Highly configurable FTP daemon
proftpd:proftpd from the portProFTPD before 1.3.9c and 1.3.10rc3 contains a heap-based buffer overflow vulnerability in the mod_sftp module that allows authenticated low-privilege attackers to achieve arbitrary code execution by sending crafted SFTP packet fragments exceeding the 16 KB reassembly buffer in the fxp.c component. Attackers can supply oversized fragments to trigger an inco…
ProFTPD through 1.3.9b and 1.3.10rc2 contains an access control bypass vulnerability that allows authenticated FTP users to circumvent Directory ACL restrictions by prefixing paths with /proc/self/root in the RNFR command handler. Attackers can exploit the unresolved symlink components in dir_canonical_path() to cause dir_check() to perform lexical path com…
mod_sql in ProFTPD before 1.3.9a allows remote attackers to execute arbitrary code via a username, in scenarios where there is logging of USER requests with an expansion such as %U, and the SQL backend allows commands (e.g., COPY TO PROGRAM).
ProFTPD mod_sftp contains a heap-based buffer overflow reachable by an authenticated SFTP user. The fxp_packet_read() function accepts the attacker-supplied 32-bit big-endian SFTP packet length without a minimum sanity check. A value of 0 causes an unsigned subtraction elsewhere in the read path to underflow to approximately 4 GB. That oversized request rea…
ProFTPD before 1.3.9c and 1.3.10rc3 contains a signed integer overflow vulnerability in the mod_sftp module's SCP size-record parser that allows authenticated low-privilege attackers to bypass ASLR by sending a crafted file size value of UINT64_MAX, which results in a negative off_t value. Attackers can exploit the subsequent conversion to uint32_t, causing…
pkg audit reports nothing for this version.no CVE referenced
no CVE referenced
no CVE referenced
*/*: Bump PORTREVISION for libsodium consumers after version bump Bump consumers of libsodium42b95df84d
security/libsodium: Update to 1.0.21 The API remains compatible but bumping all dependent ports as SHLIB has changed. Changelog: https://github.com/jedisct1/libsodium/releases/tag/1.0.21-RELEASE Security: https://00f.net/2025/12/30/libsodium-vulnerability/ PR: 2793478b878d88b4
ftp/proftpd: bump PORTREVISION to fix build of module ports95263ca4fb
ftp/proftpd: unbreak modules builddd78c1038d
ftp/proftpd: cleanup MASTER_SITES Reported by: diizzy20028be1ca
ftp/proftpd: Update to 1.3.8c Release notes: http://www.proftpd.org/docs/RELEASE_NOTES-1.3.8c PR: 283423, 240678 Approved by: mm (maintainer)c89d4a844a
security/libsodium: update to 1.0.19, bump dependent ports PR: 278259 Reported by: Andrey Korobkov <alster-vinterdalen.se>b66e4949cb
ftp/proftpd: Move man pages to share/man Approved by: portmgr (blanket)5257ca8d10
MAN?PREFIX: eleminate its usage and move man to share/man64631af5a7
ftp/proftpd: update to 1.3.8b and add libsodium support Provides mitigation for "Terrapin" SSH attack. Support stronger key algorithms using libsodium by default. PR: 265590, 276168 Security: CVE-2023-48795fc281da4dc
devel/gettext: Update to 0.22 Convert post-patch commands to real patches. This way there are errors when the underlying code changes. */*: Fix gettext issues. The new gettext tools are more strict. PR: 272210 Exp-run by: antoine2c2ec62c72
ftp/proftpd: add support for pcre2 and make it default6acfc97031
ftp/proftpd: Update to 1.3.8 Update proftpd in distfiles of slave ports, too.eb50fece40
Fix WWW in parent/child ports Many of the WWW are overwritten later which means the wrong value is used. This did not happen before where the children were either a) just using the pkg-descr from the parents b) or had their own separate pkg-descr with custom WWW Use WWW?= in parents when the child's WWW is different. Children that use the same WWW as the parent can just inherit it, i.e., the child WWW can be removed. Approved by: portmgr (implicit)e79fe1aabc
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
ftp: remove 'Created by' lines A big Thank You to the original contributors of these ports: * Aaron Dalton <aaron@FreeBSD.org> * Alexander Kriventsov * Anders Nordby <anders@fix.no> * Andreas Fehlner <fehlner@gmx.de> * Andrew Pantyukhin <infofarmer@FreeBSD.org> * Andrey Zakhvatov * Antonio Carlos Venancio Junior (<antonio@inf.ufsc.br>) * Chris Piazza <cpiazza@FreeBSD.org> * Damjan Marion <dmarion@open.hr> * Emanuel Haupt <ehaupt@critical.ch> * Eric Freeman <freebsdports@chillibear.com> * Frank DENIS * Frank Laszlo <laszlof@vonostingroup.com> * Gea-Suan Lin (gslin@ccca.nctu.edu.tw) * Gea-Suan Lin <gslin@ccca.nctu.edu.tw> * George V. Neville-Neil <gnn@FreeBSD.org> * Hye-Shik Chang * Jordan Hubbard <jkh@FreeBSD.org> * Jose Alonso Cardenas Marquez <acardenas@bsd.org.pe> * Joseph Benden <joe@thrallingpenguin.com> * Ju Pengfei <jupengfei@gmail.com> * Jui-Nan Lin <jnlin@freebsd.cs.nctu.edu.tw> * Mark Johnston <markj@FreeBSD.org> * Martin Matuska (mm@FreeBSD.org) * Marwan BURELLE <marwan.burelle@lri.fr> * Maxim Ignatenko * Maxim Sobolev <sobomax@FreeBSD.org> * Neil Blakey-Milner * Neil Blakey-Milner <nbm@rucus.ru.ac.za> * Nick Leuta * Nosov Artem <chip-set@mail.ru> * Petr Holub <hopet@ics.muni.cz> * Philippe Le Berre <philippe@le-berre.com> * Piotr Kubaj <pkubaj@anongoth.pl> * Po-Chuan Hsieh <sunpoet@FreeBSD.org> * Roman Bogorodskiy * Sergey Matveychuk <sem@FreeBSD.org> * Sergey Skvortsov <skv@FreeBSD.org> * Stephane Legrand * Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org> * TAKATSU Tomonari <tota@FreeBSD.org> * Thomas Gellekum <tg@FreeBSD.org> * Tom McLaughlin <tmclaugh@sdf.lonestar.org> * Tomokazu ISHII <t-ishii@tryplanet.com> * Ulrich Spoerlein <uspoerlein@gmail.com> * Wen Heping <wen@FreeBSD.org> * Xavier Beaudouin <kiwi@oav.net> * Yasuhiro Fukuma <yasuf@big.or.jp> * Ying-Chieh Liao <ijliao@FreeBSD.org> * ache * cy@FreeBSD.org * ijliao * ports * torstenb * will With hat: portmgr30cd242001
*: apply refactor.remove-consecutive-empty-lines Submitted by: porteditce1af7fdc2
ftp/proftpd: Avoid passing USES=cpe to all slave ports There are some slave ports which are developed independently and have no CPE entries yet. Approved by: portmgr (blanket)0501c990e1
ftp/proftpd: update to 1.3.7cee61086f26
all: Remove all other $FreeBSD keywords.135fdeebb9
Remove # $FreeBSD$ from Makefiles.305f148f48
Update ftp/proftpd to 1.3.7a23c8cf4bcc
Update ProFTPd to version 1.3.6d PR: 247554, 243866 Submitted by: Alexander Puecker40caea6f37
Update ProFTPd to 1.3.6b PR: 241968 Reported by: Ryan Colp844321e42f
Extenral proftpd modules: use own distinfo files76f42b2c82
security/openssl-devel: Remove BROKEN from some ports
* databases/freetds: Fixed 2017-02-14
* databases/postgresql10-server: Fixed 2016-09-15 [1]
* ftp/lftp: Fixed in 4.8.0
* ftp/proftpd: Fixed in 1.3.5c
* ftp/wget: Fixed in 1.19.3 [2]
* lang/erlang-runtime20: Fixed in 20.0
* net/socat: Fixed in 1.7.3.2
* security/libssh2: Fixed in 1.8.0 [3]
* security/p5-Crypt-OpenSSL-X509: Fixed in 1.8.8
* sysutils/bacula9-server: Fixed in 9.0.6
* www/nginx: Fixed in 1.9.14
* Bulk build OK 10.3/11.1 both i386 and amd64:
- multimedia/librtmp
- net/libvncserver
- www/lynx
PR: 225875 [1], 225872 [2], 225873 [3]3b1875b273Remove unneeded USE_AUTOTOOLS.6c1e4375fc
Update ftp/proftpd to 1.3.6 Fix compatibility in databases/proftpd-mod_sql_tds038563bcf2
Update ProFTPd to 1.3.5ef9c6bdb8e8
ftp/proftpd: Fix LibreSSL patch - Adjust patch for mod_tls move to contrib/ - Remove broken with LibreSSL PR: 217025 Submitted by: Ralf van der Enden <tremere@cainites.net> Approved by: maintainer timeoutd9f544ceb2
Revert r436977, patch fails to apply Reported by: pkg-fallout With hat: portmgr88ee59f524
ftp/proftpd: Fix mod_tls build with LibreSSL - Remove IGNORE with LibreSSL SSL_DEFAULT - Add patch for mod_tls to build with LibreSSL PR: 217025 Approved by: maintainer timeoute9d1722a77
Remove all USE_OPENSSL occurrences. Sponsored by: Absolighta28f0f7f7f
The latest version of ftp/proftpd doesn't build with libressl either. Increase the IGNORE from openssl-devel to include all versions of libressl. Approved by: SSL blanket7303f590e8
Update ProFTPd to 1.3.5d5fdb38713e
Mark some ports as not openssl-devel ready. Sponsored by: Absolight703ff6d361
Remove NLS, DOCS, EXAMPLES and IPV6 from OPTIONS_DEFAULT, they are enabled by default anyway and don't need to be listed Approved by: portmgr blanketc86e9d9724
- Fix trailing whitespace in Makefiles Approved by: portmgr blanket652069fa2d
Include bsd.port.options.mk PR: ports/2091990fa676e718
Update security/proftpd-mod_clamav to 0.14rc25badf07ae7
Update proftpd to 1.3.5b Optionsify port PR: 208909c28fe61060
Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.
With hat: portmgr
Sponsored by: Absolight4e1b79a0a6- Fix various distinfo issues Approved by: portmgr blanketf15516c296
Typos, whitespace and capitalization fixes (A-F).686b747c39
Update proftpd to 1.3.5aeda41d9a86
Fix proftpd unauthenticated copying of files via SITE CPFR/CPTO vulnerability. MFH: 2015Q2 Security: CVE-2015-330687fefdf42e
- Add CPE info Approved by: portmgr blanketc310b1a77c
Remove OSVERSION checks that do not make sense any more.
For example (${OSVERSION} >= 900000 && ${OSVERSION} < 900021) is always true,
as is (${OSVERSION} > 900002 || ${OSVERSION} < 900000 && ${OSVERSION} > 800107).
Regarding patches, when an EXTRA_PATCHES is no longer needed, I remove it, when
it is always needed, I renamed it, in one case, I merged two patches.
Differential Revision: https://reviews.freebsd.org/D22090438143249Change -pthread to -lpthread PR: 195921 Reported by: John Marino241a1f4e2e