Commit graph

30 commits

Author SHA1 Message Date
kim
2eeca3359d Updated net/proftpd to 1.3.4c:
- addresses CVE-2012-6095 <http://bugs.proftpd.org/show_bug.cgi?id=3841>
2013-03-15 13:34:32 +00:00
adam
2addb25bb0 Changes 1.3.3f:
* Fixes segfault if mod_sql_mysql and "SQLAuthenticate groupsetfast"
  configuration used.
* Fixes mod_wrap syslog level (regression from Bug 3317).
* Fixes mod_ifsession segfault if regular expression patterns used in
  a <VirtualHost> section.
2011-10-03 11:23:31 +00:00
adam
29cb4f7b8c Fix building on NetBSD-5 with TLS option; fix for PR#44297 2011-03-25 13:58:37 +00:00
obache
ec9623f05f Update proftpd to 1.3.3c.
pksrc changes:
* Instead of patch&subst to change layout of statedir, pass it to configure
  instead (and subst for manpages are fixed).
* Convert custom mod_wrap library modification to SUBST.
* Need to buildlink with security/tcp_wappers for mod_wrap.

NEWS:
1.3.3c - Released 29-Oct-2010
--------------------------------
- Bug 3511 - SQLAuthType Backend not properly rejected by mod_sql_sqlite.
- Bug 3513 - EPERM error logged unnecessarily for SFTP logins on Linux.
- Bug 3517 - mod_quotatab decrements file tally improperly for failed DELE
  commands.
- Bug 3518 - Support SiteMiscEngine directive, for disabling mod_site_misc
  functionality via proftpd.conf.
- Bug 3519 - Inappropriate directory traversal allowed by mod_site_misc.
- Bug 3521 - Telnet IAC processing stack overflow.

1.3.3b - Released 09-Sep-2010
--------------------------------
- Bug 3481 - Problem with SFTP directory listings.
- Bug 3483 - NULL pointer dereference handling SITE command in mod_quotatab.
- Bug 3485 - Disabling IPv6 via -4 or --ipv4 command-line options does not work.
- Bug 3487 - Null pointer dereference with EPRT/EPSV/PASV/PORT command during
  data transfer.
- Bug 3482 - ProFTPD corrupts utmpx log files on FreeBSD 9.0/HEAD.
- Bug 3491 - Directory pattern not matching as expected.
- Bug 3492 - Null pointer dereference during data transfer due to RNFR/RNTO.
- Bug 3494 - Null pointer dereference for IPv6-enabled proftpd when no
  DefaultServer configured.
- Bug 3501 - <Anonymous> logins with "AuthAliasOnly on" still handled as
  anonymous logins.

1.3.3a - Released 01-Jul-2010
--------------------------------
- Bug 3400 - Add Japanese translation.
- Bug 3401 - mod_sftp does not compile with pre-0.9.7 OpenSSL.
- Bug 3402 - mod_tls does not compile with pre-0.9.7 OpenSSL due to Bug#3349.
- Bug 3403 - File upload followed by MLSD leads to wrong file size entries in
  TransferLog.
- Bug 3405 - Multiple SFTPAuthorizedUserKeys stores causes segfault on 64-bit
  platforms.
- Bug 3354 - Renaming a file across mount points to a full disk does not fail
  as expected.
- Bug 3408 - Use <termios.h> instead of <sys/termios.h> where possible.
- Bug 3412 - Include files not included after restart due to permissions.
- Bug 3409 - Build failure on newer FreeBSD due to utmp/utmpx system changes.
- Bug 3417 - Unsafe use of pointer when scanning config for ScoreboardFile.
- Bug 3418 - %U sometimes showing up as "(none)" in ExtendedLog.
- Bug 3421 - RewriteHome does not work properly for SFTP connections.
- Bug 3419 - SSL_shutdown() errors with openssl-0.9.8m.
- Bug 3423 - Last line of multiline DisplayLogin file improperly handled.
- Bug 3426 - mod_sftp does not log to TransferLog by default.
- Bug 3425 - Improperly constructed destination paths for SCP uploads.
- Bug 3427 - mod_sftp does not handle recursive SCP uploads properly.
- Bug 3432 - ExecBeforeCommand does not interpolate the %F/%f variables
  properly.
- Bug 3434 - TraceLog contains messages even with "Trace DEFAULT:0" configured.
- Bug 3435 - Encoding/decoding conversion can cause CPU spike.
- Bug 3436 - Support build-time option to disable use of nonblocking open of
  log files.  Use --disable-nonblocking-log-open to get the pre-1.3.3 behavior
  of opening log files.
- Bug 3437 - UseImplicitSSL TLSOption causes PBSZ/PROT commands to fail.
- Bug 3439 - Encoding fails if an NLS-enabled proftpd starts in a UTF8 locale.
- Bug 3446 - .ftpaccess ignored in some cases.
- Bug 3447 - mod_sftp can become confused during large recursive SCP uploads.
- Bug 3448 - Ensure that STAT/LSTAT/FSTAT SFTP requests do not use cached/stale
  data.
- Bug 3449 - mod_sftp does not properly handle the O_TRUNC flag in a SFTP OPEN
  request.
- Bug 3450 - mod_sftp does not properly handle the O_APPEND flag in a SFTP OPEN
  request.
- Bug 3451 - WinSCP can't upload files using protocol version 5 with mod_sftp.
- Bug 3452 - mod_sftp does not advertise its supported SFTP extensions for
  protocol version 5.
- Bug 3454 - msgfmt(1) options used for generating NLS files are not compatible
  with Solaris' msgfmt.
- Bug 3456 - Problem attempting to recursively download a directory via SCP.
- Bug 3458 - mod_sftp incorrectly performs OpenSSL cleanup.
- Bug 3459 - mod_radius segfaults during incorrect login due to stale data.
- Bug 3460 - REALPATH SFTP request can cause improperly cached directory
  configuration.
- Bug 3462 - ftpasswd script's --delete-user option does not work.
- Bug 3463 - ftpasswd script's --delete-group option does not work.
- Bug 3465 - SIGSEGV at LIST after CCC.
- Bug 3470 - Deferred resolution <Directory> paths not handled properly by
  mod_sftp.
- Bug 3469 - ExtendedLog's %f variable not properly expanded for DELE if path
  begins with tilde ('~').
- Bug 3467 - mod_ifsession does not merge <Directory> blocks properly.
- Bug 3471 - Null values in allow/deny rules causes mod_wrap2 to segfault.
- Bug 3472 - mod_sftp publickey authentication fails for large keys.
- Bug 3424 - Bad LDAP lookup can cause mod_ldap segfault under some conditions.
- Bug 3476 - LIST/NLST of path starting with "-" fails.
- Bug 3475 - Add new 'noGetgrouplist' AuthUnixOption to work around buggy
  libc code.
- Bug 3474 - Using SQLite database and SQLLog directive can lead to problems
  under load.
2010-11-07 12:21:09 +00:00
wiz
3f909d8dfd Fix test ==.
Reported by Robert Elz in PR 43046.
2010-03-23 13:45:28 +00:00
kim
c121cd4984 Upgrade proftpd to 1.3.3 (bug fixes, see the NEWS file for a full list). 2010-03-21 21:24:25 +00:00
kim
cc2c20fcca Grrr, cannot patch next to RCS id strings, so use sed instead. 2008-12-28 08:56:59 +00:00
kim
02faf31054 Fix the "pam" option to leave out PAM when it is not wanted.
Add an "inet6" option for enabling IPv6 support.
Add a "ban" option for enabling mod_ban.
Make the "wrap" option compile all binaries successfully.
Fix generating language catalog with older versions of msgfmt.
2008-12-28 08:42:01 +00:00
martti
943448f6bd Updated net/proftpd to 1.3.2rc3
* Bug fixes
2008-11-21 08:00:36 +00:00
martti
81ac11e5f3 Updated net/proftpd to 1.3.2rc2
Fix for http://bugs.proftpd.org/show_bug.cgi?id=3115
2008-10-03 06:52:03 +00:00
martti
ed2d53a296 Updated net/proftpd to 1.3.1rc3
Hello, ProFTPD community. The ProFTPD Project team is pleased to announce
that the third release candidate for ProFTPD 1.3.1 is now available
for public consumption.

The 1.3.1rc3 release includes a number of minor bugfixes, including
segfaults when handling the NLST command, dealing assigning IPv6 addresses
for the EPSV command, and better handling of Display files in chrooted
sessions.

Please read the included NEWS and ChangeLog files for the full details.
2007-07-06 11:04:40 +00:00
lkundrak
37d2bfffbe Fix for a CVE-2007-2165 security issue grabbed from upstream #2922. 2007-06-26 23:25:56 +00:00
martti
96d9809b2b Updated net/proftpd to 1.3.1rc2
+ Fixed mod_sql's handling of WHERE clauses

+ Fixed segfaults ocurring after SIGHUP when shared modules are used

+ Fixed copying of symlinks in skeleton directory for CreateHome
2007-01-13 09:47:38 +00:00
martti
6994027e26 Updated net/proftpd to 1.3.1rc1
The 1.3.1rc1 release includes major new features and numerous bugfixes,
including:

  + Support for UTF8 and translated response messages (NLS support)

  + New configuration directives:
      DisplayChdir
      DisplayFileTransfer
      UseIPv6
      UseUTF8

  + Deprecated configuration directives:
      DisplayFirstChdir
        The DisplayFirstChdir directive is deprecated; sites should use
        the new DisplayChdir directive (which allows for files to
        be displayed on every directory change, rather than just the
        first time for a directory change).

      HiddenStor
        The HiddenStor directive is deprecated; simply use HiddenStores
        instead.

      SQLHomedirOnDemand
        The SQLHomedirOnDemand directive will be removed in future
        releases; use the CreateHome directive instead.

  + New modules:
      mod_ban, a module handling dynamic client "black lists"
      See doc/contrib/mod_ban.html

  + Enhanced modules:
      The mod_tls module can now make use of cryptographic accelerator
      cards with the new TLSCryptoDevice directive.  It can also use
      a program for obtaining certificate passphrases via the new
      TLSPassPhraseProvider directive.

  + Documentation
2006-12-14 11:19:46 +00:00
adrianp
e4d502c3f5 Updated patch-ac via Debian to fix PR #35092 2006-11-23 11:57:07 +00:00
adrianp
14cf3a2fd9 Add patch-ac for CVE-2006-5815
Patch from ProFTPD CVS:
 http://proftp.cvs.sourceforge.net/proftp/proftpd/src/main.c?r1=1.292&r2=1.293&view=patch&sortby=date
2006-11-18 14:32:58 +00:00
martti
9bfdb6f5af Updated net/proftpd to 1.3.0
This is the official release (which should be identical to rc5)
2006-04-17 05:33:09 +00:00
martti
152656f0f2 Updated net/proftpd to 1.3.0rc4
The 1.3.0rc4 release includes a number of minor bugfixes, including fixed
run-time detection of Unix domain sockets, portability tweaks for
Mac OSX 10.4, and logging fixes for NetBSD and Solaris.
2006-03-02 10:46:20 +00:00
martti
56192a4d30 Use the official utmpx patch. No functional change. 2005-11-04 12:36:16 +00:00
martti
3c6f67587d Updated proftpd to 1.3.0rc3
A lot of changes and bug fixes, including fix for the following
security problem:

http://security.lss.hr/index.php?page=details&ID=LSS-2004-10-02
2005-11-03 19:09:46 +00:00
adrianp
e37fc224e2 Patches to address recent security issue via Gentoo:
http://secunia.com/advisories/16181/
2005-08-06 11:51:18 +00:00
christos
40282604c3 Simplify (and correct) the previous ut_ss filling code. 2005-07-10 19:57:07 +00:00
christos
176608d009 Make it log in wtmpx properly.
XXX: someone should fix the array has type char issues.
2005-06-23 04:49:26 +00:00
salo
809e97a20f PKGREVISION++
- split PKG_OPTIONS to options.mk file
- fix issue with state directory in (typically) /var/run,
  noted by Justin Newcomer on tech-pkg@
- delint
2005-06-22 22:43:37 +00:00
martti
3997f3b4e6 Updated proftpd to 1.2.9
* bug fixes
2003-12-07 13:53:34 +00:00
martti
2ca547459c Updated proftpd to 1.2.8
- lots of bug fixes
2003-03-05 09:05:33 +00:00
martti
acce8f4d96 Updated proftpd to 1.2.7
- lots of bug fixes
2002-12-31 09:19:04 +00:00
martti
f978df016d Updated proftpd to 1.2.6
* mod_quota removed due to lack of active maintenance
* New version of mod_ldap (2.8.10)
* New directives added: Define, <IfDefine>, <IfModule>, TimeoutSession
* Directives removed: AllowChmod, ShowDotFiles
* STOU support added
* LFS support added
* Fixed various minor bugs
2002-09-16 09:32:20 +00:00
martti
6a7bf257e0 Updated proftpd to 1.2.5 (release 2002-06-09)
The 1.2.5 release includes some minor bugfixes. Please read the included
NEWS and ChangeLog files for the full details.
2002-06-10 05:49:41 +00:00
martti
13ab31149b ProFTPD is a highly configurable ftp daemon for unix
and unix-like operating systems. ProFTPD has a Apache-like
configuration format.
2001-10-22 14:26:45 +00:00