-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 25 Jun 2026 22:40:00 +0800 Source: vsftpd Built-For-Profiles: noudeb Architecture: source Version: 3.0.5-1 Distribution: unstable Urgency: medium Maintainer: Keng-Yu Lin <kengyu@debian.org> Changed-By: Keng-Yu Lin <kengyu@debian.org> Closes: 644920 825271 827550 838678 844297 885402 929958 950577 950584 952421 958469 961712 968888 973766 1012476 Changes: vsftpd (3.0.5-1) unstable; urgency=medium . * Add debian/patches/0079-debian-bugfixes.patch to address multiple bugs: - Return 502 Command not implemented instead of 550 for disabled PASV/PORT commands (Closes: #1012476). - Document the Debian-specific utf8_filesystem option in the man page (Closes: #950577). - Trim leading and trailing whitespace/tabs in vsftpd.conf parsing to prevent startup failures due to extra spaces (Closes: #950584). - Dynamically fall back to IPv4 listening if IPv6 is disabled in the kernel, avoiding package installation and daemon startup failures (Closes: #961712). * Add debian/patches/0080-pam-exec-hang.patch to prevent hanging in the SIGCHLD handler when using PAM modules that spawn subprocesses, e.g. pam_exec (Closes: #952421, #827550). * Add debian/patches/0081-pasv-address-ipv6.patch to fix pasv_address being ignored when listen_ipv6 is enabled and clients connect via IPv4 (Closes: #968888). * Add debian/patches/0082-debian-bugfixes-tls-utf8.patch to fix: - Cap TLS 1.3 session ticket lifetime at 7 days (604800s) instead of INT_MAX to comply with RFC 8446, preventing connection drops on both control and data channels (Closes: #929958, #958469). - Allow UTF-8 characters (high bytes >= 128) in logs and fix 177 typo in printability check (Closes: #644920). - Fix assignment typo in vsf_sysutil_realpath causing double slashes when resolving paths under the root directory (Closes: #825271). - Remove obsolete absolute paths to pam_userdb.so in virtual users examples (Closes: #885402). * Move adduser from Recommends to Depends to satisfy postinst script. * Officially close historically resolved/satisfied bugs that were left open in the Debian Bug Tracking System (Closes: #838678, #844297, #973766). Checksums-Sha1: e89a4181f761a4c2ab46650e236eebec5b2a2fa4 1979 vsftpd_3.0.5-1.dsc 6032bde540e8463743db9c38fba3a9cc2a584509 40932 vsftpd_3.0.5-1.debian.tar.xz 41a2d3204773be4132348141d58f877b958cc5a5 7662 vsftpd_3.0.5-1_source.buildinfo Checksums-Sha256: b7d0b80446298de719b9c75480454ea4d0fe80f487684c7df8d1f0c71d2a055e 1979 vsftpd_3.0.5-1.dsc 4f24fdf374d2ff2bb0a749ef3a6db110ca3a30577c053a7ffaa902d882b2c843 40932 vsftpd_3.0.5-1.debian.tar.xz f1b81ef09409584caa63d48ecd019889e34d6cb26f28ac1725ecad328a655d35 7662 vsftpd_3.0.5-1_source.buildinfo Files: 1535e6c2a8445e6a8306b294975b42a7 1979 net - vsftpd_3.0.5-1.dsc f23c7fde59435c896033cc7d9fa24b3f 40932 net - vsftpd_3.0.5-1.debian.tar.xz ccc1766c8c9970127a3c28aad71a0eb8 7662 net - vsftpd_3.0.5-1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJGBAEBCgAwFiEEdwtc2/tLhothQ0hFxheGnxR4UE4FAmo9RpoSHGtlbmd5dUBk ZWJpYW4ub3JnAAoJEMYXhp8UeFBOBZoQAJgA0vT6Cy/3UEQftfU3aMmIl5xAoNxj nbB64UaCtToVZiu1LMD36RpzRAf82aaO1MyGXkg4YkaR1DQWkvmmLEKn9vN2BgqQ Z+TPEOKYSfum5BbfTpWI0OKEAzt6TgtcV12q6SdSZbDT7qlUQDKxZicojKXePCCN gdH7PetlN4+w6c4czyYl+Vg5aSPv7qqrvroK6FONz5Q90B6kj+1wdvL3jjkhTYgr 1uIlmR9hLVsI/ab6OmHbtn7VjlO1XKE2NMrGr+NcCPFmSjVU1dUmcY+0pdojB8y7 u+vm0CT4KXI46RGUSTkrVKvibo/jdtrRG9WYKLN6sTMa69k310LUvZwuVaMT8kuJ k9VvVWrHL83f9vjAPkXck722caYQ2QTzkcMQVFWts4WTFTktAHyPaLA+w3OXKiys thpp5H7uBWLQukg7x4TivFt3nDB2RifqJFjQUcNpfKFkvsmafhZbkE48Zh1sJDSX wjeib4h5sMii899gmTFkPDzyPQdxULey2q1URR3sNY/8uYLb2LHEy0WFR5unoTpz ezkUbdgiFkeZOemZBoIgf7OBjWgpXsxZtsYS4JhP1S7Y0ZJdVfk/HyMqot98ht8Y rO45bkeFIh4+VB4FQobA9HaZiMrcK+P9yLVQZi+tiJdecH2nLF9+4ZJbMcRRu0qN 9N9M8AKNBI11 =V8J2 -----END PGP SIGNATURE-----
