Change log for pure-ftpd package in Ubuntu

pure-ftpd (1.0.50-2.1build1) lunar; urgency=medium

  * No-change rebuild against libldap-2

 -- Steve Langasek <email address hidden>  Thu, 15 Dec 2022 19:54:16 +0000

Available diffs

• diff from 1.0.50-2.1 (in Debian) to 1.0.50-2.1build1 (496 bytes)

pure-ftpd (1.0.50-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * source only upload to enable migration (Closes: #1004682)

 -- Paul Gevers <email address hidden>  Mon, 31 Jan 2022 19:42:16 +0100

Available diffs

• diff from 1.0.50-2 to 1.0.50-2.1 (351 bytes)

pure-ftpd (1.0.50-2) unstable; urgency=medium

  * Set debhelper compat level to 11 (Closes: #981387).

 -- Stefan Hornburg (Racke) <email address hidden>  Sat, 04 Dec 2021 14:45:50 +0100

Available diffs

• diff from 1.0.49-4.1build1 (in Ubuntu) to 1.0.50-2 (160.8 KiB)
• diff from 1.0.50-1 to 1.0.50-2 (679 bytes)

pure-ftpd (1.0.50-1) unstable; urgency=medium

  * New upstream release.
  * Fixes possible denial of service caused by an incorrect
    max_filesize quota mechanism (CVE-2021-40524, Closes: #993810).
  * Fix FTCBFS caused by not finding mysql/mariadb (Closes: #981387).
  * Label runtime directory correctly on SE Linux systems (Closes: #980051).
  * Add pure-certd binary to packages (Closes: #987011).

 -- Stefan Hornburg (Racke) <email address hidden>  Sat, 27 Nov 2021 12:38:13 +0100

pure-ftpd (1.0.46-1ubuntu18.04.1) bionic; urgency=medium

  * Backport patches to work with openssl1.1 and TLS1.3 (LP: #1832998)
    + 0001-TLS1.3-compatibility.patch
    + 0002-Use-TLS_server_method-if-available.patch

 -- Mattia Rizzolo <email address hidden>  Thu, 28 Oct 2021 19:23:02 +0200

Available diffs

• diff from 1.0.46-1build1 to 1.0.46-1ubuntu18.04.1 (2.1 KiB)

pure-ftpd (1.0.49-4.1build1) impish; urgency=medium

  * No-change rebuild due to OpenLDAP soname bump.

 -- Sergio Durigan Junior <email address hidden>  Mon, 21 Jun 2021 18:08:13 -0400

Available diffs

• diff from 1.0.49-4.1 (in Debian) to 1.0.49-4.1build1 (336 bytes)

pure-ftpd (1.0.49-4.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Do not symlink /usr/share/doc/pure-ftpd* to pure-ftpd-common.
    (Closes: #943874)
  * Whitespace cleanup.
  * Remove obsolete lintian overrides.
  * Re-encode translations to UTF-8.
  * Fix typos.

 -- Andreas Beckmann <email address hidden>  Mon, 18 Jan 2021 23:36:46 +0100

Available diffs

• diff from 1.0.49-4 to 1.0.49-4.1 (12.7 KiB)

pure-ftpd (1.0.36-3.2+deb8u1build0.16.04.1) xenial-security; urgency=medium

  * fake sync from Debian

Available diffs

• diff from 1.0.36-3.2build1 (in Ubuntu) to 1.0.36-3.2+deb8u1build0.16.04.1 (1.4 KiB)

pure-ftpd (1.0.49-4) unstable; urgency=medium

  * Fix uninitialized pointer vulnerability in the diraliases linked list: CVE-2020-9274 (Closes: #952666)

 -- Stefan Hornburg (Racke) <email address hidden>  Thu, 27 Feb 2020 10:26:33 +0100

Available diffs

• diff from 1.0.49-3 to 1.0.49-4 (861 bytes)

pure-ftpd (1.0.49-3) unstable; urgency=medium

  * Fix out-of-bounds (OOB) read in the pure_strcmp function: CVE-2020-9365 (Closes: #952471).

 -- Stefan Hornburg (Racke) <email address hidden>  Wed, 26 Feb 2020 08:14:52 +0100

Available diffs

• diff from 1.0.49-2 to 1.0.49-3 (812 bytes)

pure-ftpd (1.0.49-2) unstable; urgency=medium

  *  Fix stack exhaustion issue: CVE-2019-20176 (Closes: #947869)

 -- Stefan Hornburg (Racke) <email address hidden>  Wed, 01 Jan 2020 16:21:21 +0100

Available diffs

• diff from 1.0.49-1 to 1.0.49-2 (1.5 KiB)

pure-ftpd (1.0.49-1) unstable; urgency=medium

  * New upstream release (Closes: #943813, #940505, #889346)
  * Ignore FSCharset and ClientCharset options which have been removed in release 1.0.48.

 -- Stefan Hornburg (Racke) <email address hidden>  Wed, 30 Oct 2019 19:37:46 +0200

Available diffs

• diff from 1.0.47-3build1 (in Ubuntu) to 1.0.49-1 (100.3 KiB)

pure-ftpd (1.0.47-3build1) eoan; urgency=medium

  * No change rebuild for libmysqlclient21.

 -- Robie Basak <email address hidden>  Mon, 12 Aug 2019 02:04:25 +0000

Available diffs

• diff from 1.0.47-3 (in Debian) to 1.0.47-3build1 (335 bytes)

pure-ftpd (1.0.47-3) unstable; urgency=medium

  * Add TLS1.3 compatibility fix (Closes: #918630). 

 -- Stefan Hornburg (Racke) <email address hidden>  Mon, 28 Jan 2019 19:56:17 +0100

Available diffs

• diff from 1.0.47-2 to 1.0.47-3 (1.1 KiB)

pure-ftpd (1.0.47-2) unstable; urgency=medium

  * Fix lintian issues (missing-debian-source-format and debug-file-with-no-debug-symbols).

 -- Stefan Hornburg (Racke) <email address hidden>  Sat, 01 Dec 2018 16:55:20 +0100

Available diffs

• diff from 1.0.47-1 to 1.0.47-2 (648 bytes)

pure-ftpd (1.0.47-1) unstable; urgency=medium

  * New upstream release
  * Partially fix FTCBFS: Let dh_auto_configure pass --host to ./configure.
    (Closes: #886212, thanks to Helmut Grohne <email address hidden>)

 -- Stefan Hornburg (Racke) <email address hidden>  Tue, 30 Oct 2018 14:26:58 +0100

Available diffs

• diff from 1.0.46-1build1 (in Ubuntu) to 1.0.47-1 (18.5 KiB)

pure-ftpd (1.0.46-1build1) bionic; urgency=high

  * No change rebuild against openssl1.1.

 -- Dimitri John Ledkov <email address hidden>  Mon, 05 Feb 2018 23:27:31 +0000

Available diffs

• diff from 1.0.46-1 (in Debian) to 1.0.46-1build1 (604 bytes)

pure-ftpd (1.0.46-1) unstable; urgency=medium

  * New upstream release (Closes: #861159, #867380):
    - Fixes bug when using MariaDB
    - Remove patch for OpenSSL 1.1
    - Remove example contrib/xml_python_processors.txt
  * Update debhelper compatibility level
  * Bump up Standards-Version to 4.0.0.

 -- Stefan Hornburg (Racke) <email address hidden>  Mon, 24 Jul 2017 17:51:37 +0200

Available diffs

• diff from 1.0.43-3 to 1.0.46-1 (56.5 KiB)

pure-ftpd (1.0.43-3) unstable; urgency=medium

  * Finally fix issue with /etc/default/pure-ftpd-common (Closes: #847218).

 -- Stefan Hornburg (Racke) <email address hidden>  Thu, 08 Dec 2016 13:28:56 +0100

Available diffs

• diff from 1.0.43-2 to 1.0.43-3 (330 bytes)

pure-ftpd (1.0.43-2) unstable; urgency=medium

  * Add upstream patch for OpenSSL 1.1.x compatibility (Closes: #828516).
  * Add Debian watch file.
  * Fix build dependency on obsolete package libmysqlclient-dev.
  * Remove incorrect Vcs-* fields from control file.
  * Add NoTruncate to POD of pure-ftpd-wrapper script (Ubuntu #1166330).
  * Bump up Standards-Version to 3.9.8.

 -- Stefan Hornburg (Racke) <email address hidden>  Thu, 27 Oct 2016 14:29:26 +0200

Available diffs

• diff from 1.0.43-1 to 1.0.43-2 (1.6 KiB)

pure-ftpd (1.0.43-1) unstable; urgency=medium

  * New upstream release:
     - remove patch for PostgreSQL configuration file.
     - remove PAM_RHOST patch.
     - security improvements (Closes: #782353, #791420).
     - additional cipher suites configuration options (Closes: #789205).
  * Add -O2 to CFLAGS in order to enable hardened build features (Closes: #764537).
  * Stop using absolute path for dpkg-statoverride (Closes: #770049).
  * Drop conditional build-depend on libmysqlclient15-dev (Closes: #790474).
  * Align default for TLSCipherSuite configuration with Pure-FTPd sources.
  * Lintian fixes:
     - replace dh_clean -k with dh_prep

 -- Stefan Hornburg (Racke) <email address hidden>  Mon, 05 Sep 2016 14:27:30 +0200

Available diffs

• diff from 1.0.36-3.2build1 (in Ubuntu) to 1.0.43-1 (223.4 KiB)

pure-ftpd (1.0.36-1.1ubuntu0.1) trusty-security; urgency=low

  * SECURITY-UPDATE: SSLv3 is enabled by default allowing the POODLE
    attack (LP: #1381840)
    - debian/pure-ftpd-wrapper: enable loading of TLSCipherSuite parameter
    - debian/etc/TLSCipherSuite: disable SSLv3
    - CVE-2014-3566

 -- Joshua Zeitlinger <email address hidden>  Sat, 28 May 2016 19:50:18 -0400

Available diffs

• diff from 1.0.36-1.1 (in Debian) to 1.0.36-1.1ubuntu0.1 (927 bytes)

pure-ftpd (1.0.36-3.2build1) xenial; urgency=medium

  * Rebuild against libmysqlclient20.

 -- Robie Basak <email address hidden>  Tue, 05 Apr 2016 12:52:27 +0000

Available diffs

• diff from 1.0.36-3.2 (in Debian) to 1.0.36-3.2build1 (290 bytes)

pure-ftpd (1.0.36-3.2) unstable; urgency=medium


  * Non-maintainer upload.
  * Fix "depend on perl instead of perl-modules":
    debian/control: update Depends for pure-ftpd-common.
    (Closes: #779117)

 -- gregor herrmann <email address hidden>  Wed, 25 Feb 2015 22:20:30 +0100

Available diffs

• diff from 1.0.36-3.1 to 1.0.36-3.2 (470 bytes)

pure-ftpd (1.0.36-3.1) unstable; urgency=medium


  * Non-maintainer upload.
  * No source changes, but this gets rid of spurious /etc/default/pure-ftpd
    conffile (closes: #688206).

 -- Julien Cristau <email address hidden>  Fri, 14 Nov 2014 16:00:31 +0100

Available diffs

• diff from 1.0.36-3 to 1.0.36-3.1 (359 bytes)

pure-ftpd (1.0.36-3) unstable; urgency=medium


  * Add TLSCipherSuite configuration file which only leaves TLSv1 ciphers
    enabled and is thus safe from the Poodle attack.
  * Add --show-options commandline option to wrapper script.

 -- Stefan Hornburg (Racke) <email address hidden>  Sun, 19 Oct 2014 14:36:29 +0200

Available diffs

• diff from 1.0.36-2 to 1.0.36-3 (1.1 KiB)

pure-ftpd (1.0.36-2) unstable; urgency=medium


  * Add support for TLSCipherSuite to pure-ftpd-wrapper script 
    (Closes: #701070, thanks to Pim van den Berg <email address hidden>).

 -- Stefan Hornburg (Racke) <email address hidden>  Tue, 01 Jul 2014 08:57:07 +0200

Available diffs

• diff from 1.0.36-1.1 to 1.0.36-2 (510 bytes)

pure-ftpd (1.0.36-1.1) unstable; urgency=low


  * Non-maintainer upload.
  * Fix "modifies conffiles (policy 10.7.3): /etc/default/pure-ftpd-common":
    - don't ship /etc/default/pure-ftpd-common
    - create it in .postinst if it doesn't exist
    - remove it in .postrm/purge
    - restructure .postinst a bit
    (Closes: #688206)

 -- gregor herrmann <email address hidden>  Mon, 08 Oct 2012 18:09:21 +0200

Available diffs

• diff from 1.0.36-1 to 1.0.36-1.1 (1.6 KiB)

pure-ftpd (1.0.36-1) unstable; urgency=low


  * New upstream release, fixes external authentication (Closes: #652938,
    thanks to Jon Daley <email address hidden> for the report).
  * Add build-arch and build-indep targets to debian/rules.
  
 -- Stefan Hornburg (Racke) <email address hidden>  Fri, 22 Jun 2012 08:44:54 +0200

Available diffs

• diff from 1.0.35-1 (in Ubuntu) to 1.0.36-1 (195.9 KiB)

pure-ftpd (1.0.35-1) unstable; urgency=low

  * New upstream release, fixes quote miscalculation.
  * Add Debconf translation for Danish (Closes: #633986, thanks to Joe
    Dalton <email address hidden>).
 -- Ubuntu Archive Auto-Sync <email address hidden>   Wed,  14 Dec 2011 09:46:46 +0000

Available diffs

• diff from 1.0.32-1build1 to 1.0.35-1 (207.3 KiB)

pure-ftpd (1.0.32-1build1) precise; urgency=low

  * Rebuild for libmysqlclient transition
 -- Clint Byrum <email address hidden>   Thu, 24 Nov 2011 00:05:56 -0800

Available diffs

• diff from 1.0.32-1 to 1.0.32-1build1 (332 bytes)

pure-ftpd (1.0.32-1) unstable; urgency=high

  * New upstream release, fixes glob vulnerability (Closes: #624848).
  * Remove custom default stop values.
 -- Ubuntu Archive Auto-Sync <email address hidden>   Fri,  06 May 2011 09:24:54 +0000

Available diffs

• diff from 1.0.30-1 to 1.0.32-1 (162.7 KiB)

pure-ftpd (1.0.30-1) unstable; urgency=high

  * New upstream release, fixes TLS security flaw (Closes: #617334).

Available diffs

• diff from 1.0.28-3 to 1.0.30-1 (175.0 KiB)

pure-ftpd (1.0.28-3) unstable; urgency=medium

  * Fix "fails to authenticate, errors in configuration file (SQL)": add
    quotation marks to pureftpd-pgsql.conf, as explained in README.PGSQL
    (Closes: #604018, thanks to Gregor Herrmann <email address hidden> for
    the patch)
 -- Ubuntu Archive Auto-Sync <email address hidden>   Thu,  16 Dec 2010 12:07:44 +0000

Available diffs

• diff from 1.0.28-2 to 1.0.28-3 (3.0 KiB)

pure-ftpd (1.0.28-2) unstable; urgency=low

  * fixes crash on stopping server (Closes: #572362)

Available diffs

• diff from 1.0.24-1 to 1.0.28-2 (71.4 KiB)

pure-ftpd (1.0.24-1) unstable; urgency=low

  * new upstream release
    - fixes flaw in new LDAP authentication method BIND allowing
      connects with empty password
  * lintian fixes:
    - made debhelper versioned dependency compliant with debian/compat
    - added manpage symlinks for all pure-ftpd flavours
  

Available diffs

• diff from 1.0.22-1 to 1.0.24-1 (249.4 KiB)

pure-ftpd (1.0.22-1) unstable; urgency=low

  * new upstream release
    - fixes syntax error in LDAP schema (Closes: #403850)
    - fixes FTPStatus attribute in LDAP schema (Closes: #460038)
    - removed ACL and UTIME patches
  * ensure that inetd configuration is updated properly with the correct
    flavour (Closes: #524419, #429863, #401076, #368042, #318905)
  * fixed POD error in pure-ftpd-wrapper manual page
  * lintian fixes (Closes: #525242)
  	- updated DH_COMPAT and moved to debian/compat
    - depend on openbsd-inetd | inet-superserver instead of netbase
    - overrides for manpages in pure-ftpd-common
    - use ${misc:Depends} in debian/control
    - bumped up standards version to 3.8.1
  * removed really old upgrade code from pure-ftpd-common maintainer scripts
  

Available diffs

• diff from 1.0.21-11.4ubuntu1 to 1.0.22-1 (280.1 KiB)

pure-ftpd (1.0.21-11.4ubuntu1) jaunty; urgency=low

  * Merge from debian unstable (LP: #298080), remaining changes:
    - added --with-rfc2640 to configure options
    - adding filesystemencoding and clientencoding options in
      debian/pure-ftpd.wrapper
    - added suggests: netkit-inetd | openbsd-inetd | xinetd to pure-ftpd
    - changed default answer for debconf question to standalone, not inetd
    - create /var/run/ directory if necessary in pure-ftpd.init.d
  * pure-ftpd.init.d: fix $PIFDILE typo in our patch
  * pure-ftpd.init.d, rules: implement TearDown spec
  * pure-ftpd.init.d: add status action (LP: #298965)
  * control: add lsb-base dependency to have status_of_proc available

Available diffs

• diff from 1.0.21-11.2ubuntu1 to 1.0.21-11.4ubuntu1 (11.6 KiB)

pure-ftpd (1.0.21-11.2ubuntu1) intrepid; urgency=low

  * Merge from debian unstable (LP: #239732), remaining changes:
    - added --with-rfc2640 to configure options
    - added suggests: netkit-inetd | openbsd-inetd | xinetd to pure-ftpd
    - changed default answer for debconf question to standalone, not inetd
    - create /var/run/ directory if necessary in pure-ftpd.init.d
    - adding filesystemencoding and clientencoding options in
      debian/pure-ftpd.wrapper
    - modified maintainer values to match debian-maintainer-field spec
  * Fixed XSBC-Original-Maintainer (was "Original-Maintainer")

 -- Thierry Carrez <email address hidden>   Mon, 16 Jun 2008 09:12:39 +0200

Available diffs

• diff from 1.0.21-11.1ubuntu2 to 1.0.21-11.2ubuntu1 (1.1 KiB)

pure-ftpd (1.0.21-11.1ubuntu2) hardy; urgency=low

  * Rebuild for the libldap-2.3-0 -> libldap-2.4-2 transistion.

 -- Steve Kowalik <email address hidden>   Thu, 24 Jan 2008 23:54:15 +1100

pure-ftpd (1.0.21-11.1ubuntu1) hardy; urgency=low

  * Merge from Debian unstable. Remaining Ubuntu changes:
    - added --with-rfc2640 to configure options.
    - added suggests: netkit-inetd | openbsd-inetd | xinetd to pure-ftpd.
    - changed default answer for debconf question to standalone, not inetd.
    - create /var/run/ directory if necessary in pure-ftpd.init.d
    - adding filesystemencoding and clientencoding options in
      debian/pure-ftpd.wrapper
    - modified maintainer values to match debian-maintainer-field spec.

pure-ftpd (1.0.21-11ubuntu1) gutsy; urgency=low

  * Merge from Debian unstable. Remaining Ubuntu changes:
    - Added --with-rfc2640 to configure options.
    - Added Suggests: netkit-inetd | openbsd-inetd | xinetd to pure-ftpd.
    - Changed default answer for debconf question to standalone, not inetd.
    - create /var/run/ directory if necessary in pure-ftpd.init.d
    - adding FileSystemEncoding and ClientEncoding options in
      debian/pure-ftpd.wrapper
    - Modified Maintainer values to match Debian-Maintainer-Field spec.

pure-ftpd (1.0.21-10ubuntu1) gutsy; urgency=low

  * Merge from Debian unstable. Remaining Ubuntu changes:
    - Added --with-rfc2640 to configure options.
    - Added Suggests: netkit-inetd | openbsd-inetd | xinetd to pure-ftpd.
    - Changed default answer for debconf question to standalone, not inetd.
    - create /var/run/ directory if necessary in pure-ftpd.init.d
    - adding FileSystemEncoding and ClientEncoding options in
      debian/pure-ftpd.wrapper
    - Modified Maintainer values to match Debian-Maintainer-Field spec.

pure-ftpd (1.0.21-9ubuntu1) gutsy; urgency=low

  * Merge from Debian unstable. Remaining Ubuntu changes:
    - Added --with-rfc2640 to configure options.
    - Added Suggests: netkit-inetd | openbsd-inetd | xinetd to pure-ftpd.
    - Changed default answer for debconf question to standalone, not inetd.
    - Add update-inetd to pure-ftpd-common's dependencies
    - create /var/run/ directory if necessary in pure-ftpd.init.d
    - adding FileSystemEncoding and ClientEncoding options in
      debian/pure-ftpd.wrapper
  * Modified Maintainer values to match Debian-Maintainer-Field spec.

pure-ftpd (1.0.21-8ubuntu1) feisty; urgency=low

  * Merge from debian unstable, remaining changes:
    - Added --with-rfc2640 to configure options.
    - Added Suggests: netkit-inetd | openbsd-inetd | xinetd to pure-ftpd.
    - Changed default answer for debconf question to standalone, not inetd.
    - Add update-inetd to pure-ftpd-common's dependencies
    - create /var/run/ directory if necessary in pure-ftpd.init.d
    - adding FileSystemEncoding and ClientEncoding options in
      debian/pure-ftpd.wrapper
  * Modified Maintainer values to match Debian-Maintainer-Field spec.

pure-ftpd (1.0.21-7ubuntu1) feisty; urgency=low

  * Merge from debian unstable, remaining changes:
    - Added --with-rfc2640 to configure options.
    - Added Suggests: netkit-inetd | openbsd-inetd | xinetd to pure-ftpd.
    - Changed default answer for debconf question to standalone, not inetd.
    - Add update-inetd to pure-ftpd-common's dependencies
  * create /var/run/ directory if necessary in pure-ftpd.init.d (Closes
    Ubuntu #71401)
  * adding FileSystemEncoding and ClientEncoding options in
    debian/pure-ftpd.wrapper (Closes Ubuntu #78806 and #41059)

pure-ftpd (1.0.21-6ubuntu1) feisty; urgency=low

  * Merge from Debian unstable, remaining changes:
    - Added --with-rfc2640 to configure options.
    - Added Suggests: netkit-inetd | openbsd-inetd | xinetd to pure-ftpd.
    - Changed default answer for debconf question to standalone, not inetd.
    - Add update-inetd to pure-ftpd-common's dependencies

pure-ftpd (1.0.21-5ubuntu2) feisty; urgency=low

  * debian/control: Add update-inetd to pure-ftpd-common's dependencies
    (Closes Ubuntu: #76136).

 -- Lionel Porcheron <email address hidden>   Sun, 17 Dec 2006 14:01:12 +0100

pure-ftpd (1.0.21-5ubuntu1) edgy; urgency=low

  * Merge from Debian unstable. Remaining changes:
    - Added --with-rfc2640 to configure options.
    - Added Suggests: netkit-inetd | openbsd-inetd | xinetd to pure-ftpd.
    - Changed default answer for debconf question to standalone, not inetd.

pure-ftpd (1.0.21-1ubuntu4) dapper; urgency=low

  * debian/control
    + Build with libmysqlclient15-dev. (Closes: Malone #45046)

 -- Chuck Short <email address hidden>   Wed, 17 May 2006 10:39:21 -0400