CVE and update status of the FreeBSD ports tree4,526 unaddressed CVEs in 616 portsAll times are CET

Port details

ftp/proftpd-mod_vroot0.9.5_4

Virtual Chroot ProFTPD module

Maintainer
ports@FreeBSD.org
Packages
proftpd-mod_vroot 0.9.5_4
Upstream
Higher version available: 0.9.12
CPE
none, CVEs only via VuXML
WWW
http://www.castaglia.org/proftpd/modules/mod_vroot.html
Links
cgit · VuXML

Unaddressed (0) · The CVE record lists this version as affected, no VuXML entry names the CVE

None. There is no CVE without a VuXML entry for this version.

VuXML only (0) · listed, port not fixed yet

None. pkg audit reports nothing for this version.

Fixed (0)

No VuXML entries for this package.

Commits (15)

Vsevolod Stakhov (vsevolod) · 0.9.5_4
security/libsodium: Update to 1.0.21

The API remains compatible but bumping all dependent ports as SHLIB
has changed.

Changelog: https://github.com/jedisct1/libsodium/releases/tag/1.0.21-RELEASE
Security: https://00f.net/2025/12/30/libsodium-vulnerability/
PR: 279347
8b878d88b4
Dan Langille (dvl) · 0.9.5_3
*/*: reset maintainer for joe@thrallingpenguin.com

Maintainer has had too many timeouts.
PR:		288311
3c16431cfc
Dima Panov (fluffy) · 0.9.5_3
ftp/proftpd-mod_vroot: unbreak build, chase update ftp/proftpd to 1.3.8c

Approved:	portmgr blanket (trivial fix build)
a90b8e53e8
Vsevolod Stakhov (vsevolod) · 0.9.5_3
security/libsodium: update to 1.0.19, bump dependent ports

PR:	278259
Reported by:	Andrey Korobkov <alster-vinterdalen.se>
b66e4949cb
Martin Matuska (mm) · 0.9.5_2
ftp/proftpd: update to 1.3.8b and add libsodium support

Provides mitigation for "Terrapin" SSH attack.
Support stronger key algorithms using libsodium by default.

PR:		265590, 276168
Security:	CVE-2023-48795
fc281da4dc
Martin Matuska (mm) · 0.9.5_2
ftp/proftpd-mod_vroot: update distinfo to match master port update
95df2449cc
Stefan Eßer (se) · 0.9.5_2
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 0.9.5_2
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 0.9.5_2
ftp: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Alexander Kriventsov
  *  Anders Nordby <anders@fix.no>
  *  Andreas Fehlner <fehlner@gmx.de>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrey Zakhvatov
  *  Antonio Carlos Venancio Junior (<antonio@inf.ufsc.br>)
  *  Chris Piazza <cpiazza@FreeBSD.org>
  *  Damjan Marion <dmarion@open.hr>
  *  Emanuel Haupt <ehaupt@critical.ch>
  *  Eric Freeman <freebsdports@chillibear.com>
  *  Frank DENIS
  *  Frank Laszlo <laszlof@vonostingroup.com>
  *  Gea-Suan Lin (gslin@ccca.nctu.edu.tw)
  *  Gea-Suan Lin <gslin@ccca.nctu.edu.tw>
  *  George V. Neville-Neil <gnn@FreeBSD.org>
  *  Hye-Shik Chang
  *  Jordan Hubbard <jkh@FreeBSD.org>
  *  Jose Alonso Cardenas Marquez <acardenas@bsd.org.pe>
  *  Joseph Benden <joe@thrallingpenguin.com>
  *  Ju Pengfei <jupengfei@gmail.com>
  *  Jui-Nan Lin <jnlin@freebsd.cs.nctu.edu.tw>
  *  Mark Johnston <markj@FreeBSD.org>
  *  Martin Matuska (mm@FreeBSD.org)
  *  Marwan BURELLE <marwan.burelle@lri.fr>
  *  Maxim Ignatenko
  *  Maxim Sobolev <sobomax@FreeBSD.org>
  *  Neil Blakey-Milner
  *  Neil Blakey-Milner <nbm@rucus.ru.ac.za>
  *  Nick Leuta
  *  Nosov Artem <chip-set@mail.ru>
  *  Petr Holub <hopet@ics.muni.cz>
  *  Philippe Le Berre <philippe@le-berre.com>
  *  Piotr Kubaj <pkubaj@anongoth.pl>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Roman Bogorodskiy
  *  Sergey Matveychuk <sem@FreeBSD.org>
  *  Sergey Skvortsov <skv@FreeBSD.org>
  *  Stephane Legrand
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  TAKATSU Tomonari <tota@FreeBSD.org>
  *  Thomas Gellekum <tg@FreeBSD.org>
  *  Tom McLaughlin <tmclaugh@sdf.lonestar.org>
  *  Tomokazu ISHII <t-ishii@tryplanet.com>
  *  Ulrich Spoerlein <uspoerlein@gmail.com>
  *  Wen Heping <wen@FreeBSD.org>
  *  Xavier Beaudouin <kiwi@oav.net>
  *  Yasuhiro Fukuma <yasuf@big.or.jp>
  *  Ying-Chieh Liao <ijliao@FreeBSD.org>
  *  ache
  *  cy@FreeBSD.org
  *  ijliao
  *  ports
  *  torstenb
  *  will

With hat:	portmgr
30cd242001
Martin Matuska (mm) · 0.9.5_2
ftp/proftpd: update distinfo for ProfFTPd slave ports
576d7df63b
Mathieu Arnold (mat) · 0.9.5_2
Remove # $FreeBSD$ from Makefiles.
305f148f48
Martin Matuska (mm) · 0.9.5_2
Update ftp/proftpd to 1.3.7a
23c8cf4bcc
Martin Matuska (mm) · 0.9.5_2
Update distfiles and bump PORTREVISION for proftpd slave ports
d63d13fa4d
Martin Matuska (mm) · 0.9.5_1
Update ProFTPd to 1.3.6b

PR:		241968
Reported by:	Ryan Colp
844321e42f
Martin Matuska (mm) · 0.9.5
New port: ftp/proftpd-mod_vroot

ProFTPD module mod_vroot.
A virtual chroot capability that does not require root privileges for ProFTPD.

WWW: http://www.castaglia.org/proftpd/modules/mod_vroot.html

PR:		189121
Submitted by:	Joseph Benden <joe@thrallingpenguin.com>
6dab65a97a