CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

ftp/pure-ftpd 1.0.54_1

Small, easy to set up, fast, and secure FTP server

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 1.0.54_1
Upstream
up to date
Last update
to 1.0.54_1 · 42b95df84d
Quarterly
2026Q4: 1.0.54_1
WWW
https://www.pureftpd.org/
Links
cgit · VuXML

Install

Package
# pkg install pure-ftpd
installs 1.0.54_1 from latest; from quarterly (2026Q4) 1.0.54_1
Port
# cd /usr/ports/ftp/pure-ftpd && make install clean
# make -C /usr/ports/ftp/pure-ftpd config  # change options first
Size
195 KiB download · 554 KiB installed
Depends on
security/libsodium 1.0.22
License
ISCL
Options
12 of 18 on in the package: DOCS EXAMPLES LARGEFILE PAM PERUSERLIMITS PRIVSEP SCRYPT SENDFILE THROTTLING TLS UPLOADSCRIPT VIRTUALCHROOT
Show the 6 options that are off
ANONDELETE ANONRENAME ANONRESUME LDAP MYSQL PGSQL
pkg-message
Shown after installing
Now you need to examine /usr/local/share/examples/pure-ftpd/pam.d/pure-ftpd
and add the relevant PAM configuration lines to your /etc/pam.conf file.

If you defined call upload script in pure-ftpd config define corresponding
vars in rc.conf. pure-ftpd will not listen TCP socket without it.

See FAQ: https://github.com/jedisct1/pure-ftpd/blob/master/FAQ

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.0.54_11.0.54_1–
FreeBSD 151.0.54_11.0.54_1–
FreeBSD 141.0.54_11.0.54_11.0.54_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.0.54_11.0.54_1–
FreeBSD 141.0.54_11.0.54_11.0.54_1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.0.54_1.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
272219maintainer-feedback? ftp/pure-ftpd add support for certdNew2026-04-28

Commits (164)

Daniel Engberg (diizzy) · 1.0.54_1
*/*: Bump PORTREVISION for libsodium consumers after version bump

Bump consumers of libsodium
42b95df84d
Po-Chuan Hsieh (sunpoet) · 1.0.54
ftp/pure-ftpd: Update to 1.0.54

Changes:	https://github.com/jedisct1/pure-ftpd/releases
		https://github.com/jedisct1/pure-ftpd/blob/master/ChangeLog
fe3e5eabe0
Torsten Zuehlsdorff (tz) · 1.0.53_1
ftp/pure-ftpd: fix pureftpd_flags and config mutual exclusion

Make flags and config file mutually exclusive in the rc script to
prevent "421 Invalid argument" errors.

PR:		239391
302962d9e8
Po-Chuan Hsieh (sunpoet) · 1.0.53
ftp/pure-ftpd: Update to 1.0.53

- Update MASTER_SITES

Changes:	https://github.com/jedisct1/pure-ftpd/releases
		https://github.com/jedisct1/pure-ftpd/blob/master/ChangeLog
3a444c398f
Vsevolod Stakhov (vsevolod) · 1.0.52_2
security/libsodium: Update to 1.0.21

The API remains compatible but bumping all dependent ports as SHLIB
has changed.

Changelog: https://github.com/jedisct1/libsodium/releases/tag/1.0.21-RELEASE
Security: https://00f.net/2025/12/30/libsodium-vulnerability/
PR: 279347
8b878d88b4
Po-Chuan Hsieh (sunpoet) · 1.0.52_1
ftp/pure-ftpd: Remove unneeded Perl dependency

- Bump PORTREVISION for dependency change

PR:		285342
136c65d61d
Po-Chuan Hsieh (sunpoet) · 1.0.52
ftp/pure-ftpd: Update to 1.0.52

Changes:	https://github.com/jedisct1/pure-ftpd/releases
		https://github.com/jedisct1/pure-ftpd/blob/master/ChangeLog
ac726e8a09
Vsevolod Stakhov (vsevolod) · 1.0.51_1
security/libsodium: update to 1.0.19, bump dependent ports

PR:	278259
Reported by:	Andrey Korobkov <alster-vinterdalen.se>
b66e4949cb
Po-Chuan Hsieh (sunpoet) · 1.0.51
*/*: Remove GNU_CONFIGURE_MANPREFIX=${PREFIX}/share after 9fd7ee1cdf6cbd5528159b58a966e1a40e2909a9
62ed195754
Po-Chuan Hsieh (sunpoet) · 1.0.51
ftp/pure-ftpd: Update manpage location (003a571d1d6585196545295efc181514f171c4c4, r523104)
141f35bdcd
Po-Chuan Hsieh (sunpoet) · 1.0.51
ftp/pure-ftpd: Update WWW and clean up pkg-descr
e07d56b055
Muhammad Moinur Rahman (bofh) · 1.0.51
Mk/**ldap.mk: Convert USE_LDAP to USES=ldap

Convert the USE_LDAP=yes to USES=ldap and adds the following features:

- Adds the argument USES=ldap:server to add openldap2{4|5|6}-server as
  RUN_DEPENDS
- Adds the argument USES=ldap<version> and replaces WANT_OPENLDAP_VER
- Adds OPENLDAP versions in bsd.default-versions.mk
- Adds USE_OPENLDAP/WANT_OPENLDAP_VER in Mk/bsd.sanity.mk
- Changes consumers to use the features

Reviewed by:	delphij
Approved by:	portmgr
Differential Revision: https://reviews.freebsd.org/D38233
6e1233be22
Stefan Eßer (se) · 1.0.51
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 1.0.51
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 1.0.51
ftp: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Alexander Kriventsov
  *  Anders Nordby <anders@fix.no>
  *  Andreas Fehlner <fehlner@gmx.de>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrey Zakhvatov
  *  Antonio Carlos Venancio Junior (<antonio@inf.ufsc.br>)
  *  Chris Piazza <cpiazza@FreeBSD.org>
  *  Damjan Marion <dmarion@open.hr>
  *  Emanuel Haupt <ehaupt@critical.ch>
  *  Eric Freeman <freebsdports@chillibear.com>
  *  Frank DENIS
  *  Frank Laszlo <laszlof@vonostingroup.com>
  *  Gea-Suan Lin (gslin@ccca.nctu.edu.tw)
  *  Gea-Suan Lin <gslin@ccca.nctu.edu.tw>
  *  George V. Neville-Neil <gnn@FreeBSD.org>
  *  Hye-Shik Chang
  *  Jordan Hubbard <jkh@FreeBSD.org>
  *  Jose Alonso Cardenas Marquez <acardenas@bsd.org.pe>
  *  Joseph Benden <joe@thrallingpenguin.com>
  *  Ju Pengfei <jupengfei@gmail.com>
  *  Jui-Nan Lin <jnlin@freebsd.cs.nctu.edu.tw>
  *  Mark Johnston <markj@FreeBSD.org>
  *  Martin Matuska (mm@FreeBSD.org)
  *  Marwan BURELLE <marwan.burelle@lri.fr>
  *  Maxim Ignatenko
  *  Maxim Sobolev <sobomax@FreeBSD.org>
  *  Neil Blakey-Milner
  *  Neil Blakey-Milner <nbm@rucus.ru.ac.za>
  *  Nick Leuta
  *  Nosov Artem <chip-set@mail.ru>
  *  Petr Holub <hopet@ics.muni.cz>
  *  Philippe Le Berre <philippe@le-berre.com>
  *  Piotr Kubaj <pkubaj@anongoth.pl>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Roman Bogorodskiy
  *  Sergey Matveychuk <sem@FreeBSD.org>
  *  Sergey Skvortsov <skv@FreeBSD.org>
  *  Stephane Legrand
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  TAKATSU Tomonari <tota@FreeBSD.org>
  *  Thomas Gellekum <tg@FreeBSD.org>
  *  Tom McLaughlin <tmclaugh@sdf.lonestar.org>
  *  Tomokazu ISHII <t-ishii@tryplanet.com>
  *  Ulrich Spoerlein <uspoerlein@gmail.com>
  *  Wen Heping <wen@FreeBSD.org>
  *  Xavier Beaudouin <kiwi@oav.net>
  *  Yasuhiro Fukuma <yasuf@big.or.jp>
  *  Ying-Chieh Liao <ijliao@FreeBSD.org>
  *  ache
  *  cy@FreeBSD.org
  *  ijliao
  *  ports
  *  torstenb
  *  will

With hat:	portmgr
30cd242001
Po-Chuan Hsieh (sunpoet) · 1.0.51
ftp/pure-ftpd: Update to 1.0.51

Changes:	https://github.com/jedisct1/pure-ftpd/releases
		https://github.com/jedisct1/pure-ftpd/blob/master/ChangeLog
8283ed5233
Po-Chuan Hsieh (sunpoet) · 1.0.50_2
ftp/pure-ftpd: Enable more options by default

- Sort OPTIONS_DEFAULT
- Bump PORTREVISION for package change
1925576a5a
Po-Chuan Hsieh (sunpoet) · 1.0.50_1
ftp/pure-ftpd: Fix SIGSEGV with PostgeSQL backend

- Bump PORTREVISION for package change

PR:		261358
Reported by:	Artyom Davidov <ard_1@mail.ru>
Obtained from:	https://github.com/jedisct1/pure-ftpd/commit/c3f0f3c91d86939e6fabf5f65c6c6fc964e6032e
b2bd4ad8c4
Po-Chuan Hsieh (sunpoet) · 1.0.50
ftp/pure-ftpd: Update to 1.0.50

- Update MASTER_SITES: remove ftp://

Changes:	https://github.com/jedisct1/pure-ftpd/releases
		https://www.pureftpd.org/project/pure-ftpd/news/
5c493807ff
Mathieu Arnold (mat) · 1.0.49_1
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 1.0.49_1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Baptiste Daroussin (bapt) · 1.0.49_1
Drop the ipv6 virtual category for f* category as it is not relevant anymore
06c273daa8
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.49_1
Remove UTF-8 option and iconv stuff

- Bump PORTREVISION for package change

RFC 2640 support has been removed from free version since 1.0.48.

PR:		240264
Reported by:	Linus Sundqvist <linus.sundqvist@loopia.se>
69f59e0f59
Mathieu Arnold (mat) · 1.0.49
Convert to UCL & cleanup pkg-message (categories e-g)
79698c8457
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.49
Update to 1.0.49

Changes:	https://github.com/jedisct1/pure-ftpd/releases
9c8fe3089d
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.47_1
Fix TLS 1.3 compatibility

- Bump PORTREVISION for package change

Obtained from:	https://github.com/jedisct1/pure-ftpd/commit/4a495c61ce22c893aed5ee57f6ce0b43c3be59ad
PR:		235354
Reported by:	Matt Churchyard <churchers@gmail.com>
9af80e19e6
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.47
Update to 1.0.47

Changes:	https://github.com/jedisct1/pure-ftpd/releases
93bcc46922
Vsevolod Stakhov (vsevolod) · 1.0.46_1
- Update libsodium to 1.0.15 [1] - Bump revisions for all dependent ports

PR:		223147 [1]
Submitted by:	Greg V [1]
f191a0244b
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.46
Use USES=mysql
34117a3043
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.46
Update to 1.0.46

- Reformat PKGMESSAGE

Changes:	https://github.com/jedisct1/pure-ftpd/releases
74e426502d
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.45
Update to 1.0.45

Changes:	https://github.com/jedisct1/pure-ftpd/releases
		https://github.com/jedisct1/pure-ftpd/blob/master/ChangeLog
730ae93f4c
Tijl Coosemans (tijl) · 1.0.44_1
The output of tools like awk, date, sort, tr,... depends on the current locale set by the user.  Add LANG=C and LC_ALL=C at the beginning of bsd.port.mk and export them so all commands are executed with the C locale. LC_ALL=C overrides all other LC_* variables.  LANG is used by setlocale(3) as default value for LC_* variables, so normally it isn't used when LC_ALL is set, but there's code out ther

Introduce USE_LOCALE=<locale> that adds LANG=<locale> and LC_ALL=<locale> to
CONFIGURE_ENV and MAKE_ENV so upstream build systems can be executed with a
different locale (e.g. USE_LOCALE=en_US.UTF-8).

PR:		215882
Exp-run by:	antoine
Approved by:	portmgr (antoine)
02f27a83b4
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.44_1
Fix TLSCipherSuite parsing

- Bump PORTREVISION for package change

Note: author pointed out that users will get a more secure cipher suite by not
setting TLSCipherSuite to HIGH and just use the default.

PR:		215906
Reported by:	<yani@pi-greece.eu>
Obtained from:	https://github.com/jedisct1/pure-ftpd/commit/3823d00dee089b998d1f40943e9aa3f619c238b2
dc421bb167
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.44
Update to 1.0.44

- Clean up MASTER_SITES
- Convert to options target helper
- Update WWW

Changes:	https://github.com/jedisct1/pure-ftpd/releases
a6d5096657
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.43
- Update to 1.0.43 - Use USES=ssl

Changes:	https://github.com/jedisct1/pure-ftpd/releases
790c733651
Alan Somers (asomers) · 1.0.42_3
Make pure-ftpd flags configurable in /etc/rc.conf

Recognize a "pureftpd_flags" variable in pure-ftpd's rc script. Pretty much
anything that can be placed in /usr/local/etc/pure-ftpd.conf can be placed
in this variable instead.

ftp/pure-ftpd/Makefile
	Bump PORTREVISION

ftp/pure-ftpd/files/pure-ftpd.in
	Handle pureftpd_flags. It needs special handling because, unlike
	most daemons, pure-config.pl takes its mandatory argument first and
	its optional flags last.

PR:		210311
Approved by:	maintainer-timeout
Approved by:	brd (ports)
Sponsored by:	Spectra Logic Corp
Differential Revision:	https://reviews.freebsd.org/D6676
59073b0f72
John Marino (marino) · 1.0.42_2
security/libsodium: Upgrade version 1.0.8 => 1.0.10

Also bump all ports that depend on libsodium.

PR:		210999
Submitted by:	manu
Approved by:	vsevolod (maintainer)
2e94d74398
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.42_1
- Add LICENSE_FILE
e1fca52a1f
Mathieu Arnold (mat) · 1.0.42_1
Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.

With hat:	portmgr
Sponsored by:	Absolight
4e1b79a0a6
Vsevolod Stakhov (vsevolod) · 1.0.42_1
- Update libsodium to 1.0.8 - Bump revisions of all dependant ports

PR:		206482
Submitted by:	lev, w.schwarzenfeld@aon.at
7349ed49cd
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.42
- Update to 1.0.42

Changes:	https://github.com/jedisct1/pure-ftpd/blob/master/ChangeLog
d4f92700f4
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.41
- Update to 1.0.41 - Remove TLS_CERTFILE: it is added to pure-ftpd.conf and configurable at runtime

Changes:	https://github.com/jedisct1/pure-ftpd/blob/master/ChangeLog
acfb8623ca
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.40
- Update to 1.0.40

Changes:	https://github.com/jedisct1/pure-ftpd/blob/master/ChangeLog
51fa6bd2fd
Vsevolod Stakhov (vsevolod) · 1.0.39_1
- Updated libsodium to 1.0.3 [1] - Bump revision for dependent ports

PR:		200548 [1]
Submitted by:	rsimmons0 at gmail.com [1]
89b79e70ec
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.39
- Update to 1.0.39

Changes:	https://github.com/jedisct1/pure-ftpd/blob/master/ChangeLog
5d51236715
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.38
- Update to 1.0.38

Changes:	https://github.com/jedisct1/pure-ftpd/blob/master/ChangeLog
19c8b34ffa
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.37_1
- Make USE_OPENSSL conditional

Submitted by:	koobs
e31d2e608a
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.37_1
- Cleanup CONFIGURE_ARGS: --localstatedir=/var was added by bsd.port.mk since r384380
269fdc35fb
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.37_1
- Use USE_OPENSSL

PR:		199732
Submitted by:	Philip Jocks <freebsdbugs@filis.org>
12575cdc90
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.37_1
- Use CPPFLAGS instead of CFLAGS
73d0ba2737