bug 4022 - "Directory not empty" error when creating directory is misleading.
- Bug 4025 - <IfClass> sections do not work for multiple SQLLog directives.
- Bug 4029 - TLSOptions EnableDiags logs "unknown version (771)" for
TLS 1.1/1.2 connections.
- Bug 3938 - mod_wrap2 uses reverse DNS regardless "UseReverseDNS off".
- Bug 4032 - Restarting proftpd with mod_sftp fails due to permissions on
SFTPHostKey file.
- Bug 4033 - mod_sftp fails to create SSH2 session using 'none' cipher.
- Bug 4034 - SSH publickey authentication fails with "MaxLoginAttempts 1".
- Bug 4024 - TLS 1.1/1.2 configurable, but not properly implemented.
- Bug 4046 - ALLO command failed because of bad size check.
- Bug 4048 - Race condition in mod_ban can lead to segfault of all new
connections.
- Bug 4049 - mod_exec should include supplemental groups when running commands
as logged-in user.
- Bug 4042 - MIC command between RNFR and RNTO should not be rejected.
- Bug 4044 - mod_facl prevents a normal SIGHUP reload.
- Bug 4052 - Enhance SQLPasswordPBKDF2 to support per-user query for settings.
1.3.5rc4 - Released 28-Jan-2014
--------------------------------
- Bug 3945 - Spurious log messages at session close.
- Bug 3946 - Null pointer dereference causes segfault when logging
%{transfer-status}, %{transfer-failure} LogFormat variables on EXIT.
- Bug 3947 - LogFormat %f variable not resolved properly for SFTP renames.
- Bug 3950 - LogFormat %d/%D variables not resolved properly for directory
listings.
- Bug 3949 - RNFR/RNTO not logged as expected for SFTP EXTENDED
posix-rename@openssh.com requests.
- Bug 3948 - Support FTP response codes in ExtendedLog for SFTP data transfers.
- Bug 3858 - mod_delay allows too-large values, leading to client hang on
authentication.
- Bug 3951 - Null pointer dereference for mod_ldap logins when
LDAPDefaultAuthScheme not configured.
- Bug 3954 - scp downloads result in segfault.
- Bug 3957 - ProFTPD configuration with thousands of <Directory>/<Limit>
sections leads to slow logins.
- Bug 3959 - mod_sftp does not honor <Directory>/<Limit> sections when symlinks
are involved.
- Bug 3958 - Directory creation does not honor single-parameter Umask setting.
- Bug 3960 - Support the CAP_FSETID Linux capability, for preserving directory
SGID bit.
- Bug 3962 - Directory creation fails (chmod(2) EPERM) when root privs are used
in some cases.
- Bug 3955 - Support secure FXP (site-to-site) transfers using SSCN.
- Bug 3966 - LogFormat %f variable not resolved for some commands.
- Bug 3971 - Support SQLOption for ignoring client library config files when
needed.
- Bug 3972 - Authentication error on Cygwin due to bad code.
- Bug 3973 - mod_sftp can be forced to allocate too much memory for
keyboard-interactive authentication.
- Bug 3974 - PathDenyFilter directive does not work as expected for SFTP
sessions.
- Bug 3963 - Improve permission setting when creating directories.
- Bug 3975 - Error printed to stderr when loading GeoIP Lite country database
using IndexCache flag.
- Bug 3976 - ProFTPD terminating (signal 11) crash for GeoLiteCity-20130903
database lookup.
- Bug 3964 - Support running ExecOnEvent actions with logged-in user's
permissions.
- Bug 3979 - mod_sql_odbc compiler warnings on 64-bit systems using unixODBC.
- Bug 3952 - Make PersistentPasswd default to 'off'.
- Bug 3981 - Null pointer dereference in mod_exec with ExecOption useStdin.
- Bug 3982 - Normalize log messages and levels.
- Bug 3888 - Add LDAPLog directive to mod_ldap.
- Bug 3982 - Normalize log messages and levels.
- Bug 3986 - Support filesystems which do not support chmod(2)/chown(2),
e.g. FAT/ExFAT.
- Bug 3991 - SSL session caching modules use incorrect OpenSSL cache mode flags,
breaking session caching.
- Bug 3987 - LogFormat variable for just the filename.
- Bug 3965 - Timeout directives have inconsistent maximum values.
- Bug 3998 - Support IgnoreSCPUploadTimes SFTPOption.
- Bug 3995 - ftpasswd utility should prevent concurrent modification of files.
- Bug 3994 - ftpasswd utility should support --lock/--unlock options.
- Bug 3970 - ProFTPD should not use fd 2 (stderr) for files.
- Bug 3772 - Support Elliptic Curve Cryptography (ECC) certs for
FTPS connections.
- Bug 3992 - RSA signature issue when connecting using PuTTY/WinSCP.
- Bug 3996 - Handling ALLO command can result in wrong response when chrooted.
- Bug 3876 - ExecOnEvent should be configurable per <VirtualHost>/<Global>.
- Bug 4001 - mod_sftp fails key exchange for 8192-bit DH group.
- Bug 4002 - Add 7680-bit DH parameter to mod_sftp bundled dhparams.pem file.
A 3072-bit DH group was also added.
- Bug 4004 - IgnoreSCPUploadPerms SFTPOption not honored properly for SCP
directory upload.
- Bug 4006 - RADIUS "service-type" attribute encoded with wrong length on
64-bit system.
- Bug 4011 - NLST ../ shows current directory contents rather than parent
directory.
- Bug 4013 - SCP upload of shorter file does not completely overwrite existing
file of same name.
- Bug 4014 - CommandBufferSize should override PR_DEFAULT_CMD_BUFSZ.
1.3.5rc3 - Released 14-Jun-2013
--------------------------------
- Bug 3910 - Clang's scan-build warns on set[u][g]id unchecked return value.
- Bug 3914 - 1.3.5rc2 fails to build on Solaris 10.
- Bug 3917 - Make DeleteAbortedStores on by default when HiddenStores enabled.
- Bug 3918 - mod_sftp segfault after SIGHUP when evaluating client banner.
- Bug 3864 - Support SQL query to lookup/use primary key for logged-in
user/group.
- Bug 3920 - Support umac-64@openssh.com digest for mod_sftp.
- Bug 3921 - Single failed keyboard-interactive login attempt causes SSH
connection to close prematurely.
- Bug 3923 - mod_cap does not revoke root privileges properly for SFTP
connections.
- Bug 3926 - Support OpenSSH fsync SFTP extension.
- Bug 3925 - SFTP directory listings are sensitive to locale environment
variables.
- Bug 3924 - HideFiles does not filter symlinks.
- Bug 3929 - pam_session_close() requires root privs on some platforms.
- Bug 3932 - SQLAuthType Backend returns "password mismatch" for MySQL
PASSWORD().
- Bug 3934 - HideUser/HideGroup do not work as expected for virtual users.
- Bug 3935 - scp download of nonexistent file results in client hang.
- Bug 3927 - Default ControlsSocket created despite custom ControlsSocket path.
- Bug 3937 - Segfault when retrieving SSH public key from LDAP directory.
- Added new mod_snmp contrib module.
- Bug 3939 - Disable Controls for "ServerType inetd" servers.
- Bug 3942 - mod_sftp_sql should support multiple keys concatenated together
in a single column.
- Bug 3943 - Support for PBKDF2 passwords in mod_sql_passwd.
- Bug 3941 - RLimitProcesses causes problems with setuid/setreuid.
1.3.5rc2 - Released 06-Mar-2013
--------------------------------
- Bug 3859 - MLSD fails to show symlinks when ShowSymlinks is not configured.
- Bug 3860 - Add a default deny option for mod_geoip.
- Bug 3862 - Support for FTPS-specific MasqueradeAddress functionality. A
new TLSMasqueradeAddress directive has been added to mod_tls.
- Bug 3863 - mod_sftp does not handle MaxLoginAttempts properly.
- Bug 3865 - BanEngine not set in "server config" results in "mod_ban not
enabled" ftpdctl error.
- Bug 3866 - Issuing invalid 'ftpdctl ban' request causes segfault.
- Bug 3867 - ftpasswd fails with "Permission denied" when adding subsequent
passwd/group entries.
- Bug 3868 - Only first DH param in TLSDHParamFile is used, regardless of
requested keylength.
- Bug 3870 - Handling of OPTS command can lead to crash.
- Bug 3779 - Generate new DH parameters for mod_tls and mod_sftp.
- Bug 3871 - REALPATH SFTP request not properly handled by <Limit DIRS>
configuration.
- Bug 3872 - Use HiddenStores directive to customise suffix.
- Bug 3873 - Provide FTP response code in ExtendedLog for failed SFTP REMOVE
request.
- Bug 3869 - Use longer SSL session cache expiration by default.
- Bug 3874 - Use of O_EXCL flag on HiddenStores files might break for NFS
filesystems.
- Bug 3878 - QuotaExcludeFilter not honored for uploads when 'hard' limits are
used.
- Bug 3879 - Allow additional columns in SQLNamedQuery queries used for quota
limits and tallies.
- Bug 3882 - DisplayLogin with an absolute path does not work properly within
an <IfGroup> section.
- Added new mod_log_forensic contrib module.
- Bug 3881 - <Directory> sections within <IfGroup> sections not applied as
expected.
- Bug 3884 - Configure script not detecting MySQL make_scrambled_password
functions.
- Bug 3887 - <Limit ALL> erroneously blocks the PROT command used for FTPS.
- Bug 3819 - Second and subsequent LIST of directory with many files is very
slow.
- Bug 3889 - Support millisecond timestamp LogFormat variable.
- Bug 3891 - Allow TLSProtocol directive in <VirtualHost> and <Global> sections.
- Bug 3753 - Support SFTP request names in <Limit> sections better.
- Bug 3892 - mod_auth_file should have strict permission checks of configured
files.
- Bug 3893 - Add SQLLogOnEvent directive, for performing SQL query on
configurable event.
- Bug 3894 - ftptop doesn't work with --enable-nls.
- Bug 3895 - Missing TransferLog entry under some out-of-space conditions.
- Bug 3897 - mod_sftp does not handle a REALPATH request properly for SFTP
protocol version 6.
- Bug 3896 - Warn when world-writable config files are used.
- Bug 3899 - Support authentication of users based on SSL/TLS client
certificate.
- Bug 3903 - With mod_log_forensic enabled, SSH connections fail randomly.
- Bug 3905 - Handle the Linux-specific PAM_RADIO_TYPE message properly.
- Bug 3709 - Support download-triggered emails in the ftpmail script.
- Bug 3904 - scp downloads using glob pattern sometimes fails.
- Bug 3900 - ProFTPD terminating (signal 11) on some sftp connections.
- Bug 3906 - Support ban rule for clients which perform SSL/TLS handshakes too
frequently.
1.3.5rc1 - Released 04-Jan-2013
--------------------------------
- Bug 3712 - mod_wrap2/mod_load build errors: missing config.h.
- Bug 3713 - mod_tls cannot be compiled using Openssl 0.9.6.
- Bug 3646 - Debug logging to stderr should include timestamps and PID.
- Bug 3714 - ftpwho/ftptop are not showing command arguments (e.g. downloaded
file name).
- Bug 3715 - MLSD/MLST fail when "DirFakeUser off" or "DirFakeGroup off" used.
- Bug 3717 - proftpd fails to run with "Abort trap" error message.
- Bug 3719 - LIST -R can loop endlessly if bad directory symlink exists.
- Bug 3720 - Various module logfile permissions are 0600 instead of 0640.
- Bug 3723 - mod_memcache segfault on server restart.
- Bug 3721 - mod_rewrite does not replace characters if there are more than
8 occurrences. To handle this situation, a new RewriteMaxReplace directive
has been added for configuring this limit.
- Bug 3724 - Unloading mod_quotatab causes segfault.
- Bug 3686 - Support SHA2 digests in mod_sftp. See the SFTPDigests directive
documentation for more information.
- Bug 3629 - Support <IfAuthenticated> conditional config section.
- Bug 3682 - Configure does not detect libiconv under Gentoo FreeBSD.
- Bug 3726 - mod_exec does not always capture stdout/stderr output from
executed command.
- Bug 3727 - mod_wrap2 causes unexpected LogFormat %u expansion for SFTP
connections.
- Bug 3729 - mod_ldap can segfault when LDAPUsers is used with no optional
filters.
- Bug 3728 - Build failure in wtmp.c on Gentoo/FreeBSD on sparc.
- Bug 3734 - DirFakeUser/DirFakeGroup off with name causes SIGSEGV for
MLSD/MLST commands.
- Bug 3739 - Allow for configurable SSH version identifiers in mod_sftp. The
SSH version identifier can now be configured for mod_sftp via the
ServerIdent directive.
- Bug 3718 - ftptop fails to build on OpenSUSE.
- Bug 3699 - ProFTPD crash on start up on Mac OSX Lion with NLS enabled.
- Bug 3744 - Support ls(1) -1 option for LIST command.
- Bug 3746 - Support applying ListOptions only to NLST or to LIST commands.
- Bug 3747 - Support option for displaying symlinks via MLSD using syntax
preferred by FileZilla. The new FactsOptions directive can be used for
this purpose.
- Bug 3745 - Reject PASV command if no IPv4 address available.
- Bug 3701 - Modify ScoreboardFile directive to support disabling scoreboarding.
- Bug 3742 - Improper handling of self-signed certificate in client-sent cert
list when "TLSVerifyClient on" is used.
- Bug 3749 - Compile of src/netacl.c fails on Tru64 UNIX (OSF/1) due to
conflict with system header.
- Bug 3743 - Random stalls/segfaults seen when transferring large files
via SFTP.
- Bug 3752 - proftpd process exit status is zero for "Failed binding to
address, port N: Address already in use" startup failure.
- Bug 3751 - mod_ban does not close/reopen the BanLog/BanTable file descriptors
on restart, causing a file descriptor leak.
- Bug 3707 - Add request/transfer ID to the logging of the initial and closing
commands for SFTP file transfers. This can now be accomplished using a
LogFormat variable of '%{note:sftp.file-handle}'.
- Bug 3757 - Support SFTPOption for ignoring requests to modify file ownership.
- Bug 3756 - mod_ctrls no longer listens on ControlsSocket after restart.
- Bug 3731 - Support active data transfers while RootRevoke is in effect.
- Bug 3737 - Allow UTF8 when UseEncoding is used.
- Bug 3573 - Support Elliptic Curve Cryptography (ECC) in SSH.
- Bug 3758 - ProFTPD crashes when handling mod_gss authentication due to null
pointer.
- Ability to load SSH host keys from an SSH agent, in addition to files on
disk. See doc/contrib/mod_sftp.html#SFTPHostKey for more information.
- Bug 3761 - SSH2 key exchange fails if client sends certain SSH message before
NEWKEYS.
- Bug 3763 - Ensure that mod_sftp operates properly when OpenSSL FIPS mode is
enabled.
- Bug 3764 - mod_sftp does not correctly handle a 'guess' KEX message when the
client guesses correctly.
- Bug 3765 - mod_sftp should honor the GroupOwner directive for MKDIR requests.
- Bug 3626 - Display variable %f off by a factor of 1024 on 64-bit platforms.
- Bug 3673 - Support date/timestamp variables in mod_rewrite.
- Bug 3754 - ProFTPD refuses to delete/rename a symlink pointing outside a
writable directory.
- Bug 3766 - Support a QuotaDefault directive, for configuring default limits.
- Bug 3767 - mod_rewrite segfault when handling SITE CHGRP without a parameter.
- Bug 3768 - ExecTimeout 0 (zero) not treated as infinite.
- Added new mod_geoip contrib module.
- Bug 3769 - Ensure that encoded strings are NUL-terminated.
- Bug 3732 - AIX build error: undefined symbol: .alloca.
- Bug 3782 - SQLShowInfo does not work properly for error responses.
- Bug 3780 - AIX gives "error setting listen fd IP_TOS: Invalid argument".
- Bug 3736 - Trying to re-authenticate an existing FTP connection causes invalid
503 response.
- Bug 3785 - Support resolution of tilde (~) within a chrooted session.
- Bug 3787 - Read-only SFTP OPEN request permissions not properly ignored.
- Bug 3740 - Overwrite permission denied when reloading multiple times and
multiple <VirtualHost> sections in proftpd.conf.
- Bug 3791 - Invalid handling of SCP control messages fragmented over multiple
SSH packets.
- Bug 3794 - Cygwin build failure in lib/tpl.c due to wrong include of mman.h.
- Bug 3795 - ProFTPD needs to use -pthread linker option if linking against
OpenSSL with thread support.
- Bug 3790 - Logfile timestamps change to GMT after MFMT command.
- Bug 3798 - Downloading nonexistent file via SCP results in timeout rather
than error.
- Bug 3800 - Multiple *Options directives should be handled properly.
- Bug 3801 - mod_tls should have directive like Apache mod_ssl's
SSLHonorCipherOrder. The mod_tls module now supports a
TLSServerCipherPreference directive.
- Bug 3804 - ioctl(RPROTDIS) code no longer needed on Solaris 11.
- Bug 3808 - Segfault in mod_tls when mod_tls_shmcache used.
- Bug 3809 - Segfaults in mod_radius when configured with RadiusGroupInfo.
- Bug 3811 - ExtendedLog entries not written if MaxClients limit reached.
- Bug 3814 - Support "configtest" command for contrib init.d script.
- Bug 3816 - Installation of ftpasswd does not honor DESTDIR environment
variable.
- Bug 3813 - Ability to use CreateHome to create parent directories as
non-root user, for better interoperability with NFS.
- Bug 3806 - Support reverse DNS resolution for IPv6 addresses when
gethostbyname2(3) is not available.
- Bug 3820 - Support device/interface names in <VirtualHost>, MasqueradeAddress,
and DefaultAddress.
- Bug 3822 - Resolving %U/%u LogFormat variables inconsistent between
mod_log/mod_sql in certain cases.
- Bug 3824 - Use RFC compliant address/port for data transfer if FTP client has
not sent PORT/PASV/EPRT/EPSV commands.
- Bug 3825 - Handle RFC 1918 IP addresses in PORT/EPRT commands.
- Bug 3827 - Use non-filesystem based SFTP handle generator instead of
mktemp(3).
- Bug 3828 - Certain sequences of FTP data transfer commands lead to NULL
pointer dereferences in mod_deflate.
- Bug 3830 - MFF/MFMT command segfaults due to insufficient parameter checks.
- Bug 3829 - RNFR without following RNTO can lead to NULL pointer dereference.
- Bug 3832 - Support disabling of system logging on per-connection basis.
- Bug 3792 - Recursive SCP uploads using preserve-time (-p) option may not work.
- Bug 3831 - Sporadic "451 Insufficient memory or file locked" failure when
downloading.
- Bug 3833 - Enable TCP keepalive by default, with configurable SocketOption.
- Bug 3837 - mod_tls unable to read certificate files after SIGHUP.
- Bug 3842 - Incorrect handling of REALPATH requests for symlink paths in
mod_sftp.
- Bug 3843 - ProFTPD should not fail when starting up due to loading same
module multiple times.
- Bug 3845 - mod_sftp does not provide response codes for %s LogFormat variable
for AUTH ExtendedLog.
- Bug 3846 - Avoid scanning ScoreboardFile needlessly on login if limits are
not configured.
- Bug 3850 - ftpasswd should support generating SHA-256, SHA-512 hashes where
possible.
- Bug 3851 - SFTPPassPhraseProvider fails due to incorrect pointer.
- Bug 3852 - Support directive for ignoring symlink DefaultRoot directories.
See the new AllowChrootSymlinks directive.
- Bug 3839 - Enhance mod_cap to support dropping root privs entirely.
- Bug 3841 - Possible symlink race when applying UserOwner to newly created
directory.
- Bug 3855 - Restarting proftpd may cause Include files not to be parsed.
Revision 1.78 / (download) - annotate - [select for diffs], Fri Jun 12 10:50:52 2015 UTC (8 years, 10 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2015Q2-base,
pkgsrc-2015Q2
Changes since 1.77: +2 -2
lines
Diff to previous 1.77 (colored) to selected 1.40 (colored)
Recursive PKGREVISION bump for all packages mentioning 'perl', having a PKGNAME of p5-*, or depending such a package, for perl-5.22.0.
Revision 1.77 / (download) - annotate - [select for diffs], Thu May 29 23:37:11 2014 UTC (9 years, 10 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2015Q1-base,
pkgsrc-2015Q1,
pkgsrc-2014Q4-base,
pkgsrc-2014Q4,
pkgsrc-2014Q3-base,
pkgsrc-2014Q3,
pkgsrc-2014Q2-base,
pkgsrc-2014Q2
Changes since 1.76: +2 -1
lines
Diff to previous 1.76 (colored) to selected 1.40 (colored)
Bump for perl-5.20.0. Do it for all packages that * mention perl, or * have a directory name starting with p5-*, or * depend on a package starting with p5- like last time, for 5.18, where this didn't lead to complaints. Let me know if you have any this time.
Revision 1.76 / (download) - annotate - [select for diffs], Mon Mar 3 15:01:53 2014 UTC (10 years, 1 month ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2014Q1-base,
pkgsrc-2014Q1
Changes since 1.75: +2 -3
lines
Diff to previous 1.75 (colored) to selected 1.40 (colored)
Changes 1.3.4d: + Fixed broken build when using --disable-ipv6 configure option + Fixed mod_sql "SQLAuthType Backend" MySQL issues
Revision 1.75 / (download) - annotate - [select for diffs], Wed Feb 12 23:18:25 2014 UTC (10 years, 2 months ago) by tron
Branch: MAIN
Changes since 1.74: +2 -2
lines
Diff to previous 1.74 (colored) to selected 1.40 (colored)
Recursive PKGREVISION bump for OpenSSL API version bump.
Revision 1.74 / (download) - annotate - [select for diffs], Fri May 31 12:41:42 2013 UTC (10 years, 10 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2013Q4-base,
pkgsrc-2013Q4,
pkgsrc-2013Q3-base,
pkgsrc-2013Q3,
pkgsrc-2013Q2-base,
pkgsrc-2013Q2
Changes since 1.73: +2 -1
lines
Diff to previous 1.73 (colored) to selected 1.40 (colored)
Bump all packages for perl-5.18, that a) refer 'perl' in their Makefile, or b) have a directory name of p5-*, or c) have any dependency on any p5-* package Like last time, where this caused no complaints.
Revision 1.73 / (download) - annotate - [select for diffs], Sat Apr 6 13:01:27 2013 UTC (11 years ago) by rodent
Branch: MAIN
Changes since 1.72: +1 -2
lines
Diff to previous 1.72 (colored) to selected 1.40 (colored)
'EXTRACT_SUFX is ".tar.gz" by default, so this definition may be redundant.' - It was. Removed.
Revision 1.69.2.1 / (download) - annotate - [select for diffs], Sun Mar 17 11:45:23 2013 UTC (11 years, 1 month ago) by tron
Branch: pkgsrc-2012Q4
Changes since 1.69: +5 -4
lines
Diff to previous 1.69 (colored) next main 1.70 (colored) to selected 1.40 (colored)
Pullup ticket #4099 - requested by kim
net/proftpd: security update
Revisions pulled up:
- net/proftpd/Makefile 1.72
- net/proftpd/PLIST 1.24
- net/proftpd/distinfo 1.40
- net/proftpd/patches/patch-ab deleted
- net/proftpd/patches/patch-ac deleted
---
Module Name: pkgsrc
Committed By: kim
Date: Fri Mar 15 13:34:32 UTC 2013
Modified Files:
pkgsrc/net/proftpd: Makefile PLIST distinfo
Removed Files:
pkgsrc/net/proftpd/patches: patch-ab patch-ac
Log Message:
Updated net/proftpd to 1.3.4c:
- addresses CVE-2012-6095 <http://bugs.proftpd.org/show_bug.cgi?id=3841>
Revision 1.72 / (download) - annotate - [select for diffs], Fri Mar 15 13:34:32 2013 UTC (11 years, 1 month ago) by kim
Branch: MAIN
CVS Tags: pkgsrc-2013Q1-base,
pkgsrc-2013Q1
Changes since 1.71: +5 -4
lines
Diff to previous 1.71 (colored) to selected 1.40 (colored)
Updated net/proftpd to 1.3.4c: - addresses CVE-2012-6095 <http://bugs.proftpd.org/show_bug.cgi?id=3841>
Revision 1.71 / (download) - annotate - [select for diffs], Sat Mar 2 20:33:31 2013 UTC (11 years, 1 month ago) by wiz
Branch: MAIN
Changes since 1.70: +2 -2
lines
Diff to previous 1.70 (colored) to selected 1.40 (colored)
Bump PKGREVISION for mysql default change to 55.
Revision 1.70 / (download) - annotate - [select for diffs], Wed Feb 6 23:23:22 2013 UTC (11 years, 2 months ago) by jperkin
Branch: MAIN
Changes since 1.69: +2 -2
lines
Diff to previous 1.69 (colored) to selected 1.40 (colored)
PKGREVISION bumps for the security/openssl 1.0.1d update.
Revision 1.69 / (download) - annotate - [select for diffs], Sun Dec 16 01:52:30 2012 UTC (11 years, 4 months ago) by obache
Branch: MAIN
CVS Tags: pkgsrc-2012Q4-base
Branch point for: pkgsrc-2012Q4
Changes since 1.68: +2 -2
lines
Diff to previous 1.68 (colored) to selected 1.40 (colored)
recursive bump from cyrus-sasl libsasl2 shlib major bump.
Revision 1.68 / (download) - annotate - [select for diffs], Tue Oct 23 17:19:00 2012 UTC (11 years, 5 months ago) by asau
Branch: MAIN
Changes since 1.67: +1 -3
lines
Diff to previous 1.67 (colored) to selected 1.40 (colored)
Drop superfluous PKG_DESTDIR_SUPPORT, "user-destdir" is default these days.
Revision 1.67 / (download) - annotate - [select for diffs], Wed Oct 3 21:57:09 2012 UTC (11 years, 6 months ago) by wiz
Branch: MAIN
Changes since 1.66: +2 -2
lines
Diff to previous 1.66 (colored) to selected 1.40 (colored)
Bump all packages that use perl, or depend on a p5-* package, or are called p5-*. I hope that's all of them.
Revision 1.66 / (download) - annotate - [select for diffs], Sat Dec 17 10:16:28 2011 UTC (12 years, 4 months ago) by sbd
Branch: MAIN
CVS Tags: pkgsrc-2012Q3-base,
pkgsrc-2012Q3,
pkgsrc-2012Q2-base,
pkgsrc-2012Q2,
pkgsrc-2012Q1-base,
pkgsrc-2012Q1,
pkgsrc-2011Q4-base,
pkgsrc-2011Q4
Changes since 1.65: +3 -1
lines
Diff to previous 1.65 (colored) to selected 1.40 (colored)
Add missing mk/curses buildlink. Bump PKGREVISION
Revision 1.63.4.1 / (download) - annotate - [select for diffs], Wed Nov 16 21:06:49 2011 UTC (12 years, 5 months ago) by sbd
Branch: pkgsrc-2011Q3
Changes since 1.63: +2 -3
lines
Diff to previous 1.63 (colored) next main 1.64 (colored) to selected 1.40 (colored)
Pullup ticket #3603 - requested by obache
net/proftpd security update
Revisions pulled up:
- net/proftpd/Makefile 1.64-1.65
- net/proftpd/distinfo 1.38-1.39
- net/proftpd/patches/patch-ab 1.13
- net/proftpd/patches/patch-ac 1.14
- net/proftpd/patches/patch-contrib_mod_tls.c 1.2
---
Module Name: pkgsrc
Committed By: adam
Date: Mon Oct 3 11:23:31 UTC 2011
Modified Files:
pkgsrc/net/proftpd: Makefile distinfo
pkgsrc/net/proftpd/patches: patch-ab patch-ac patch-contrib_mod_tls.c
Log Message:
Changes 1.3.3f:
* Fixes segfault if mod_sql_mysql and "SQLAuthenticate groupsetfast"
configuration used.
* Fixes mod_wrap syslog level (regression from Bug 3317).
* Fixes mod_ifsession segfault if regular expression patterns used in
a <VirtualHost> section.
---
Module Name: pkgsrc
Committed By: obache
Date: Wed Nov 16 09:05:04 UTC 2011
Modified Files:
pkgsrc/net/proftpd: Makefile distinfo
Log Message:
Update proftpd to 1.3.3g.
1.3.3g - Released 09-Nov-2011
--------------------------------
- Bug 3702 - ProFTPD with mod_sql_mysql dies of "Alarm clock" on FreeBSD.
- Bug 3704 - Enable OpenSSL countermeasure against SSLv3/TLSv1 BEAST attacks.
To disable this countermeasure, which may cause interoperability issues
with some clients, use the NoEmptyFragments TLSOption.
- Bug 3711 - Response pool use-after-free memory corruption error.
Revision 1.65 / (download) - annotate - [select for diffs], Wed Nov 16 09:05:03 2011 UTC (12 years, 5 months ago) by obache
Branch: MAIN
Changes since 1.64: +2 -2
lines
Diff to previous 1.64 (colored) to selected 1.40 (colored)
Update proftpd to 1.3.3g. 1.3.3g - Released 09-Nov-2011 -------------------------------- - Bug 3702 - ProFTPD with mod_sql_mysql dies of "Alarm clock" on FreeBSD. - Bug 3704 - Enable OpenSSL countermeasure against SSLv3/TLSv1 BEAST attacks. To disable this countermeasure, which may cause interoperability issues with some clients, use the NoEmptyFragments TLSOption. - Bug 3711 - Response pool use-after-free memory corruption error.
Revision 1.64 / (download) - annotate - [select for diffs], Mon Oct 3 11:23:31 2011 UTC (12 years, 6 months ago) by adam
Branch: MAIN
Changes since 1.63: +2 -3
lines
Diff to previous 1.63 (colored) to selected 1.40 (colored)
Changes 1.3.3f: * Fixes segfault if mod_sql_mysql and "SQLAuthenticate groupsetfast" configuration used. * Fixes mod_wrap syslog level (regression from Bug 3317). * Fixes mod_ifsession segfault if regular expression patterns used in a <VirtualHost> section.
Revision 1.63 / (download) - annotate - [select for diffs], Sun Jul 3 01:57:06 2011 UTC (12 years, 9 months ago) by dholland
Branch: MAIN
CVS Tags: pkgsrc-2011Q3-base,
pkgsrc-2011Q2-base,
pkgsrc-2011Q2
Branch point for: pkgsrc-2011Q3
Changes since 1.62: +4 -3
lines
Diff to previous 1.62 (colored) to selected 1.40 (colored)
Fix REPLACE_PERL. USE_TOOLS+=perl:run, since it installs the perl scripts that it's doing REPLACE_PERL on. PKGREVISION -> 1 because of the new dep.
Revision 1.62 / (download) - annotate - [select for diffs], Fri May 20 11:15:01 2011 UTC (12 years, 11 months ago) by adam
Branch: MAIN
Changes since 1.61: +3 -3
lines
Diff to previous 1.61 (colored) to selected 1.40 (colored)
Changes 1.3.3e: * Display messages work properly again. * Fixes plaintext command injection vulnerability in FTPS implementation (i.e. mod_tls). See http://bugs.proftpd.org/show_bug.cgi?id=3624 for details. * Fixes CVE-2011-1137 (badly formed SSH messages cause DoS). See http://bugs.proftpd.org/show_bug.cgi?id=3586 for details. * Performance improvements, especially during server startup/restarts.
Revision 1.61 / (download) - annotate - [select for diffs], Fri Apr 22 13:44:27 2011 UTC (12 years, 11 months ago) by obache
Branch: MAIN
Changes since 1.60: +2 -1
lines
Diff to previous 1.60 (colored) to selected 1.40 (colored)
recursive bump from gettext-lib shlib bump.
Revision 1.60 / (download) - annotate - [select for diffs], Wed Jan 12 07:31:00 2011 UTC (13 years, 3 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2011Q1-base,
pkgsrc-2011Q1
Changes since 1.59: +15 -16
lines
Diff to previous 1.59 (colored) to selected 1.40 (colored)
Changes 1.3.3d: * Fixed sql_prepare_where() buffer overflow. * Fixed CPU spike when handling .ftpaccess files. * Fixed handling of SFTP uploads when compression is used.
Revision 1.58.6.1 / (download) - annotate - [select for diffs], Tue Nov 9 20:58:59 2010 UTC (13 years, 5 months ago) by spz
Branch: pkgsrc-2010Q3
Changes since 1.58: +7 -14
lines
Diff to previous 1.58 (colored) next main 1.59 (colored) to selected 1.40 (colored)
Pullup ticket 3269 - requested by obache
security update
Revisions pulled up:
- pkgsrc/net/proftpd/Makefile 1.59
- pkgsrc/net/proftpd/PLIST 1.22
- pkgsrc/net/proftpd/distinfo 1.34
- pkgsrc/net/proftpd/options.mk 1.9
- pkgsrc/net/proftpd/patches/patch-aa 1.13
- pkgsrc/net/proftpd/patches/patch-ac 1.13
- pkgsrc/net/proftpd/patches/patch-ab 1.12
Files deleted:
pkgsrc/net/proftpd/patches/patch-ae
-------------------------------------------------------------------------
Module Name: pkgsrc
Committed By: obache
Date: Sun Nov 7 12:21:10 UTC 2010
Modified Files:
pkgsrc/net/proftpd: Makefile PLIST distinfo options.mk
pkgsrc/net/proftpd/patches: patch-aa patch-ab patch-ac
Removed Files:
pkgsrc/net/proftpd/patches: patch-ae
Log Message:
Update proftpd to 1.3.3c.
pksrc changes:
* Instead of patch&subst to change layout of statedir, pass it to configure
instead (and subst for manpages are fixed).
* Convert custom mod_wrap library modification to SUBST.
* Need to buildlink with security/tcp_wappers for mod_wrap.
NEWS:
1.3.3c - Released 29-Oct-2010
--------------------------------
- Bug 3511 - SQLAuthType Backend not properly rejected by mod_sql_sqlite.
- Bug 3513 - EPERM error logged unnecessarily for SFTP logins on Linux.
- Bug 3517 - mod_quotatab decrements file tally improperly for failed DELE
commands.
- Bug 3518 - Support SiteMiscEngine directive, for disabling mod_site_misc
functionality via proftpd.conf.
- Bug 3519 - Inappropriate directory traversal allowed by mod_site_misc.
- Bug 3521 - Telnet IAC processing stack overflow.
1.3.3b - Released 09-Sep-2010
--------------------------------
- Bug 3481 - Problem with SFTP directory listings.
- Bug 3483 - NULL pointer dereference handling SITE command in mod_quotatab.
- Bug 3485 - Disabling IPv6 via -4 or --ipv4 command-line options does not work.
- Bug 3487 - Null pointer dereference with EPRT/EPSV/PASV/PORT command during
data transfer.
- Bug 3482 - ProFTPD corrupts utmpx log files on FreeBSD 9.0/HEAD.
- Bug 3491 - Directory pattern not matching as expected.
- Bug 3492 - Null pointer dereference during data transfer due to RNFR/RNTO.
- Bug 3494 - Null pointer dereference for IPv6-enabled proftpd when no
DefaultServer configured.
- Bug 3501 - <Anonymous> logins with "AuthAliasOnly on" still handled as
anonymous logins.
1.3.3a - Released 01-Jul-2010
--------------------------------
- Bug 3400 - Add Japanese translation.
- Bug 3401 - mod_sftp does not compile with pre-0.9.7 OpenSSL.
- Bug 3402 - mod_tls does not compile with pre-0.9.7 OpenSSL due to Bug#3349.
- Bug 3403 - File upload followed by MLSD leads to wrong file size entries in
TransferLog.
- Bug 3405 - Multiple SFTPAuthorizedUserKeys stores causes segfault on 64-bit
platforms.
- Bug 3354 - Renaming a file across mount points to a full disk does not fail
as expected.
- Bug 3408 - Use <termios.h> instead of <sys/termios.h> where possible.
- Bug 3412 - Include files not included after restart due to permissions.
- Bug 3409 - Build failure on newer FreeBSD due to utmp/utmpx system changes.
- Bug 3417 - Unsafe use of pointer when scanning config for ScoreboardFile.
- Bug 3418 - %U sometimes showing up as "(none)" in ExtendedLog.
- Bug 3421 - RewriteHome does not work properly for SFTP connections.
- Bug 3419 - SSL_shutdown() errors with openssl-0.9.8m.
- Bug 3423 - Last line of multiline DisplayLogin file improperly handled.
- Bug 3426 - mod_sftp does not log to TransferLog by default.
- Bug 3425 - Improperly constructed destination paths for SCP uploads.
- Bug 3427 - mod_sftp does not handle recursive SCP uploads properly.
- Bug 3432 - ExecBeforeCommand does not interpolate the %F/%f variables
properly.
- Bug 3434 - TraceLog contains messages even with "Trace DEFAULT:0" configured.
- Bug 3435 - Encoding/decoding conversion can cause CPU spike.
- Bug 3436 - Support build-time option to disable use of nonblocking open of
log files. Use --disable-nonblocking-log-open to get the pre-1.3.3 behavior
of opening log files.
- Bug 3437 - UseImplicitSSL TLSOption causes PBSZ/PROT commands to fail.
- Bug 3439 - Encoding fails if an NLS-enabled proftpd starts in a UTF8 locale.
- Bug 3446 - .ftpaccess ignored in some cases.
- Bug 3447 - mod_sftp can become confused during large recursive SCP uploads.
- Bug 3448 - Ensure that STAT/LSTAT/FSTAT SFTP requests do not use cached/stale
data.
- Bug 3449 - mod_sftp does not properly handle the O_TRUNC flag in a SFTP OPEN
request.
- Bug 3450 - mod_sftp does not properly handle the O_APPEND flag in a SFTP OPEN
request.
- Bug 3451 - WinSCP can't upload files using protocol version 5 with mod_sftp.
- Bug 3452 - mod_sftp does not advertise its supported SFTP extensions for
protocol version 5.
- Bug 3454 - msgfmt(1) options used for generating NLS files are not compatible
with Solaris' msgfmt.
- Bug 3456 - Problem attempting to recursively download a directory via SCP.
- Bug 3458 - mod_sftp incorrectly performs OpenSSL cleanup.
- Bug 3459 - mod_radius segfaults during incorrect login due to stale data.
- Bug 3460 - REALPATH SFTP request can cause improperly cached directory
configuration.
- Bug 3462 - ftpasswd script's --delete-user option does not work.
- Bug 3463 - ftpasswd script's --delete-group option does not work.
- Bug 3465 - SIGSEGV at LIST after CCC.
- Bug 3470 - Deferred resolution <Directory> paths not handled properly by
mod_sftp.
- Bug 3469 - ExtendedLog's %f variable not properly expanded for DELE if path
begins with tilde ('~').
- Bug 3467 - mod_ifsession does not merge <Directory> blocks properly.
- Bug 3471 - Null values in allow/deny rules causes mod_wrap2 to segfault.
- Bug 3472 - mod_sftp publickey authentication fails for large keys.
- Bug 3424 - Bad LDAP lookup can cause mod_ldap segfault under some conditions.
- Bug 3476 - LIST/NLST of path starting with "-" fails.
- Bug 3475 - Add new 'noGetgrouplist' AuthUnixOption to work around buggy
libc code.
- Bug 3474 - Using SQLite database and SQLLog directive can lead to problems
under load.
To generate a diff of this commit:
cvs rdiff -u -r1.58 -r1.59 pkgsrc/net/proftpd/Makefile
cvs rdiff -u -r1.21 -r1.22 pkgsrc/net/proftpd/PLIST
cvs rdiff -u -r1.33 -r1.34 pkgsrc/net/proftpd/distinfo
cvs rdiff -u -r1.8 -r1.9 pkgsrc/net/proftpd/options.mk
cvs rdiff -u -r1.12 -r1.13 pkgsrc/net/proftpd/patches/patch-aa \
pkgsrc/net/proftpd/patches/patch-ac
cvs rdiff -u -r1.11 -r1.12 pkgsrc/net/proftpd/patches/patch-ab
cvs rdiff -u -r1.7 -r0 pkgsrc/net/proftpd/patches/patch-ae
Revision 1.59 / (download) - annotate - [select for diffs], Sun Nov 7 12:21:09 2010 UTC (13 years, 5 months ago) by obache
Branch: MAIN
CVS Tags: pkgsrc-2010Q4-base,
pkgsrc-2010Q4
Changes since 1.58: +7 -14
lines
Diff to previous 1.58 (colored) to selected 1.40 (colored)
Update proftpd to 1.3.3c.
pksrc changes:
* Instead of patch&subst to change layout of statedir, pass it to configure
instead (and subst for manpages are fixed).
* Convert custom mod_wrap library modification to SUBST.
* Need to buildlink with security/tcp_wappers for mod_wrap.
NEWS:
1.3.3c - Released 29-Oct-2010
--------------------------------
- Bug 3511 - SQLAuthType Backend not properly rejected by mod_sql_sqlite.
- Bug 3513 - EPERM error logged unnecessarily for SFTP logins on Linux.
- Bug 3517 - mod_quotatab decrements file tally improperly for failed DELE
commands.
- Bug 3518 - Support SiteMiscEngine directive, for disabling mod_site_misc
functionality via proftpd.conf.
- Bug 3519 - Inappropriate directory traversal allowed by mod_site_misc.
- Bug 3521 - Telnet IAC processing stack overflow.
1.3.3b - Released 09-Sep-2010
--------------------------------
- Bug 3481 - Problem with SFTP directory listings.
- Bug 3483 - NULL pointer dereference handling SITE command in mod_quotatab.
- Bug 3485 - Disabling IPv6 via -4 or --ipv4 command-line options does not work.
- Bug 3487 - Null pointer dereference with EPRT/EPSV/PASV/PORT command during
data transfer.
- Bug 3482 - ProFTPD corrupts utmpx log files on FreeBSD 9.0/HEAD.
- Bug 3491 - Directory pattern not matching as expected.
- Bug 3492 - Null pointer dereference during data transfer due to RNFR/RNTO.
- Bug 3494 - Null pointer dereference for IPv6-enabled proftpd when no
DefaultServer configured.
- Bug 3501 - <Anonymous> logins with "AuthAliasOnly on" still handled as
anonymous logins.
1.3.3a - Released 01-Jul-2010
--------------------------------
- Bug 3400 - Add Japanese translation.
- Bug 3401 - mod_sftp does not compile with pre-0.9.7 OpenSSL.
- Bug 3402 - mod_tls does not compile with pre-0.9.7 OpenSSL due to Bug#3349.
- Bug 3403 - File upload followed by MLSD leads to wrong file size entries in
TransferLog.
- Bug 3405 - Multiple SFTPAuthorizedUserKeys stores causes segfault on 64-bit
platforms.
- Bug 3354 - Renaming a file across mount points to a full disk does not fail
as expected.
- Bug 3408 - Use <termios.h> instead of <sys/termios.h> where possible.
- Bug 3412 - Include files not included after restart due to permissions.
- Bug 3409 - Build failure on newer FreeBSD due to utmp/utmpx system changes.
- Bug 3417 - Unsafe use of pointer when scanning config for ScoreboardFile.
- Bug 3418 - %U sometimes showing up as "(none)" in ExtendedLog.
- Bug 3421 - RewriteHome does not work properly for SFTP connections.
- Bug 3419 - SSL_shutdown() errors with openssl-0.9.8m.
- Bug 3423 - Last line of multiline DisplayLogin file improperly handled.
- Bug 3426 - mod_sftp does not log to TransferLog by default.
- Bug 3425 - Improperly constructed destination paths for SCP uploads.
- Bug 3427 - mod_sftp does not handle recursive SCP uploads properly.
- Bug 3432 - ExecBeforeCommand does not interpolate the %F/%f variables
properly.
- Bug 3434 - TraceLog contains messages even with "Trace DEFAULT:0" configured.
- Bug 3435 - Encoding/decoding conversion can cause CPU spike.
- Bug 3436 - Support build-time option to disable use of nonblocking open of
log files. Use --disable-nonblocking-log-open to get the pre-1.3.3 behavior
of opening log files.
- Bug 3437 - UseImplicitSSL TLSOption causes PBSZ/PROT commands to fail.
- Bug 3439 - Encoding fails if an NLS-enabled proftpd starts in a UTF8 locale.
- Bug 3446 - .ftpaccess ignored in some cases.
- Bug 3447 - mod_sftp can become confused during large recursive SCP uploads.
- Bug 3448 - Ensure that STAT/LSTAT/FSTAT SFTP requests do not use cached/stale
data.
- Bug 3449 - mod_sftp does not properly handle the O_TRUNC flag in a SFTP OPEN
request.
- Bug 3450 - mod_sftp does not properly handle the O_APPEND flag in a SFTP OPEN
request.
- Bug 3451 - WinSCP can't upload files using protocol version 5 with mod_sftp.
- Bug 3452 - mod_sftp does not advertise its supported SFTP extensions for
protocol version 5.
- Bug 3454 - msgfmt(1) options used for generating NLS files are not compatible
with Solaris' msgfmt.
- Bug 3456 - Problem attempting to recursively download a directory via SCP.
- Bug 3458 - mod_sftp incorrectly performs OpenSSL cleanup.
- Bug 3459 - mod_radius segfaults during incorrect login due to stale data.
- Bug 3460 - REALPATH SFTP request can cause improperly cached directory
configuration.
- Bug 3462 - ftpasswd script's --delete-user option does not work.
- Bug 3463 - ftpasswd script's --delete-group option does not work.
- Bug 3465 - SIGSEGV at LIST after CCC.
- Bug 3470 - Deferred resolution <Directory> paths not handled properly by
mod_sftp.
- Bug 3469 - ExtendedLog's %f variable not properly expanded for DELE if path
begins with tilde ('~').
- Bug 3467 - mod_ifsession does not merge <Directory> blocks properly.
- Bug 3471 - Null values in allow/deny rules causes mod_wrap2 to segfault.
- Bug 3472 - mod_sftp publickey authentication fails for large keys.
- Bug 3424 - Bad LDAP lookup can cause mod_ldap segfault under some conditions.
- Bug 3476 - LIST/NLST of path starting with "-" fails.
- Bug 3475 - Add new 'noGetgrouplist' AuthUnixOption to work around buggy
libc code.
- Bug 3474 - Using SQLite database and SQLLog directive can lead to problems
under load.
Revision 1.58 / (download) - annotate - [select for diffs], Sun Mar 21 21:24:25 2010 UTC (14 years ago) by kim
Branch: MAIN
CVS Tags: pkgsrc-2010Q3-base,
pkgsrc-2010Q2-base,
pkgsrc-2010Q2,
pkgsrc-2010Q1-base,
pkgsrc-2010Q1
Branch point for: pkgsrc-2010Q3
Changes since 1.57: +2 -2
lines
Diff to previous 1.57 (colored) to selected 1.40 (colored)
Upgrade proftpd to 1.3.3 (bug fixes, see the NEWS file for a full list).
Revision 1.57 / (download) - annotate - [select for diffs], Mon Dec 21 00:41:43 2009 UTC (14 years, 3 months ago) by tonnerre
Branch: MAIN
CVS Tags: pkgsrc-2009Q4-base,
pkgsrc-2009Q4
Changes since 1.56: +2 -3
lines
Diff to previous 1.56 (colored) to selected 1.40 (colored)
Upgrade proftpd to version 1.3.2c.
Changes since version 1.3.2:
* Added Taiwan translation.
* Added a workaround in mod_tls to deal with the vulnerability found in
SSL/TLS protocol during renegotiation (CVE-2009-3555). Good
descriptions of this vulnerability can be found here:
http://extendedsubset.com/?p=8
http://www.educatedguesswork.org/2009/11/understanding_the_tls_renegoti.html
The workaround implemented in mod_tls (Bug#3324) is one of the suggested
mitigation approaches: the server now refuses all client-initiated
SSL/TLS session renegotiations.
* Bug and regression fixes.
* Added French, Bulgarian, Korean translations.
* Various bug and regression fixes.
Revision 1.56 / (download) - annotate - [select for diffs], Tue May 19 08:59:28 2009 UTC (14 years, 11 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2009Q3-base,
pkgsrc-2009Q3,
pkgsrc-2009Q2-base,
pkgsrc-2009Q2
Changes since 1.55: +2 -2
lines
Diff to previous 1.55 (colored) to selected 1.40 (colored)
Use standard location for LICENSE line (in MAINTAINER/HOMEPAGE/COMMENT block). Uncomment some commented out LICENSE lines while here.
Revision 1.55 / (download) - annotate - [select for diffs], Mon Feb 9 11:57:48 2009 UTC (15 years, 2 months ago) by tron
Branch: MAIN
CVS Tags: pkgsrc-2009Q1-base,
pkgsrc-2009Q1
Changes since 1.54: +3 -2
lines
Diff to previous 1.54 (colored) to selected 1.40 (colored)
Fix (de)installation of a binary version of this package. Bump the package revision because the package list changed.
Revision 1.52.2.1 / (download) - annotate - [select for diffs], Mon Feb 9 11:28:54 2009 UTC (15 years, 2 months ago) by tron
Branch: pkgsrc-2008Q4
Changes since 1.52: +5 -2
lines
Diff to previous 1.52 (colored) next main 1.53 (colored) to selected 1.40 (colored)
Pullup ticket #2693 - requested by kim
proftpd: security update
Revisions pulled up:
- net/proftpd/Makefile 1.53-1.54
- net/proftpd/PLIST 1.15-1.16
- net/proftpd/distinfo 1.30
- net/proftpd/files/proftpd.sh 1.3
---
Module Name: pkgsrc
Committed By: shattered
Date: Sun Jan 11 22:47:54 UTC 2009
Modified Files:
pkgsrc/net/proftpd: Makefile PLIST
pkgsrc/net/proftpd/files: proftpd.sh
Log Message:
- rc.d script: replace interpreter, add 'reload' command
- install 'ftpasswd' script from contrib
OK by kim@.
---
Module Name: pkgsrc
Committed By: kim
Date: Sun Feb 8 07:28:44 UTC 2009
Modified Files:
pkgsrc/net/proftpd: Makefile PLIST distinfo
Log Message:
Upgrade proftpd to 1.3.2
Revision 1.54 / (download) - annotate - [select for diffs], Sun Feb 8 07:28:44 2009 UTC (15 years, 2 months ago) by kim
Branch: MAIN
Changes since 1.53: +3 -3
lines
Diff to previous 1.53 (colored) to selected 1.40 (colored)
Upgrade proftpd to 1.3.2
Revision 1.53 / (download) - annotate - [select for diffs], Sun Jan 11 22:47:54 2009 UTC (15 years, 3 months ago) by shattered
Branch: MAIN
Changes since 1.52: +5 -2
lines
Diff to previous 1.52 (colored) to selected 1.40 (colored)
- rc.d script: replace interpreter, add 'reload' command - install 'ftpasswd' script from contrib OK by kim@.
Revision 1.52 / (download) - annotate - [select for diffs], Sun Dec 28 08:56:59 2008 UTC (15 years, 3 months ago) by kim
Branch: MAIN
CVS Tags: pkgsrc-2008Q4-base
Branch point for: pkgsrc-2008Q4
Changes since 1.51: +7 -1
lines
Diff to previous 1.51 (colored) to selected 1.40 (colored)
Grrr, cannot patch next to RCS id strings, so use sed instead.
Revision 1.51 / (download) - annotate - [select for diffs], Sun Dec 28 08:42:01 2008 UTC (15 years, 3 months ago) by kim
Branch: MAIN
Changes since 1.50: +2 -2
lines
Diff to previous 1.50 (colored) to selected 1.40 (colored)
Fix the "pam" option to leave out PAM when it is not wanted. Add an "inet6" option for enabling IPv6 support. Add a "ban" option for enabling mod_ban. Make the "wrap" option compile all binaries successfully. Fix generating language catalog with older versions of msgfmt.
Revision 1.50 / (download) - annotate - [select for diffs], Fri Nov 21 08:00:36 2008 UTC (15 years, 4 months ago) by martti
Branch: MAIN
Changes since 1.49: +2 -2
lines
Diff to previous 1.49 (colored) to selected 1.40 (colored)
Updated net/proftpd to 1.3.2rc3 * Bug fixes
Revision 1.49 / (download) - annotate - [select for diffs], Sat Oct 4 02:25:59 2008 UTC (15 years, 6 months ago) by obache
Branch: MAIN
CVS Tags: pkgsrc-2008Q3-base,
pkgsrc-2008Q3
Changes since 1.48: +2 -2
lines
Diff to previous 1.48 (colored) to selected 1.40 (colored)
Need msgfmt to build. Fixes PR 39692.
Revision 1.48 / (download) - annotate - [select for diffs], Fri Oct 3 06:52:03 2008 UTC (15 years, 6 months ago) by martti
Branch: MAIN
Changes since 1.47: +7 -7
lines
Diff to previous 1.47 (colored) to selected 1.40 (colored)
Updated net/proftpd to 1.3.2rc2 Fix for http://bugs.proftpd.org/show_bug.cgi?id=3115
Revision 1.47 / (download) - annotate - [select for diffs], Thu Jun 12 02:14:41 2008 UTC (15 years, 10 months ago) by joerg
Branch: MAIN
CVS Tags: pkgsrc-2008Q2-base,
pkgsrc-2008Q2,
cwrapper,
cube-native-xorg-base,
cube-native-xorg
Changes since 1.46: +7 -5
lines
Diff to previous 1.46 (colored) to selected 1.40 (colored)
Add DESTDIR support.
Revision 1.46 / (download) - annotate - [select for diffs], Mon Nov 12 00:00:12 2007 UTC (16 years, 5 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2008Q1-base,
pkgsrc-2008Q1,
pkgsrc-2007Q4-base,
pkgsrc-2007Q4
Changes since 1.45: +2 -3
lines
Diff to previous 1.45 (colored) to selected 1.40 (colored)
Remove ftp.middle-earth.it from MASTER_SITES, doesn't resolve. From Zafer Aydogan in PR 37324.
Revision 1.45 / (download) - annotate - [select for diffs], Tue Oct 30 19:31:42 2007 UTC (16 years, 5 months ago) by martti
Branch: MAIN
Changes since 1.44: +2 -2
lines
Diff to previous 1.44 (colored) to selected 1.40 (colored)
Based on some feedback, comment out the newly added LICENSE=xxx for now. I'll re-activate this later when the global license stuff is activated.
Revision 1.44 / (download) - annotate - [select for diffs], Tue Oct 30 13:57:17 2007 UTC (16 years, 5 months ago) by martti
Branch: MAIN
Changes since 1.43: +2 -1
lines
Diff to previous 1.43 (colored) to selected 1.40 (colored)
Added LICENSE=gnu-gpl-v2
Revision 1.43 / (download) - annotate - [select for diffs], Fri Oct 12 10:06:20 2007 UTC (16 years, 6 months ago) by martti
Branch: MAIN
Changes since 1.42: +2 -2
lines
Diff to previous 1.42 (colored) to selected 1.40 (colored)
Updated net/proftpd to 1.3.1 Changes since 1.3.1rc3 ---------------------- - Bug 2944 - mod_sql_mysql fails to compile due to missing quotation. - Bug 2946 - Anonymous logins fail if the mod_facl module is enabled. - Bug 2947 - SIGBUS on Mac OS X when dynamically loading shared libs. - Bug 2950 - Hostname with multiple IP addresses might cause "ai_family not supported" error if IPv6 support enabled. - Bug 2955 - Undeclared identifier MAP_FAILED for mod_delay on AIX. - Bug 2958 - mod_wrap2 does not handle multiple rules in access files. - Bug 2963 - Use of -A option for LIST/NLST commands not cleared for subsequent commands. - Bug 2964 - Building RPM fails because of *snprintf trying to be redefined. This is actually caused by a particular combination of compiler flags (-O2 and -Wp,-D_FORTIFY_SOURCE=2), which are used by the `rpmbuild' command in some Linux releases. - Bug 2974 - Install error if multiple modules, using their own build script, are built as shared modules. - Bug 2981 - Command-line long options --ipv4 and --ipv6 do not work. - Bug 2795 - Improvements to RPM .spec file to build more of the modules, plus better optional packaging organization.
Revision 1.41.2.1 / (download) - annotate - [select for diffs], Tue Jul 10 12:16:04 2007 UTC (16 years, 9 months ago) by ghen
Branch: pkgsrc-2007Q2
Changes since 1.41: +3 -3
lines
Diff to previous 1.41 (colored) next main 1.42 (colored) to selected 1.40 (colored)
Pullup ticket 2139 - requested by martti bugfix update for proftpd - pkgsrc/net/proftpd/Makefile 1.42 - pkgsrc/net/proftpd/PLIST 1.13 - pkgsrc/net/proftpd/distinfo 1.24 - pkgsrc/net/proftpd/patches/patch-ab 1.7 - pkgsrc/net/proftpd/patches/patch-ac 1.9 - pkgsrc/net/proftpd/patches/patch-ad removed - pkgsrc/net/proftpd/patches/patch-ae removed - pkgsrc/net/proftpd/patches/patch-af removed Module Name: pkgsrc Committed By: martti Date: Fri Jul 6 11:04:41 UTC 2007 Modified Files: pkgsrc/net/proftpd: Makefile PLIST distinfo pkgsrc/net/proftpd/patches: patch-ab patch-ac Removed Files: pkgsrc/net/proftpd/patches: patch-ad patch-ae patch-af Log Message: Updated net/proftpd to 1.3.1rc3 Hello, ProFTPD community. The ProFTPD Project team is pleased to announce that the third release candidate for ProFTPD 1.3.1 is now available for public consumption. The 1.3.1rc3 release includes a number of minor bugfixes, including segfaults when handling the NLST command, dealing assigning IPv6 addresses for the EPSV command, and better handling of Display files in chrooted sessions. Please read the included NEWS and ChangeLog files for the full details.
Revision 1.42 / (download) - annotate - [select for diffs], Fri Jul 6 11:04:40 2007 UTC (16 years, 9 months ago) by martti
Branch: MAIN
CVS Tags: pkgsrc-2007Q3-base,
pkgsrc-2007Q3
Changes since 1.41: +3 -3
lines
Diff to previous 1.41 (colored) to selected 1.40 (colored)
Updated net/proftpd to 1.3.1rc3 Hello, ProFTPD community. The ProFTPD Project team is pleased to announce that the third release candidate for ProFTPD 1.3.1 is now available for public consumption. The 1.3.1rc3 release includes a number of minor bugfixes, including segfaults when handling the NLST command, dealing assigning IPv6 addresses for the EPSV command, and better handling of Display files in chrooted sessions. Please read the included NEWS and ChangeLog files for the full details.
Revision 1.40.2.1 / (download) - annotate - [select for diffs], Thu Jun 28 10:49:44 2007 UTC (16 years, 9 months ago) by ghen
Branch: pkgsrc-2007Q1
Changes since 1.40: +2 -2
lines
Diff to previous 1.40 (colored) next main 1.41 (colored)
Pullup ticket 2124 - requested by lkundrak security fix for proftpd - pkgsrc/net/proftpd/Makefile 1.41 - pkgsrc/net/proftpd/distinfo 1.23 - pkgsrc/net/proftpd/patches/patch-ad 1.3 - pkgsrc/net/proftpd/patches/patch-ae 1.3 - pkgsrc/net/proftpd/patches/patch-af 1.1 Module Name: pkgsrc Committed By: lkundrak Date: Tue Jun 26 23:25:57 UTC 2007 Modified Files: pkgsrc/net/proftpd: Makefile distinfo Added Files: pkgsrc/net/proftpd/patches: patch-ad patch-ae patch-af Log Message: Fix for a CVE-2007-2165 security issue grabbed from upstream #2922.
Revision 1.41 / (download) - annotate - [select for diffs], Tue Jun 26 23:25:56 2007 UTC (16 years, 9 months ago) by lkundrak
Branch: MAIN
CVS Tags: pkgsrc-2007Q2-base
Branch point for: pkgsrc-2007Q2
Changes since 1.40: +2 -2
lines
Diff to previous 1.40 (colored)
Fix for a CVE-2007-2165 security issue grabbed from upstream #2922.
Revision 1.38.2.1 / (download) - annotate - [select for diffs], Sun Jan 28 16:43:56 2007 UTC (17 years, 2 months ago) by ghen
Branch: pkgsrc-2006Q4
Changes since 1.38: +2 -2
lines
Diff to previous 1.38 (colored) next main 1.39 (colored) to selected 1.40 (colored)
Pullup ticket 1991 - requested by martti bugfix update for proftpd - pkgsrc/net/proftpd/Makefile 1.39 - pkgsrc/net/proftpd/PLIST 1.12 - pkgsrc/net/proftpd/distinfo 1.22 - pkgsrc/net/proftpd/patches/patch-aa 1.9 - pkgsrc/net/proftpd/patches/patch-ab 1.6 - pkgsrc/net/proftpd/patches/patch-ac 1.8 Module Name: pkgsrc Committed By: martti Date: Sat Jan 13 09:47:38 UTC 2007 Modified Files: pkgsrc/net/proftpd: Makefile PLIST distinfo pkgsrc/net/proftpd/patches: patch-aa patch-ab patch-ac Log Message: Updated net/proftpd to 1.3.1rc2 + Fixed mod_sql's handling of WHERE clauses + Fixed segfaults ocurring after SIGHUP when shared modules are used + Fixed copying of symlinks in skeleton directory for CreateHome
Revision 1.40 / (download) - annotate - [selected], Wed Jan 24 05:22:01 2007 UTC (17 years, 2 months ago) by martti
Branch: MAIN
CVS Tags: pkgsrc-2007Q1-base
Branch point for: pkgsrc-2007Q1
Changes since 1.39: +23 -21
lines
Diff to previous 1.39 (colored)
Fixed PLIST when using quota and mysql options.
Revision 1.39 / (download) - annotate - [select for diffs], Sat Jan 13 09:47:38 2007 UTC (17 years, 3 months ago) by martti
Branch: MAIN
Changes since 1.38: +2 -2
lines
Diff to previous 1.38 (colored) to selected 1.40 (colored)
Updated net/proftpd to 1.3.1rc2 + Fixed mod_sql's handling of WHERE clauses + Fixed segfaults ocurring after SIGHUP when shared modules are used + Fixed copying of symlinks in skeleton directory for CreateHome
Revision 1.35.4.3 / (download) - annotate - [select for diffs], Mon Dec 18 14:28:32 2006 UTC (17 years, 4 months ago) by ghen
Branch: pkgsrc-2006Q3
Changes since 1.35.4.2: +11 -6
lines
Diff to previous 1.35.4.2 (colored) to branchpoint 1.35 (colored) next main 1.36 (colored) to selected 1.40 (colored)
Pullup ticket 1960 - requested by salo
security update for proftpd
- pkgsrc/net/proftpd/Makefile 1.38
- pkgsrc/net/proftpd/PLIST 1.11
- pkgsrc/net/proftpd/distinfo 1.21
- pkgsrc/net/proftpd/patches/patch-aa 1.8
- pkgsrc/net/proftpd/patches/patch-ab 1.5
- pkgsrc/net/proftpd/patches/patch-ac 1.7
Module Name: pkgsrc
Committed By: martti
Date: Thu Dec 14 11:19:46 UTC 2006
Modified Files:
pkgsrc/net/proftpd: Makefile PLIST distinfo
pkgsrc/net/proftpd/patches: patch-aa patch-ab patch-ac
Log Message:
Updated net/proftpd to 1.3.1rc1
The 1.3.1rc1 release includes major new features and numerous bugfixes,
including:
+ Support for UTF8 and translated response messages (NLS support)
+ New configuration directives:
DisplayChdir
DisplayFileTransfer
UseIPv6
UseUTF8
+ Deprecated configuration directives:
DisplayFirstChdir
The DisplayFirstChdir directive is deprecated; sites should use
the new DisplayChdir directive (which allows for files to
be displayed on every directory change, rather than just the
first time for a directory change).
HiddenStor
The HiddenStor directive is deprecated; simply use HiddenStores
instead.
SQLHomedirOnDemand
The SQLHomedirOnDemand directive will be removed in future
releases; use the CreateHome directive instead.
+ New modules:
mod_ban, a module handling dynamic client "black lists"
See doc/contrib/mod_ban.html
+ Enhanced modules:
The mod_tls module can now make use of cryptographic accelerator
cards with the new TLSCryptoDevice directive. It can also use
a program for obtaining certificate passphrases via the new
TLSPassPhraseProvider directive.
+ Documentation
Revision 1.38 / (download) - annotate - [select for diffs], Thu Dec 14 11:19:46 2006 UTC (17 years, 4 months ago) by martti
Branch: MAIN
CVS Tags: pkgsrc-2006Q4-base
Branch point for: pkgsrc-2006Q4
Changes since 1.37: +11 -6
lines
Diff to previous 1.37 (colored) to selected 1.40 (colored)
Updated net/proftpd to 1.3.1rc1
The 1.3.1rc1 release includes major new features and numerous bugfixes,
including:
+ Support for UTF8 and translated response messages (NLS support)
+ New configuration directives:
DisplayChdir
DisplayFileTransfer
UseIPv6
UseUTF8
+ Deprecated configuration directives:
DisplayFirstChdir
The DisplayFirstChdir directive is deprecated; sites should use
the new DisplayChdir directive (which allows for files to
be displayed on every directory change, rather than just the
first time for a directory change).
HiddenStor
The HiddenStor directive is deprecated; simply use HiddenStores
instead.
SQLHomedirOnDemand
The SQLHomedirOnDemand directive will be removed in future
releases; use the CreateHome directive instead.
+ New modules:
mod_ban, a module handling dynamic client "black lists"
See doc/contrib/mod_ban.html
+ Enhanced modules:
The mod_tls module can now make use of cryptographic accelerator
cards with the new TLSCryptoDevice directive. It can also use
a program for obtaining certificate passphrases via the new
TLSPassPhraseProvider directive.
+ Documentation
Revision 1.35.4.2 / (download) - annotate - [select for diffs], Thu Nov 23 12:30:27 2006 UTC (17 years, 4 months ago) by ghen
Branch: pkgsrc-2006Q3
Changes since 1.35.4.1: +2 -2
lines
Diff to previous 1.35.4.1 (colored) to branchpoint 1.35 (colored) to selected 1.40 (colored)
Pullup ticket 1920 - requested by adrianp fix security fix for proftpd - pkgsrc/net/proftpd/Makefile 1.37 - pkgsrc/net/proftpd/distinfo 1.20 - pkgsrc/net/proftpd/patches/patch-ac 1.6 Module Name: pkgsrc Committed By: adrianp Date: Thu Nov 23 11:57:07 UTC 2006 Modified Files: pkgsrc/net/proftpd: Makefile distinfo pkgsrc/net/proftpd/patches: patch-ac Log Message: Updated patch-ac via Debian to fix PR #35092
Revision 1.37 / (download) - annotate - [select for diffs], Thu Nov 23 11:57:07 2006 UTC (17 years, 4 months ago) by adrianp
Branch: MAIN
Changes since 1.36: +2 -2
lines
Diff to previous 1.36 (colored) to selected 1.40 (colored)
Updated patch-ac via Debian to fix PR #35092
Revision 1.35.4.1 / (download) - annotate - [select for diffs], Sun Nov 19 12:15:43 2006 UTC (17 years, 5 months ago) by ghen
Branch: pkgsrc-2006Q3
Changes since 1.35: +2 -2
lines
Diff to previous 1.35 (colored) to selected 1.40 (colored)
Pullup ticket 1913 - requested by adrianp
security fix for proftpd
- pkgsrc/net/proftpd/Makefile 1.36
- pkgsrc/net/proftpd/distinfo 1.19
- pkgsrc/net/proftpd/patches/patch-ac 1.5
Module Name: pkgsrc
Committed By: adrianp
Date: Sat Nov 18 14:32:58 UTC 2006
Modified Files:
pkgsrc/net/proftpd: Makefile distinfo
Added Files:
pkgsrc/net/proftpd/patches: patch-ac
Log Message:
Add patch-ac for CVE-2006-5815
Patch from ProFTPD CVS:
http://proftp.cvs.sourceforge.net/proftp/proftpd/src/main.c?r1=1.292&r2=1.293&view=patch&sortby=date
Revision 1.36 / (download) - annotate - [select for diffs], Sat Nov 18 14:32:58 2006 UTC (17 years, 5 months ago) by adrianp
Branch: MAIN
Changes since 1.35: +2 -2
lines
Diff to previous 1.35 (colored) to selected 1.40 (colored)
Add patch-ac for CVE-2006-5815 Patch from ProFTPD CVS: http://proftp.cvs.sourceforge.net/proftp/proftpd/src/main.c?r1=1.292&r2=1.293&view=patch&sortby=date
Revision 1.35 / (download) - annotate - [select for diffs], Mon May 1 21:17:06 2006 UTC (17 years, 11 months ago) by minskim
Branch: MAIN
CVS Tags: pkgsrc-2006Q3-base,
pkgsrc-2006Q2-base,
pkgsrc-2006Q2
Branch point for: pkgsrc-2006Q3
Changes since 1.34: +3 -1
lines
Diff to previous 1.34 (colored) to selected 1.40 (colored)
Honor ROOT_USER and ROOT_GROUP.
Revision 1.34 / (download) - annotate - [select for diffs], Mon Apr 17 05:33:09 2006 UTC (18 years ago) by martti
Branch: MAIN
Changes since 1.33: +2 -2
lines
Diff to previous 1.33 (colored) to selected 1.40 (colored)
Updated net/proftpd to 1.3.0 This is the official release (which should be identical to rc5)
Revision 1.33 / (download) - annotate - [select for diffs], Mon Mar 20 05:52:48 2006 UTC (18 years, 1 month ago) by martti
Branch: MAIN
CVS Tags: pkgsrc-2006Q1-base,
pkgsrc-2006Q1
Changes since 1.32: +2 -2
lines
Diff to previous 1.32 (colored) to selected 1.40 (colored)
Updated net/proftpd to 1.3.0rc5 The 1.3.0rc5 release includes a number of minor bugfixes, including a workaround for getting proper timestamps in chrooted process logs if glibc-2.3 is present, and a fix for daemon processes hanging when shutting down on Mac OS X.
Revision 1.32 / (download) - annotate - [select for diffs], Thu Mar 2 10:46:20 2006 UTC (18 years, 1 month ago) by martti
Branch: MAIN
Changes since 1.31: +5 -5
lines
Diff to previous 1.31 (colored) to selected 1.40 (colored)
Updated net/proftpd to 1.3.0rc4 The 1.3.0rc4 release includes a number of minor bugfixes, including fixed run-time detection of Unix domain sockets, portability tweaks for Mac OSX 10.4, and logging fixes for NetBSD and Solaris.
Revision 1.31 / (download) - annotate - [select for diffs], Fri Feb 17 07:46:50 2006 UTC (18 years, 2 months ago) by martti
Branch: MAIN
Changes since 1.30: +11 -11
lines
Diff to previous 1.30 (colored) to selected 1.40 (colored)
Fixed warnings found by pkglint -Wall.
Revision 1.30 / (download) - annotate - [select for diffs], Sun Feb 5 23:10:29 2006 UTC (18 years, 2 months ago) by joerg
Branch: MAIN
Changes since 1.29: +2 -2
lines
Diff to previous 1.29 (colored) to selected 1.40 (colored)
Recursive revision bump / recommended bump for gettext ABI change.
Revision 1.29 / (download) - annotate - [select for diffs], Sun Jan 8 18:35:11 2006 UTC (18 years, 3 months ago) by xtraeme
Branch: MAIN
Changes since 1.28: +2 -2
lines
Diff to previous 1.28 (colored) to selected 1.40 (colored)
Bump PKGREVISION due to mysql.buildlink3.mk changes (default mysql pkg has been changed to 5.x). Reminded by wiz... thanks.
Revision 1.28 / (download) - annotate - [select for diffs], Thu Dec 29 06:22:01 2005 UTC (18 years, 3 months ago) by jlam
Branch: MAIN
Changes since 1.27: +1 -2
lines
Diff to previous 1.27 (colored) to selected 1.40 (colored)
Remove USE_PKGINSTALL from pkgsrc now that mk/install/pkginstall.mk automatically detects whether we want the pkginstall machinery to be used by the package Makefile.
Revision 1.27 / (download) - annotate - [select for diffs], Mon Dec 5 23:55:14 2005 UTC (18 years, 4 months ago) by rillig
Branch: MAIN
CVS Tags: pkgsrc-2005Q4-base,
pkgsrc-2005Q4
Changes since 1.26: +3 -3
lines
Diff to previous 1.26 (colored) to selected 1.40 (colored)
Ran "pkglint --autofix", which corrected some of the quoting issues in CONFIGURE_ARGS.
Revision 1.26 / (download) - annotate - [select for diffs], Thu Nov 3 19:09:46 2005 UTC (18 years, 5 months ago) by martti
Branch: MAIN
Changes since 1.25: +5 -4
lines
Diff to previous 1.25 (colored) to selected 1.40 (colored)
Updated proftpd to 1.3.0rc3 A lot of changes and bug fixes, including fix for the following security problem: http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02
Revision 1.25 / (download) - annotate - [select for diffs], Thu Nov 3 14:53:22 2005 UTC (18 years, 5 months ago) by rillig
Branch: MAIN
Changes since 1.24: +2 -2
lines
Diff to previous 1.24 (colored) to selected 1.40 (colored)
Removed the trailing slash behind the last MASTER_SITE.
Revision 1.21.2.1 / (download) - annotate - [select for diffs], Sat Aug 6 22:17:34 2005 UTC (18 years, 8 months ago) by salo
Branch: pkgsrc-2005Q2
Changes since 1.21: +11 -51
lines
Diff to previous 1.21 (colored) next main 1.22 (colored) to selected 1.40 (colored)
Pullup ticket 662 - requested by Adrian Portelli
update and security fixes for proftpd
Revisions pulled up:
- pkgsrc/net/proftpd/Makefile 1.22, 1.23, 1.24
- pkgsrc/net/proftpd/PLIST 1.9
- pkgsrc/net/proftpd/distinfo 1.10, 1.11, 1.12, 1.13
- pkgsrc/net/proftpd/options.mk 1.1
- pkgsrc/net/proftpd/files/proftpd.sh 1.2
- pkgsrc/net/proftpd/patches/patch-ab 1.1
- pkgsrc/net/proftpd/patches/patch-ac 1.1, 1.2
- pkgsrc/net/proftpd/patches/patch-ad 1.1
- pkgsrc/net/proftpd/patches/patch-ae 1.1
Module Name: pkgsrc
Committed By: salo
Date: Wed Jun 22 22:43:37 UTC 2005
Modified Files:
pkgsrc/net/proftpd: Makefile PLIST distinfo
pkgsrc/net/proftpd/files: proftpd.sh
Added Files:
pkgsrc/net/proftpd: options.mk
pkgsrc/net/proftpd/patches: patch-ab
Log Message:
PKGREVISION++
- split PKG_OPTIONS to options.mk file
- fix issue with state directory in (typically) /var/run,
noted by Justin Newcomer on tech-pkg@
- delint
---
Module Name: pkgsrc
Committed By: christos
Date: Thu Jun 23 04:49:27 UTC 2005
Modified Files:
pkgsrc/net/proftpd: Makefile distinfo
Added Files:
pkgsrc/net/proftpd/patches: patch-ac
Log Message:
Make it log in wtmpx properly.
XXX: someone should fix the array has type char issues.
---
Module Name: pkgsrc
Committed By: christos
Date: Sun Jul 10 19:57:07 UTC 2005
Modified Files:
pkgsrc/net/proftpd: distinfo
pkgsrc/net/proftpd/patches: patch-ac
Log Message:
Simplify (and correct) the previous ut_ss filling code.
---
Module Name: pkgsrc
Committed By: adrianp
Date: Sat Aug 6 11:51:18 UTC 2005
Modified Files:
pkgsrc/net/proftpd: Makefile
Added Files:
pkgsrc/net/proftpd/patches: patch-ad patch-ae
Log Message:
Patches to address recent security issue via Gentoo:
http://secunia.com/advisories/16181/
---
Module Name: pkgsrc
Committed By: adrianp
Date: Sat Aug 6 12:29:25 UTC 2005
Modified Files:
pkgsrc/net/proftpd: distinfo
Log Message:
Add missing patch from last update - ride the previous bump
Revision 1.24 / (download) - annotate - [select for diffs], Sat Aug 6 11:51:18 2005 UTC (18 years, 8 months ago) by adrianp
Branch: MAIN
CVS Tags: pkgsrc-2005Q3-base,
pkgsrc-2005Q3
Changes since 1.23: +2 -2
lines
Diff to previous 1.23 (colored) to selected 1.40 (colored)
Patches to address recent security issue via Gentoo: http://secunia.com/advisories/16181/
Revision 1.23 / (download) - annotate - [select for diffs], Thu Jun 23 04:49:26 2005 UTC (18 years, 9 months ago) by christos
Branch: MAIN
Changes since 1.22: +2 -2
lines
Diff to previous 1.22 (colored) to selected 1.40 (colored)
Make it log in wtmpx properly. XXX: someone should fix the array has type char issues.
Revision 1.22 / (download) - annotate - [select for diffs], Wed Jun 22 22:43:37 2005 UTC (18 years, 9 months ago) by salo
Branch: MAIN
Changes since 1.21: +11 -51
lines
Diff to previous 1.21 (colored) to selected 1.40 (colored)
PKGREVISION++ - split PKG_OPTIONS to options.mk file - fix issue with state directory in (typically) /var/run, noted by Justin Newcomer on tech-pkg@ - delint
Revision 1.21 / (download) - annotate - [select for diffs], Tue May 31 11:24:32 2005 UTC (18 years, 10 months ago) by dillo
Branch: MAIN
CVS Tags: pkgsrc-2005Q2-base
Branch point for: pkgsrc-2005Q2
Changes since 1.20: +3 -3
lines
Diff to previous 1.20 (colored) to selected 1.40 (colored)
Rename option PAM to pam (so all options are lower case). Backwards compatibility provided via PKG_OPTIONS_LEGACY_OPTS.
Revision 1.20 / (download) - annotate - [select for diffs], Sun May 22 20:08:25 2005 UTC (18 years, 10 months ago) by jlam
Branch: MAIN
Changes since 1.19: +2 -2
lines
Diff to previous 1.19 (colored) to selected 1.40 (colored)
Remove USE_GNU_TOOLS and replace with the correct USE_TOOLS definitions: USE_GNU_TOOLS -> USE_TOOLS awk -> gawk m4 -> gm4 make -> gmake sed -> gsed yacc -> bison
Revision 1.19 / (download) - annotate - [select for diffs], Fri Jan 14 05:15:39 2005 UTC (19 years, 3 months ago) by jlam
Branch: MAIN
CVS Tags: pkgsrc-2005Q1-base,
pkgsrc-2005Q1
Changes since 1.18: +2 -2
lines
Diff to previous 1.18 (colored) to selected 1.40 (colored)
Create a pam.buildlink3.mk file that is used by PAM-using packages. It includes the correct buildlink3.mk file from either Linux-PAM (security/PAM) or OpenPAM (security/openpam) and eventually will support solaris-pam. pam.buildlink3.mk will: * set PAMBASE to the base directory of the PAM files; * set PAM_TYPE to the PAM implementation used. There are two variables that can be used to tweak the selection of the PAM implementation: PAM_DEFAULT is a user-settable variable whose value is the default PAM implementation to use. PAM_ACCEPTED is a package-settable list of PAM implementations that may be used by the package. Modify most packages that include PAM/buildlink3.mk to include pam.buildlink3.mk instead.
Revision 1.18 / (download) - annotate - [select for diffs], Tue Dec 28 02:47:47 2004 UTC (19 years, 3 months ago) by reed
Branch: MAIN
Changes since 1.17: +2 -1
lines
Diff to previous 1.17 (colored) to selected 1.40 (colored)
The default location of the pkgsrc-installed rc.d scripts is now under share/examples/rc.d. The variable name already was named RCD_SCRIPTS_EXAMPLEDIR. This is from ideas from Greg Woods and others. Also bumped PKGREVISION for all packages using RCD_SCRIPTS mechanism (as requested by wiz).
Revision 1.17 / (download) - annotate - [select for diffs], Mon Dec 13 06:56:18 2004 UTC (19 years, 4 months ago) by martti
Branch: MAIN
CVS Tags: pkgsrc-2004Q4-base,
pkgsrc-2004Q4
Changes since 1.16: +3 -3
lines
Diff to previous 1.16 (colored) to selected 1.40 (colored)
Use PKG_OPTIONS.proftpd instead of PROFTPD_OPTIONS (pkg/28574)
Revision 1.16 / (download) - annotate - [select for diffs], Thu Nov 18 23:02:00 2004 UTC (19 years, 5 months ago) by jlam
Branch: MAIN
Changes since 1.15: +3 -3
lines
Diff to previous 1.15 (colored) to selected 1.40 (colored)
The universal option to enable PAM support is "PAM" not "pam". We strive to use common option names were possible, so change these instances of "pam" to "PAM" to match existing usage.
Revision 1.15 / (download) - annotate - [select for diffs], Wed Oct 13 23:03:52 2004 UTC (19 years, 6 months ago) by xtraeme
Branch: MAIN
Changes since 1.14: +7 -6
lines
Diff to previous 1.14 (colored) to selected 1.40 (colored)
Enable build options --enable-ctrls to support all command line options via ftpdctrl, fixes PR pkg/27095 by pancake.
Revision 1.14 / (download) - annotate - [select for diffs], Tue Sep 21 13:10:18 2004 UTC (19 years, 6 months ago) by cube
Branch: MAIN
Changes since 1.13: +7 -5
lines
Diff to previous 1.13 (colored) to selected 1.40 (colored)
Update to version 1.2.10. From PR 27012 by pancake at phreaker dot net.
1.2.10 - Released 04-Sep-2004
--------------------------------
- Bug 2440 - Unable to use PAM authentication properly. Use a "*" after
the module name in an AuthOrder directive to indicate that an auth
module is authoritative.
- Bug 2441 - AIX5 portability bug with mod_auth_unix, mod_auth_file.
- Bug 2442 - Segfault in FreeBSD PAM library with long login names.
- Bug 2445 - AuthUserFile in <Global> context overrides <VirtualHost> setting.
- Bug 2444 - Use of sendfile() does not interoperate well with RFC2228
security mechanisms. Using sendfile(2) to send data bypasses the handling
of the data by RFC2228 security mechanisms (such as those provided by
mod_tls). So if security mechanisms are detected, do not use sendfile().
- Scrub the ScoreboardFile for stale sessions in inetd mode.
- Bug 2427 - proftpd gets a memory fault when run from ssh batch mode.
1.2.10rc3 - Released 13-Jul-2004
--------------------------------
- Fixed typo that prevented 1.2.10rc2 from compiling.
1.2.10rc2 - Released 13-Jul-2004
---------------------------------
- Bug 2396 - NLST command doesn't understand options. This was caused by
the solution for Bug 2322. However, it is not a popular solution, so
NLST will once again handle options, but only the relevant options.
- Bug 2034 - Add support for a "graceful shutdown" signal. See
contrib/mod_ctrls_admin.html#shutdown for details.
- Bug 2400 - <Class> search order is wrong. The documentation correctly
stated that <Class> sections are matched in order of definition, but the
code has the match order in the reverse order of definition.
- Bug 2401 - MaxClientsPerClass only checks first directive in config file.
- Bug 2399 - Rename start/stop control actions to up/down.
- Bug 2082 - Add mod_rewrite "replaceall" builtin function. See the
RewriteMap documentation for more details.
- Bug 2403 - Sending SIGHUP to proftpd stops it when using Classes. The fix
for Bug #2400 could result in an infinite loop during a SIGHUP.
- Bug 2405 - "LIST *" should not list dotfiles.
- Bug 2366 - Add support for -h list option.
- Bug 2332 - SO_OOBINLINE error after upgrading proftpd from 1.2.6 to 1.2.9.
This is due mostly to a change in the logging; a check for error values
and logging of them was added. The setting of this particular socket option
has been moved earlier in the session, as it was found that short-lived
TCP connections, as from monitoring systems, would cause this error.
- Bug 2407 - mod_auth_file does not allow for proper cascading of "end" and
"set" auth requests.
- Bug 2410 - CreateHome always copies skel directory.
- Bug 2336 - Use of /dev/log on Solaris leads to kernel memory leak.
ProFTPD's use of the /dev/log device on Solaris was tickling a Solaris
kernel bug that caused the Solaris kernel to leak memory.
- Added a TimeoutLinger directive to complement the --enable-timeout-linger
configure option.
- Bug 2125 - -vv command line switch should list versions of modules.
- Bug 2420 - Name field is not escaped before querying database.
The mod_quotatab module was not properly escaping the name string it
used when looking up records from SQL databases.
- Bug 2424 - SQLDefaultHomedir overrides column value.
- Bug 2411 - Caching effects cause RNTO to fail if AllowOverwrite is off and
target path does not exist.
- Bug 2422 - %v not working in SQLNamedQuery.
- Bug 2418 - chmod returns 550 with filename containing multiple spaces.
- Bug 2431 - mod_sql does not use UID/GID properly in cache lookups.
- Bug 2303 - Problem evaluating multiple <Class> rules.
- Bug 2419 - Ability to disable TLSRequired on per-user basis (e.g. for
anonymous logins).
- Bug 2438 - Display variable %z not expanded properly.
- Bug 2439 - <Limit CWD> doesn't work.
1.2.10rc1 - Released 28-Apr-2004
---------------------------------
- Bug 2135 - Add ability to handle passphrase-protected server keys. mod_tls
can now properly prompt for passphrases for protected server certificate
keys when the daemon is starting up.
- Bug 2086 - Add limits for PORT, PASV. This means that now one can use
<Limit> to place access controls on the PORT and PASV commands. This
applies to the EPRT and EPSV commands as well.
- Bug 2174 - mod_auth_unix should not act authoritatively. This was causing
problems when using mod_auth_unix.c and the AuthOrder configuration
directive.
- Bug 2098 - Added SetEnv and UnsetEnv configuration directives.
- Bug 2271 - Improper autoconf check for getaddrinfo() on Tru64 UNIX 5.1.
The getaddrinfo symbol is a macro, not a function, on that platform.
- Bug 2255 - RADIUS Service-Type should reflect attribute expectations.
- Added Event API.
- Bug 2272 - Address/port collision check needs to handle DefaultAddress.
- Bug 2072 - Add Controls API.
This API includes a new program, ftpdctl, that is used to communicate
directly with the proftpd daemon via a new core module, mod_ctrls. For
this new functionality to be used, proftpd must be configured using the
added --enable-ctrls option.
- Bug 2015 - Add AND, OR keywords to Allow/DenyUser directives.
The AllowUser, DenyUser, AllowGroup, and DenyGroup directives now take
an optional keyword that indicates what type of expression they are:
AND, OR, or regex. By default, AllowUser and DenyUser are OR expressions,
and AllowGroup and DenyGroup are AND expressions. For example:
AllowUser regex ^ftp
DenyUser AND dave,bob
AllowGroup OR web,doc
These demonstrate that the optional keyword modifier must be the first
parameter in the configuration directive.
- Bug 2046 - Change RFNR and RNTO logging class to WRITE. This means that
ExtendedLogs that use the WRITE logging class will now include the
RNFR and RNTO commands.
- Mac OS X 10.3 portability fixes.
- Bug 2274 - Default server only binds to one IP address of host if
the --enable-ipv6 configure option is used. ProFTPD will now properly
bind to all addresses for the default "server config" server.
- Bug 2048 - Add ability to get configuration file values from environment.
For example, you can now have the following in your proftpd.conf:
DefaultAddress %{env:PR_DEFAULT_ADDR}
which indicates to ProFTPD's configuration parser to get the value of
the PR_DEFAULT_ADDR environment variable, and substitute it in, e.g.:
PR_DEFAULT_ADDR=1.2.3.4 ./proftpd ...
If the indicated environment variable is not present, the value is
substituted with the empty string.
- Bug 1635 - Older systems' chown(1) does not support -h option. The solution
is to prevent this error from stopping the 'make install' process, as it
is a harmless error on such systems.
- Bug 2290 - gmtime() static storage may be overwritten by modules.
- Bug 2288 - ServerFQDN set to 255.255.255.255 and not hostname.
- Added mod_quotatab to the contrib area.
- Bug 2300 - poll() returns 1 and read returns 0, resulting in an inifinite
loop. The actual bug was caused by a goto that was being inappropriately
used; a return value was not being checked to see if it was an error value.
- Bug 2305 - Compile Problems since > 1.2.9
Fix the build under Solaris - ftpdctl needs to be linked against libsocket
and libnsl.
- Bug 2267 - Broken IP subnet matching. Added new ACL parsing/matching code.
- Bug 2307 - MySQL 4.1.1 API change causes mod_sql_mysql compilation failure.
- Bug 2319 - Build scripts have owner-only execute permission. This was
causing problems whenever a user other than the owner of the files
attempted to build proftpd.
- Bug 2320 - autoconf check for socklen_t doesn't work on FreeBSD 4.8-RELEASE.
The fix is to include <sys/types.h>, if present, sooner in the check.
- Bug 1925 - Clean up of Class code. The Class and Classes directives are
now deprecated. See README.classes for more details.
- Bug 2295 - mod_tls returns multiline response to AUTH commands.
- Bug 2322 - NLST -a returns listing formatted for LIST -a. RFC959 does not
explicitly allow dash-style options for LIST or NLST, although many clients
attempt to use them. De facto FTP server behaviors handle options for LIST;
options for NLST will be explicitly rejected.
- Bug 2315 - Overlapping virtual server causes error. If a <VirtualHost>
was configured to handle the same IP address and port as the "server config"
server, the wrong server configuration was being removed.
- Bug 2324 - Directories whose names contain whitespace are inaccessible.
- Bug 2306 - ftpcount output should handle case of no users. When no clients
are connected, ftpcount now displays "0 users".
- Bug 2337 - TLSRenegotiate parameters not processed correctly.
- Bug 2340 - Problem with parallel builds. Proper dependencies added when
building ftpwho and ftptop.
- Bug 2327 - SQLNegativeCache causes unnecessary errors in server logging.
- Bug 2237 - HiddenStores does not check for existing file in edge case.
- Bug 2171 - Add delete options to ftpasswd. The ftpasswd script now
supports the --delete-user and --delete-group options.
- Bug 2105 - Remove Authoritative directives. The AuthPAMAuthoritative
directive, and the "*" syntax of SQLAuthenticate, have been deprecated.
- Bug 1696 - Include directive should support directories. The Include
directive now functions just like Apache's Include directive, including
handling glob characters.
- Bug 2311 - MaxClients counts unauthenticated users. According to the
documentation, the MaxClients configuration directive should only count
authenticated clients.
- Bug 2339 - STAT command doesn't follow RFC959. Previously, ProFTPD did
not support use of the STAT command during file transfers. This
functionality is now implemented. Sites wishing to prevent this can
limit use of the STAT command by using <Limit STAT>.
- Bug 2257 - Add SITE SYMLINK command to mod_site. Rather than adding
this command to the mod_site module, a new module, mod_site_misc, has
been added to the contrib area. The mod_site_misc module implements
SITE SYMLINK, and a few other SITE commands. See contrib/mod_site_misc.html
for details.
- Bug 2355 - Send error message to client when 'TLSRequired on' is in effect.
Previously, if SSL/TLS was configured to be required for both control
and data channels, if the client did not perform the SSL/TLS handshake for
a data transfer, the connection would hang. Now, an error message is sent
to the client if no handshake is done.
- Bug 2353 - REST doesn't handle offsets greater than 2 GB.
- Bug 2357 - ftptop should use COLS for determining display width.
- Bug 2321 - FTP permission checks inconsistent for DELE and RMD/XRMD when
symlink is in directory path. This bug affected the RNFR command as well.
- Bug 2361 - Second USER command causes problems with chrooted session.
- Bug 2363 - ABOR response RFC 959 compliance. The 226 response was being
sent before closing the data connection; RFC 959 implies that the data
connection is closed first.
- Bug 2369 - EPSV should not send network address when MasqueradeAddress is
used. RFC 2428 does not address the case where a server may wish to
return an address in the EPSV response that differs from the control
connection address, as is done in a PASV response for forwarding devices
(e.g. NAT, firewall). Until the proper behavior can be determined,
do not honor MasqueradeAddress for EPSV.
- Bug 2367 - LIST *.* strange behaviour. The builtin listing mechanism
was inadvertently recursing into globbed directories when recursion was
not actually requested.
- Bug 2371 - ftpasswd should have option to compare password against value
in passwd file. ftpasswd now supports a --not-previous-password option.
- Added a `howto' directory under `doc/', for mini-HOWTOs.
- Bug 2221 - proftpd on hp-ux 11.22. The default data type of socklen_t
on HP-UX 11 is problematic; many system calls expect an int, and the
default type is a size_t. This mismatch causes problems for 64-bit
builds.
- Bug 2385 - Renames fail with error "Invalid cross-device link".
- Bug 2383 - mod_ctrls.c: ctrls_listen(): Invalid size in bind() argument.
The size of struct sockaddr_un is not consistent across platforms.
- Bug 2387 - PRIVS_USER macro should set effective GID to user's primary GID.
- Added a `modules/' directory under `doc/', for core module documentation.
Currently there are HTML docs for mod_auth_file, mod_cap, and mod_ctrls.
- Bug 2317 - Wrong order of privs calls on HP generates "unable to setregid()"
error.
Revision 1.13 / (download) - annotate - [select for diffs], Mon Aug 30 18:13:18 2004 UTC (19 years, 7 months ago) by martti
Branch: MAIN
CVS Tags: pkgsrc-2004Q3-base,
pkgsrc-2004Q3
Changes since 1.12: +28 -13
lines
Diff to previous 1.12 (colored) to selected 1.40 (colored)
Add PAM support (pkg/26522)
Revision 1.12 / (download) - annotate - [select for diffs], Sat Jan 24 14:50:06 2004 UTC (20 years, 2 months ago) by grant
Branch: MAIN
CVS Tags: pkgsrc-2004Q2-base,
pkgsrc-2004Q2,
pkgsrc-2004Q1-base,
pkgsrc-2004Q1
Changes since 1.11: +2 -2
lines
Diff to previous 1.11 (colored) to selected 1.40 (colored)
replace deprecated USE_GMAKE with USE_GNU_TOOLS+=make.
Revision 1.11 / (download) - annotate - [select for diffs], Sun Dec 7 13:53:34 2003 UTC (20 years, 4 months ago) by martti
Branch: MAIN
Changes since 1.10: +4 -5
lines
Diff to previous 1.10 (colored) to selected 1.40 (colored)
Updated proftpd to 1.2.9 * bug fixes
Revision 1.10 / (download) - annotate - [select for diffs], Tue Sep 23 18:26:05 2003 UTC (20 years, 6 months ago) by kim
Branch: MAIN
CVS Tags: pkgsrc-2003Q4-base,
pkgsrc-2003Q4
Changes since 1.9: +6 -3
lines
Diff to previous 1.9 (colored) to selected 1.40 (colored)
Use the 1.2.8p distribution, bump PKGREVISION to 2. Fixes vulnerability: http://xforce.iss.net/xforce/alerts/id/154
Revision 1.9 / (download) - annotate - [select for diffs], Thu Jul 17 22:51:40 2003 UTC (20 years, 9 months ago) by grant
Branch: MAIN
Changes since 1.8: +2 -2
lines
Diff to previous 1.8 (colored) to selected 1.40 (colored)
s/netbsd.org/NetBSD.org/
Revision 1.8 / (download) - annotate - [select for diffs], Tue May 6 17:42:15 2003 UTC (20 years, 11 months ago) by jmmv
Branch: MAIN
Changes since 1.7: +3 -3
lines
Diff to previous 1.7 (colored) to selected 1.40 (colored)
Drop trailing whitespace. Ok'ed by wiz.
Revision 1.7 / (download) - annotate - [select for diffs], Sat Mar 22 10:15:27 2003 UTC (21 years, 1 month ago) by jmmv
Branch: MAIN
Changes since 1.6: +9 -2
lines
Diff to previous 1.6 (colored) to selected 1.40 (colored)
Install an rc.d script, provided in PR pkg/20244 by David Ferlier. Honour PKG_SYSCONFDIR and install a default configuration file. Bump PKGREVISION.
Revision 1.6 / (download) - annotate - [select for diffs], Wed Mar 5 09:05:33 2003 UTC (21 years, 1 month ago) by martti
Branch: MAIN
Changes since 1.5: +2 -2
lines
Diff to previous 1.5 (colored) to selected 1.40 (colored)
Updated proftpd to 1.2.8 - lots of bug fixes
Revision 1.5 / (download) - annotate - [select for diffs], Tue Dec 31 09:19:04 2002 UTC (21 years, 3 months ago) by martti
Branch: MAIN
CVS Tags: netbsd-1-6-1-base,
netbsd-1-6-1
Changes since 1.4: +3 -2
lines
Diff to previous 1.4 (colored) to selected 1.40 (colored)
Updated proftpd to 1.2.7 - lots of bug fixes
Revision 1.4 / (download) - annotate - [select for diffs], Mon Sep 16 09:32:20 2002 UTC (21 years, 7 months ago) by martti
Branch: MAIN
Changes since 1.3: +2 -2
lines
Diff to previous 1.3 (colored) to selected 1.40 (colored)
Updated proftpd to 1.2.6 * mod_quota removed due to lack of active maintenance * New version of mod_ldap (2.8.10) * New directives added: Define, <IfDefine>, <IfModule>, TimeoutSession * Directives removed: AllowChmod, ShowDotFiles * STOU support added * LFS support added * Fixed various minor bugs
Revision 1.2.2.1 / (download) - annotate - [select for diffs], Sun Jun 23 18:56:41 2002 UTC (21 years, 9 months ago) by jlam
Branch: buildlink2
Changes since 1.2: +3 -3
lines
Diff to previous 1.2 (colored) next main 1.3 (colored) to selected 1.40 (colored)
Merge from pkgsrc-current to buildlink2 branch.
Revision 1.3 / (download) - annotate - [select for diffs], Mon Jun 10 05:49:41 2002 UTC (21 years, 10 months ago) by martti
Branch: MAIN
CVS Tags: pkgviews-base,
pkgviews,
netbsd-1-6-RELEASE-base,
netbsd-1-6,
buildlink2-base
Changes since 1.2: +3 -3
lines
Diff to previous 1.2 (colored) to selected 1.40 (colored)
Updated proftpd to 1.2.5 (release 2002-06-09) The 1.2.5 release includes some minor bugfixes. Please read the included NEWS and ChangeLog files for the full details.
Revision 1.2 / (download) - annotate - [select for diffs], Tue Apr 2 09:56:26 2002 UTC (22 years ago) by martti
Branch: MAIN
CVS Tags: netbsd-1-5-PATCH003
Branch point for: buildlink2
Changes since 1.1: +2 -2
lines
Diff to previous 1.1 (colored) to selected 1.40 (colored)
I can be the maintainer (and contact person towards the ProFTPD project)
Revision 1.1.1.1 / (download) - annotate - [select for diffs] (vendor branch), Mon Oct 22 14:26:45 2001 UTC (22 years, 5 months ago) by martti
Branch: TNF
CVS Tags: pkgsrc-base
Changes since 1.1: +0 -0
lines
Diff to previous 1.1 (colored) to selected 1.40 (colored)
ProFTPD is a highly configurable ftp daemon for unix and unix-like operating systems. ProFTPD has a Apache-like configuration format.
Revision 1.1 / (download) - annotate - [select for diffs], Mon Oct 22 14:26:45 2001 UTC (22 years, 5 months ago) by martti
Branch: MAIN
Diff to selected 1.40 (colored)
Initial revision