vsftpd (3.0.5-1)
[PTS] [DDPO]
OK: VCS matches the version in the archive
- Git: https://salsa.debian.org/debian/vsftpd.git
-
- Branch: master
- Path: debian/changelog
- Repo size: 237568
- Browser: https://salsa.debian.org/debian/vsftpd
- Last scan: 2026-08-08 00:08:05+00
- Error: https://salsa.debian.org/api/v4/projects/debian%2Fvsftpd API request failed: 401 Unauthorized at /srv/qa.debian.org/data/vcswatch/vcswatch line 410.
- Next scan: 2026-08-13 05:59:00+00
- Debian changelog in Git:
vsftpd (3.0.5-1) unstable; urgency=medium
* Add debian/patches/0079-debian-bugfixes.patch to address multiple bugs:
- Return 502 Command not implemented instead of 550 for disabled
PASV/PORT commands (Closes: #1012476).
- Document the Debian-specific utf8_filesystem option in the
man page (Closes: #950577).
- Trim leading and trailing whitespace/tabs in vsftpd.conf parsing
to prevent startup failures due to extra spaces (Closes: #950584).
- Dynamically fall back to IPv4 listening if IPv6 is disabled in
the kernel, avoiding package installation and daemon startup
failures (Closes: #961712).
* Add debian/patches/0080-pam-exec-hang.patch to prevent hanging in
the SIGCHLD handler when using PAM modules that spawn subprocesses,
e.g. pam_exec (Closes: #952421, #827550).
* Add debian/patches/0081-pasv-address-ipv6.patch to fix pasv_address
being ignored when listen_ipv6 is enabled and clients connect
via IPv4 (Closes: #968888).
* Add debian/patches/0082-debian-bugfixes-tls-utf8.patch to fix:
- Cap TLS 1.3 session ticket lifetime at 7 days (604800s) instead
of INT_MAX to comply with RFC 8446, preventing connection drops on
both control and data channels (Closes: #929958, #958469).
- Allow UTF-8 characters (high bytes >= 128) in logs and fix 177
typo in printability check (Closes: #644920).
- Fix assignment typo in vsf_sysutil_realpath causing double slashes
when resolving paths under the root directory (Closes: #825271).
- Remove obsolete absolute paths to pam_userdb.so in virtual users
examples (Closes: #885402).
* Move adduser from Recommends to Depends to satisfy postinst script.
* Officially close historically resolved/satisfied bugs that were left
open in the Debian Bug Tracking System (Closes: #838678, #844297, #973766).
-- Keng-Yu Lin <kengyu@debian.org> Thu, 25 Jun 2026 22:40:00 +0800
- This branch is even with tag debian/3.0.5-1