wu-ftpd (2.6.2-18.99woody) unstable; urgency=low * Woody backport. * Updated debian/templates for non-po-debconf usage and dropped versionned dep on debhelper. * Removed the conflict with logrotate (<< 3.6.5-1) and remote the "start" lines from the logrotate conffile. -- Philippe Troin Mon, 4 Apr 2005 16:48:41 -0700 wu-ftpd (2.6.2-19) unstable; urgency=high * [SECURITY] Fix DoS attack in the NLST command (CAN-2005-0256) (closes: #296929) * Fix regexp in addftpuser (closes: #296928) * There were a number of errors/omissions from last version's changelog (I was quite tired by the end of it all!) - Bug number 267177 in the first lot should have been 267166 - Added German po-debconf translation (closed: #280050) - Added Czech po-debconf translation (closed: #274072) - Updated addftpuser to recognise libraries that should be in /lib64 when copying libraries to the anonymous ftp area. (closes: #293239) -- Chris Butler Sat, 26 Feb 2005 10:01:35 +0000 wu-ftpd (2.6.2-18) unstable; urgency=high * Incorporates changes from NMUs (closes: #267177, #231300, #243286, #254870, #234292, #267307, #236986) * Fix DoS in the LIST command (closes: #219165) * Remove '-g' option from ls arguments (closes: #247764) * Compile with LFS support (closes: #156999, #290813) * Compile with -DPARANOID by default (closes: #237328) * Recode Catalan translation from latin1 to utf-8 -- Chris Butler Tue, 22 Feb 2005 21:48:07 +0000 wu-ftpd (2.6.2-17.2) unstable; urgency=high * NMU (0-day NMU as per release managers request) * Add a missing Depends on netbase (closes: #267166) * Update Janapanese po-debconf translation (closes: #231300) * Add Polish po-debconf translation (closes: #243286) * Add Catalan po-debconf translation (closes: #254870) -- Pierre Machard Sat, 21 Aug 2004 22:15:12 +0200 wu-ftpd (2.6.2-17.1) unstable; urgency=high * Non-maintainer upload by the Security Team * Fix bug allowing restricted users to escape from their home dir by denying themselves access to it (CAN-2004-0148) * Apply upstream patch skeychallenge.patch to fix buffer overflow in skey_challenge (CAN-2004-0185) (Closes: #234292) -- Matt Zimmerman Mon, 8 Mar 2004 22:20:59 -0800 wu-ftpd (2.6.2-17) unstable; urgency=low * Updated dutch po-debconf translation (closes: #216940) * Added japanese po-debconf translation (closes: #224176) * Update debconf database with FTP home directory if ftp user already exists (closes: #222997) * Include full path to xferstats in logrotate script (closes: #222949) -- Chris Butler Tue, 21 Oct 2003 23:05:35 +0100 wu-ftpd (2.6.2-16) unstable; urgency=low * Redirect egrep output to /dev/null in init script (closes: #211647) * Remove old alternatives in postinst if necessary (closes: #212597) * Preserve [.max] setting from inetd.conf (closes: #212603) * Add versioned Conflict on logrotate (<< 3.6.5-1), as older versions do not understand the "start" directive (closes: #212624) -- Chris Butler Mon, 29 Sep 2003 17:36:12 +0100 wu-ftpd (2.6.2-15) unstable; urgency=high * [SECURITY] Prefix %s substitutions in ftpconversions with '--' to avoid option processing. In the case of tar, this would allow arbitrary command execution (DSA-377-1) * Install xferstats to /usr/sbin/xferstats since we don't use alternatives any more (closes: #210263) * Added dutch debconf translation (closes: #208256) * Bumped Standards-Version up to 3.6.1 -- Chris Butler Wed, 10 Sep 2003 19:21:34 +0100 wu-ftpd (2.6.2-14) unstable; urgency=low * Fix path in README.config (closes: #205464) * Add code to the ftpglob() function to recognise the special case of "." making "LIST ." work correctly (closes: #101847) * Applied patch from Phillipe Troin to allow disabling the REST command (closes: #138497) -- Chris Butler Thu, 14 Aug 2003 21:27:26 +0100 wu-ftpd (2.6.2-13) unstable; urgency=high * Fix syntax error in init.d script (closes: #203857) -- Chris Butler Sat, 2 Aug 2003 15:26:52 +0100 wu-ftpd (2.6.2-12) unstable; urgency=high * [SECURITY] Fix off-by-one bug in fb_realpath function (see DSA-357-1) * Fix inetd.conf handling in init.d script, add support for xinetd.conf, and add RUN_DAEMON option to /etc/default/wu-ftpd (closes: #203104) -- Chris Butler Fri, 1 Aug 2003 14:59:38 +0100 wu-ftpd (2.6.2-11) unstable; urgency=low * Gettextize debconf templates (closes: #198875) * Reword a couple of the templates to ease translation (closes: #198878) * Added french translation of debconf templates (closes: #200294) * Moved /etc/wu-ftpd/README to /usr/share/doc (fixes lintian warning) * Bumped Standards-Version to 3.6.0 -- Chris Butler Tue, 1 Jul 2003 13:24:18 +0100 wu-ftpd (2.6.2-10) unstable; urgency=medium * Bumped Standards-Version to 3.5.10 * Applied patch from Markus Hochholdinger to fix pwd problems with restricted users (closes: #197910, #197911) -- Chris Butler Wed, 18 Jun 2003 18:57:51 +0100 wu-ftpd (2.6.2-9) unstable; urgency=low * Create ~ftp/dev if it doesn't exist (closes: #196973) -- Chris Butler Wed, 11 Jun 2003 22:44:08 +0100 wu-ftpd (2.6.2-8) unstable; urgency=low * Fix CVS conflict that broke addftpuser script (closes: #196844) -- Chris Butler Tue, 10 Jun 2003 18:15:56 +0100 wu-ftpd (2.6.2-7) unstable; urgency=low * Rewritten postinst - Now uses debconf (closes: #122352) - Checks and updates ALL binaries in /home/ftp/bin (closes: #58193, #131522) -- Chris Butler Sun, 8 Jun 2003 18:54:30 +0100 wu-ftpd (2.6.2-6) unstable; urgency=medium * Fixed addftpuser to not pass empty argument to addftpuser * Fixed logrotate config (closes: #191699) -- Chris Butler Sun, 4 May 2003 16:04:47 +0100 wu-ftpd (2.6.2-5) unstable; urgency=low * chmod the ~ftp/lib/* files to 0555 instead of 0111 - required to work on PPC (closes: #164185) * Fixed debian/in.ftpconversions (closes: #168733) * Add xferreport stuff to debian/logrotate (closes: #169186) * Pass --no-create-home to adduser if directory already exists (closes: #139336) * wu-ftpd was renamed back in potato, so we can get rid of the wu- ftpd-academ convenience package now * Updated installation/removal scripts to be in-line with policy * add debhelper token to preinst -- Chris Butler Tue, 22 Apr 2003 18:50:20 +0100 wu-ftpd (2.6.2-4) unstable; urgency=low * Create ~ftp/dev/null in postinst if it doesn't exist, and by default in addftpuser (closes: #147397) * unset LANG in init.d file (closes: #177336) * Stop wu-ftpd on removal/purge if running as a daemon (closes: #150639) * Get rid of /etc/wu-ftpd/ftpusers cruft (closes: #83241, #169165, #166868, #169026, #185981, #165094) * Applied connect-dos.patch from ftp.wu-ftpd.org * Upgraded Standards-Version -- Chris Butler Fri, 4 Apr 2003 20:20:25 +0100 wu-ftpd (2.6.2-3.1) unstable; urgency=low * Non-maintainer bugsquash upload * Apply bison syntax error patch (thanks, Matt Kraai!) (Closes: #166601) -- Hwei Sheng Teoh Sun, 24 Nov 2002 08:33:39 -0500 wu-ftpd (2.6.2-3) unstable; urgency=low * Really fixed the lack of wu-ftpd binary this time (closes: #137510) -- Chris Butler Sun, 10 Mar 2002 20:00:10 +0000 wu-ftpd (2.6.2-2) unstable; urgency=low * Brown paper bag upload: Managed to upgrade the upstream source and lose most of the Debian-specific changes. Fixed now (closes: #137331) * Update config.{sub,guess} to the latest versions in autotools-dev, to allow building on ARM (closes: #137343) -- Chris Butler Fri, 8 Mar 2002 13:19:58 +0000 wu-ftpd (2.6.2-1) unstable; urgency=low * New upstream release (closes: #136647) * [SECURITY] Fixes a globbing bug (closes: #121638) * Fix paths in /etc/wu-ftpd/ftpconversions (closes: #124224) * Changed debian/rules to have a seperate configure target * Compile in support for using other passwd files for virtual hosts (closes: #87756) -- Chris Butler Thu, 7 Mar 2002 16:45:11 +0000 wu-ftpd (2.6.1-6) unstable; urgency=high * [SECURITY] Fix buffer overflow error in globbing routines -- Chris Butler Wed, 28 Nov 2001 04:00:01 +0000 wu-ftpd (2.6.1-5) unstable; urgency=medium * Apply patch to privatepw fixing a temp file vulnerability (closes: #82766) -- Chris Butler Sat, 24 Feb 2001 01:41:36 +0000 wu-ftpd (2.6.1-4) unstable; urgency=high * Applied missing_format_strings.patch from ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_2.6.1/ (fixes bug reported today on bugtraq) -- Chris Butler Thu, 18 Jan 2001 23:27:20 +0000 wu-ftpd (2.6.1-3) unstable; urgency=high * Added dh_fixperms to binary-indep target (fixes lintian warning) * Upgrade to debhelper v2 * Mark /etc/pam.d/wu-ftpd as a conffile (closes: #78985) -- Chris Butler Thu, 7 Dec 2000 16:11:17 +0000 wu-ftpd (2.6.1-2) unstable; urgency=high * Exit postinst with an error if addftpuser fails. * Update to latest version of FAQ, and add HTML version (closes: #66973) * Checking arguments for NULL pointers in access.c (closes: #66774) * Make sure we're only operating on files /etc/{wu-ftpd-academ,ftpd} by using find (closes: #66217) * Add information about pam_shells.so to README.Debian (closes: #14004) * Attempt to use "nobody" account if "ftp" account does not exist, and user is not known locally (closes: #76635) -- Chris Butler Wed, 6 Dec 2000 00:39:38 +0000 wu-ftpd (2.6.1-1) unstable; urgency=high * New upstream version (closes: #74659) * Change dependencies on netbase (closes: #68852) * Applied pasv-port-allow-correction.patch from ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_2.6.1/ -- Chris Butler Tue, 21 Nov 2000 23:33:09 +0000 wu-ftpd (2.6.0-5) frozen unstable; urgency=medium * Changes by Chris: + doc/ftpaccess.5: Add sentences to the various logging commands detailing where the information is logged (closes: #59768) + debian/logrotate: add missingok to prevent error message when xferlog doesn't exist (closes: #59604) + debian/README.config: changed "~ftp/usr/bin/" -> "~ftp/bin" + debian/README.Debian: added paragraph about updating binaries in anonymous ftp directories * Changes by Josip: + Fixed handling of wu-ftpd-academ's cron.monthly script, the old "solution" gave errors with run-parts. Now postinst doesn't overwrite user's old conffile, it just adds a suffix ".obsolete" to it, which disables it. Added a short note to README.Debian about it. Added postrm for wu-ftpd-academ, to clean up any conffile mess on purge. Closes: #60307. [RC] -- Josip Rodin Sun, 12 Mar 2000 15:19:13 +0100 wu-ftpd (2.6.0-4) frozen unstable; urgency=low * Enabled the wu-ftpd-academ dummy package, which is very important for users upgrading from slink and previous distributions, otherwise they won't get the fixed wu-ftpd daemon installed, and that's a quite large security flaw, considering the number of CERT advisories, BUGTRAQ buffer overflows and all sorts of exploits floating around the net. * Fixed/updated the init script, the way it outputs messages, to comply with the policy. * Updated the ftpconversions file to support bz2, and lowercased the error description messages. * Added the note from adduser --update-binaries, about libnss_files.so, to README.Debian. -- Josip Rodin Mon, 28 Feb 2000 18:43:57 +0100 wu-ftpd (2.6.0-3) unstable; urgency=low * debian/addftpuser: Automatically check for anonymous ftp usernames in ftpusers and offer to comment them out. (closes: #49551) * Changed src/ftpd.c file to actually *use* the PAM config file /etc/pam.d/wu-ftpd, closes: #49826. * The former patch was made by Chris, and the latter by me. * Standards-Version: 3.1.1. Added Build-Depends: in the control file. -- Josip Rodin Tue, 30 Nov 1999 19:12:20 +0100 wu-ftpd (2.6.0-2) unstable; urgency=low * Fixed the PAM config file, s/pam_pwdb/pam_unix/ and s/ shadow nullok// , as BenC kindly advised on IRC. * Echo 'exit 0' in /etc/cron.monthly/wu-ftpd-academ if the file exits, closes: #49551. * Removed the extra patch for src/ftpcount.c (doh!). * Added a little check to debian/rules, to warn about possibly incorrect path definitions, just as a precaution if anything gets screwed. * Small cleanups in in.pathmsg, in.msg.toomany, rules, preinst, Makefile.in. * Standards-Version: 3.1.0. * Added ftpservers example file in /etc/wu-ftpd/ directory and to the list of conffiles. Only comments in it, of course. -- Josip Rodin Tue, 9 Nov 1999 20:16:45 +0100 wu-ftpd (2.6.0-1) unstable; urgency=low * New upstream version. (BTW previous upload closed bug #45409) * Removed a couple of our patches, now integrated upstream. * Included most of Culus' ideas regarding logrotate, closes: #47846 . Commented out postrotate stuff - SIGHUPing inetd and xferstats, may not be useful on all systems (xferstats doesn't even work on my log). Not Depend:ing on logrotate, though, it's not quite neccessary. * Added README.Debian file, included README.wtmp file in it, plus some other stuff. Thus, removed README.wtmp. Posted README.IP-REVERSAL to the wu-ftpd discussion list and removed from package, not useful. * Minor cleanups in the rules and control files. Some corrections to xferstats.8. * Re-added slave alternative symlink for xferstats stuff in postinst, fixes: #47881 . -- Josip Rodin Mon, 25 Oct 1999 16:41:58 +0200 wu-ftpd (2.6pre5-1) unstable; urgency=low * New upstream version. Biggest changes include autoconfized compilation; all doc/FIXES* files included in one file, CHANGES. The new license is here, too, but not much has changed from original BSD one. * Reworked most of Debian patches to match changed upstream code: + Instead of patching config.h, src/config.h and src/pathnames.h, do all we need in src/pathnames.h.in (with a bugfix in configure.in :) and when invoking configure. + Enabled quota support. + Minor corrections to the addftpuser script. + Defined SHADOW_PASSWORD in src/ftpd.c because logging in would not work otherwise (reason for that not quite known to myself). + Expanded the patch for src/ftpd.c which does s/openlog("ftpd"/openlog("wu-ftpd"/ to all similar/equal cases found. + Not including /usr/sbin/ckconfig in the package, it isn't quite useful to the package users, and there could be namespace pollution. * Updated the FAQ, version from Sep 19. * Added a patch from wuftpd-questions mailing list to fix _PATH_* warnings in ftpcount, and one from wu-ftpd list which is already in CVS. * Fixed clean: rules in debian/rules; added COPYRIGHT and doc/TODO from dh_installdocs line, removed INSTALL from it. * Removed proftpd from the Conflicts: line, ftp-server is enough. * Moved to Policy 3.x, requires newer debhelper. Made neccessary changes to packaging files which used old directories. * The change to FHS directories came in handy, and we can now dump most of the old alternatives system regarding manual pages, because they have nothing to conflict with in /usr/share/man/man?/ directories. The package already Conflicts: with any packages that might include those files. My further examination showed that we don't need alternatives handling for anything else except /usr/sbin/ftpd and its manpage (that one might be eliminated soon, too). On the other hand, we might once dump the Conflicts: with other ftpds, but reinstating the symlinks shouldn't be hard. * Added FHS /usr/doc symlinks creation/deletion to postinst/postrm (for postinst, I just rewrote sh stuff that debhelper would put in, in Perl). * Fixed some spelling/grammar errors in postinst, and removed a faulty exit(0) from the update-binaries query. * debian/README.Debian.changes moved to the end of debian/changelog file. * /usr/share/doc/wu-ftpd/README.config in the package is now a symlink to /etc/wu-ftpd/README, because there is no need for two different files. I edited the file a bit, too, to fix some mistakes and add some useful information. * Ditched worthless debian/notinc-* files. * Removed debian/cron.monthly file which wasn't used anyway. * Added a nifty little debian/watch file. * Made a PAM config file debian/pam, from RPM's wu-ftpd.spec file. Added --enable-pam to configure flags, and a call to dh_installpam in the rules file. It appears to work on my slink system with latest PAM packages installed, I guess someone will file a bug if it doesn't function on potato :) * Changed "compress" to "nocompress" in the logrotate file, because according to RPM spec file author, wu-ftpd can't handle SIGHUP properly. Indented the lines in the file better. -- Josip Rodin Thu, 9 Sep 1999 11:30:59 +0200 wu-ftpd (2.5.0-4) unstable; urgency=medium * src/ftpd.c: Applied mapped.path.overrun.patch from ftp.wu- ftpd.org/pub/wu-ftpd/quickfixes/apply_to_2.5.0, instead of patch from BTS. * src/ftpd.c: Above patch also fixes another buffer overrun problem missed by the other patch. * src/access.c: Applied not.in.class.patch from ftp.wu- ftpd.org/pub/wu-ftpd/quickfixes/apply_to_2.5.0 (actually applied in -3, but I forgot the changelog entry ) * src/ftpd.c: Applied patch from Jason Gunthorpe to avoid accept being called on a FD with no pending connections. (closes: #43518) * Uploading for prospective maintainer Chris Butler. My changes are: + fixed file modes in makefiles/Makefile.lnx , for consistency. + removed unneeded changes from src/ftpcount.c + fixed README.wtmp location in debian/rules (debian/ was missing) + updated vers.c (because all of those important patches) -- Josip Rodin Sat, 28 Aug 1999 14:11:29 +0100 wu-ftpd (2.5.0-3) unstable; urgency=medium * src/ftpd.c: Fix possible buffer overrun in do_elem() (closes: #43465) * debian/postinst: Fixed location of alternative as well. * Uploading for prospective maintainer Chris Butler. My changes (Chris is going to kill me, but they're minor :) are: + debian/rules: re-add README.wtmp to the dh_installexamples line, do compress the >4K changelogs, and manage examples differently. + debian/examples: removed, now in rules. + build.out: removed, cruft. + debian/copyright: add Chris's name and address as the current maintainer. -- Josip Rodin Wed, 25 Aug 1999 20:35:27 +0200 wu-ftpd (2.5.0-2) unstable; urgency=low * New maintainer: Chris Butler (Josip Rodin acting as a sponsor). * Josip's changes: + Added Gregory A Lundberg's text on why wtmp logging is bad, as README.wtmp, in the package. + Changed $(RPM_OPT_FLAGS) (yuck! :) in {src,support}/makefiles/Makefile.lnx to "-g -O2" instead of just "-O3". Adding "-Wall" creates way too much output. + Fixed update-alternatives link to real location of ftpshut (postinst), closes: #43236 . * Chris's changes: + debian/rules: Fixed bashism. + debian/FAQ: Updated to latest version from ftp.cetis.hvu.nl . + debian/addftpuser: Don't install any version of libnss_files.so, since we don't have any way of knowing which one we need. Issue an explanation to the user instead. (closes: #42482) + src/pathnames.h: Change _PATH_FTPHOSTS to use /etc/wu-ftpd instead of /etc/ftpd . + debian/addftpuser: Change to do a cp followed by a rename for binaries. (closes: #42485) + src/ftpd.c: Fix the SPT code to make it pad right to the end. (closes: #42486) -- Josip Rodin Sun, 22 Aug 1999 15:39:10 +0200 wu-ftpd (2.5.0-1) unstable; urgency=low * Applied three patches from ftp://ftp.wu-ftpd.org/pub/wu-ftpd/quickfixes/apply_to_2.5.0/ : + data-limit.patch Fixes an error in the ftpaccess.5 manpage, s/byte-limit/data-limit/ . + deny.not.nameserved.patch After release of 2.5.0, two separate reports of problems with deny !nameserved msgfile were received. Basically, the daemon was treating '!nameserved' as a host name and not fully giving it the special treatment it needs. This problem has been in the daemon since, at least, version 2.4 was not unmasked until 2.5.0 added '!' syntax to hostmatch(). + rfc931.timeout.patch If the remote client is behind a firewall, the RFC931 conversation will time out. When this occurred, the daemon would fail to close the socket in a timely manne. Worse yet, if the control connection would later time out (which it almost always does with a web browser on the remote end), the daemon would hang forever; never timing out and closing down. * Correctly defined all utmp/wtmp/lastlog locations in src/pathnames.h . * Rewrote /etc/inetd.conf parsing routines in postinst script to a much simpler method, thanks to Tommi Virtanen and Ruud de Rooij. * Made substitution of /ftpd/ and /wu-ftpd-academ/ with /wu-ftpd/ automatic in preinst. Fixed some other small errors in preinst, too. * Added loads of (I hope useful) comments into the default ftpaccess file. Edited debian/README.config and decided to include it in the package, as /etc/wu-ftpd/README , to help new users set it up. * Renamed the debian/example.* files to in.*, because after all they do get installed under /etc. Fixed some minor errors in them, and added msg.deny and msg.nodns (and in the conffiles list). * Removed some erroneous code from src/logwtmp.c , to fix wtmp logging, closes: #42302 . -- Josip Rodin Fri, 30 Jul 1999 00:02:28 +0200 wu-ftpd (2.5.0-0.3) unstable; urgency=low * Implemented log rotation through logrotate, with /etc/logrotate.d/wu-ftpd file. Removed old cron.monthly file, and all references to it. Package now suggests logrotate, until the latter gets its priority raised to >= important. * Added optional init.d file (as debian/init), for running in daemon mode (wu-ftpd -S -l), but only if an FTP service isn't enabled already in /etc/inetd.conf. Actual script stolen from proftpd :o) Although wu-ftpd doesn't support reload, and is instead ignoring signal 15, and is terminated by other signals (I tried 1, 3, 10...). * Some fixes in the xferstats man page, debian/rules, postinst, prerm and copyright. * Replaced '/usr/sbin/ftpd' with '/usr/sbin/wu-ftpd' wherever possible. The former is a bit vague. * Minor fixes in upstream config files. Changed the pidfile to be /var/run/wu-ftpd.pid (how did I miss that before?). * It now Conflicts: and Provides: ftp-server, as that will soon be in the Policy (virtual packages list). * Removed 'function' bashism from prerm. * The preinst script now creates the /etc/ftpusers file if it doesn't exist, to prevent the dangling symlink. It'll also automatically substitute of all ftpd and wu-ftpd-academ paths in the copied old files (if some of them do contain those paths). * I'm maintaining this package now... It is, however, still offerred up for adoption, but not yet orphaned. * TODO: rewrite the postinst functions that copy the files from old dirs to the new directory not to do just 'cp' but 'sed' and instantly replace whatever needed. The whole script is slow otherwise. -- Josip Rodin Wed, 21 Jul 1999 16:20:16 +0200 wu-ftpd (2.5.0-0.2) unstable; urgency=low * Moved the routines that copy the old configuration and log files to the new locations from postinst to preinst, and rewrote preinst in sh, so that we don't need to predepend on any kind of perl. * Fixed a heap of bugs in the preinst, like these: - it creates the /etc/wu-ftpd directory, if it doesn't already exist. - it's handling the move from /etc/wu-ftpd-academ to /etc/wu-ftpd . - it moves xferstats log file to the right location, and it creates and sets up permissions for everything. * Don't do anything inetd.conf related in postinst if it isn't an upgrade ($2). Also, don't ask the anonymous FTP user question but simply call `addftpuser --configure`. Fixed some other small bugs. * Added the 'rmftpuser' ability in the addftpuser script (rmftpuser is a link to it, and if $0 ends with rmftpuser, then do the stuff). It will also ask you if you want to leave the ~ftp directory or not. * Fixed some errors in xferstats and addftpuser manpages, and added description of both addftpuser and rmftpuser to the latter. * Examined and applied our xferstats patches to the upstream one, and vice versa, using upstream changelogs and some common sense :) * TODO: postinst's and prerm's inetd.conf functions need a slight rewrite, they're doing too many unneeded things to the file, and usually fail at it. * ------------------------------------------------ * --- THIS PACKAGE IS LOOKING FOR A MAINTAINER --- * ------------------------------------------------ -- Josip Rodin Mon, 12 Jul 1999 01:55:38 +0200 wu-ftpd (2.5.0-0.1) unstable; urgency=medium * Added Conflicts: proftpd (because it is a FTP daemon, and they can't both be on the 21st port). This should change to Conflicts: ftp-server in the future. * Changed the Perl dependency to perl | perl5 . * Some changes to debian/postinst: - added a question to postinst to ask on new installs whether to enable anonymous FTP (by adding the FTP user) or not. It wont do anything on upgrade (i.e. when $2 exists). - checks whether $1 is "configure" everywhere. - fixed some spelling errors and did s/ftp/FTP/. * Added debian/postrm, to remove /var/log/wu-ftpd/ and /etc/wu-ftpd/ on purge. * Added "$1" != "upgrade" check in debian/prerm. * Minor cleanups in debian/rules. Now installs debian/README.config and debian/README.IP-REVERSAL in /usr/doc/wu-ftpd . * ++++++++++++++++++++++++++++++++++++++++++++++++ * +++ THIS PACKAGE IS LOOKING FOR A MAINTAINER +++ * ++++++++++++++++++++++++++++++++++++++++++++++++ -- Josip Rodin Thu, 8 Jul 1999 02:11:47 +0200 wu-ftpd (2.5.0-0) unstable; urgency=medium * Upload for the QA Group, because we need the bugfixes. * New upstream version of wu-ftpd-academ, actually, but I don't know whether Heiko is interested in maintaining this new package. Let's emphasize this, since the package is quite important: ************************************************ *** THIS PACKAGE IS LOOKING FOR A MAINTAINER *** ************************************************ * Based on -academ packaging (with a couple of minor changes). Once this is in the archive, we can discuss if we want to replace -academ package with this one. * Included the FAQ as debian/FAQ, or /usr/doc/wu-ftpd/FAQ.gz * Includes almost all patches from the old -academ package, some are left out, .rejs saved as debian/notinc-* . TODO: check these out. * Still uses the savelog for log rotation. TODO: include proper logrotate configuration. The wu-ftpd.spec file should help. * TODO: the postinst script needs some serious bugfixing, probably a rewrite, because it doesn't work really well. -- Josip Rodin Tue, 1 Jun 1999 10:20:18 +0200 wu-ftpd-academ (2.4.2.18-0.2) unstable; urgency=high * Applied security-patch from Olaf Kirch -- Wichert Akkerman Wed, 10 Feb 1999 00:04:32 +0100 wu-ftpd-academ (2.4.2.18-0.1) unstable; urgency=medium, closes=28814 32465 6974 7604 10488 8374 10332 11448 12004 12492 13742 21504 28637 27795 26660 17297 17584 17401 17508 17622 17742 17753 17799 18240 18256 18257 18687 19668 20355 17844 20419 21392 19433 20029 20518 20810 21391 22846 22920 24800 30167 31679 31676 23224 23557 32193 15970 31334 26642 17110 13557 13016 12236 26289 24565 24507 25018 27400 32382 23113 24977 24317 10146 13178 * NMU (emailed Heiko about it on Jan 27th, but no answer so far) * Upgraded to new upstream code (Which from the README fixes 29 bugs) (Fix #28814, #32465). * Make lintian happy: - declare dependancy on 'perl', since getopts.pl is not part of perl-base. * The default timeout for idle clients is now 2 hours (Fix #6974). * The '%U' in the first banner doesn't cause a ftpd to coredump anymore (Fix #7604, #10488). * copyright file is correct (Fix #8374). * Add rough manpage for xferstats (Fix #10332). * Bug #11448 has been fixed long ago it seems. * Set #12004 to fixed (Can't reproduce it, must have been fixed a long ago). * Fix #12492 (now works fine with MD5 passwds). * Fix #13742, #21504, #28637, #27795, #26660 (ftpwho now works as expected). * Bugs #17297, #17584 have already been fixed. * Bugs #17401, #17508, #17622, #17742, #17753, #17799, #18240, #18256, #18257, #18687, #19668, #20355, #17844, #20419, #21392 are fixed. * Bug #19433 is fixed (lintian is happy). * #20029, #20518, #20810, #21391 don't apply anymore (since we don't ship the fnmatch(3) manpage). * #22846, #22920: Can't reproduce; seems fixed. * #24800 is fixed (see below). * Integrate glibc2.1 patch from Ch. Meder (Bug #30167). * Integrate patch from jgg to improve ftpwho (Bug #31679). * Don't integrate patch from bug report #31676 since the upstream source upgrade made it unnecessary. * Write a manpage for addftpuser.8 (Bug #23224). * Integrate patch to addftpuser from Joey (Bug #23557). * Don't integrate Ch. Chimelis Alpha patchs (Don't seem needed anymore) Fix #32193, #15970. * Patch addftpuser to fix the libc6/libnss.so problem: Fixes: #31334, #26642 #17110. * Checked that #13557 is indeed fixed. #13016, #12236, #26289 was the same problem. * #24565 should be fixed (same description/symptoms than bug #24507). * Don't overwrite ~ftp/etc/{passwd,group} if there already is one (Fix #25018). * Fix postinst so it doesn't disable ftp or add multiples '##ftp...' lines (Bugs #27400, #32382, #23113, #24977). * Patch ftpd.c so that QUIT is reported on lost connections (Bug #24317). * Print complete filename in xferlog (Bug #10146). * Looking at src/ftpd.c, the (data_dest.sin_addr.s_addr != his_addr.sin_addr.s_addr) check that caused bug #13178 is gone (at no code doing a similar thing seem to have been added). * We're now down from 70 outstanding bugs to 6 which certainly looks better ;) -- Vincent Renardias Thu, 4 Feb 1999 22:14:35 +0100 wu-ftpd-academ (2.4.2.16-12.1) frozen unstable; urgency=medium, closes=30931 * Non-maintainer release, aknowledged by maintainer * Fixes broken code which was ignored on i386 but not on other architectures. (closes: Bug#30931) * Made return value of main() an int -- Martin Schulze Wed, 20 Jan 1999 22:17:29 +0100 wu-ftpd-academ (2.4.2.16-12) frozen unstable; urgency=medium * Mention Scott Barker in ftpd.c, he contributed the code to use FQDN for virtual hosts. (#24800) (This bug fix changed no code, the code for FQDN support has been changed long ago.) -- Heiko Schlittermann Tue, 21 Jul 1998 09:42:20 +0200 wu-ftpd-academ (2.4.2.16-11) frozen unstable; urgency=medium * 2.0.34: ld-linux needs to be executable (#22323) * uses it private comment characters in inetd.conf (so netstd shouldn't reenable the base ftpd when updated) (This should be worked out together with the netstd maintainer.) (#24507) -- Heiko Schlittermann Fri, 17 Jul 1998 17:24:06 +0200 wu-ftpd-academ (2.4.2.16-10) frozen unstable; urgency=medium * addftpuser: don't show error messages when attempt to check optional binaries binaries. (closes #22988, #22828) -- Heiko Schlittermann Thu, 18 Jun 1998 11:34:51 +0200 wu-ftpd-academ (2.4.2.16-9) frozen unstable; urgency=medium * changed the postinst script to really copy the /etc/ftpd/* files if there's no /etc/wu-ftpd-academ/ftpaccess. (#22701) * use ``wu-ftpd-academ'' as the syslog tag (#22667) * symlink /etc/ftpusers to /etc/wu-ftpd-academ/ftpusers to have wu-ftpd-academ make use of this file. (#22087) -- Heiko Schlittermann Sat, 23 May 1998 17:23:55 +0200 wu-ftpd-academ (2.4.2.16-8) frozen unstable; urgency=medium * refer to the new config dir in ftpaccess (#21638) -- Heiko Schlittermann Sat, 25 Apr 1998 12:40:37 +0200 wu-ftpd-academ (2.4.2.16-7) frozen unstable; urgency=high * create the proper home directory entry in /etc/passwd -- Heiko Schlittermann Mon, 20 Apr 1998 20:20:06 +0200 wu-ftpd-academ (2.4.2.16-6) frozen unstable; urgency=high * access the new config dir /etc/wu-ftpd-academ when copying pathmsg and other files to ftp's home dir (#21425) -- Heiko Schlittermann Mon, 20 Apr 1998 15:38:16 +0200 wu-ftpd-academ (2.4.2.16-5) frozen unstable; urgency=low * binary now called /usr/sbin/wu-ftpd-academ * addftpuser: dies with ret. code 1 when approbiate (md5 check failed for binaries, etc, ...) * addftpuser: only warn if we can't create the ~ftp/pub directory (may reside on a r/o filesytem). BUT: it's still an error if the bin and lib dirs can't get created -- Heiko Schlittermann Tue, 14 Apr 1998 07:57:44 +0200 wu-ftpd-academ (2.4.2.16-4) frozen unstable; urgency=high * addftpuser --check-binaries/--update-binaries now hopefully takes more care about the libs. (#16186, #18309, #19834, #20295) * use adduser instead of doing the passwd/group modifications itself (#19833, #13558) * changed the call to `ps -f -p' into `ps fp' in ftpcount/ftpwho (#20411) * don't remove tftp service from inetd.conf any longer * put config files to /etc/wu-ftpd-academ rather than /etc/ftpd (makes coexistence with other ftpds easier) * moved location of logfile (xferstats) to /var/log/wu-ftpd-academ * changed name of the pidfile to wu-ftpd-academ.pids. * changed to process table entry from sendmail ;-) to wu-ftpd-academ * added working script xferstats (thanks to Holger Preiss (TU Dresden) (#18731, #14365) * linked manpages for xferstats and addftpuser to undocumented.7 (sorry) * made use of update-alternatives for: /usr/sbin/ftpd : ftpd : /usr/sbin/wu-ftpd-academ /usr/man/man8/ftpd.8.gz /usr/sbin/xferstats -- Heiko Schlittermann Mon, 13 Apr 1998 13:46:37 +0200 wu-ftpd-academ (2.4.2.16-3) unstable; urgency=high * virtual hosting possible again (#17820) * called as wu-ftpd, not wu.ftpd (#17298) * %U doesn't segfaults (libc6 version, probably closes $13573) -- Heiko Schlittermann Tue, 17 Feb 1998 00:51:06 +0100 wu-ftpd-academ (2.4.2.16-2) unstable; urgency=high * enabled shadow support * upload the real original source -- Heiko Schlittermann Thu, 15 Jan 1998 17:11:17 +0100 wu-ftpd-academ (2.4.2.16-1) unstable; urgency=high * enabled shadow support -- Heiko Schlittermann Thu, 15 Jan 1998 16:40:15 +0100 wu-ftpd-academ (2.4.2.16-0) unstable; urgency=medium * new upstream * libc6 * no debian related bugs fixed in this release -- Heiko Schlittermann Thu, 15 Jan 1998 10:02:01 +0100 wu-ftpd-academ (2.4.2.13-0) unstable experimental; urgency=medium * new upstream -- Heiko Schlittermann Fri, 4 Jul 1997 00:36:38 +0200 wu-ftpd-academ (2.4.2.12-0) unstable; urgency=medium * academ release, initial debian packagin -- Heiko Schlittermann Mon, 3 Mar 1997 15:47:25 +0100 wu-ftpd (2.4-27) stable unstable; urgency=medium * patch (security and PORT command) * missing wtmp is logged as LOG_NOTICE, not longer as LOG_ERR, since it's normal, but significant ;-) -- Heiko Schlittermann Wed, 8 Jan 1997 20:06:57 +0100 wu-ftpd (2.4-26) unstable; urgency=low * new packaging format * new maintainer -- Heiko Schlittermann Fri, 18 Oct 1996 23:30:18 +0200 Thu Sep 12 14:22:12 MET DST 1996 Peter Tobias * Version 2.4-25 released * cleaned up addftpuser * changed welcome.msg to show the RFC931 username and the local time * gzipped manual pages Thu Aug 1 00:37:20 MET DST 1996 Peter Tobias * Version 2.4-24 released * addftpuser: added missing exit(0) to &checkbin * enabled RFC931 check * changed %U cookie to show the RFC931 name for anonymous/guest logins (if possible) * minor change to the %T time format Sun Jun 2 15:52:01 MET DST 1996 Peter Tobias * Version 2.4-23 released * made cron script more quiet * update binaries in ~ftp/bin if necessary (Bug#3129) * addftpuser: added two new options --check-binaries and --update-binaries Fri May 17 10:16:57 MET DST 1996 Peter Tobias * Version 2.4-22 released * addftpuser: set OUTPUT_AUTOFLUSH (Bug#3025) * log login failures to LOG_AUTH instead of LOG_DAEMON (Bug#3024) Sun May 5 20:40:20 MET DST 1996 Peter Tobias * Version 2.4-21 released * enabled support for optional shadow passwords (patch from Marek Michalkiewicz ) Tue Mar 19 01:22:15 MET 1996 Peter Tobias * Version 2.4-20 released * added 'tzset()' to make sure that the time conversion works * xferstats: fixed the 'Systems Using Archives' entry (Bug#2461) Thu Feb 22 20:23:52 MET 1996 Peter Tobias * Version 2.4-19 released * ftpaccess: fixed path-filter entry (allow '+' in filenames) * fixed a pointer bug in checknoretrieve() Mon Feb 12 00:40:26 MET 1996 Peter Tobias * Version 2.4-18 released * fixed manual pages (Bug#2190) * fixed the "PASV before login" bug * fixed the "multiple PASV" bug Fri Jan 5 22:39:24 MET 1996 Peter Tobias * Version 2.4-17 released * xferstats: fixed a bug in the datecompare subroutine (Bug#2079) * fixed the "wu-ftpd in CPU loop" bug (Bug#1872) Patch from Stephen R. van den Berg Fri Nov 17 10:26:26 MET 1995 Peter Tobias * Version 2.4-16 released * changed wu-ftpd to use the getwd instead of getcwd (Bug#1869) Tue Nov 14 16:29:02 MET 1995 Peter Tobias * Version 2.4-15 released * don't produce output during cron.monthly (Bug#1787) * addftpuser: copy a welcome.msg file to ~ftp * fixed a problem with the %L magic cookie (it will print the FQDN now) * moved ftpshut from /usr/bin to /usr/sbin Wed Oct 11 10:22:22 MET 1995 Peter Tobias * Version 2.4-14 released * addftpuser: changed group "ftp" to "staff" in ~ftp/etc/group (Bug#1556) * addftpuser: it won't create ~ftp/dev/zero anymore. Old versions of ld.so needed /dev/zero for the ELF libraries Wed Sep 13 01:17:34 MET DST 1995 Peter Tobias * Version 2.4-13 released * debian.postinst: minor changes * debian.prerm: minor changes Tue Aug 22 00:23:38 MET DST 1995 Peter Tobias * Version 2.4-12 released * addftpuser: it will use a simple getopt function instead of newgetopt.pl (Bug#1200) * addftpuser: removed --link option (hardlinks) * addftpuser: copy zip to ~ftp/bin if possible * addftpuser: check binaries in ~ftp/bin and copy a.out and/or ELF libraries * addftpuser: search for libraries using /etc/ld.so.conf * added ".tgz" to /etc/ftpd/ftpconversions * added a patch from Olaf Kirch (SETPROCTITLE: check for '@' in anonymous ftp password) * rewrote the install/remove scripts (they now use update-inetd) * debian.control: added "depends: netbase (>1.14)" * addftpuser: check for an existing ftp user first (Bug#1271) Mon Jul 31 22:21:27 MET DST 1995 Peter Tobias * Version 2.4-11 released * changed the default umask to 022 * addftpuser: use readdir/grep instead of glob() (Bug#1172) Thu Jul 27 20:07:21 MET DST 1995 Peter Tobias * Version 2.4-10 released * added "zip" to /etc/ftpd/ftpconversions * changed the tar options in /etc/ftpd/ftpconversions (include the files symlinks point to) get .tar ==> tar -c -h -f get .tar.Z ==> tar -c -h -Z -f get .tar.gz ==> tar -c -h -z -f * added ".ltar", ".ltar.Z" and ".ltar.gz" to /etc/ftpd/ftpconversions (only record the presence of a symbolic link) get .ltar ==> tar -c -f get .ltar.Z ==> tar -c -Z -f get .ltar.gz ==> tar -c -z -f * addftpuser: it will now change the permissions of existing directories if necessary * added an extended description Wed May 31 22:32:17 MET DST 1995 Peter Tobias * Version 2.4-9 released * changed the path for the SITE EXEC commands to /usr/bin/ftpexec Sun May 14 02:29:48 MET DST 1995 Peter Tobias * Version 2.4-8 released * the xferlog file will be rotated monthly. The script also creates a report for the last month (/var/log/xferreport) (Bug#872) * changed xferstats to set the values for $mydom1 and $mydom2 automatically (default DNS domain) Sun Mar 26 22:46:38 MET DST 1995 Peter Tobias * Version 2.4-7 released * addftpuser: it will now create the directories correctly * addftpuser: create /pub/incoming if the user wants it * addftpuser: use the original name of the libc library and create a symbolic link to libc.so.4 (or newer) * addftpuser: added a few additional checks * addftpuser: added the command line options "--help", "--version", "--link" and "--group groupname" The --group option allows you to specify a different group for the anonymous FTP account * addftpuser: it will copy the libraries and binaries by default. If you want to use hard links instead use the --link option. * enabled pathfilter in /etc/ftpd/ftpaccess for the guest group and the anonymous group and added ~ftp/etc/pathmsg * disabled delete, overwrite, chmod and umask in /etc/ftpd/ftpaccess for the guest group and anonymous group ****************************************************************************** The following things have originally been changed for the Debian distribution: - changed makefiles/Makefile.lnx (added PREFIX) - changed src/config/config.lnx (added USE_ETC_FTPD) - changed src/config/config.lnx (added PATH_UTMP) - changed src/config/config.lnx (added PATH_LASTLOG) @@@@ - changed the manpage for ftpd (how to setup an anonymous ftp account) - changed some of the examples (mostly pathnames and class definitions) - changed xferstats (location of perl and xferlog) - changed GETCWD definition in config.lnx - added support for the linux vfs - added the "noretrieve" option patch from Mitch Dsouza - fixed braindead linux safeguard around write(2) (Stephen R. van den Berg ) INFO: you probably have to use the Berkeley yacc instead of the GNU bison. -- Peter Tobias