CVE and update status of the FreeBSD ports tree3,864 unaddressed CVEs in 671 portsAll times are CET
Port details

ftp/vsftpd-ext 3.0.3.1_3

FTP daemon that aims to be "very secure". Extended build

Port info

Maintainer
xjflyttp@gmail.com
Packages
latest: 3.0.3.1_3
Upstream
up to date
Last update
to 3.0.3.1_3 · 14f7c29430
Quarterly
2026Q4: 3.0.3.1_3
WWW
https://vsftpd.devnet.ru/eng/
Links
cgit · VuXML

Install

Package
# pkg install vsftpd-ext
installs 3.0.3.1_3 from latest; from quarterly (2026Q4) 3.0.3.1_3
Port
# cd /usr/ports/ftp/vsftpd-ext && make install clean
# make -C /usr/ports/ftp/vsftpd-ext config  # change options first
Size
141 KiB download · 373 KiB installed
Depends on
nothing
License
GPLv2
Creates
user ftp, group ftp
Options
2 of 3 on in the package: DOCS RC_SCRIPT
Show the 1 options that are off
VSFTPD_SSL

Packages by version and architecture

latest

FreeBSD versionamd64aarch64i386
FreeBSD 163.0.3.1_33.0.3.1_3–
FreeBSD 153.0.3.1_33.0.3.1_3–
FreeBSD 143.0.3.1_33.0.3.1_33.0.3.1_3

quarterly (2026Q4)

FreeBSD versionamd64aarch64i386
FreeBSD 153.0.3.1_33.0.3.1_3–
FreeBSD 143.0.3.1_33.0.3.1_33.0.3.1_3

version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.

Unaddressed and VuXML only (0)

No unaddressed CVE and nothing reported by pkg audit for the packaged version 3.0.3.1_3.

Fixed (0)

No VuXML entries for this package.

Problem reports (0) · open in Bugzilla, most recently changed first

None.

Commits (46)

Jason E. Hale (jhale) · 3.0.3.1_3
*/*: De-orbit alias.mk

Mk/Uses/alias.mk was an attempt for compat with DPorts, but has rotted.
This feature was never documented in the PHB, so there is no work to
be done by the docs@ team.

Nothing against DragonFly, but if DPorts still needs FreeBSD 9
support, they really should work that out with upstream projects.

Ultimately, we don't need to keep carrying this outdated feature that
doesn't affect us.
14f7c29430
Alexander Leidinger (netchild) · 3.0.3.1_3
ftp/vsftpd-ext: make the rc script service jails aware

PR:		279642
Approved by:	maintainer timeout (1 month)
73648ddbec
Muhammad Moinur Rahman (bofh) · 3.0.3.1_2
ftp/vsftpd-ext: Moved man to share/man

Approved by:    portmgr (blanket)
7b142cc14b
Stefan Eßer (se) · 3.0.3.1_1
Remove WWW entries moved into port Makefiles

Commit b7f05445c00f has added WWW entries to port Makefiles based on
WWW: lines in pkg-descr files.

This commit removes the WWW: lines of moved-over URLs from these
pkg-descr files.

Approved by:		portmgr (tcberner)
fb16dfecae
Stefan Eßer (se) · 3.0.3.1_1
Add WWW entries to port Makefiles

It has been common practice to have one or more URLs at the end of the
ports' pkg-descr files, one per line and prefixed with "WWW:". These
URLs should point at a project website or other relevant resources.

Access to these URLs required processing of the pkg-descr files, and
they have often become stale over time. If more than one such URL was
present in a pkg-descr file, only the first one was tarnsfered into
the port INDEX, but for many ports only the last line did contain the
port specific URL to further information.

There have been several proposals to make a project URL available as
a macro in the ports' Makefiles, over time.

This commit implements such a proposal and moves one of the WWW: entries
of each pkg-descr file into the respective port's Makefile. A heuristic
attempts to identify the most relevant URL in case there is more than
one WWW: entry in some pkg-descr file. URLs that are not moved into the
Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr
files in order to preserve them.

There are 1256 ports that had no WWW: entries in pkg-descr files. These
ports will not be touched in this commit.

The portlint port has been adjusted to expect a WWW entry in each port
Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as
deprecated.

Approved by:		portmgr (tcberner)
b7f05445c0
Tobias C. Berner (tcberner) · 3.0.3.1_1
ftp: remove 'Created by' lines

A big Thank You to the original contributors of these ports:

  *  Aaron Dalton <aaron@FreeBSD.org>
  *  Alexander Kriventsov
  *  Anders Nordby <anders@fix.no>
  *  Andreas Fehlner <fehlner@gmx.de>
  *  Andrew Pantyukhin <infofarmer@FreeBSD.org>
  *  Andrey Zakhvatov
  *  Antonio Carlos Venancio Junior (<antonio@inf.ufsc.br>)
  *  Chris Piazza <cpiazza@FreeBSD.org>
  *  Damjan Marion <dmarion@open.hr>
  *  Emanuel Haupt <ehaupt@critical.ch>
  *  Eric Freeman <freebsdports@chillibear.com>
  *  Frank DENIS
  *  Frank Laszlo <laszlof@vonostingroup.com>
  *  Gea-Suan Lin (gslin@ccca.nctu.edu.tw)
  *  Gea-Suan Lin <gslin@ccca.nctu.edu.tw>
  *  George V. Neville-Neil <gnn@FreeBSD.org>
  *  Hye-Shik Chang
  *  Jordan Hubbard <jkh@FreeBSD.org>
  *  Jose Alonso Cardenas Marquez <acardenas@bsd.org.pe>
  *  Joseph Benden <joe@thrallingpenguin.com>
  *  Ju Pengfei <jupengfei@gmail.com>
  *  Jui-Nan Lin <jnlin@freebsd.cs.nctu.edu.tw>
  *  Mark Johnston <markj@FreeBSD.org>
  *  Martin Matuska (mm@FreeBSD.org)
  *  Marwan BURELLE <marwan.burelle@lri.fr>
  *  Maxim Ignatenko
  *  Maxim Sobolev <sobomax@FreeBSD.org>
  *  Neil Blakey-Milner
  *  Neil Blakey-Milner <nbm@rucus.ru.ac.za>
  *  Nick Leuta
  *  Nosov Artem <chip-set@mail.ru>
  *  Petr Holub <hopet@ics.muni.cz>
  *  Philippe Le Berre <philippe@le-berre.com>
  *  Piotr Kubaj <pkubaj@anongoth.pl>
  *  Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  Roman Bogorodskiy
  *  Sergey Matveychuk <sem@FreeBSD.org>
  *  Sergey Skvortsov <skv@FreeBSD.org>
  *  Stephane Legrand
  *  Sunpoet Po-Chuan Hsieh <sunpoet@FreeBSD.org>
  *  TAKATSU Tomonari <tota@FreeBSD.org>
  *  Thomas Gellekum <tg@FreeBSD.org>
  *  Tom McLaughlin <tmclaugh@sdf.lonestar.org>
  *  Tomokazu ISHII <t-ishii@tryplanet.com>
  *  Ulrich Spoerlein <uspoerlein@gmail.com>
  *  Wen Heping <wen@FreeBSD.org>
  *  Xavier Beaudouin <kiwi@oav.net>
  *  Yasuhiro Fukuma <yasuf@big.or.jp>
  *  Ying-Chieh Liao <ijliao@FreeBSD.org>
  *  ache
  *  cy@FreeBSD.org
  *  ijliao
  *  ports
  *  torstenb
  *  will

With hat:	portmgr
30cd242001
Mathieu Arnold (mat) · 3.0.3.1_1
all: Remove all other $FreeBSD keywords.
135fdeebb9
Mathieu Arnold (mat) · 3.0.3.1_1
Remove # $FreeBSD$ from Makefiles.
305f148f48
Dmitry Marakasov (amdmi3) · 3.0.3.1_1
- Add LICENSE_FILE - Update WWW

Approved by:	portmgr blanket
c5eaf1b6b1
Stefan Eßer (se) · 3.0.3.1_1
Fix build with -fno-common
96d506a326
Baptiste Daroussin (bapt) · 3.0.3.1
Drop the ipv6 virtual category for f* category as it is not relevant anymore
06c273daa8
Dmitry Marakasov (amdmi3) · 3.0.3.1
- Fix build with SSL on 12.0

Vsftpd uses an ugly way of checking whether it needs to link
libssl/libcrypto by grepping object file (!) for SSL_library_init
(which may be or not be actually used depending on a define).
This does not work if SSL_library_init is a macro which is the case
with OpenSSL 1.1.0:

/usr/include/openssl/ssl.h:#  define SSL_library_init() OPENSSL_init_ssl(0, NULL)

Because of this, on 12.0 the check always fails, OpenSSL libs are
not linked, and the build fails with linker errors:

/usr/bin/ld: error: undefined symbol: OPENSSL_init_ssl
>>> referenced by ssl.c
>>>               ssl.o:(ssl_init)

/usr/bin/ld: error: undefined symbol: TLS_server_method
>>> referenced by ssl.c
>>>               ssl.o:(ssl_init)

/usr/bin/ld: error: undefined symbol: SSL_CTX_new
>>> referenced by ssl.c
>>>               ssl.o:(ssl_init)

Since we know beforehand whether we need SSL, just replace the check
with true if SSL is enabled.

- While here, partially convert to options helpers
8393a2e065
Martin Wilke (miwi) · 3.0.3.1
- Update to 3.0.3.1

PR:	227491
Submitted by:	Leonid Nevecherya
Approved by:	maintainer timeout
Sponsored by:	iXsystems Inc.
440e17cfd7
Dmitry Marakasov (amdmi3) · 3.0.2.1_2
- Remove always-true/false conditions after FreeBSD 9, 10.1, 10.2 EOL

Approved by:	portmgr blanket
9d79e7b146
Mathieu Arnold (mat) · 3.0.2.1_2
Replace bsd.openssl.mk with USES=ssl

Add a qa hint about needing, or not, USES=ssl.

Fix ports doing silly things, like including bsd.openssl.mk directly.

PR:		210322
Submitted by:	mat
Exp-run by:	antoine
Sponsored by:	Absolight
Differential Revision:	https://reviews.freebsd.org/D6866
06b4ea3876
Dmitry Marakasov (amdmi3) · 3.0.2.1_2
Remove NLS, DOCS, EXAMPLES and IPV6 from OPTIONS_DEFAULT, they are enabled by default anyway and don't need to be listed

Approved by:	portmgr blanket
c86e9d9724
Mathieu Arnold (mat) · 3.0.2.1_2
Remove ${PORTSDIR}/ from dependencies, categories d, e, f, and g.

With hat:	portmgr
Sponsored by:	Absolight
4e1b79a0a6
Jason Unovitch (junovitch) · 3.0.2.1_2
ftp/vsftpd-ext: unbreak build on 9.x i386 and clean up port

- Force clang on FreeBSD < 10.0 to resolve 9.x i386 build issues
- Modernize USES with tar:tgz
- Rely on USERS/GROUPS; remove pkg-install/pkg deinstall scripts
- Remove direct chmod usage
- Regen patch to pet portlint

PR:		200791
Submitted by:	Xu Jing <xjflyttp@gmail.com> (maintainer - original version)
Approved by:	delphij (mentor)
MFH:		2015Q3
9b02a7e3f0
Dmitry Marakasov (amdmi3) · 3.0.2.1_2
Mark BROKEN on FreeBSD 9.x i386, does not link:

sysutil.o: In function `vsf_sysutil_tzset':
sysutil.c:(.text+0x13da): undefined reference to `__stack_chk_fail_local'
sysutil.o: In function `vsf_sysutil_parse_time':
sysutil.c:(.text+0x306a): undefined reference to `__stack_chk_fail_local'
sysutil.o: In function `vsf_sysutil_sockaddr_in_mask':
sysutil.c:(.text+0x3ac8): undefined reference to `__stack_chk_fail_local'
sysutil.o: In function `vsf_sysutil_getpeername':
sysutil.c:(.text+0x3c75): undefined reference to `__stack_chk_fail_local'
sysutil.o: In function `vsf_sysutil_getsockname':
sysutil.c:(.text+0x3d45): undefined reference to `__stack_chk_fail_local'
sysutil.o:sysutil.c:(.text+0x44d2): more undefined references to `__stack_chk_fail_local' follow

Submitted by:	pkg-fallout
Approved by:	portmgr blanket
bd216a7b5d
Dmitry Marakasov (amdmi3) · 3.0.2.1_2
- Mark BROKEN on 9.x i386:

sysutil.c:(.text+0x13da): undefined reference to `__stack_chk_fail_local'

Approved by:	portmgr blanket
Reported by:	pkg-fallout
8c57ee4f0c
Kurt Jaeger (pi) · 3.0.2.1_2
ftp/vsftpd-ext: fixing path to vsftpd.conf

PR:		195239
Submitted by:	Xu Jing <xjflyttp@gmail.com> (maintainer)
ce0872f121
John Marino (marino) · 3.0.2.1_1
ftp/vsftpd(-ext): USES=alias to fix build on DragonFly
a628c160a4
Antoine Brodin (antoine) · 3.0.2.1_1
Revert part of r371277
1910aa2bcb
Kurt Jaeger (pi) · 3.0.2.1
ftp/vsftpd-ext: fix build for 9.1 i386

PR:		193989
Submitted by:	Xu Jing <xjflyttp@gmail.com> (maintainer)
ebf1c84a52
Baptiste Daroussin (bapt) · 3.0.2.1
Clean up plist
1e242b782f
Kurt Jaeger (pi) · 3.0.2.1
ftp/vsftpd-ext: resurrect, upgrade 2.3.5 -> 3.0.2, stagify

Extended build of vsftpd with additional features.

WWW: http://vsftpd.devnet.ru/eng/

PR:		193916
Submitted by:	Xu Jing <xjflyttp@gmail.com>
81e21611a5
Baptiste Daroussin (bapt)
Remove non staged ports without pending PR from f*
82a079fce3
Baptiste Daroussin (bapt) · 2.3.5.1_1
Reset maintainership for ports not staged with no pending PR

With hat:	portmgr
64620e9118
Bernhard Froehlich (decke) · 2.3.5.1_1
- Fix typo in options conversion

With hat:	portmgr
1a4e87af80
Baptiste Daroussin (bapt) · 2.3.5.1_1
Add NO_STAGE all over the place in preparation for the staging support (cat: ftp)
1640537ad6
Baptiste Daroussin (bapt) · 2.3.5.1_1
Convert left unconverted ports in ftp to new options framework
1933bfac59
Doug Barton (dougb) · 2.3.5.1_1
Move the rc.d scripts of the form *.sh.in to *.in

Where necessary add $FreeBSD$ to the file

No PORTREVISION bump necessary because this is a no-op
9aac569eaa
Florian Smeets (flo) · 2.3.5.1_1
The previous patch was supposed to fix vsftpd so that it would look for the configuration file in /usr/local/etc/vsftpd.conf but it did not, currently it is looking for the file in /usr/local/etc/vsftpd//usr/local/etc/vsftpd.conf, this patch makes it look for /usr/local/etc/vsftpd.conf as also specified in pkg-plist.

Approved by:	maintainer
ee2104cd5f
Doug Barton (dougb) · 2.3.5.1
In the rc.d scripts, change assignments to rcvar to use the literal name_enable wherever possible, and ${name}_enable when it's not, to prepare for the demise of set_rcvar().

In cases where I had to hand-edit unusual instances also
modify formatting slightly to be more uniform (and in
some cases, correct). This includes adding some $FreeBSD$
tags, and most importantly moving rcvar= to right after
name= so it's clear that one is derived from the other.
83eb2c3700
Michael Scheidell (scheidell) · 2.3.5.1
- Update to 2.3.5-ext1 [1] - Fix path to vsftpd.conf in defs.h and builddefs.h old path /usr/local/etc/vsftpd.conf is not defined correctly [1] - patch-sysdeputil.c removed (FreeBSD already detected in sources) [1]

PR:		ports/163940 [1]
Submitted by:	Svyatoslav Lempert <svyatoslav.lempert@gmail.com> [1]
Approved by:	gelraen.ua@gmail.com (maintainer), gabor (mentor, implicit)
d477272613
Michael Scheidell (scheidell) · 2.3.4.2_1
- Remove ../files/patch-Makefile (again)

PR:		ports/163548
Approved by:	gabor (mentor)
920d144bdf
Michael Scheidell (scheidell) · 2.3.4.2_1
- respect CC/CFLAGS/STRIP on vsftpd-ext

PR:             ports/163550
Submitted by:   Jan Beich <jbeich@tormail.net>
Approved by:    gelraen.ua@gmail.com (maintainer), gabor(mentor)
a5e3cf835e
Michael Scheidell (scheidell) · 2.3.4.2
- extra files, missed by committer

PR:		ports/163246
Approved by:	gabor (mentor)
91a200ee3b
Michael Scheidell (scheidell) · 2.3.4.2
- Update to 2.3.4 ext2 [1] - Unbreak build on 9.x [1] - rename RC_NG to RC_SCRIPT standard [2]

PR:		ports/163246
Submitted by:	Maxim Ignatenko <gelraen.ua@gmail.com> (maintainer) [1]
Approved by:	gabor (mentor) [2]
eadbe216b0
Dmitry Marakasov (amdmi3) · 2.1.2
- Add LDFLAGS to CONFIGURE_ENV and MAKE_ENV (as it was done with LDFLAGS) - Fix all ports that add {CPP,LD}FLAGS to *_ENV to modify flags instead

PR:		157936
Submitted by:	myself
Exp-runs by:	pav
Approved by:	pav
6f6fbe4bdf
Martin Wilke (miwi) · 2.1.2
- Get Rid MD5 support
a9481afc8a
Erwin Lansing (erwin) · 2.1.2
Mark BROKEN on 9.x: does not build
b10bdf644d
Doug Barton (dougb) · 2.1.2
Begin the process of deprecating sysutils/rc_subr by s#. %%RC_SUBR%%#. /etc/rc.subr#
1d6b4b3f91
Martin Wilke (miwi) · 2.1.2
- Update to 2.1.2

PR:		136902
Submitted by:	Maxim Ignatenko <gelraen.ua@gmail.com> (maintainer)
b69d24a26d
Doug Barton (dougb) · 2.1.0
Fix a few "bad example" problems in the rc.d scripts that have been propogated by copy and paste.

1. Primarily the "empty variable" default assignment, which is mostly
${name}_flags="", but fix a few others as well.
2. Where they are not already documented, add the existence of the _flags
(or other deleted empties) option to the comments, and in some cases add
comments from scratch.
3. Replace things that look like:
prefix=%%PREFIX%%
command=${prefix}/sbin/foo
to just use %%PREFIX%%. In many cases the $prefix variable is only used
once, and in some cases it is not used at all.
4. In a few cases remove ${name}_flags from command_args
5. Remove a long-stale comment about putting the port's rc.d script in
/etc/rc.d (which is no longer necessary).

No PORTREVISION bumps because all of these changes are noops.
0175383f0a
Philip M. Gollucci (pgollucci) · 2.1.0
Extended build of vsftpd with additional features. - Added char convertion without iconv for some charsets. - Added rules for anonymous access based on user's IP address masks. - Added rules for user access only from defined IPs. - Allow or disallow delete files by anonymous. - Added chowning anonymous uploaded files by user IP. - Added new parametr double_377 (by default 1). This paramert switch 

WWW: http://vsftpd.devnet.ru/eng/

PR:		ports/132556
Submitted by:	Maxim Ignatenko
2b9da571f3