vsftpd (3.0.5-1) unstable; urgency=medium

  * Add debian/patches/0079-debian-bugfixes.patch to address multiple bugs:
    - Return 502 Command not implemented instead of 550 for disabled
      PASV/PORT commands (Closes: #1012476).
    - Document the Debian-specific utf8_filesystem option in the
      man page (Closes: #950577).
    - Trim leading and trailing whitespace/tabs in vsftpd.conf parsing
      to prevent startup failures due to extra spaces (Closes: #950584).
    - Dynamically fall back to IPv4 listening if IPv6 is disabled in
      the kernel, avoiding package installation and daemon startup
      failures (Closes: #961712).
  * Add debian/patches/0080-pam-exec-hang.patch to prevent hanging in
    the SIGCHLD handler when using PAM modules that spawn subprocesses,
    e.g. pam_exec (Closes: #952421, #827550).
  * Add debian/patches/0081-pasv-address-ipv6.patch to fix pasv_address
    being ignored when listen_ipv6 is enabled and clients connect
    via IPv4 (Closes: #968888).
  * Add debian/patches/0082-debian-bugfixes-tls-utf8.patch to fix:
    - Cap TLS 1.3 session ticket lifetime at 7 days (604800s) instead
      of INT_MAX to comply with RFC 8446, preventing connection drops on
      both control and data channels (Closes: #929958, #958469).
    - Allow UTF-8 characters (high bytes >= 128) in logs and fix 177
      typo in printability check (Closes: #644920).
    - Fix assignment typo in vsf_sysutil_realpath causing double slashes
      when resolving paths under the root directory (Closes: #825271).
    - Remove obsolete absolute paths to pam_userdb.so in virtual users
      examples (Closes: #885402).
  * Move adduser from Recommends to Depends to satisfy postinst script.
  * Officially close historically resolved/satisfied bugs that were left
    open in the Debian Bug Tracking System (Closes: #838678, #844297, #973766).

 -- Keng-Yu Lin <kengyu@debian.org>  Thu, 25 Jun 2026 22:40:00 +0800

vsftpd (3.0.5-0.7) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix existing lintian override for new syntax
  * Rename vsftpd.tmpfile -> vsftpd.tmpfiles
  * Fix lintian: unusual-interpreter /usr/bin/python

  [ Luca Boccassi ]
  * Install and use sysusers.d/tmpfiles.d config files

 -- Alexandre Detiste <tchet@debian.org>  Thu, 14 May 2026 15:13:06 +0200

vsftpd (3.0.5-0.6) unstable; urgency=medium

  * Non-maintainer upload.
  * Add debian/salsa-ci.yml
  * Add missing Pre-Depends: ${misc:Pre-Depends} in vsftpd.
  * Rely on pre-initialized dpkg-architecture variables.
  * Use versioned copyright format URI.
  * Update standards version to 4.7.4, no changes needed.
  * Update renamed lintian tag names in lintian overrides.
  * Replace /var/run by /run everywhere (Closes: #966489)
  * postrm: do not attempt to duplicate dh_installsystemd actions
  * Add Documentation tag to vsftpd.service

 -- Alexandre Detiste <tchet@debian.org>  Thu, 14 May 2026 14:42:07 +0200

vsftpd (3.0.5-0.5) unstable; urgency=medium

  * Non-maintainer upload.

  [ Andreas Tille ]
  * Maintain package in Debian team on Salsa
  * Secure (updated) Homepage
  * d/copyright: Update Source location
  * d/watch: version=5
  * debhelper-compat (= 13)
  * d/control:
     - Do not Depend from obsolete lsb-base
     - Drop explicit -dbg package
     - Standards-Version: 4.7.3
  * d/copyright: Remove old FSF address

  [ Remus-Gabriel Chelu ]
  * Romanian debconf templates translation of vsftpd
    Closes: #1033764

 -- Andreas Tille <tille@debian.org>  Wed, 11 Feb 2026 21:17:05 +0100

vsftpd (3.0.5-0.4) unstable; urgency=medium

  * Non-maintainer upload.
  * Update "max_clients" and "max_per_ip" defaults in vsftpd.conf(5) according
    to reality (and v2.1.2 Changelog). Closes: #1121330

 -- Lukas Märdian <slyon@debian.org>  Mon, 24 Nov 2025 14:49:57 +0100

vsftpd (3.0.5-0.3) unstable; urgency=medium

  * Non-maintainer upload.
  * ssl.c: correct setup_bio_callbacks signature (Closes: #1098073)

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 05 Sep 2025 00:05:58 +0200

vsftpd (3.0.5-0.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Correct README.Debian with regard to local and anonymous logins.
    (Closes: #1104531)

 -- Chris Hofstaedtler <zeha@debian.org>  Fri, 02 May 2025 13:17:12 +0200

vsftpd (3.0.5-0.1) unstable; urgency=medium

  * Non-maintainer upload.
  * New upstream release. (Closes: #991329)
    Fixes CVE-2021-3618

  [ Svante Signelle ]
  * Fix init script for Hurd (Closes: #975585)

 -- Chris Hofstaedtler <zeha@debian.org>  Wed, 15 Jan 2025 12:19:33 +0100

vsftpd (3.0.3-13.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Stop removing ftp user/group on removal (Closes: #1042969)

 -- Luca Boccassi <bluca@debian.org>  Sun, 07 Jul 2024 13:39:11 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog vsftpd`.
