publicfile - http and ftp server by Daniel J Bernstein

publicfile (0.52-13) experimental; urgency=medium

  [ Joost van Baal-Ilić <joostvb@debian.org> ]
  * Before july 2024, publicfile was not free software.  We shipped a
    publicfile-installer package, to ease building and installing publicfile on
    a Debian system.  Since publicfile got relicensed, we can ship publicfile
    itself via Debian main.  And, for the record:
    https://salsa.debian.org/debian/publicfile/-/pipelines/889957 : all 3 builds
    pass, all 8 tests pass.  So: First upload to Debian archive.
    Closes: #1098807
  * created git upstream branch with pristine upstream sources, in order to
    facilitate gbp style maintenance.
  * d/rules: force gcc-13: treat all implicit declarations as a mere warnings,
    not yet fatal error as in Debian 13 (trixie) default gcc-14.  (FWIW, gcc-12
    as shipped w/ e.g. Debian 12 (bookworm) works fine too.)
  * d/control: explicitly add gcc-13 to Build-Depends, since not listed in
    /usr/share/doc/build-essential/list .
  * d/patches/ftbfs-implicit-declaration.patch: add preliminary version of patch
    which is supposed to finally fix all implicit-declaration failures.
  * d/{rules,compat}: update debhelper compat version from deprecated 9 to
    current 13.
  * d/control: add zsh | zsh-beta to Suggests: used by
    usr/bin/get-publicfile-docs.  Thanks lintian.
  * d/copyright: make lintian happy: add an "empty" line.
  * d/{publicfile-,}httpd.8: renamed, in order not to conflict with httpd(8) as
    shipped with some old merecat packages ( <= 2.31+git20220513+ds-5 ).  (BTW,
    merecat installs usr/sbin/httpd while we install usr/bin/httpd.)  Thanks
    'missing-breaks' test @ salsa.d.o.
  * d/control: add Conflicts: merecat (<< 2.31+git20220513+ds-6): httpd binary
    and manpage.
  * d/install: change to dh-exec, install httpd and ftpd as publicfile-httpd
    and publicfile-ftpd.
  * d/control: add dh-exec Build-Depends.
  * d/publicfile-httpd.8: fix layout / roff syntax.
  * d/manpages: install publicfile-httpd(8).  See also get-publicfile-docs(1).
  * d/{,source/}lintian-overrides: added: we keep a comment-only file
    d/patches/publicfile.sslserver , and we do not yet install
    publicfile-ftpd(8).
  * d/TODO: minor update.
  * d/control: long description: fix typo, be more explicit about lacking
    ssl support.
  * d/rules: run dh in verbose mode.
  * d/rules: pass extra -g to gcc: trying to get debug information for dwz(1)
    and dh_dwz(1).
  * d/control: Drop Depends daemontools, demote "runit-init | runit-sysv |
    runit-systemd | daemontools-run (>> 1:0.76)" from Depends to Recommends.

  [ Bastian Germann <bage@debian.org>, July 2024 ]
  * d/patches/implicit-int.patch: Patch: Fix implicit-int warning
  * d/copyright: Update according to public-domain release
  * d/patches: Drop sslserver.patch which is not clearly DFSG-free
  * d/watch: Add watch file for download via uscan

09f109aca6e56659b45c9f4d1cf915f7 1861 net optional publicfile_0.52-13.dsc
e493d69627b4fb2c7c764c0ff34330d7 34892 net optional publicfile_0.52.orig.tar.gz
de99359007331541cf4e7211e0dba99d 21384 net optional publicfile_0.52-13.debian.tar.xz
e504d74636f9a7dee2b18cdc6e582e74 5722 net optional publicfile_0.52-13_amd64.buildinfo
6325afc670c0282ce9eef93f29f16f14 44724 net optional publicfile_0.52-13_amd64.deb

e493d69627b4fb2c7c764c0ff34330d7 34892 publicfile_0.52.orig.tar.gz
de99359007331541cf4e7211e0dba99d 21384 publicfile_0.52-13.debian.tar.xz

http and ftp server by Daniel J Bernstein
 publicfile supplies files to the public through HTTP and FTP.
 .
 Security features:
  - Before accepting any commands, publicfile chroot()s to the public file area
    and sheds root privileges.
  - doesn't let users log in. Intruders can't use publicfile to
    check your usernames and passwords.
  - refuses to supply files that are unreadable to owner, unreadable
    to group, or unreadable to world.
  - never attempts to modify the public file area. It refuses all
    HTTP and FTP modification commands.
  - never runs any other programs. It does not support HTTP CGI or
    FTP SITE EXEC.
 .
 HTTP features: publicfile supports:
  - virtual hosts through the Host field as well as through absolute URLs.
  - HTTP/1.1 persistent connections and chunked responses.
  - user-controlled content types.
  - exact-prefix If-Modified-Since.
 .
 FTP features: publicfile:
  - has built-in LIST and NLST commands. You don't have to bother
    setting up bin/ls, shared libraries, et al. inside the public file area.
  - provides EPLF LIST responses, including options "i", "s", and "m".
  - supports restarted transfers and pipelining.
  - uses local ports above 1024 for PORT connections.
  - prohibits remote ports below 1024 for PORT and prohibits PORT relaying.
  - includes automatic PASV IP protection.
 .
 Next to upstream code, this package contains three simple small shellscripts
 by the package maintainter: ad1810-autoindex - a tool to generate index.html
 from directory listings; get-publicfile-docs - a tool to download and
 install publicfile documentation; and update-publicfile-contenttype -
 helpful in making publicfile give suitable MIME types with files served.
 .
 Three patches are applied to the sources: errno.patch and implicit-int.patch
 (both fixing compilation) and filetype.patch (adding functionality for
 handling extra MIME types).
 .
 publicfile was written in 1999 and didn't change a lot after that.
 Modern features (e.g. SSL / https) are not supported.  However, if you're
 looking for a small, simple and secure webserver, which integrates with
 the runit and daemontools UNIX service managers, publicfile will suit
 your needs.