| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: proftpd | Distribution: Fedora Project |
| Version: 1.3.8d | Vendor: Fedora Project |
| Release: 5.el9 | Build date: Tue Nov 10 14:18:01 2026 |
| Group: Unspecified | Build host: buildvm-ppc64le-28.rdu3.fedoraproject.org |
| Size: 11870801 | Source RPM: proftpd-1.3.8d-5.el9.src.rpm |
| Packager: Fedora Project | |
| Url: http://www.proftpd.org/ | |
| Summary: Flexible, stable and highly-configurable FTP server | |
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based directory visibility. This package defaults to the standalone behavior of ProFTPD, but all the needed scripts to have it run by systemd instead are included.
GPL-2.0-or-later
* Thu Oct 29 2026 Paul Howarth <paul@city-fan.org> - 1.3.8d-5
- Fix file descriptor leak in mod_sftp when reading OpenSSH-format SFTPHostKey
file (rhbz#2563077, https://github.com/proftpd/proftpd/issues/1959)
- Fix some issues in mod_copy (not enabled by default)
- <Limit READ> configurations were not honored by SITE COPY as they should be
(GH#2095)
- Fix write restriction bypass via symlink following in mod_copy (GH#2374,
CVE-2026-119364)
- Guard against overly-long keys overflowing buffers when the "utf8trans"
builtin RewriteMap type is used (CVE-2026-119146)
- Fix authorization bypass via mod_sftp copy-file extension (CVE-2026-119147)
* Wed Jul 22 2026 Paul Howarth <paul@city-fan.org> - 1.3.8d-4
- Address another avenue for SQL injection, via custom SQLUserInfo queries
(https://github.com/proftpd/proftpd/issues/2052#issuecomment-4489110598)
- Fix SFTP request payload length underflow calculation in mod_sftp
(CVE-2026-53994, https://github.com/proftpd/proftpd/issues/2115)
- Exercise caution when reading the client-provided file size for SCP uploads,
as it could possibly overflow our size type (CVE-2026-63091)
- Authenticated SFTP sessions could overflow the SFTP packet buffer
(CVE-2026-63090, https://github.com/proftpd/proftpd/issues/2190)
- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
/proc/self/root path prefix); this module disallows file accesses via procfs
filesystems
* Mon May 11 2026 Paul Howarth <paul@city-fan.org> - 1.3.8d-3
- Additional escaping for avoidance of SQL injection issues with %{note:...}
and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
(CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)
* Wed Apr 29 2026 Paul Howarth <paul@city-fan.org> - 1.3.8d-2
- Fix potential SQL injection via mod_sql (CVE-2026-42167)
- https://github.com/proftpd/proftpd/issues/2052
* Tue Mar 18 2025 Paul Howarth <paul@city-fan.org> - 1.3.8d-1
- Update to 1.3.8d
- Use of HideNoAccess for SFTP sessions can lead to segfault and/or
unexpected behaviour (GH#1855)
- SFTP channel allocations can lead to high memory utilization over time
(GH#1876)
- Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
* Thu Feb 13 2025 Paul Howarth <paul@city-fan.org> - 1.3.8c-2
- Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
- https://github.com/proftpd/proftpd/issues/1866
* Thu Dec 12 2024 Paul Howarth <paul@city-fan.org> - 1.3.8c-1
- Update to 1.3.8c
- Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
- Bad handling of lack of extended attributes lead to SFTP out of memory
error (GH#1785)
- mod_sftp_sql logged "header value too long" due to unexpected key header
text (GH#1529)
- SSH ECDSA host key algorithms were not used as expected despite configuring
appropriate key (GH#1839)
- RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
(GH#1840)
- Supplemental group inheritance granted unintended access to GID 0 due to
lack of supplemental groups from mod_sql (GH#1830)
* Tue Nov 19 2024 Paul Howarth <paul@city-fan.org> - 1.3.8b-4
- Fix RADIUS Message-Authenticator verification in mod_radius
- https://github.com/proftpd/proftpd/issues/1840
- https://bugzilla.redhat.com/show_bug.cgi?id=2325448
/etc/blacklist.dat /etc/dhparams.pem /etc/ftpusers /etc/logrotate.d /etc/logrotate.d/proftpd /etc/pam.d/proftpd /etc/proftpd /etc/proftpd.conf /etc/proftpd/anonftp.conf /etc/proftpd/conf.d /etc/proftpd/mod_ban.conf /etc/proftpd/mod_qos.conf /etc/proftpd/mod_tls.conf /etc/proftpd/modules.conf /etc/sysconfig/proftpd /run/proftpd /usr/bin/ftpdctl /usr/lib/.build-id /usr/lib/.build-id/03 /usr/lib/.build-id/03/4fba995b2e0835c4754e3dab1e54ee755fb2df /usr/lib/.build-id/04 /usr/lib/.build-id/04/5bab9c6523002c60ef5d0261fd06b171c86881 /usr/lib/.build-id/08 /usr/lib/.build-id/08/36a4df25495a74693403fb4a6d9d35a67bca02 /usr/lib/.build-id/08/5b4c6053b2a2fca7e37a61c1985935c81ba201 /usr/lib/.build-id/0c /usr/lib/.build-id/0c/20203473372295ed31a486e343ff9fbb87a13c /usr/lib/.build-id/15 /usr/lib/.build-id/15/c3f529c214378c6324f1837165d1b1a2c21669 /usr/lib/.build-id/22 /usr/lib/.build-id/22/744694bc005df1190c282e30e9afe148b04af3 /usr/lib/.build-id/24 /usr/lib/.build-id/24/facac65b490f1ec4ef37f259f25e17fc89374e /usr/lib/.build-id/2f /usr/lib/.build-id/2f/19c0026943b5ca1bd82156b1d670c1493e709a /usr/lib/.build-id/37 /usr/lib/.build-id/37/01ca580160f2f268cb657edabddb5c0accc7fc /usr/lib/.build-id/3e /usr/lib/.build-id/3e/4f9150795e9d72de6d74295d4d7288e5bc8557 /usr/lib/.build-id/43 /usr/lib/.build-id/43/49ffff421280d4114d54f551798489a296c03b /usr/lib/.build-id/56 /usr/lib/.build-id/56/fa84eaf12f5358fbfea525c84f4cb33b09b041 /usr/lib/.build-id/5c /usr/lib/.build-id/5c/037622865df2641c330f6a20245dc42a8771cb /usr/lib/.build-id/5e /usr/lib/.build-id/5e/9b03600846485dd758a60d74a1b92da65af37c /usr/lib/.build-id/5f /usr/lib/.build-id/5f/ca8f26d290c10102b7212b34f332de06736a39 /usr/lib/.build-id/6d /usr/lib/.build-id/6d/289d812f50a30dda3d84afaaa874dbb81c59fb /usr/lib/.build-id/77 /usr/lib/.build-id/77/9d3bb003a05a7f8205135e9359b0bc32da1dce /usr/lib/.build-id/77/dc5b9021e537b2780a81d3af5620c96cecb157 /usr/lib/.build-id/7d /usr/lib/.build-id/7d/1e992b98b6ef1733d8adcb7b47689833b4ff6e /usr/lib/.build-id/7f /usr/lib/.build-id/7f/54ea729e3a525204791f682b589294b2ac1d7b /usr/lib/.build-id/89 /usr/lib/.build-id/89/8f9f151a34aecb1eaf4fe85e1e33017aa2c561 /usr/lib/.build-id/97 /usr/lib/.build-id/97/45eec5ec36a147ea098f01fcaa971b0999dbd9 /usr/lib/.build-id/9c /usr/lib/.build-id/9c/158f01b8c93adcd6ec98fcf7dad2f3cc40106e /usr/lib/.build-id/a0 /usr/lib/.build-id/a0/aacbeb0e41c2dec76dd316e189d20640d2b531 /usr/lib/.build-id/a4 /usr/lib/.build-id/a4/e2716f05b9e23c057d57d63be2659c13ca34c7 /usr/lib/.build-id/a6 /usr/lib/.build-id/a6/2f5271dd2b48485e118ad3c2536ee2ca1a638d /usr/lib/.build-id/af /usr/lib/.build-id/af/d77ea8ead89c4ab058b3448cc5945aa918d6ef /usr/lib/.build-id/b9 /usr/lib/.build-id/b9/9a25a8d1e94fa078e7c3869510da55f6a27618 /usr/lib/.build-id/bf /usr/lib/.build-id/bf/3ad0cc279fe17519e0f8f9f14625413b26ab3f /usr/lib/.build-id/db /usr/lib/.build-id/db/1476d943822a36610ad1beeb34d205b978c441 /usr/lib/.build-id/e9 /usr/lib/.build-id/e9/8d7bad6feff9fa0627c7902f7cac92f838ecb2 /usr/lib/.build-id/ee /usr/lib/.build-id/ee/47668ebbb266eb82f1d8ec256282545fcd98f7 /usr/lib/.build-id/f6 /usr/lib/.build-id/f6/cbe4d082f5170c48b9af74115397369aec3d63 /usr/lib/.build-id/f8 /usr/lib/.build-id/f8/f711fe26060bd66b1747a748b8cdae3d91a457 /usr/lib/.build-id/ff /usr/lib/.build-id/ff/01cd722eef687fc185bdf1e8701d4341d6a06d /usr/lib/systemd/system/proftpd.service /usr/lib/systemd/system/proftpd.socket /usr/lib/systemd/system/proftpd@.service /usr/lib/tmpfiles.d/proftpd.conf /usr/libexec/proftpd /usr/libexec/proftpd/mod_ban.so /usr/libexec/proftpd/mod_copy.so /usr/libexec/proftpd/mod_ctrls_admin.so /usr/libexec/proftpd/mod_deflate.so /usr/libexec/proftpd/mod_exec.so /usr/libexec/proftpd/mod_facl.so /usr/libexec/proftpd/mod_ifsession.so /usr/libexec/proftpd/mod_ifversion.so /usr/libexec/proftpd/mod_load.so /usr/libexec/proftpd/mod_procfs.so /usr/libexec/proftpd/mod_qos.so /usr/libexec/proftpd/mod_quotatab.so /usr/libexec/proftpd/mod_quotatab_file.so /usr/libexec/proftpd/mod_quotatab_radius.so /usr/libexec/proftpd/mod_quotatab_sql.so /usr/libexec/proftpd/mod_radius.so /usr/libexec/proftpd/mod_ratio.so /usr/libexec/proftpd/mod_rewrite.so /usr/libexec/proftpd/mod_sftp.so /usr/libexec/proftpd/mod_sftp_pam.so /usr/libexec/proftpd/mod_sftp_sql.so /usr/libexec/proftpd/mod_shaper.so /usr/libexec/proftpd/mod_site_misc.so /usr/libexec/proftpd/mod_sql.so /usr/libexec/proftpd/mod_sql_passwd.so /usr/libexec/proftpd/mod_tls_memcache.so /usr/libexec/proftpd/mod_tls_shmcache.so /usr/libexec/proftpd/mod_unique_id.so /usr/libexec/proftpd/mod_vroot.so /usr/libexec/proftpd/mod_wrap2.so /usr/libexec/proftpd/mod_wrap2_file.so /usr/libexec/proftpd/mod_wrap2_sql.so /usr/sbin/ftpscrub /usr/sbin/ftpshut /usr/sbin/in.proftpd /usr/sbin/proftpd /usr/share/doc/proftpd /usr/share/doc/proftpd/CREDITS /usr/share/doc/proftpd/ChangeLog /usr/share/doc/proftpd/NEWS /usr/share/doc/proftpd/README.contrib /usr/share/doc/proftpd/README.md /usr/share/doc/proftpd/README.modules /usr/share/doc/proftpd/README.ratio /usr/share/doc/proftpd/contrib /usr/share/doc/proftpd/contrib/ftpasswd.html /usr/share/doc/proftpd/contrib/ftpmail.html /usr/share/doc/proftpd/contrib/ftpquota.html /usr/share/doc/proftpd/contrib/index.html /usr/share/doc/proftpd/contrib/mod_auth_otp.html /usr/share/doc/proftpd/contrib/mod_ban.html /usr/share/doc/proftpd/contrib/mod_copy.html /usr/share/doc/proftpd/contrib/mod_ctrls_admin.html /usr/share/doc/proftpd/contrib/mod_deflate.html /usr/share/doc/proftpd/contrib/mod_digest.html /usr/share/doc/proftpd/contrib/mod_dnsbl.html /usr/share/doc/proftpd/contrib/mod_dynmasq.html /usr/share/doc/proftpd/contrib/mod_exec.html /usr/share/doc/proftpd/contrib/mod_geoip.html /usr/share/doc/proftpd/contrib/mod_ifsession.html /usr/share/doc/proftpd/contrib/mod_ifversion.html /usr/share/doc/proftpd/contrib/mod_ldap.html /usr/share/doc/proftpd/contrib/mod_load.html /usr/share/doc/proftpd/contrib/mod_log_forensic.html /usr/share/doc/proftpd/contrib/mod_qos.html /usr/share/doc/proftpd/contrib/mod_quotatab.html /usr/share/doc/proftpd/contrib/mod_quotatab_file.html /usr/share/doc/proftpd/contrib/mod_quotatab_ldap.html /usr/share/doc/proftpd/contrib/mod_quotatab_radius.html /usr/share/doc/proftpd/contrib/mod_quotatab_sql.html /usr/share/doc/proftpd/contrib/mod_radius.html /usr/share/doc/proftpd/contrib/mod_ratio.html /usr/share/doc/proftpd/contrib/mod_readme.html /usr/share/doc/proftpd/contrib/mod_rewrite.html /usr/share/doc/proftpd/contrib/mod_sftp.html /usr/share/doc/proftpd/contrib/mod_sftp_pam.html /usr/share/doc/proftpd/contrib/mod_sftp_sql.html /usr/share/doc/proftpd/contrib/mod_shaper.html /usr/share/doc/proftpd/contrib/mod_site_misc.html /usr/share/doc/proftpd/contrib/mod_snmp.html /usr/share/doc/proftpd/contrib/mod_sql.html /usr/share/doc/proftpd/contrib/mod_sql_odbc.html /usr/share/doc/proftpd/contrib/mod_sql_passwd.html /usr/share/doc/proftpd/contrib/mod_sql_sqlite.html /usr/share/doc/proftpd/contrib/mod_statcache.html /usr/share/doc/proftpd/contrib/mod_tls.html /usr/share/doc/proftpd/contrib/mod_tls_fscache.html /usr/share/doc/proftpd/contrib/mod_tls_memcache.html /usr/share/doc/proftpd/contrib/mod_tls_redis.html /usr/share/doc/proftpd/contrib/mod_tls_shmcache.html /usr/share/doc/proftpd/contrib/mod_unique_id.html /usr/share/doc/proftpd/contrib/mod_wrap.html /usr/share/doc/proftpd/contrib/mod_wrap2.html /usr/share/doc/proftpd/contrib/mod_wrap2_file.html /usr/share/doc/proftpd/contrib/mod_wrap2_redis.html /usr/share/doc/proftpd/contrib/mod_wrap2_sql.html /usr/share/doc/proftpd/directives /usr/share/doc/proftpd/directives/index.html /usr/share/doc/proftpd/faq.html /usr/share/doc/proftpd/howto /usr/share/doc/proftpd/howto/ASCII.html /usr/share/doc/proftpd/howto/AWS.html /usr/share/doc/proftpd/howto/AuthFiles.html /usr/share/doc/proftpd/howto/Authentication.html /usr/share/doc/proftpd/howto/BCP.html /usr/share/doc/proftpd/howto/Chroot.html /usr/share/doc/proftpd/howto/Classes.html /usr/share/doc/proftpd/howto/Compiling.html /usr/share/doc/proftpd/howto/ConfigFile.html /usr/share/doc/proftpd/howto/ConfigurationTricks.html /usr/share/doc/proftpd/howto/ConnectionACLs.html /usr/share/doc/proftpd/howto/Controls.html /usr/share/doc/proftpd/howto/CreateHome.html /usr/share/doc/proftpd/howto/DNS.html /usr/share/doc/proftpd/howto/DSO.html /usr/share/doc/proftpd/howto/Debugging.html /usr/share/doc/proftpd/howto/Directory.html /usr/share/doc/proftpd/howto/DisplayFiles.html /usr/share/doc/proftpd/howto/ECCN.html /usr/share/doc/proftpd/howto/FTP.html /usr/share/doc/proftpd/howto/FXP.html /usr/share/doc/proftpd/howto/Filters.html /usr/share/doc/proftpd/howto/Globbing.html /usr/share/doc/proftpd/howto/IPv6.html /usr/share/doc/proftpd/howto/KeepAlives.html /usr/share/doc/proftpd/howto/Limit.html /usr/share/doc/proftpd/howto/ListOptions.html /usr/share/doc/proftpd/howto/LogLevels.html /usr/share/doc/proftpd/howto/LogMessages.html /usr/share/doc/proftpd/howto/Logging.html /usr/share/doc/proftpd/howto/Memcache.html /usr/share/doc/proftpd/howto/NAT.html /usr/share/doc/proftpd/howto/Nonroot.html /usr/share/doc/proftpd/howto/Quotas.html /usr/share/doc/proftpd/howto/Radius.html /usr/share/doc/proftpd/howto/Redis.html /usr/share/doc/proftpd/howto/Regex.html /usr/share/doc/proftpd/howto/Rewrite.html /usr/share/doc/proftpd/howto/SQL.html /usr/share/doc/proftpd/howto/SSH.html /usr/share/doc/proftpd/howto/Scoreboard.html /usr/share/doc/proftpd/howto/Sendfile.html /usr/share/doc/proftpd/howto/ServerType.html /usr/share/doc/proftpd/howto/Stopping.html /usr/share/doc/proftpd/howto/TLS.html /usr/share/doc/proftpd/howto/Testing.html /usr/share/doc/proftpd/howto/Timestamps.html /usr/share/doc/proftpd/howto/Tracing.html /usr/share/doc/proftpd/howto/Translations.html /usr/share/doc/proftpd/howto/Umask.html /usr/share/doc/proftpd/howto/Upgrade.html /usr/share/doc/proftpd/howto/Versioning.html /usr/share/doc/proftpd/howto/Vhost.html /usr/share/doc/proftpd/howto/VirtualUsers.html /usr/share/doc/proftpd/howto/ftpaccess.html /usr/share/doc/proftpd/howto/index.html /usr/share/doc/proftpd/license.txt /usr/share/doc/proftpd/mod_sample.c /usr/share/doc/proftpd/modules /usr/share/doc/proftpd/modules/index.html /usr/share/doc/proftpd/modules/mod_auth.html /usr/share/doc/proftpd/modules/mod_auth_file.html /usr/share/doc/proftpd/modules/mod_auth_pam.html /usr/share/doc/proftpd/modules/mod_auth_unix.html /usr/share/doc/proftpd/modules/mod_cap.html /usr/share/doc/proftpd/modules/mod_core.html /usr/share/doc/proftpd/modules/mod_ctrls.html /usr/share/doc/proftpd/modules/mod_delay.html /usr/share/doc/proftpd/modules/mod_dso.html /usr/share/doc/proftpd/modules/mod_facl.html /usr/share/doc/proftpd/modules/mod_facts.html /usr/share/doc/proftpd/modules/mod_ident.html /usr/share/doc/proftpd/modules/mod_lang.html /usr/share/doc/proftpd/modules/mod_log.html /usr/share/doc/proftpd/modules/mod_ls.html /usr/share/doc/proftpd/modules/mod_memcache.html /usr/share/doc/proftpd/modules/mod_redis.html /usr/share/doc/proftpd/modules/mod_rlimit.html /usr/share/doc/proftpd/modules/mod_site.html /usr/share/doc/proftpd/modules/mod_xfer.html /usr/share/doc/proftpd/rfc /usr/share/doc/proftpd/rfc/draft-bonachea-sftp-00.txt /usr/share/doc/proftpd/rfc/draft-ietf-ftpext-mlst-15.txt /usr/share/doc/proftpd/rfc/draft-ietf-ftpext-sec-consider-02.txt /usr/share/doc/proftpd/rfc/draft-somers-ftp-mfxx-03.txt /usr/share/doc/proftpd/rfc/rfc0959.txt /usr/share/doc/proftpd/rfc/rfc2228.txt /usr/share/doc/proftpd/rfc/rfc2389.txt /usr/share/doc/proftpd/rfc/rfc2428.txt /usr/share/doc/proftpd/rfc/rfc2640.txt /usr/share/doc/proftpd/rfc/rfc3659.txt /usr/share/doc/proftpd/rfc/rfc4217.txt /usr/share/doc/proftpd/rfc/rfc7151.txt /usr/share/doc/proftpd/sample-configurations /usr/share/doc/proftpd/sample-configurations/PFTEST.conf.in /usr/share/doc/proftpd/sample-configurations/PFTEST.group /usr/share/doc/proftpd/sample-configurations/PFTEST.install /usr/share/doc/proftpd/sample-configurations/PFTEST.passwd /usr/share/doc/proftpd/sample-configurations/PFTEST.shadow /usr/share/doc/proftpd/sample-configurations/anonymous.conf /usr/share/doc/proftpd/sample-configurations/basic.conf /usr/share/doc/proftpd/sample-configurations/complex-virtual.conf /usr/share/doc/proftpd/sample-configurations/mod_sql.conf /usr/share/doc/proftpd/sample-configurations/virtual.conf /usr/share/doc/proftpd/utils /usr/share/doc/proftpd/utils/ftpasswd.html /usr/share/doc/proftpd/utils/ftpcount.html /usr/share/doc/proftpd/utils/ftpdctl.html /usr/share/doc/proftpd/utils/ftpmail.html /usr/share/doc/proftpd/utils/ftpquota.html /usr/share/doc/proftpd/utils/ftpscrub.html /usr/share/doc/proftpd/utils/ftpshut.html /usr/share/doc/proftpd/utils/ftptop.html /usr/share/doc/proftpd/utils/ftpwho.html /usr/share/doc/proftpd/utils/index.html /usr/share/doc/proftpd/utils/prxs.html /usr/share/licenses/proftpd /usr/share/licenses/proftpd/COPYING /usr/share/locale/bg_BG/LC_MESSAGES/proftpd.mo /usr/share/locale/en_US/LC_MESSAGES/proftpd.mo /usr/share/locale/es_ES/LC_MESSAGES/proftpd.mo /usr/share/locale/fr_FR/LC_MESSAGES/proftpd.mo /usr/share/locale/it_IT/LC_MESSAGES/proftpd.mo /usr/share/locale/ja_JP/LC_MESSAGES/proftpd.mo /usr/share/locale/ko_KR/LC_MESSAGES/proftpd.mo /usr/share/locale/ru_RU/LC_MESSAGES/proftpd.mo /usr/share/locale/zh_CN/LC_MESSAGES/proftpd.mo /usr/share/locale/zh_TW/LC_MESSAGES/proftpd.mo /usr/share/man/man5/proftpd.conf.5.gz /usr/share/man/man5/xferlog.5.gz /usr/share/man/man8/ftpdctl.8.gz /usr/share/man/man8/ftpscrub.8.gz /usr/share/man/man8/ftpshut.8.gz /usr/share/man/man8/proftpd.8.gz /var/ftp /var/ftp/pub /var/ftp/uploads /var/ftp/welcome.msg /var/log/proftpd
Generated by rpm2html 1.8.1
Fabrice Bellet, Sat Nov 14 10:23:16 2026