Jump to letter: [
ABCDEFGHIJKLMNOPQRSTUVWXYZ
]
proftpd - Flexible, stable and highly-configurable FTP server
- Description:
ProFTPD is an enhanced FTP server with a focus toward simplicity, security,
and ease of configuration. It features a very Apache-like configuration
syntax, and a highly customizable server infrastructure, including support for
multiple 'virtual' FTP servers, anonymous FTP, and permission-based directory
visibility.
This package defaults to the standalone behavior of ProFTPD, but all the
needed scripts to have it run by systemd instead are included.
Packages
| proftpd-1.3.6e-11.el8.x86_64
[3.9 MiB] |
Changelog
by Paul Howarth (2026-07-27):
- Address another avenue for SQL injection, via custom SQLUserInfo queries
(https://github.com/proftpd/proftpd/issues/2052#issuecomment-4489110598)
- Fix SFTP request payload length underflow calculation in mod_sftp
(CVE-2026-53994, https://github.com/proftpd/proftpd/issues/2115)
- Exercise caution when reading the client-provided file size for SCP uploads,
as it could possibly overflow our size type (CVE-2026-63091)
- Authenticated SFTP sessions could overflow the SFTP packet buffer
(CVE-2026-63090, https://github.com/proftpd/proftpd/issues/2190)
- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
/proc/self/root path prefix); this module disallows file accesses via procfs
filesystems
|
| proftpd-1.3.6e-10.el8.x86_64
[3.9 MiB] |
Changelog
by Paul Howarth (2026-05-11):
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
(CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)
|