Debian Patches
Status for proftpd-dfsg/1.3.8.c+dfsg-4+deb13u4
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| odbc | Manage automagically unixodbc library linking =================================================================== |
Francesco Paolo Lovergine <frankie@debian.org> | not-needed | debian | ||
| 01_disable_inet_connect_ipv4_test.diff | Disable inet_connect_ipv4 test. | Hilmar Preusse <hille42@web.de> | not-needed | |||
| 02_disable_redis_sentinel_conn_new_test.diff | Disable redis_sentinel_conn_new_test test. | Hilmar Preusse <hille42@web.de> | not-needed | |||
| 04_disable_base_netaddr_get_addr_test.diff | Disable netaddr_get_addr_test test, fails on risc64. | Hilmar Preuße <hille42@debian.org> | not-needed | |||
| e7539bd772ca6e12d3e05fb56da274cf78ee1edf.diff | While investigating Issue #1855, I discovered a long-hidden bug in mod_sftp, where the list of GIDs for the logged-in user was not being appropriately copied out of the session pool. This was manifesting as a segfault in my local tests, when the `HideNoAccess` directive is in effect for an SFTP session. |
TJ Saunders <tj@castaglia.org> | no | 2024-12-11 | ||
| 14c006b62c09d1efe302c57b2d183a489bcb22dc.diff | The 1.3.8 branch doesn't have `session.user_homedir`. | TJ Saunders <tj@castaglia.org> | no | 2024-12-12 | ||
| 9b2b4a3e32d251798bf8fa841b124ab15ba58f11.diff | Manually backporting some of the null pointer guards from Issue #1866 to the 1.3.8 branch. | TJ Saunders <tj@castaglia.org> | no | 2025-02-09 | ||
| 2052_pghmcfc.diff | Issue #2052: When resolving any variable whose value is supplied by the client, make sure we **always** escape that value text. | TJ Saunders <tj@castaglia.org> | no | 2026-04-27 | ||
| 07797aba88dca902da7eaf1dfe262c8896943de7.diff | Issue #2057: Properly escape the "name" provided when doing SQL lookups for allowed/denied client IP addresses or DNS names. | TJ Saunders <tj@castaglia.org> | no | 2026-05-05 | ||
| mod_sftp-1.3.8d-issue2115.diff | diff --git a/contrib/mod_sftp/fxp.c b/contrib/mod_sftp/fxp.c index d61e71046..8e867649c 100644 |
no | ||||
| baf4b7929758c72cdb6cf16325fa25f435d23db6.diff | Exercise caution when reading the client-provided file size for SCP uploads, as it could possibly overflow our size type. Thanks to Fabian Wahle of Hap Security for reporting this issue. |
TJ Saunders <tj@castaglia.org> | no | 2026-07-01 | ||
| mod_sftp-1.3.8d-issue2190.diff | diff --git a/contrib/mod_sftp/fxp.c b/contrib/mod_sftp/fxp.c index d61e71046..a7631eaa4 100644 |
no | ||||
| 0b5a1611312ee70ffd38693bb4374cb8668a6e6e.diff | Issue #1963: When shutting down our TLS connections, check for the case where the same `SSL_SESSION *` is used by different `SSL *`, and manually avoid a potential double-free. |
TJ Saunders <tj@castaglia.org> | no | 2025-07-16 | ||
| 508eb4d1b8c550b5f3059ad5b33d60c6b6c76bc7.diff | Issue #2056: Initial testing with OpenSSL 3.5.5 shows that the prior changes for Issue #1963 were insufficient; adding a manual refcount increment works. |
TJ Saunders <tj@castaglia.org> | no | 2026-05-10 | ||
| c1607a2a219d56443809de326e673b4e38b3bc58.diff | Issue #2093: Check for a null `ctrl_ssl` pointer, as is already done in the master branch, before calling OpenSSL APIs on it and triggering a null pointer dereference crash. Note that this is a regression in the 1.3.9 branch, caused by changes for addressing Issue #1963. |
TJ Saunders <tj@castaglia.org> | no | 2026-05-19 | ||
| ftpasswd.cracklib.location | Change the default location of the cracklib dictionaries to match their Debian location =================================================================== |
Paul Martin <pm@debian.org> | not-needed | debian | ||
| mod_sql_mysql.c | Debian has another location of "mysql.h". | Francesco Paolo Lovergine <frankie@debian.org> | not-needed | |||
| autotools | Do not touch config.h.in and stamp-h.in. Also export dpkg build flags. | Francesco Paolo Lovergine <frankie@debian.org> | not-needed | |||
| change_pam_name | Change pam name ftp -> proftpd | Francesco Paolo Lovergine <frankie@debian.org> | not-needed | |||
| mod_wrap_noparanoid | avoid builtin paranoid checking in libwrap. | Francesco Paolo Lovergine <frankie@debian.org> | not-needed | debian | ||
| ftpstats | Fixes default xferlog pathname in ftpstats | Francesco Paolo Lovergine <frankie@debian.org> | not-needed | debian |
All known versions for source package 'proftpd-dfsg'
- 1.3.9e~dfsg-3 (sid, forky)
- 1.3.8.c+dfsg-4+deb13u4 (trixie-proposed-updates)
- 1.3.8.c+dfsg-4+deb13u3 (trixie)
- 1.3.8+dfsg-4+deb12u5 (bookworm)
- 1.3.8+dfsg-4+deb12u4 (bookworm-security)