proftpd-dfsg (1.3.9d~dfsg-1) unstable; urgency=medium

  * New upstream release.
  * Add proftpd-mod-procfs to the Recommends to proftpd-core.
    This should avoid accessability of /proc & /sys .

 -- Hilmar Preuße <hille42@debian.org>  Sun, 16 Aug 2026 22:50:41 +0200

proftpd-dfsg (1.3.9c~dfsg-1) unstable; urgency=medium

  * New upstream version.
    - can be built using "make --shuffle=reverse" (Closes: #1105645).
    - Fixes two security issues:
      * SFTP packet reassembly heap overflow: CVE-2026-63090
      * SCP signed-size integer overflow → heap over-read: CVE-2026-63091
  * Simplify d/patches/autotools a little bit.
  * Remove "Rules-Requires-Root: binary-targets" from the control file
    to make build reproducible (Closes: #1140676).
  * Comment 04_disable_base_netaddr_get_addr_test.diff patch.
  * Enable autopkgtest in Salsa CI.

 -- Hilmar Preuße <hille42@debian.org>  Sat, 11 Jul 2026 00:07:11 +0200

proftpd-dfsg (1.3.9b~dfsg-1) unstable; urgency=medium

  * New upstream release; disable / refresh patches.
    - Can be built using OpenSSL 4.0.0 (Closes: #1138481).

  * B-D: default-libmysqlclient-dev => libmariadb-dev-compat
    (Closes: #1137763).
  * d/watch file:
    - upgrade to version 5.
    - search for upstream package signatures at different location.
  * gitlab-ci.yml: allow failure on debrebuild.

 -- Hilmar Preuße <hille42@debian.org>  Sun, 07 Jun 2026 23:17:56 +0200

proftpd-dfsg (1.3.9a~dfsg-1) unstable; urgency=medium

  * New upstream version, disable patches I cherry picked from upstream.
  * GitLab CI: SALSA_CI_DISABLE_USCAN = 1
  * Add patch for CVE-2026-44331 (Closes: #1135840).

  [ Luca Boccassi <luca.boccassi@gmail.com> ]
  * Install and use sysusers.d config file
  * Stop deleting system users on purge

 -- Hilmar Preuße <hille42@debian.org>  Wed, 06 May 2026 22:48:53 +0200

proftpd-dfsg (1.3.9~dfsg-5) unstable; urgency=high

  * Issue 2052 - SQL injection possible via mod_sql because of
    is_escaped_text() logic error (CVE-2026-42167).
    (Closes: #1135119)

 -- Hilmar Preuße <hille42@debian.org>  Tue, 28 Apr 2026 14:10:15 +0200

proftpd-dfsg (1.3.9~dfsg-4) unstable; urgency=high

  [ Evgeni Golov <evgeni@debian.org> ]
  * Do not remove non-empty /srv/ftp upon purge (Closes: #1119295).

 -- Hilmar Preuße <hille42@debian.org>  Sat, 08 Nov 2025 14:48:03 +0100

proftpd-dfsg (1.3.9~dfsg-3) unstable; urgency=medium

  * Set SHELL & CONFIG_SHELL in d/rules to make build reproducible.
  * Add patch from upstream to fix build failure on HURD.
  * Remove obsolete patches.
  * Remove openssl-provider-fips from B-D, for setting up FIPS this
    is not sufficient.
  * Add libidn-dev to B-D.
  * Bump Standards version, no changes needed.
  * Lintian override: dfsg-version-with-tilde

 -- Hilmar Preuße <hille42@debian.org>  Tue, 09 Sep 2025 00:00:14 +0200

proftpd-dfsg (1.3.9~dfsg-2) unstable; urgency=medium

  * Upload to unstable.

  [ Lucas Kanashiro <kanashiro@debian.org> ]
  * Add a regression test for SFTP connections.

  * Add code to proftp postinst to force mod_ls.c & mod_xfer.c into
    modules.conf in case of upgrades.
  * Load modules mod_delay.c, mod_ls.c & mod_xfer.c in modules.conf,
    else proftp won't start using default/sample configuration.

  * Add "libcrypt-dev" to Build-Depends (Closes: #1107050).
  * Add patch for Issue #1886: Fix the handling of SCP target paths
    that might contain spaces.
  * Ftpstats references wrong file in logrotate config (Closes: #1104536).

 -- Hilmar Preuße <hille42@debian.org>  Fri, 15 Aug 2025 14:20:02 +0200

proftpd-dfsg (1.3.9~dfsg-1) experimental; urgency=medium

  * New upstream version.
    - Refresh / Disable patches.
    - Do not install docs, which do not exist any more.
    - Can be built using gcc-15 (Closes: #1097654).
  * Add openssl-provider-fips to B-D.

 -- Hilmar Preuße <hille42@debian.org>  Sun, 16 Mar 2025 12:19:02 +0100

proftpd-dfsg (1.3.8.c+dfsg-2) unstable; urgency=medium

  * Apply post-release patches (issue #1866)
    CVE-2024-57392.

 -- Hilmar Preuße <hille42@debian.org>  Tue, 04 Mar 2025 22:52:50 +0100

proftpd-dfsg (1.3.8.c+dfsg-1) unstable; urgency=medium

  * New upstream patch release: refresh / disable patches.
  * Bump Standards version, no changes needed.
  * A few lintian things.

 -- Hilmar Preuße <hille42@debian.org>  Fri, 13 Dec 2024 22:41:26 +0100

proftpd-dfsg (1.3.8.b+dfsg-4) unstable; urgency=high

  * Patch for issue Issue #1830 (Closes: #1082326).
    Supplemental Group Inheritance Grants Unintended Access to GID 0
    (CVE-2024-48651)
  * Disable netaddr_get_addr_test test for now; it fails on risc64.

 -- Hilmar Preuße <hille42@debian.org>  Fri, 15 Nov 2024 20:17:36 +0100

proftpd-dfsg (1.3.8.b+dfsg-3) unstable; urgency=medium

  * Patches:
    - Fetch pubkey from certificate before extracting its
      parameters (upstream #1769)
    - configure: Use char ** for the iconv input argument
      (upstream #1754). This fixes execution of upstreams test
      suite.
  * Add mod_delay, mod_ls, mod_xfer to the list of core modules.

  [ Sergio Durigan Junior ]
  * d/t/test-suite: Add workaround to fix LP: #2071468.

  [ Francesco Paolo Lovergine ]
  * Since 1:2.5.2-2 the libattr1 indirect (via libacl1) dependency
    dropped the obsolete attr/xattr.h header which is still #included
    by proftpd -dev headers. This upload will automagically fix this
    issue that causes FTBS. (closes: #1086251)

 -- Hilmar Preuße <hille42@debian.org>  Sun, 03 Nov 2024 00:08:18 +0100

proftpd-dfsg (1.3.8.b+dfsg-2) unstable; urgency=medium

  * Add libnsl-dev to BD (Closes: #1066117).
  * Reorganize/Update d/copyright.
  * Lintian: E: proftpd-dev: depends-on-obsolete-package
  * Add DEP-3 header to patches, remove obsolete patch.

 -- Hilmar Preusse <hille42@web.de>  Wed, 13 Mar 2024 09:48:15 +0100

proftpd-dfsg (1.3.8.b+dfsg-1) unstable; urgency=high

  * New upstream release. Contains bug fix for CVE-2023-48795.
    (Closes: #1059144)

 -- Hilmar Preusse <hille42@web.de>  Wed, 20 Dec 2023 13:31:27 +0000

proftpd-dfsg (1.3.8.a+dfsg-1) unstable; urgency=medium

  * New upstream minor release; disable patches, we got from upstream.
  * Change package version to 1.3.8.a to avoid issues w/ version comparing.
    Document that in d/README.source.
  * "gbp pull" should pull pristine-tar branch too.

 -- Hilmar Preusse <hille42@web.de>  Tue, 14 Nov 2023 19:51:11 +0100

proftpd-dfsg (1.3.8+dfsg-8) unstable; urgency=medium

  * Added a Provides of the obsolete proftpd-basic pkg to preserve back-compatibility
    in naming.
  * Source only upload for migrating to testing.

 -- Francesco Paolo Lovergine <frankie@debian.org>  Sun, 02 Jul 2023 12:56:40 +0200

proftpd-dfsg (1.3.8+dfsg-7) unstable; urgency=medium

  * Partially reverted changes in -6. The new proftpd-run.service has been
    dropped in favour of what seems the simplest approach.
  * Revised NEWS/README files to reflect changes.
  * Removed now obsolete Breaks/Conflicts hints in d/control.in.

 -- Francesco Paolo Lovergine <frankie@debian.org>  Mon, 26 Jun 2023 16:31:13 +0200

proftpd-dfsg (1.3.8+dfsg-6) unstable; urgency=medium

  * Added a postrm to force stop of systemd units at remove time. This is due
    because the new way of installing service/socket now does not trigger stopping
    at remove time.
  * Updated the README.Debian file to reflect changes in service management.

 -- Francesco Paolo Lovergine <frankie@debian.org>  Thu, 22 Jun 2023 08:26:48 +0200

proftpd-dfsg (1.3.8+dfsg-5) unstable; urgency=medium

  [ Hilmar Preusse ]
  * Run just "make check-api" in test suite instead of patching
    test Makefile.

  [ Francesco Paolo Lovergine ]
  * Replaced deprecated which command in postinst/rm.
  * Stripped obsolete proftpd-basic virtual package (Closes: #1038311).
  * Policy bumped to 4.6.2. No changes required.
  * Introduced a new systemd service to start the main socket/service
    on the basis of the proftpd.conf configuration (standalone/inetd).
    (Closes: #1038416)
  * Added an entry to NEWS file to explain the change in unit files.

 -- Francesco Paolo Lovergine <frankie@debian.org>  Wed, 21 Jun 2023 11:41:27 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog proftpd-doc`.
