CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
Port details

ftp/pure-ftpd 1.0.54_1

Small, easy to set up, fast, and secure FTP server

Port info

Maintainer
sunpoet@FreeBSD.org
Packages
latest: 1.0.54_1
Upstream
up to date
Last update
to 1.0.54_1 · 42b95df84d
Quarterly
2026Q4: 1.0.54_1
WWW
https://www.pureftpd.org/
Links
cgit · VuXML

Install

Package
# pkg install pure-ftpd
installs 1.0.54_1 from latest; from quarterly (2026Q4) 1.0.54_1
Port
# cd /usr/ports/ftp/pure-ftpd && make install clean
# make -C /usr/ports/ftp/pure-ftpd config  # change options first
Size
195 KiB download · 554 KiB installed
Depends on
security/libsodium 1.0.22
License
ISCL
Options
12 of 18 on in the package: DOCS EXAMPLES LARGEFILE PAM PERUSERLIMITS PRIVSEP SCRYPT SENDFILE THROTTLING TLS UPLOADSCRIPT VIRTUALCHROOT
Show the 6 options that are off
ANONDELETE ANONRENAME ANONRESUME LDAP MYSQL PGSQL
pkg-message
Shown after installing
Now you need to examine /usr/local/share/examples/pure-ftpd/pam.d/pure-ftpd
and add the relevant PAM configuration lines to your /etc/pam.conf file.

If you defined call upload script in pure-ftpd config define corresponding
vars in rc.conf. pure-ftpd will not listen TCP socket without it.

See FAQ: https://github.com/jedisct1/pure-ftpd/blob/master/FAQ

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 161.0.54_11.0.54_1–
FreeBSD 151.0.54_11.0.54_1–
FreeBSD 141.0.54_11.0.54_11.0.54_1

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 151.0.54_11.0.54_1–
FreeBSD 141.0.54_11.0.54_11.0.54_1

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 1.0.54_1.

Fixed (1)

Show 1 fixed
VuXML entries whose affected range the packaged version has left.

Problem reports (1) · open in Bugzilla, most recently changed first

PRSummaryStatusChanged
272219maintainer-feedback? ftp/pure-ftpd add support for certdNew2026-04-28

Commits (164)

Tijl Coosemans (tijl) · 1.0.37_1
converters/libiconv: - Remove const qualifier from iconv(3) to match POSIX:   http://pubs.opengroup.org/onlinepubs/9699919799/functions/iconv.html - Patch iconv.h to expose more GNU extensions when LIBICONV_PLUG is   defined because the base system iconv supports these extensions too.

Add/remove patches to/from ports to call iconv with non-const arguments.

This breaks some ports on FreeBSD 10 because base system iconv.h still has
the const qualifier.  Fix this by letting USES=iconv add a build dependency
on converters/libiconv so ports can use its iconv.h (with LIBICONV_PLUG
defined) instead of the base system iconv.h.

This exposed some ports that link with libiconv when it is available instead
of using libc iconv.  In these cases one of the following changes has been
made:
- patch configure scripts to test for libc iconv first
- add ac_cv_lib_iconv_libiconv=no or similar to CONFIGURE_ARGS to disable
  some configure tests
- converters/wkhtmltopdf: this includes Qt4 so add a patch from devel/qt4
- lang/gcc5-aux: respect CFLAGS and friends during configure such that
  LIBICONV_PLUG is defined in the iconv test, also switch to external
  gettext
- mail/gnarwl: replace patches with CPPFLAGS/LIBS
- multimedia/ffmpeg2theora: remove iconv test from SConstruct and use
  ICONV_LIB in port Makefile instead, also fix a bug in subtitles.c
- net-im/licq: finish conversion to cmake
- net-mgmt/bandwidthd, net-mgmt/icinga, net-mgmt/nagios, net-mgmt/nagios4:
  don't need iconv
- textproc/p5-XML-TinyXML: finish conversion to USES=perl5

Other changes:
- databases/qdbm and slaves: respect CFLAGS and friends, also enable bzip2
  and lzo support
- games/ldmud: respect CFLAGS and friends
- graphics/inventor: replace some patches with MAKE_ARGS/MAKE_ENV to respect
  CFLAGS and friends, also remove FreeBSD/alpha patch and add missing xorg
  dependencies

PR:		199099
Exp-run by:	antoine
Approved by:	portmgr (antoine)
074ea5282a
Dmitry Marakasov (amdmi3) · 1.0.37
- Add CPE info

Approved by:	portmgr blanket
a1f9c93802
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.37
- Update to 1.0.37 - Add SCRYPT option (on by default) - Complete CONFIGURE_ARGS - Add git repository to WWW

Note that this version includes several security changes:
- SSLv2 and SSLv3 are refused by default
- DES-hashed passwords are not supported
- RC4 was killed

Changes:	https://github.com/jedisct1/pure-ftpd/blob/master/ChangeLog
0059af81ea
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.36_4
- Enable TLS option by default - Allow to change location of pid files - Bump PORTREVISION for package change
d01e28a6f5
Chris Rees (crees) · 1.0.36_3
Switch to USES=pgsql
1e94b6fb2f
Tijl Coosemans (tijl) · 1.0.36_3
net/openldap24-*: - Convert to USES=libtool and bump dependent ports - Avoid USE_AUTOTOOLS - Don't use PTHREAD_LIBS - Use MAKE_CMD

databases/glom:
- Drop :keepla
- Add INSTALL_TARGET=install-strip

databases/libgda4* databases/libgda5*:
- Convert to USES=libtool and bump dependent ports
- USES=tar:xz
- Use INSTALL_TARGET=install-strip
- Use @sample

databases/libgdamm:
- Drop :keepla
- USES=tar:bzip2
- Use INSTALL_TARGET=install-strip

databases/libgdamm5:
- Add INSTALL_TARGET=install-strip
- Drop --enable-static (inherited from old repocopy)

devel/anjuta x11-toolkits/py-gnome-extras:
- Drop :keepla

dns/powerdns dns/powerdns-devel:
- Convert to USES=libtool
- Add INSTALL_TARGET=install-strip
- Disable static modules
- Stop creating library symlinks with .0 suffix, not needed for dynamically
  opened modules

mail/dovecot2:
- Add USES=libtool

mail/dovecot2-pigeonhole:
- Drop CONFIGURE_TARGET (incorrect for Dragonfly)
- Add USES=libtool and INSTALL_TARGET=install-strip

math/gnumeric:
- USES=libtool tar:xz

Approved by:	portmgr (implicit, bump unstaged ports)
37f54e0f66
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.36_2
- Fix rc script:   - Reorder variables   - Assign default value for     - pureftpd_authd_enable     - pureftpd_authsocket: remove detection via pure-config.pl     - pureftpd_upload_enable   - Remove duplicate pidfile_authd   - Simplify script - Bump PORTREVISION for package change

MFH:		2014Q2
9e4fd3be1e
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.36_1
- Use USES=tar:bzip2
a1a5ce5985
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.36_1
- Add pure-authd support in rc script [1][2] - Indent rc script - Cosmetic change - Bump PORTREVISION for package change

PR:		ports/163339 [1], ports/180992 [2] (based on)
Submitted by:	Gabor HALASZ <halasz.g@freemail.hu> [1]
		Ari Maniatis <ari@ish.com.au> [2]
214c9d2478
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.36
- Add LICENSE - Sort OPTIONS - Convert to new options helper - Fix shebang - Reword pre-fetch: message and change variables:   - Change CERTFILE to TLS_CERTFILE   - Change WITH_LANG to LANG - Support STAGEDIR - Simplify Makefile - Cosmetic change - Reformat pkg-descr
12fdeaec2f
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.36
- Reword COMMENT: remove "very"

Suggested by:	eadler
3b4644a994
Baptiste Daroussin (bapt) · 1.0.36
Add NO_STAGE all over the place in preparation for the staging support (cat: ftp)
1640537ad6
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.36
- Remove leading indefinite article from COMMENT
fa1716b118
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.36
- Convert to new perl framework
c9cf6c6113
Alex Kozlov (ak) · 1.0.36
- Remove MAKE_JOBS_SAFE variable

Approved by:	portmgr (bdrewery)
d4041784dc
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.36
- Use CERTFILE for custom certificate location

PR:		ports/176614
Requested by:	Ilya Pizik <ilya.pizik@gmail.com>
1e036c569a
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.36
- Fix shebang line for users without USE_PERL=yes

PR:		ports/177481
Submitted by:	Lukasz Wasikowski <lukasz@wasikowski.net>
c7d56d5a45
Marcus von Appen (mva) · 1.0.36
- Convert USE_ICONV=yes to USES=iconv - Change USE_GNOME=pkgconfig|gnomehack to USES=pathfix|pkgconfig while here

Reviewed by:	bapt, kwm
821843ca06
Baptiste Daroussin (bapt) · 1.0.36
- Convert to new options framework - Trim headers

PR:		ports/168922
Submitted by:	Po-Chien Lin <linpc@cs.nctu.edu.tw>
Approved by:	maintainer timeout (6 month)
014fd9439f
Doug Barton (dougb) · 1.0.36
Move the rc.d scripts of the form *.sh.in to *.in

Where necessary add $FreeBSD$ to the file

No PORTREVISION bump necessary because this is a no-op
9aac569eaa
Carlo Strub (cs) · 1.0.36
Fix typos in COMMENT
d5fda8cb2c
Sunpoet Po-Chuan Hsieh (sunpoet) · 1.0.36
- Use bsd.port.options.mk for option handling - Take maintainership
3ca831a356
Baptiste Daroussin (bapt) · 1.0.36
- update to 1.0.36
158ae36611
Renato Botelho (garga) · 1.0.35
Drop maintainership

Feature safe:	yes
bc39ff6941
Doug Barton (dougb) · 1.0.35
In the rc.d scripts, change assignments to rcvar to use the literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
83eb2c3700
Renato Botelho (garga) · 1.0.35
Update to 1.0.35
a5593173d1
Renato Botelho (garga) · 1.0.34
Update to 1.0.34
b9b8ed6335
Renato Botelho (garga) · 1.0.32
- Update to 1.0.32

PR:		ports/155386
Submitted by:	Zhihao Yuan <lichray@gmail.com>
Security:	CVE-2011-1575
94a8445d9b
Renato Botelho (garga) · 1.0.29_1
Cleanup MASTER_SITES and since i'm here, remove MD5
d73ee63356
Renato Botelho (garga) · 1.0.29_1
- Remove BANNER option since it's gone - Add 3 new OPTIONS, ANUNRENAME, ANUNRESUME and ANONDELETE to give more   privileges to anonymous users - Cump PORTREVISION since BANNER option was on by default

Submitted by:	Edho P Arief <edhoprima@gmail.com>
ccdd511c28
Doug Barton (dougb) · 1.0.29
Begin the process of deprecating sysutils/rc_subr by s#. %%RC_SUBR%%#. /etc/rc.subr#
1d6b4b3f91
Renato Botelho (garga) · 1.0.29
Update to 1.0.29
9b6752a4fe
Renato Botelho (garga) · 1.0.28
Update to 1.0.28

PR:		ports/144095
Submitted by:	Denny Lin <dennylin93 at cnmc32.hs.ntnu.edu.tw>
Feature safe:	yes
1d5d180b14
Renato Botelho (garga) · 1.0.27
Update to 1.0.27
d5b86a3cc6
Renato Botelho (garga) · 1.0.26
Convert --with-virtualchroot to an OPTION, on by default

Sugested by:	Jozsef Kovacs <jozsef.kovacs@datira.com>
28015a592e
Renato Botelho (garga) · 1.0.26
Update to 1.0.26
c56f763398
Renato Botelho (garga) · 1.0.24_2
- Add --localstate=/var to make pure-ftpwho work again - Bump PORTREVISION

Reported by:	Jordi Espasa Clofent <jespasac@minibofh.org>
Obtained from:	pure-ftpd maillist
16584b2013
Renato Botelho (garga) · 1.0.24_1
Force default PID file and fix startup script

Reported by:	Jordi Espasa Clofent <jespasac@minibofh.org>
14d5ef9859
Renato Botelho (garga) · 1.0.24
Update to 1.0.24

PR:		ports/139931
Submitted by:	Sunpoet Po-Chuan Hsieh <sunpoet@sunpoet.net>
bd23b2fa94
Dmitry Marakasov (amdmi3) · 1.0.22
- Fix broken makefiles introduced with translation to new SF File Release System

Reported by:	dan
Pointyhat to:	myself
a2472d09d8
Dmitry Marakasov (amdmi3) · 1.0.22
- Switch SourceForge ports to the new File Release System: categories starting with E,F
c6d73b3a64
Renato Botelho (garga) · 1.0.22
- Fix working with LDAP

Notified by:	Krzysztof Stryjek <wtp@bsdserwis.com>
Obtained from:	pure-ftpd maillist
d30040b744
Renato Botelho (garga) · 1.0.22
- Tarball was rerolled, chages were:   o Fix typo   o Fix compilation with gcc 2.x
ed1fefe41e
Renato Botelho (garga) · 1.0.22
- Update to 1.0.22 - Convert TLS to an option, off by default since this is considered   experimental - Change PRIVSEP option on by default to reflect default configure
eef21b316a
Renato Botelho (garga) · 1.0.21_4
Mark all my ports as MAKE_JOBS_SAFE and MAKE_JOBS_UNSAFE
c9e008f727
Renato Botelho (garga) · 1.0.21_4
--with-largefile is not recommended to be default, so, convert it to OPTION and set it off by default, since this changes the default options, bump PORTREVISION

Pointed by:	Yar Odin <yarodin@gmail.com>
68629aad83
Renato Botelho (garga) · 1.0.21_3
Fix following problem:

Pure-ftpd supports the "SITE UTIME" command, which allows the client to set the
modification time of a file to a particular timestamp, expressed in UTC.

However, pure-ftpd passes the UTC timestamp directly to the operating system's
utime() function, which is a bug, because utime() requires that the timestamp be
in local time instead of UTC.

For example for server with MSK localtime:
> ---> MDTM cuba2008_1.mpeg.stat
> <--- 213 20090106074437

> ---> SITE UTIME cuba2008_1.mpeg.stat 20090106104437 20090106104437 20090106104437 UTC
> <--- 250 UTIME OK

PR:		ports/131645
Submitted by:	Yar Odin <yarodin@gmai.com>
a22a24b1c8
Renato Botelho (garga) · 1.0.21_2
- Fix a problem with AUTH TLS [1] - Bump PORTREVISION - Some cosmetic changes (e.g. indentation) - Move pkg-message to files/pkg-message.in - Respect NOPORTEXAMPLES - Use INSTALL_SCRIPT to install ${PREFIX}/sbin/pure-ftpd.pl

PR:		ports/120187 [1]
Submitted by:	Filip Palian <filip.palian@expro.pl> [1]
201ecd673b
Renato Botelho (garga) · 1.0.21_1
- Remove 4.x support - Use PORTDOCS
9acdaf5844
Renato Botelho (garga) · 1.0.21_1
Back out my last commit because new patch doesn't work
040efa897d