proftpd-dfsg (1.3.5e-1build1) bionic; urgency=high

  * No change rebuild against openssl1.1.

 -- Dimitri John Ledkov <xnox@ubuntu.com>  Mon, 05 Feb 2018 23:27:47 +0000

proftpd-dfsg (1.3.5e-1) unstable; urgency=medium

  [ Hilmar Preuße ]
  * Disable stripping in install stage, leave that job to dh tools.
    Thanks to Helmut Grohne <helmut@subdivi.de> for report and patch.
    (Closes: #884558)
  * Call "dh_strip -a" before "dh_gencontrol -a" to generate dbgsym
    packages.
  * postinst script:
    - update update-rc.d command: don't specify runlevel
    - don't set DONTSTART and don't check for its value
      (probably relics from debconf times)

  [ Francesco Paolo Lovergine ]
  * New upstream version. Patchset updated.
  * At postinst change permissions of some *.conf files
    (closes: #638955)
  * Removed autotools_dev b-d, now obsoleted by current debhelper.
  * Removed explicit path for update-inetd in postinst and postrm to make
    lintian happy
  * Policy bumped to 4.1.3.
        - Recommends proftpd-doc as for 4.0.0.
        - Do not invoke /etc/init.d script even as fallback as for 4.0.0 
  * Removed obsolete code to manage migration from version 1.2.9 in preinst.
  * Fixed target in recent NEWS file issue to make lintian happy.
  * Fixed various spelling errors with new patch.
  * Now correctly including dpkg buildflags makefile snippets.
  * Current autotools patch augmented with adding of the std build-flags for
    hardening. That obsoletes contri_hardening_flags patch.

 -- Francesco Paolo Lovergine <frankie@debian.org>  Wed, 10 Jan 2018 09:44:28 +0100

proftpd-dfsg (1.3.5d-1) unstable; urgency=medium

  [ Hilmar Preuße ]
  * Init script (rarely) fails in detecting pid file (Closes: #756637)
  * Fix dep of proftpd-dev (libssl-dev -> libssl1.0-dev)
    (Closes: #848124)
  * Remove shlib-calls-exit from lintian overrides (warning is gone)
  * Reformat debian/*NEWS files (kills syntax-error-in-debian-news-file,
    removed lintian override).
  * Clean proftpd-basic.dirs a little bit. Kill proftpd-dev.dirs.
  * Tighten B-D version of debhelper (dh_update_autotools_config was
    introduced).
  * Patch github_305_handling_unclosed_files
    When handling unclosed files for an aborted SFTP session, we will
    need a valid response pool.  So provide one.  The lack of this may have
    been causing some segfaults. (LP: #1647094)
  * Patch bug_4277_deb_823409
    Upstream identified another Memleak, occurring when /uploading/ large
    files; affects only 1.3.5 line. Patch hopefully (Closes: #823409).

  [ Francesco Paolo Lovergine ]
  * New upstream release. (Closes: #854369)
    * Patchset updated to remove already included patches.
    * Build w/ OpenSSL 1.1. Do it (Closes: #828513)
  * Makes piuparts happy by removing /srv/ftp on purge 
  * Removed debconf support and added a proftpd-basic.NEWS entry to warn about
    that. (Closes: #820984)

 -- Francesco Paolo Lovergine <frankie@debian.org>  Thu, 26 Jan 2017 13:23:53 +0100

proftpd-dfsg (1.3.5b-1) unstable; urgency=medium

  [ Mahyuddin Susanto ]
  * Fix FTBFS for missing build-indep, Thanks Santiago Vila
    (Closes: #831961).
  * Fix FTBFS in hurd-i386, thanks Svante Signell (Closes: #745493).

  [Hilmar Preuße]
  * Apply patch for ftpasswd.8 (Closes: #774390)
  * Some files created during build were not removed during clean.
  * Apply patch to allow transfer large files (more than 1 GB)
    with SFTP module (Closes: #809068), large_files_SFTP.diff
  * Apply patch for reproducible build. Thanks to Chris Lamb
    (Closes: #831381).
  * Remove hardening check in debian/rules, remove BD on
    hardening-includes (Closes: #836759).
  * Use common-session-noninteractive PAM configuration fragment,
    (instead of common-session) in pam config of proftpd-basic
    (Closes: #804322).
  * Apply patch to not request the whole passwd DB at each login. Thanks
    to Arthur de Jong <adejong@debian.org>. (Closes: #717235).
    <quote src=AdJ>
    I still question the usefulness of setpwent()/getpwent() in the first
    place as there is no guarantee that any resources opened for setpwent()
    are used for other getpw{nam,uid}() calls.
    </quote>
  * OpenSSL 1.1 transition: we'll have OpenSSL 1.0 in Stretch (see [1]).
    Change BD from libssl-dev to libssl1.0-dev. This lowers severity of
    (#828513) to non-rc.
  * lintian "W: invalid-short-name-in-dep5-copyright bsd" (BSD-3-clause).
  * lintian "E: proftpd-basic: init.d-script-needs-depends-on-lsb-base (...)"
  * lintian "E: proftpd-dfsg source: build-depends-on-obsolete-package
    build-depends: libmysqlclient-dev => default-libmysqlclient-dev"
    (Closes: #845898)
  * Same URL for Vcs-Git & Vcs-Browser in control file.
  * Some suggestions by Mattia Rizzolo <mattia@debian.org> for d/rules
    - Update of config.{sub,guess} is done by dh_update_autotools_config
    - build done by dh_auto_build, instead of manual "make all"
    - call dh_auto_clean instead of manual "make distclean"
    - replace some install calls by entries in $package.install files
    - remove "-l option" from dh_shlibdeps call
    - install init script and defaults file using dh_installinit
    - Some files in clean target are removed using debian/clean
    - install files using dh_auto_install, do not strip during installation

  [1] https://lists.debian.org/debian-devel-announce/2016/11/msg00001.html

  [ Francesco Paolo Lovergine ]
  * Team upload.
  * New upstream release. Merged patch for #809068.
    Contains fix for CVE-2016-3125 (Closes: #818492)
  * Patchset updated and uniformed for name.
  * ABI version updated.
  * Debhelper compatibility set to 9.
  * Policy bumped to 3.9.8, no changes required.

 -- Francesco Paolo Lovergine <frankie@debian.org>  Sun, 11 Dec 2016 14:48:30 +0100

proftpd-dfsg (1.3.5a-1) unstable; urgency=medium

  * New upstream release. Patch CVE-2015-3306 merged.
    - Contains fix for upstream bug 4108 (Closes: #787434)
    - Contains fix for mod_ls.c (Closes: #782771)
  * Patches refreshed.

 -- Francesco Paolo Lovergine <frankie@debian.org>  Wed, 27 Jan 2016 12:18:06 +0100

proftpd-dfsg (1.3.5-2) unstable; urgency=high

  * proftpd-dev: Depend on libtool-bin: merged NMU, thanks Doko.
    (closes: #761795) 
  * Add CVE-2015-3306 patch.
    Unauthenticated copying of files via SITE CPFR/CPTO allowed by mod_copy.
    (closes: #782781)

 -- Francesco Paolo Lovergine <frankie@debian.org>  Thu, 23 Apr 2015 14:11:19 +0200

proftpd-dfsg (1.3.5-1) unstable; urgency=medium

  * New upstream release. Patch 4044 merged.

 -- Francesco Paolo Lovergine <frankie@debian.org>  Fri, 13 Jun 2014 11:55:22 +0200

proftpd-dfsg (1.3.5~rc4-3) unstable; urgency=medium

  * Fixed postinst for invalid usermod call.
  * New patch added to fix upstream bug #4044. This fix now allows using a
    proper reload instead of a restart in the init script.
    (closes: #594449, #675081)
  * The previous change for the start-stop-daemon appears invalid, so changed
    a bit timings to possibly allow proper stops under heavy loads.

 -- Francesco Paolo Lovergine <frankie@debian.org>  Tue, 29 Apr 2014 08:25:22 +0200

proftpd-dfsg (1.3.5~rc4-2) unstable; urgency=medium

  * Now using /run instead of /var/run for state directory.
    (closes: #699798)
  * Revised debconf config to explicitly set default.
    (closes: #707689)
  * Revised (again) --retry flag for start-stop-daemon in order to fix long
    delays in stopping the daemon.
    (closes: #675081, #721201)

 -- Francesco Paolo Lovergine <frankie@debian.org>  Thu, 06 Feb 2014 16:41:26 +0100

proftpd-dfsg (1.3.5~rc4-1) unstable; urgency=low

  * New upstream pre-release, with fix for CVE-2013-4359 aka proftpd#3973.
    (closes: #723179)
  * Included fix by Andreas Beckmann:
    - Cleanup Breaks+Replaces.
    - Add proftpd-mod-geoip.preinst script to delete the old buggy postrm script
      on upgrades from wheezy. Otherwise the buggy postrm script would delete
      some files from the newly unpacked package. 
    (closes: #699647)
  * Refreshed patchset.

 -- Francesco Paolo Lovergine <frankie@debian.org>  Thu, 30 Jan 2014 13:20:53 +0100

# For older changelog entries, run 'apt-get changelog proftpd-doc'
