proftpd-dfsg (1.3.5a-1build1) xenial; urgency=medium

  * Rebuild against libmysqlclient20.

 -- Robie Basak <robie.basak@ubuntu.com>  Tue, 05 Apr 2016 12:52:18 +0000

proftpd-dfsg (1.3.5a-1) unstable; urgency=medium

  * New upstream release. Patch CVE-2015-3306 merged.
  * Patches refreshed.

 -- Francesco Paolo Lovergine <frankie@debian.org>  Wed, 27 Jan 2016 12:18:06 +0100

proftpd-dfsg (1.3.5-2) unstable; urgency=high

  * proftpd-dev: Depend on libtool-bin: merged NMU, thanks Doko.
    (closes: #761795) 
  * Add CVE-2015-3306 patch.
    Unauthenticated copying of files via SITE CPFR/CPTO allowed by mod_copy.
    (closes: #782781)

 -- Francesco Paolo Lovergine <frankie@debian.org>  Thu, 23 Apr 2015 14:11:19 +0200

proftpd-dfsg (1.3.5-1) unstable; urgency=medium

  * New upstream release. Patch 4044 merged.

 -- Francesco Paolo Lovergine <frankie@debian.org>  Fri, 13 Jun 2014 11:55:22 +0200

proftpd-dfsg (1.3.5~rc4-3) unstable; urgency=medium

  * Fixed postinst for invalid usermod call.
  * New patch added to fix upstream bug #4044. This fix now allows using a
    proper reload instead of a restart in the init script.
    (closes: #594449, #675081)
  * The previous change for the start-stop-daemon appears invalid, so changed
    a bit timings to possibly allow proper stops under heavy loads.

 -- Francesco Paolo Lovergine <frankie@debian.org>  Tue, 29 Apr 2014 08:25:22 +0200

proftpd-dfsg (1.3.5~rc4-2) unstable; urgency=medium

  * Now using /run instead of /var/run for state directory.
    (closes: #699798)
  * Revised debconf config to explicitly set default.
    (closes: #707689)
  * Revised (again) --retry flag for start-stop-daemon in order to fix long
    delays in stopping the daemon.
    (closes: #675081, #721201)

 -- Francesco Paolo Lovergine <frankie@debian.org>  Thu, 06 Feb 2014 16:41:26 +0100

proftpd-dfsg (1.3.5~rc4-1) unstable; urgency=low

  * New upstream pre-release, with fix for CVE-2013-4359 aka proftpd#3973.
    (closes: #723179)
  * Included fix by Andreas Beckmann:
    - Cleanup Breaks+Replaces.
    - Add proftpd-mod-geoip.preinst script to delete the old buggy postrm script
      on upgrades from wheezy. Otherwise the buggy postrm script would delete
      some files from the newly unpacked package. 
    (closes: #699647)
  * Refreshed patchset.

 -- Francesco Paolo Lovergine <frankie@debian.org>  Thu, 30 Jan 2014 13:20:53 +0100

proftpd-dfsg (1.3.5~rc3-2.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Cleanup Breaks+Replaces.
  * Add proftpd-mod-geoip.preinst script to delete the old buggy postrm script
    on upgrades from wheezy. Otherwise the buggy postrm script would delete
    some files from the newly unpacked package.  (Closes: #699647)

 -- Andreas Beckmann <anbe@debian.org>  Sun, 26 Jan 2014 04:05:47 +0100

proftpd-dfsg (1.3.5~rc3-2.1) unstable; urgency=low

  * Non-maintainer upload.
  * Add CVE-2013-4359.patch patch.
    CVE-2013-4359: Fix invalid pool authentication in mod_sftp/mod_sftp_pam
    during kbdint authentication leading to DoS conditions. (Closes: #723179)
  * Correct Breaks and Replaces on proftpd-mod-geoip package.
    The old proftpd-mod-geoip addon module is now obsoleted by core proftpd.
    Adjusted the Breaks/Replaces to 1.3.5~rc1-1 which introduced the geoip
    module in proftpd core.
    Thanks to Andreas Beckmann <anbe@debian.org> (Closes: #699647)

 -- Salvatore Bonaccorso <carnil@debian.org>  Sat, 05 Oct 2013 14:51:36 +0200

proftpd-dfsg (1.3.5~rc3-2) unstable; urgency=low

  * Added version for dependency on memcached, for completeness.
    (closes: #699514)
  * The old proftpd-mod-geoip addon module is now onbsoleted by core proftpd,
    so required Breaks/Replaces are provided to avoid piuparts breakages.
    (closes: #699647)
  * Modified modules.conf template to suggest the geoip module.

 -- Francesco Paolo Lovergine <frankie@debian.org>  Wed, 03 Jul 2013 14:09:32 +0200

# For older changelog entries, run 'apt-get changelog proftpd-doc'
