| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: proftpd | Distribution: Fedora Project |
| Version: 1.3.8d | Vendor: Fedora Project |
| Release: 5.el9 | Build date: Tue Nov 10 14:16:52 2026 |
| Group: Unspecified | Build host: buildvm-s390x-19.s390.fedoraproject.org |
| Size: 9693513 | Source RPM: proftpd-1.3.8d-5.el9.src.rpm |
| Packager: Fedora Project | |
| Url: http://www.proftpd.org/ | |
| Summary: Flexible, stable and highly-configurable FTP server | |
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based directory visibility. This package defaults to the standalone behavior of ProFTPD, but all the needed scripts to have it run by systemd instead are included.
GPL-2.0-or-later
* Thu Oct 29 2026 Paul Howarth <paul@city-fan.org> - 1.3.8d-5
- Fix file descriptor leak in mod_sftp when reading OpenSSH-format SFTPHostKey
file (rhbz#2563077, https://github.com/proftpd/proftpd/issues/1959)
- Fix some issues in mod_copy (not enabled by default)
- <Limit READ> configurations were not honored by SITE COPY as they should be
(GH#2095)
- Fix write restriction bypass via symlink following in mod_copy (GH#2374,
CVE-2026-119364)
- Guard against overly-long keys overflowing buffers when the "utf8trans"
builtin RewriteMap type is used (CVE-2026-119146)
- Fix authorization bypass via mod_sftp copy-file extension (CVE-2026-119147)
* Wed Jul 22 2026 Paul Howarth <paul@city-fan.org> - 1.3.8d-4
- Address another avenue for SQL injection, via custom SQLUserInfo queries
(https://github.com/proftpd/proftpd/issues/2052#issuecomment-4489110598)
- Fix SFTP request payload length underflow calculation in mod_sftp
(CVE-2026-53994, https://github.com/proftpd/proftpd/issues/2115)
- Exercise caution when reading the client-provided file size for SCP uploads,
as it could possibly overflow our size type (CVE-2026-63091)
- Authenticated SFTP sessions could overflow the SFTP packet buffer
(CVE-2026-63090, https://github.com/proftpd/proftpd/issues/2190)
- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
/proc/self/root path prefix); this module disallows file accesses via procfs
filesystems
* Mon May 11 2026 Paul Howarth <paul@city-fan.org> - 1.3.8d-3
- Additional escaping for avoidance of SQL injection issues with %{note:...}
and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
(CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)
* Wed Apr 29 2026 Paul Howarth <paul@city-fan.org> - 1.3.8d-2
- Fix potential SQL injection via mod_sql (CVE-2026-42167)
- https://github.com/proftpd/proftpd/issues/2052
* Tue Mar 18 2025 Paul Howarth <paul@city-fan.org> - 1.3.8d-1
- Update to 1.3.8d
- Use of HideNoAccess for SFTP sessions can lead to segfault and/or
unexpected behaviour (GH#1855)
- SFTP channel allocations can lead to high memory utilization over time
(GH#1876)
- Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
* Thu Feb 13 2025 Paul Howarth <paul@city-fan.org> - 1.3.8c-2
- Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
- https://github.com/proftpd/proftpd/issues/1866
* Thu Dec 12 2024 Paul Howarth <paul@city-fan.org> - 1.3.8c-1
- Update to 1.3.8c
- Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
- Bad handling of lack of extended attributes lead to SFTP out of memory
error (GH#1785)
- mod_sftp_sql logged "header value too long" due to unexpected key header
text (GH#1529)
- SSH ECDSA host key algorithms were not used as expected despite configuring
appropriate key (GH#1839)
- RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
(GH#1840)
- Supplemental group inheritance granted unintended access to GID 0 due to
lack of supplemental groups from mod_sql (GH#1830)
* Tue Nov 19 2024 Paul Howarth <paul@city-fan.org> - 1.3.8b-4
- Fix RADIUS Message-Authenticator verification in mod_radius
- https://github.com/proftpd/proftpd/issues/1840
- https://bugzilla.redhat.com/show_bug.cgi?id=2325448
/etc/blacklist.dat /etc/dhparams.pem /etc/ftpusers /etc/logrotate.d /etc/logrotate.d/proftpd /etc/pam.d/proftpd /etc/proftpd /etc/proftpd.conf /etc/proftpd/anonftp.conf /etc/proftpd/conf.d /etc/proftpd/mod_ban.conf /etc/proftpd/mod_qos.conf /etc/proftpd/mod_tls.conf /etc/proftpd/modules.conf /etc/sysconfig/proftpd /run/proftpd /usr/bin/ftpdctl /usr/lib/.build-id /usr/lib/.build-id/04 /usr/lib/.build-id/04/d14aa69ab21fd1f5fedacd77641de8219dc1ac /usr/lib/.build-id/06 /usr/lib/.build-id/06/cea5f9dbd5b5ac61010e8106ab04b6560817a4 /usr/lib/.build-id/19 /usr/lib/.build-id/19/28a0c10951e707ecfe3cb5326fab17ba153ff4 /usr/lib/.build-id/23 /usr/lib/.build-id/23/a6c5764dfbe75855c345cea77999d656bab942 /usr/lib/.build-id/25 /usr/lib/.build-id/25/58bc106032cd0b87eb253dfa6d384a256f931f /usr/lib/.build-id/33 /usr/lib/.build-id/33/15ba9467c7f9362c6a4603dc69788efe99121a /usr/lib/.build-id/35 /usr/lib/.build-id/35/5ddba8b949e40ebb69fc70c3ffb9ffd30edcdc /usr/lib/.build-id/3f /usr/lib/.build-id/3f/526bdc565555875d88350bb98e9bc442ec8626 /usr/lib/.build-id/43 /usr/lib/.build-id/43/9921d2ea800911b421983ffa2c974d0eebe6a1 /usr/lib/.build-id/44 /usr/lib/.build-id/44/8d915fb887d08d3496326158c4a351dbcd4878 /usr/lib/.build-id/64 /usr/lib/.build-id/64/a479c44704c0d5453df784b239421aae8582ee /usr/lib/.build-id/65 /usr/lib/.build-id/65/26ca6ec0187b0916bcc9b9c066b8e5e5f50d4e /usr/lib/.build-id/65/df8443814d5ec0d5d744845b19405c81edc6f5 /usr/lib/.build-id/6b /usr/lib/.build-id/6b/da1e5dc68d339ee84c374b647f79ca98407790 /usr/lib/.build-id/70 /usr/lib/.build-id/70/8ee2cebc9374a52e005f87df9db6196f954d1d /usr/lib/.build-id/71 /usr/lib/.build-id/71/10dacd54fb7224865efcbf41339b1e636a4f3a /usr/lib/.build-id/73 /usr/lib/.build-id/73/8edae56ff5654bd20d35aa4fb6f3c6543da9db /usr/lib/.build-id/78 /usr/lib/.build-id/78/a2cea4fd0d1e9f3cacf42789b480d47056f408 /usr/lib/.build-id/8d /usr/lib/.build-id/8d/f263a65baca68c10846a738180fa3acfe568b4 /usr/lib/.build-id/96 /usr/lib/.build-id/96/af93cbcdedcf720cca6cdf4d54aea84f1d744a /usr/lib/.build-id/98 /usr/lib/.build-id/98/1ea92bf579850d17e43c89b82bdaa93d0e1a30 /usr/lib/.build-id/9b /usr/lib/.build-id/9b/2c24696dc21b0c92660183f3fb12b58bba9591 /usr/lib/.build-id/9f /usr/lib/.build-id/9f/696e0dc96316bce3c849e571825f460a52124c /usr/lib/.build-id/a0 /usr/lib/.build-id/a0/fa520be2457109dbec13498e25469de696ef41 /usr/lib/.build-id/a6 /usr/lib/.build-id/a6/a1c75b7555022a04dd36cd7607ded59f741894 /usr/lib/.build-id/ae /usr/lib/.build-id/ae/b137a62b1e5235dfd50c7a8bb2c0932a11f375 /usr/lib/.build-id/bd /usr/lib/.build-id/bd/442fbfea664747231476ecdafc7e65e9a70247 /usr/lib/.build-id/c1 /usr/lib/.build-id/c1/8b49f7fb23bbb9243bad38e2e9a85189c788c8 /usr/lib/.build-id/c1/b15d51e910e99fdd19026ed18188afab1b6b9a /usr/lib/.build-id/cc /usr/lib/.build-id/cc/5018a56c3d39981077c4282dab359d24d28a1f /usr/lib/.build-id/da /usr/lib/.build-id/da/8a2763fa163959cf9e8ed2e41aee032207a636 /usr/lib/.build-id/df /usr/lib/.build-id/df/99ec741c5c85726b7fecb2bbf613d05f9af958 /usr/lib/.build-id/e4 /usr/lib/.build-id/e4/c8764ce78971c2d4755cf8108d5195a18cfa67 /usr/lib/.build-id/ed /usr/lib/.build-id/ed/448b3ccaef011fee6dc47bf35edc6c0b6412ad /usr/lib/.build-id/ee /usr/lib/.build-id/ee/6f938266911343be54ff685593bf2cac4264e2 /usr/lib/.build-id/fb /usr/lib/.build-id/fb/f2ba3eedc2cd0ad9695248f102ed50be55f21b /usr/lib/systemd/system/proftpd.service /usr/lib/systemd/system/proftpd.socket /usr/lib/systemd/system/proftpd@.service /usr/lib/tmpfiles.d/proftpd.conf /usr/libexec/proftpd /usr/libexec/proftpd/mod_ban.so /usr/libexec/proftpd/mod_copy.so /usr/libexec/proftpd/mod_ctrls_admin.so /usr/libexec/proftpd/mod_deflate.so /usr/libexec/proftpd/mod_exec.so /usr/libexec/proftpd/mod_facl.so /usr/libexec/proftpd/mod_ifsession.so /usr/libexec/proftpd/mod_ifversion.so /usr/libexec/proftpd/mod_load.so /usr/libexec/proftpd/mod_procfs.so /usr/libexec/proftpd/mod_qos.so /usr/libexec/proftpd/mod_quotatab.so /usr/libexec/proftpd/mod_quotatab_file.so /usr/libexec/proftpd/mod_quotatab_radius.so /usr/libexec/proftpd/mod_quotatab_sql.so /usr/libexec/proftpd/mod_radius.so /usr/libexec/proftpd/mod_ratio.so /usr/libexec/proftpd/mod_rewrite.so /usr/libexec/proftpd/mod_sftp.so /usr/libexec/proftpd/mod_sftp_pam.so /usr/libexec/proftpd/mod_sftp_sql.so /usr/libexec/proftpd/mod_shaper.so /usr/libexec/proftpd/mod_site_misc.so /usr/libexec/proftpd/mod_sql.so /usr/libexec/proftpd/mod_sql_passwd.so /usr/libexec/proftpd/mod_tls_memcache.so /usr/libexec/proftpd/mod_tls_shmcache.so /usr/libexec/proftpd/mod_unique_id.so /usr/libexec/proftpd/mod_vroot.so /usr/libexec/proftpd/mod_wrap2.so /usr/libexec/proftpd/mod_wrap2_file.so /usr/libexec/proftpd/mod_wrap2_sql.so /usr/sbin/ftpscrub /usr/sbin/ftpshut /usr/sbin/in.proftpd /usr/sbin/proftpd /usr/share/doc/proftpd /usr/share/doc/proftpd/CREDITS /usr/share/doc/proftpd/ChangeLog /usr/share/doc/proftpd/NEWS /usr/share/doc/proftpd/README.contrib /usr/share/doc/proftpd/README.md /usr/share/doc/proftpd/README.modules /usr/share/doc/proftpd/README.ratio /usr/share/doc/proftpd/contrib /usr/share/doc/proftpd/contrib/ftpasswd.html /usr/share/doc/proftpd/contrib/ftpmail.html /usr/share/doc/proftpd/contrib/ftpquota.html /usr/share/doc/proftpd/contrib/index.html /usr/share/doc/proftpd/contrib/mod_auth_otp.html /usr/share/doc/proftpd/contrib/mod_ban.html /usr/share/doc/proftpd/contrib/mod_copy.html /usr/share/doc/proftpd/contrib/mod_ctrls_admin.html /usr/share/doc/proftpd/contrib/mod_deflate.html /usr/share/doc/proftpd/contrib/mod_digest.html /usr/share/doc/proftpd/contrib/mod_dnsbl.html /usr/share/doc/proftpd/contrib/mod_dynmasq.html /usr/share/doc/proftpd/contrib/mod_exec.html /usr/share/doc/proftpd/contrib/mod_geoip.html /usr/share/doc/proftpd/contrib/mod_ifsession.html /usr/share/doc/proftpd/contrib/mod_ifversion.html /usr/share/doc/proftpd/contrib/mod_ldap.html /usr/share/doc/proftpd/contrib/mod_load.html /usr/share/doc/proftpd/contrib/mod_log_forensic.html /usr/share/doc/proftpd/contrib/mod_qos.html /usr/share/doc/proftpd/contrib/mod_quotatab.html /usr/share/doc/proftpd/contrib/mod_quotatab_file.html /usr/share/doc/proftpd/contrib/mod_quotatab_ldap.html /usr/share/doc/proftpd/contrib/mod_quotatab_radius.html /usr/share/doc/proftpd/contrib/mod_quotatab_sql.html /usr/share/doc/proftpd/contrib/mod_radius.html /usr/share/doc/proftpd/contrib/mod_ratio.html /usr/share/doc/proftpd/contrib/mod_readme.html /usr/share/doc/proftpd/contrib/mod_rewrite.html /usr/share/doc/proftpd/contrib/mod_sftp.html /usr/share/doc/proftpd/contrib/mod_sftp_pam.html /usr/share/doc/proftpd/contrib/mod_sftp_sql.html /usr/share/doc/proftpd/contrib/mod_shaper.html /usr/share/doc/proftpd/contrib/mod_site_misc.html /usr/share/doc/proftpd/contrib/mod_snmp.html /usr/share/doc/proftpd/contrib/mod_sql.html /usr/share/doc/proftpd/contrib/mod_sql_odbc.html /usr/share/doc/proftpd/contrib/mod_sql_passwd.html /usr/share/doc/proftpd/contrib/mod_sql_sqlite.html /usr/share/doc/proftpd/contrib/mod_statcache.html /usr/share/doc/proftpd/contrib/mod_tls.html /usr/share/doc/proftpd/contrib/mod_tls_fscache.html /usr/share/doc/proftpd/contrib/mod_tls_memcache.html /usr/share/doc/proftpd/contrib/mod_tls_redis.html /usr/share/doc/proftpd/contrib/mod_tls_shmcache.html /usr/share/doc/proftpd/contrib/mod_unique_id.html /usr/share/doc/proftpd/contrib/mod_wrap.html /usr/share/doc/proftpd/contrib/mod_wrap2.html /usr/share/doc/proftpd/contrib/mod_wrap2_file.html /usr/share/doc/proftpd/contrib/mod_wrap2_redis.html /usr/share/doc/proftpd/contrib/mod_wrap2_sql.html /usr/share/doc/proftpd/directives /usr/share/doc/proftpd/directives/index.html /usr/share/doc/proftpd/faq.html /usr/share/doc/proftpd/howto /usr/share/doc/proftpd/howto/ASCII.html /usr/share/doc/proftpd/howto/AWS.html /usr/share/doc/proftpd/howto/AuthFiles.html /usr/share/doc/proftpd/howto/Authentication.html /usr/share/doc/proftpd/howto/BCP.html /usr/share/doc/proftpd/howto/Chroot.html /usr/share/doc/proftpd/howto/Classes.html /usr/share/doc/proftpd/howto/Compiling.html /usr/share/doc/proftpd/howto/ConfigFile.html /usr/share/doc/proftpd/howto/ConfigurationTricks.html /usr/share/doc/proftpd/howto/ConnectionACLs.html /usr/share/doc/proftpd/howto/Controls.html /usr/share/doc/proftpd/howto/CreateHome.html /usr/share/doc/proftpd/howto/DNS.html /usr/share/doc/proftpd/howto/DSO.html /usr/share/doc/proftpd/howto/Debugging.html /usr/share/doc/proftpd/howto/Directory.html /usr/share/doc/proftpd/howto/DisplayFiles.html /usr/share/doc/proftpd/howto/ECCN.html /usr/share/doc/proftpd/howto/FTP.html /usr/share/doc/proftpd/howto/FXP.html /usr/share/doc/proftpd/howto/Filters.html /usr/share/doc/proftpd/howto/Globbing.html /usr/share/doc/proftpd/howto/IPv6.html /usr/share/doc/proftpd/howto/KeepAlives.html /usr/share/doc/proftpd/howto/Limit.html /usr/share/doc/proftpd/howto/ListOptions.html /usr/share/doc/proftpd/howto/LogLevels.html /usr/share/doc/proftpd/howto/LogMessages.html /usr/share/doc/proftpd/howto/Logging.html /usr/share/doc/proftpd/howto/Memcache.html /usr/share/doc/proftpd/howto/NAT.html /usr/share/doc/proftpd/howto/Nonroot.html /usr/share/doc/proftpd/howto/Quotas.html /usr/share/doc/proftpd/howto/Radius.html /usr/share/doc/proftpd/howto/Redis.html /usr/share/doc/proftpd/howto/Regex.html /usr/share/doc/proftpd/howto/Rewrite.html /usr/share/doc/proftpd/howto/SQL.html /usr/share/doc/proftpd/howto/SSH.html /usr/share/doc/proftpd/howto/Scoreboard.html /usr/share/doc/proftpd/howto/Sendfile.html /usr/share/doc/proftpd/howto/ServerType.html /usr/share/doc/proftpd/howto/Stopping.html /usr/share/doc/proftpd/howto/TLS.html /usr/share/doc/proftpd/howto/Testing.html /usr/share/doc/proftpd/howto/Timestamps.html /usr/share/doc/proftpd/howto/Tracing.html /usr/share/doc/proftpd/howto/Translations.html /usr/share/doc/proftpd/howto/Umask.html /usr/share/doc/proftpd/howto/Upgrade.html /usr/share/doc/proftpd/howto/Versioning.html /usr/share/doc/proftpd/howto/Vhost.html /usr/share/doc/proftpd/howto/VirtualUsers.html /usr/share/doc/proftpd/howto/ftpaccess.html /usr/share/doc/proftpd/howto/index.html /usr/share/doc/proftpd/license.txt /usr/share/doc/proftpd/mod_sample.c /usr/share/doc/proftpd/modules /usr/share/doc/proftpd/modules/index.html /usr/share/doc/proftpd/modules/mod_auth.html /usr/share/doc/proftpd/modules/mod_auth_file.html /usr/share/doc/proftpd/modules/mod_auth_pam.html /usr/share/doc/proftpd/modules/mod_auth_unix.html /usr/share/doc/proftpd/modules/mod_cap.html /usr/share/doc/proftpd/modules/mod_core.html /usr/share/doc/proftpd/modules/mod_ctrls.html /usr/share/doc/proftpd/modules/mod_delay.html /usr/share/doc/proftpd/modules/mod_dso.html /usr/share/doc/proftpd/modules/mod_facl.html /usr/share/doc/proftpd/modules/mod_facts.html /usr/share/doc/proftpd/modules/mod_ident.html /usr/share/doc/proftpd/modules/mod_lang.html /usr/share/doc/proftpd/modules/mod_log.html /usr/share/doc/proftpd/modules/mod_ls.html /usr/share/doc/proftpd/modules/mod_memcache.html /usr/share/doc/proftpd/modules/mod_redis.html /usr/share/doc/proftpd/modules/mod_rlimit.html /usr/share/doc/proftpd/modules/mod_site.html /usr/share/doc/proftpd/modules/mod_xfer.html /usr/share/doc/proftpd/rfc /usr/share/doc/proftpd/rfc/draft-bonachea-sftp-00.txt /usr/share/doc/proftpd/rfc/draft-ietf-ftpext-mlst-15.txt /usr/share/doc/proftpd/rfc/draft-ietf-ftpext-sec-consider-02.txt /usr/share/doc/proftpd/rfc/draft-somers-ftp-mfxx-03.txt /usr/share/doc/proftpd/rfc/rfc0959.txt /usr/share/doc/proftpd/rfc/rfc2228.txt /usr/share/doc/proftpd/rfc/rfc2389.txt /usr/share/doc/proftpd/rfc/rfc2428.txt /usr/share/doc/proftpd/rfc/rfc2640.txt /usr/share/doc/proftpd/rfc/rfc3659.txt /usr/share/doc/proftpd/rfc/rfc4217.txt /usr/share/doc/proftpd/rfc/rfc7151.txt /usr/share/doc/proftpd/sample-configurations /usr/share/doc/proftpd/sample-configurations/PFTEST.conf.in /usr/share/doc/proftpd/sample-configurations/PFTEST.group /usr/share/doc/proftpd/sample-configurations/PFTEST.install /usr/share/doc/proftpd/sample-configurations/PFTEST.passwd /usr/share/doc/proftpd/sample-configurations/PFTEST.shadow /usr/share/doc/proftpd/sample-configurations/anonymous.conf /usr/share/doc/proftpd/sample-configurations/basic.conf /usr/share/doc/proftpd/sample-configurations/complex-virtual.conf /usr/share/doc/proftpd/sample-configurations/mod_sql.conf /usr/share/doc/proftpd/sample-configurations/virtual.conf /usr/share/doc/proftpd/utils /usr/share/doc/proftpd/utils/ftpasswd.html /usr/share/doc/proftpd/utils/ftpcount.html /usr/share/doc/proftpd/utils/ftpdctl.html /usr/share/doc/proftpd/utils/ftpmail.html /usr/share/doc/proftpd/utils/ftpquota.html /usr/share/doc/proftpd/utils/ftpscrub.html /usr/share/doc/proftpd/utils/ftpshut.html /usr/share/doc/proftpd/utils/ftptop.html /usr/share/doc/proftpd/utils/ftpwho.html /usr/share/doc/proftpd/utils/index.html /usr/share/doc/proftpd/utils/prxs.html /usr/share/licenses/proftpd /usr/share/licenses/proftpd/COPYING /usr/share/locale/bg_BG/LC_MESSAGES/proftpd.mo /usr/share/locale/en_US/LC_MESSAGES/proftpd.mo /usr/share/locale/es_ES/LC_MESSAGES/proftpd.mo /usr/share/locale/fr_FR/LC_MESSAGES/proftpd.mo /usr/share/locale/it_IT/LC_MESSAGES/proftpd.mo /usr/share/locale/ja_JP/LC_MESSAGES/proftpd.mo /usr/share/locale/ko_KR/LC_MESSAGES/proftpd.mo /usr/share/locale/ru_RU/LC_MESSAGES/proftpd.mo /usr/share/locale/zh_CN/LC_MESSAGES/proftpd.mo /usr/share/locale/zh_TW/LC_MESSAGES/proftpd.mo /usr/share/man/man5/proftpd.conf.5.gz /usr/share/man/man5/xferlog.5.gz /usr/share/man/man8/ftpdctl.8.gz /usr/share/man/man8/ftpscrub.8.gz /usr/share/man/man8/ftpshut.8.gz /usr/share/man/man8/proftpd.8.gz /var/ftp /var/ftp/pub /var/ftp/uploads /var/ftp/welcome.msg /var/log/proftpd
Generated by rpm2html 1.8.1
Fabrice Bellet, Sat Nov 14 10:24:19 2026