Author: Chris J Arges
Revision Date: 2015-08-06 15:57:03 UTC

* Merge from Debian unstable. Remaining changes:
  - debian/control, debian/rules:
    + Add Apport hook.

Author: Chris J Arges
Revision Date: 2015-08-06 15:57:03 UTC

* Merge from Debian unstable. Remaining changes:
  - debian/control, debian/rules:
    + Add Apport hook.

Author: Artur Rona
Revision Date: 2015-03-04 23:53:47 UTC

* Merge from Debian unstable. (LP: #1427884) Remaining changes:
  - debian/control, debian/rules:
    + Add Apport hook.
  - debian/vsftpd.init, debian/vsftpd.upstart:
    + Migrate to upstart.
* Drop following changes, fixed in Debian:
  - ubuntu-disable-anonymous.patch -> 0040-disable-anonymous.patch
  - ubuntu-seccomp-gettimeofday.patch -> 0045-seccomp-gettimeofday.patch
  - debian/tests/*, debian/control: Add dep8 test.
  - debian/watch: It doesn't work anymore.
  - debian/vsftpd.apport: Add Apport hook.

Author: Artur Rona
Revision Date: 2015-03-04 23:53:47 UTC

* Merge from Debian unstable. (LP: #1427884) Remaining changes:
  - debian/control, debian/rules:
    + Add Apport hook.
  - debian/vsftpd.init, debian/vsftpd.upstart:
    + Migrate to upstart.
* Drop following changes, fixed in Debian:
  - ubuntu-disable-anonymous.patch -> 0040-disable-anonymous.patch
  - ubuntu-seccomp-gettimeofday.patch -> 0045-seccomp-gettimeofday.patch
  - debian/tests/*, debian/control: Add dep8 test.
  - debian/watch: It doesn't work anymore.
  - debian/vsftpd.apport: Add Apport hook.

Author: Robie Basak
Revision Date: 2014-04-29 15:33:07 UTC

* d/p/ubuntu-seccomp-gettimeofday.patch: permit gettimeofday() for logging
  calls (LP: #1219857).
* Add dep8 smoke test.

Author: Robie Basak
Revision Date: 2014-04-29 15:33:07 UTC

* d/p/ubuntu-seccomp-gettimeofday.patch: permit gettimeofday() for logging
  calls (LP: #1219857).
* Add dep8 smoke test.

Author: Robie Basak
Revision Date: 2014-04-29 14:03:51 UTC

* Merge from Debian testing. Remaining changes:
  - d/vsftpd.upstart: migrate vsftpd to upstart.
    + d/vsftpd.init: remove.
  - d/{control,rules,vsftpd.apport}: add apport hook.
  - Add debian/watch file.
  - d/p/ubuntu-disable-anonymous.patch: disable anonymous login by default.
* Drop changes (adopted in Debian):
  - d/p/12-ubuntu-use-snakeoil-ssl.patch
  - d/p/13-disable-clone-newpid.patch
* d/p/ubuntu-seccomp-gettimeofday.patch: permit gettimeofday() for logging calls
  (LP: #1219857).
* Add dep8 test.

Author: Robie Basak
Revision Date: 2014-04-29 14:03:51 UTC

* Merge from Debian testing. Remaining changes:
  - d/vsftpd.upstart: migrate vsftpd to upstart.
    + d/vsftpd.init: remove.
  - d/{control,rules,vsftpd.apport}: add apport hook.
  - Add debian/watch file.
  - d/p/ubuntu-disable-anonymous.patch: disable anonymous login by default.
* Drop changes (adopted in Debian):
  - d/p/12-ubuntu-use-snakeoil-ssl.patch
  - d/p/13-disable-clone-newpid.patch
* d/p/ubuntu-seccomp-gettimeofday.patch: permit gettimeofday() for logging calls
  (LP: #1219857).
* Add dep8 test.

Author: Jonathan Davies
Revision Date: 2013-12-19 23:56:57 UTC

Use wutmp abstractions.

Author: Lucy Llewellyn
Revision Date: 2013-05-08 14:08:53 UTC

* debian/patches/13-disable-clone-newpid.patch
  - patch to remove CLONE_NEWPID syscall
    see: https://bugzilla.novell.com/show_bug.cgi?id=786024#c38
    Fixes LP: #1160372

Author: Andres Rodriguez
Revision Date: 2010-03-10 19:56:49 UTC

* Add apport hook (LP: #531978):
  - debian/vsftpd.apport: Added.
  - debian/control: Build-depends on dh-apport.
  - debian/rules: Add --with apport.

Author: Lucy Llewellyn
Revision Date: 2013-05-08 14:08:53 UTC

* debian/patches/13-disable-clone-newpid.patch
  - patch to remove CLONE_NEWPID syscall
    see: https://bugzilla.novell.com/show_bug.cgi?id=786024#c38
    Fixes LP: #1160372

Author: Lucy Llewellyn
Revision Date: 2013-05-08 14:08:53 UTC

* debian/patches/13-disable-clone-newpid.patch
  - patch to remove CLONE_NEWPID syscall
    see: https://bugzilla.novell.com/show_bug.cgi?id=786024#c38
    Fixes LP: #1160372

Author: Lucy Llewellyn
Revision Date: 2013-05-08 14:08:53 UTC

* debian/patches/13-disable-clone-newpid.patch
  - patch to remove CLONE_NEWPID syscall
    see: https://bugzilla.novell.com/show_bug.cgi?id=786024#c38
    Fixes LP: #1160372

Author: Lucy Llewellyn
Revision Date: 2013-05-08 14:08:53 UTC

* debian/patches/13-disable-clone-newpid.patch
  - patch to remove CLONE_NEWPID syscall
    see: https://bugzilla.novell.com/show_bug.cgi?id=786024#c38
    Fixes LP: #1160372

Author: Lucy Llewellyn
Revision Date: 2013-05-08 13:44:39 UTC

patch to remove CLONE_NEWPID syscall
see: https://build.opensuse.org/package/view_file?file=vsftpd-drop-newpid-from-clone.patch&package=vsftpd&project=openSUSE%3AFactory&rev=3ed24d12e1827ea673331e213ab3d477
Fixes LP: #1160372

Author: Lorenzo De Liso
Revision Date: 2012-12-18 19:59:37 UTC

* Merge from debian unstable (LP: #1092076), remaining changes:
  - Use snakeoil SSL certificates and key.
  - debian/rules, debian/vsftpd.upstart: migrate vsftpd to upstart.
  - Add apport hook:
    + debian/vsftpd.apport: Added.
    + debian/control: Build-depends on dh-apport.
    + debian/rules: Add --with apport.
  - Add debian/watch file.
  - debian/patches/09-disable-anonymous.patch: Disable anonymous login by
    default.

Author: Andres Rodriguez
Revision Date: 2012-05-23 16:59:36 UTC

* Merge from Debian testing (LP: #1003644). Remaining changes:
  + debian/vsftpd.upstart: migrate vsftpd to upstart.
  + Add apport hook (LP: #513978):
    - debian/vsftpd.apport: Added.
    - debian/control: Build-depends on dh-apport.
    - debian/rules: Add --with apport.
  + Add debian/watch file.
  + debian/patches/09-disable-anonymous.patch: Disable anonymous login
    by default. (LP: #528860)
* debian/patches/12-ubuntu-us-snakeoil-ssl.patch: Use snakeoil SSL
  certificates and key.

Author: Kees Cook
Revision Date: 2012-03-27 16:05:54 UTC

debian/rules: Fix hardening based on Debian changes from 2.3.5-2 and -3.

Author: Jamie Strandboge
Revision Date: 2011-12-01 14:09:39 UTC

* SECURITY UPDATE: remote DoS via network namespaces
  - debian/patches/12-CVE-2011-2189.patch: only use network namespaces
    on 2.6.36 and higher kernels
  - patch based on Debian's patch
  - CVE-2011-2189

Author: Jamie Strandboge
Revision Date: 2011-12-01 14:08:14 UTC

* SECURITY UPDATE: remote DoS via network namespaces
  - debian/patches/12-CVE-2011-2189.patch: only use network namespaces
    on 2.6.36 and higher kernels
  - patch based on Debian's patch
  - CVE-2011-2189

Author: Jamie Strandboge
Revision Date: 2011-12-01 14:09:39 UTC

* SECURITY UPDATE: remote DoS via network namespaces
  - debian/patches/12-CVE-2011-2189.patch: only use network namespaces
    on 2.6.36 and higher kernels
  - patch based on Debian's patch
  - CVE-2011-2189

Author: Jamie Strandboge
Revision Date: 2011-12-01 14:08:14 UTC

* SECURITY UPDATE: remote DoS via network namespaces
  - debian/patches/12-CVE-2011-2189.patch: only use network namespaces
    on 2.6.36 and higher kernels
  - patch based on Debian's patch
  - CVE-2011-2189

Author: Jamie Strandboge
Revision Date: 2011-12-01 14:06:25 UTC

* SECURITY UPDATE: remote DoS via network namespaces
  - debian/patches/12-CVE-2011-2189.patch: only use network namespaces
    on 2.6.36 and higher kernels
  - patch based on Debian's patch
  - CVE-2011-2189

Author: Jamie Strandboge
Revision Date: 2011-12-01 14:06:25 UTC

* SECURITY UPDATE: remote DoS via network namespaces
  - debian/patches/12-CVE-2011-2189.patch: only use network namespaces
    on 2.6.36 and higher kernels
  - patch based on Debian's patch
  - CVE-2011-2189

Author: Jamie Strandboge
Revision Date: 2011-12-01 13:59:04 UTC

* SECURITY UPDATE: remote DoS via network namespaces
  - debian/patches/12-CVE-2011-2189.patch: only use network namespaces
    on 2.6.36 and higher kernels
  - patch based on Debian's patch
  - CVE-2011-2189

Author: Jamie Strandboge
Revision Date: 2011-12-01 13:59:04 UTC

* SECURITY UPDATE: remote DoS via network namespaces
  - debian/patches/12-CVE-2011-2189.patch: only use network namespaces
    on 2.6.36 and higher kernels
  - patch based on Debian's patch
  - CVE-2011-2189

Author: Colin Watson
Revision Date: 2011-05-25 22:14:13 UTC

Rebuild for OpenSSL 1.0.0.

Author: Andres Rodriguez
Revision Date: 2011-04-13 22:34:51 UTC

* debian/vsftpd.upstart:
  - Fix typo. Thanks to Jürgen Kreileder (LP: #577165)
  - Fix start of vsftpd even if not in standalone mode. Thanks to
    Stephane Chazelas (LP: #648202)
* debian/vsftpd.postinst: Check that the group exists first, then the user,
  then try adding the user to the group. (LP: #629234, LP: #677764)

Author: Marc Deslauriers
Revision Date: 2011-03-25 14:55:46 UTC

* SECURITY UPDATE: denial of service via crafted glob expressions
  - access.c, defs.h, ls.*: limit number of iterations.
  - changes extracted from 2.3.3 and 2.3.4 releases.
  - CVE-2011-0762

Author: Marc Deslauriers
Revision Date: 2011-03-25 14:52:24 UTC

* SECURITY UPDATE: denial of service via crafted glob expressions
  - debian/patches/11-CVE-2011-0762.patch: limit number of iterations in
    access.c, defs.h, ls.*.
  - CVE-2011-0762

Author: Marc Deslauriers
Revision Date: 2011-03-25 14:54:08 UTC

* SECURITY UPDATE: denial of service via crafted glob expressions
  - debian/patches/11-CVE-2011-0762.patch: limit number of iterations in
    access.c, defs.h, ls.*.
  - CVE-2011-0762

Author: Marc Deslauriers
Revision Date: 2011-03-25 14:55:46 UTC

* SECURITY UPDATE: denial of service via crafted glob expressions
  - access.c, defs.h, ls.*: limit number of iterations.
  - changes extracted from 2.3.3 and 2.3.4 releases.
  - CVE-2011-0762

Author: Marc Deslauriers
Revision Date: 2011-03-25 14:54:08 UTC

* SECURITY UPDATE: denial of service via crafted glob expressions
  - debian/patches/11-CVE-2011-0762.patch: limit number of iterations in
    access.c, defs.h, ls.*.
  - CVE-2011-0762

Author: Marc Deslauriers
Revision Date: 2011-03-25 14:52:24 UTC

* SECURITY UPDATE: denial of service via crafted glob expressions
  - debian/patches/11-CVE-2011-0762.patch: limit number of iterations in
    access.c, defs.h, ls.*.
  - CVE-2011-0762

Author: Marc Deslauriers
Revision Date: 2011-03-25 14:29:29 UTC

* SECURITY UPDATE: denial of service via crafted glob expressions
  - debian/patches/11-CVE-2011-0762.patch: limit number of iterations in
    access.c, defs.h, ls.*.
  - CVE-2011-0762

Author: Andres Rodriguez
Revision Date: 2011-03-02 12:11:46 UTC

[ Andres Rodriguez ]
* debian/vsftpd.upstart: Fix start of vsftpd even if not in standalone mode.
  Thanks to Stephane Chazelas (LP: #648202)

[ Serge Hallyn ]
* debian/vsftpd.postinst: Use complete name match when checking for existing
  ftp user/group, to avoid install failure. (LP: #677764)

Author: Martin Pitt
Revision Date: 2011-03-02 11:17:33 UTC

releasing version 2.2.2-3ubuntu6.1

Author: Martin Pitt
Revision Date: 2011-03-02 11:12:00 UTC

releasing version 2.3.0~pre2-4ubuntu2.1

Author: Dustin Kirkland 
Revision Date: 2010-09-03 08:24:33 UTC

debian/vsftpd.postinst: Check that the group exists first, then
the user, then try adding the user to the group, LP: #629234

Author: Andreas Olsson
Revision Date: 2010-03-10 20:48:39 UTC

* Fixing segfault if "pasv_address" config is being used. (LP: #462749)
  - Adding debian/patches/08_fix-pasv-segfault.patch

Author: Chuck Short
Revision Date: 2010-01-05 15:04:09 UTC

* Merged from debian testing::
  - Use LSB functions in the init script.
  - Use snakeoil SSL certificates and key.
  - Add update-inetd dependency.
  - debian/patches/07_vsftpd-enable-utf8.patch: Add support for UTF8.
    (LP: #364958)
* Moving chroot creation out of the start sequence (Closes: #472329).
* Exiting 0 when we refuse to start vsftpd because it's disabled in
  the configuration (Closes: #557182).
* Conditionally build against libpcap2 whetever we are on linux or not
  (Closes: #557153).
* Renumbering patches.
* Correcting typo in status section of the init script (Closes:
  #556260).
* Merging upstream version 2.2.2.
* Applying patch from Todd A. Jacobs <tjacobs@codegnome.org> to give
  proper return values in initscript (Closes: #555517.
* Cleaning up init script (intentations, variables, bashisms, etc.).
* Merging upstream version 2.2.2~pre1.
* Correcting wrong vcs-browser field.
* Replacing some Germanisms from the German debconf translations.
* Setting last-translator for German debconf templates to me, no
  intention do deal with debian-l10n-german in the future anymore.
* Fixing whitespace typo in output of status message in initscript.
* Merging upstream version 2.2.1.
* Wrapping patch headers to 80 chars.
* Replacing unused-libs.patch with much simpler libs.patch.
* Rediffing config.patch.

Author: Chuck Short
Revision Date: 2010-01-17 19:15:50 UTC

Fix changelog

Author: Chuck Short
Revision Date: 2010-01-05 15:04:09 UTC

* Merged from debian testing::
  - Use LSB functions in the init script.
  - Use snakeoil SSL certificates and key.
  - Add update-inetd dependency.
  - debian/patches/07_vsftpd-enable-utf8.patch: Add support for UTF8.
    (LP: #364958)
* Moving chroot creation out of the start sequence (Closes: #472329).
* Exiting 0 when we refuse to start vsftpd because it's disabled in
  the configuration (Closes: #557182).
* Conditionally build against libpcap2 whetever we are on linux or not
  (Closes: #557153).
* Renumbering patches.
* Correcting typo in status section of the init script (Closes:
  #556260).
* Merging upstream version 2.2.2.
* Applying patch from Todd A. Jacobs <tjacobs@codegnome.org> to give
  proper return values in initscript (Closes: #555517.
* Cleaning up init script (intentations, variables, bashisms, etc.).
* Merging upstream version 2.2.2~pre1.
* Correcting wrong vcs-browser field.
* Replacing some Germanisms from the German debconf translations.
* Setting last-translator for German debconf templates to me, no
  intention do deal with debian-l10n-german in the future anymore.
* Fixing whitespace typo in output of status message in initscript.
* Merging upstream version 2.2.1.
* Wrapping patch headers to 80 chars.
* Replacing unused-libs.patch with much simpler libs.patch.
* Rediffing config.patch.

Author: Adrien Cunin
Revision Date: 2008-09-16 19:20:32 UTC

* New upstream release
   - Fixes SSL shutdown bug (LP: #254905)

Author: Adrien Cunin
Revision Date: 2008-09-16 19:20:32 UTC

* New upstream release
   - Fixes SSL shutdown bug (LP: #254905)

Author: Matti Lindell
Revision Date: 2008-02-25 09:53:13 UTC

* Merge from Debian unstable, remaining changes:
  - remove stop links from rc0 and rc6
  - lsb init script
  - use snakeoil ssl certs
  - add update-inetd dependency
* debian/control:
  - Modify Maintainer value to match DebianMaintainerField spec.

Author: Lionel Porcheron
Revision Date: 2006-12-13 11:02:41 UTC

debian/control: Add update-inetd dependency (Ubuntu netbase
drops inetd dependency but update-inetd is needed in postinst,
Closes Ubuntu: #75432).

Author: Lionel Porcheron
Revision Date: 2006-12-13 11:02:41 UTC

debian/control: Add update-inetd dependency (Ubuntu netbase
drops inetd dependency but update-inetd is needed in postinst,
Closes Ubuntu: #75432).

Author: Scott James Remnant (Canonical)
Revision Date: 2006-09-18 16:34:57 UTC

Remove stop script symlinks from rc0 and rc6.

Author: Fabio Massimo Di Nitto
Revision Date: 2006-02-03 17:05:04 UTC

* Switch default config to use ssl-cert-snakeoil certificates.
* Add Depends on ssl-cert.

Author: Adam Conrad
Revision Date: 2005-04-21 08:43:37 UTC

Resynchronise with Debian.

Author: LaMont Jones
Revision Date: 2005-03-23 15:52:34 UTC

pretty init scriptage

Author: Martin Pitt
Revision Date: 2004-09-11 14:26:55 UTC

* security fix by new upstream point release: fix nasty issue resulting in
  listener instability under extreme load (root cause was re-entering
  malloc/free). This could be exploited to cause a DOS.
  References:
  - http://bugs.debian.org/249977
  (no CVE/CAN available)

Author: Chuck Short
Revision Date: 2009-11-02 20:06:47 UTC

debian/vsftpd.install, debian/vsftpd.py: Add apport support.

Author: Chuck Short
Revision Date: 2009-11-02 20:19:28 UTC

debian/vsftpd.init: Set LANG=C in init script. (LP: #470071)

Author: Chuck Short
Revision Date: 2009-11-02 20:14:52 UTC

vsftpd: Add comment about anon_umask option (LP: #250689)

Author: Chuck Short
Revision Date: 2009-11-02 20:02:11 UTC

debian/patches/fix-pasv-segfault.patch: Fix segmentation fault when client sends
PASV when using "pasv_address" in /etc/vsftpd.conf (LP: #462749)

Author: Chuck Short
Revision Date: 2009-08-14 07:59:11 UTC

* Merge from debian unstable, remaining changes:
  - Use LSB functions in the init script.
  - Use snakeoil SSL certificates and key.
  - Do not create rc.d stop symlinks.
  - Add update-inetd dependency.
  - debian/patches/07_vsftpd-enable-utf8.patch: Add support for UTF8.
   (LP: #364958)

Author: Adrien Cunin
Revision Date: 2008-09-27 15:07:01 UTC

* Added fix-ssl-shutdown.patch (LP: #254905):
   - Properly close SSL connections, fixing incompatibility with clients such
     as recent FileZilla
   - Bug fixed upstream in 2.0.7
   - Patch taken from Fedora, thanks!