lp:ubuntu/oneiric-security/vsftpd

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

36. By Jamie Strandboge on 2011-12-01

* SECURITY UPDATE: remote DoS via network namespaces
  - debian/patches/12-CVE-2011-2189.patch: only use network namespaces
    on 2.6.36 and higher kernels
  - patch based on Debian's patch
  - CVE-2011-2189

35. By Colin Watson on 2011-05-25

Rebuild for OpenSSL 1.0.0.

34. By Marc Deslauriers on 2011-03-25

* SECURITY UPDATE: denial of service via crafted glob expressions
  - debian/patches/11-CVE-2011-0762.patch: limit number of iterations in
    access.c, defs.h, ls.*.
  - CVE-2011-0762

33. By Andres Rodriguez on 2011-02-25

debian/vsftpd.upstart: Fix start of vsftpd even if not in standalone mode.
Thanks to Stephane Chazelas (LP: #648202)

32. By Thierry Carrez on 2010-12-01

debian/vsftpd.postinst: Use complete name match when checking for existing
ftp user/group, to avoid install failure (LP: #656415)

31. By Chuck Short on 2010-11-09

* Merge from debian unstable. Remaining changes:
  - Use snakeoil SSL certificates and key.
  - debian/rules, debian/vsftpd.upstart: migrate vsftpd to upstart.
  - Add apport hook (LP: #513978):
    - debian/vsftpd.apport: Added.
    - debian/control: Build-depends on dh-apport.
    - debian/rules: Add --with apport.
  - debian/vsftpd.postinst: Check that group exists first,
    then the user, then trying adding the user to the group. (LP: #629234)
  - Add debian/watch file.
  - debian/patches/09-disable-anonymous.patch: Disable anonymous login by default.
    (LP: #528860)

30. By Chuck Short on 2010-10-12

* Merge from debian unstable. Remaining changes:
  - Use snakeoil SSL certificates and key.
  - debian/rules, debian/vsftpd.upstart: migrate vsftpd to upstart.
  - Add apport hook (LP: #513978):
    - debian/vsftpd.apport: Added.
    - debian/control: Build-depends on dh-apport.
    - debian/rules: Add --with apport.
  - debian/vsftpd.postinst: Check that group exists first,
    then the user, then trying adding the user to the group. (LP: #629234)
  - Add debian/watch file.
  - debian/patches/09-disable-anonymous.patch: Disable anonymous login by default.
    (LP: #528860)

29. By Dustin Kirkland  on 2010-09-03

debian/vsftpd.postinst: Check that the group exists first, then
the user, then try adding the user to the group, LP: #629234

28. By Chuck Short on 2010-07-12

* Merge from debian unstable:
  - Use snakeoil SSL certificates and key.
  - debian/rules, debian/vsftpd.upstart: migrate vsftpd to upstart
  - Add apport hook: (LP: #513978):
    - debian/vsftpd.apport: Added.
    - debian/control: Build-depends on dh-apport.
    - debian/rules: Add --with apport.

27. By Chuck Short on 2010-06-21

* Merge from debian unstable:
  - Use snakeoil SSL certificates and key.
  - debian/rules, debian/vsftpd.upstart: migrate vsftpd to upstart
  - Add apport hook: (LP: #513978):
    - debian/vsftpd.apport: Added.
    - debian/control: Build-depends on dh-apport.
    - debian/rules: Add --with apport.
  - Dropped:
    + debian/patches/07_vsftpd-enable-utf8.patch: Add support for UTF8:
      Use the debian version instead.
  - Add debian/watch file