pure-ftpd (1.0.36-3.2+deb8u1build0.16.04.1) xenial-security; urgency=medium

  * fake sync from Debian

 -- Paulo Flabiano Smorigo <pfsmorigo@canonical.com>  Mon, 14 Sep 2020 20:09:36 +0000

pure-ftpd (1.0.36-3.2+deb8u1) jessie-security; urgency=high

  * Non-maintainer upload by the LTS Team.
  * Implement basic patch/unpatch logic in debian/rules; prior updates to the
    package included direct modifications to upstream files, thus preventing a
    simple approach of updating the source format to "3.0 (quilt)"
  * CVE-2020-9274: Fix potential out-of-bounds memory read resulting from
    uninitialized pointer.  (Closes: #952666)

 -- Roberto C. Sanchez <roberto@debian.org>  Thu, 27 Feb 2020 17:21:22 -0500

pure-ftpd (1.0.36-3.2) unstable; urgency=medium

  * Non-maintainer upload.
  * Fix "depend on perl instead of perl-modules":
    debian/control: update Depends for pure-ftpd-common.
    (Closes: #779117)

 -- gregor herrmann <gregoa@debian.org>  Wed, 25 Feb 2015 22:20:30 +0100

pure-ftpd (1.0.36-3.1) unstable; urgency=medium

  * Non-maintainer upload.
  * No source changes, but this gets rid of spurious /etc/default/pure-ftpd
    conffile (closes: #688206).

 -- Julien Cristau <jcristau@debian.org>  Fri, 14 Nov 2014 16:00:31 +0100

pure-ftpd (1.0.36-3) unstable; urgency=medium

  * Add TLSCipherSuite configuration file which only leaves TLSv1 ciphers
    enabled and is thus safe from the Poodle attack.
  * Add --show-options commandline option to wrapper script.

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Sun, 19 Oct 2014 14:36:29 +0200

pure-ftpd (1.0.36-2) unstable; urgency=medium

  * Add support for TLSCipherSuite to pure-ftpd-wrapper script 
    (Closes: #701070, thanks to Pim van den Berg <pim@md.nl>).

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Tue, 01 Jul 2014 08:57:07 +0200

pure-ftpd (1.0.36-1.1) unstable; urgency=low

  * Non-maintainer upload.
  * Fix "modifies conffiles (policy 10.7.3): /etc/default/pure-ftpd-common":
    - don't ship /etc/default/pure-ftpd-common
    - create it in .postinst if it doesn't exist
    - remove it in .postrm/purge
    - restructure .postinst a bit
    (Closes: #688206)

 -- gregor herrmann <gregoa@debian.org>  Mon, 08 Oct 2012 18:09:21 +0200

pure-ftpd (1.0.36-1) unstable; urgency=low

  * New upstream release, fixes external authentication (Closes: #652938,
    thanks to Jon Daley <debian@jon.limedaley.com> for the report).
  * Add build-arch and build-indep targets to debian/rules.
  
 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Fri, 22 Jun 2012 08:44:54 +0200

pure-ftpd (1.0.35-1) unstable; urgency=low

  * New upstream release, fixes quote miscalculation.
  * Add Debconf translation for Danish (Closes: #633986, thanks to Joe
    Dalton <joedalton2@yahoo.dk>).

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Sun, 04 Dec 2011 07:57:06 +0100

pure-ftpd (1.0.32-1) unstable; urgency=high

  * New upstream release, fixes glob vulnerability (Closes: #624848).
  * Remove custom default stop values.

 -- Stefan Hornburg (Racke) <racke@linuxia.de>  Mon, 02 May 2011 06:52:11 +0200

# For older changelog entries, run 'apt-get changelog pure-ftpd-common'
