<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="2">
<package pkgid="3743173fc5527661b3055b36813b24cf9ab27af5" name="proftpd" arch="x86_64">
  <version epoch="1" ver="1.3.8b" rel="126.rhe9x.iworx"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8-1" date="1670241600">- Update to 1.3.8
  - 1.3.8rc4 failed to build mod_sftp with OpenSSL 1.1.0 due to X448 check
    (GH#1488)
  - 1.3.8rc4 failed to build on Solaris due to missing type declarations
    (GH#1494)
  - mod_ifsession doesn't change the effect of SFTPMaxChannels (GH#1500)
  - mod_tls module unexpectedly allows TLS handshake after authentication in
    some configurations (GH#1533)
  - Disable FSCachePolicy by default (GH#1528)
  - Avoid logging "session closed" messages unless there is a corresponding
    "session opened" log message, to avoid user confusion (GH#1539)
  - Implement support for the CSID FTP command (GH#1550)
  - Unable to verify signed data: signature type 'rsa-sha2-512' does not match
    publickey algorithm 'ssh-rsa' (Bug #4491)
  - mod_auth_otp improperly allows keyboard-interactive logins for users
    lacking OTP entries (GH#1560)
- Update mod_vroot to 0.9.11
  - Addresses a bad interaction with mod_auth_file, and failed login attempts,
    which can lead to inexplicably "stuck" processes that cannot be terminated
    (https://github.com/proftpd/proftpd/issues/1384)
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8-3" date="1674302400">- Add PCRE2 support (rhbz#2158885)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8-4" date="1675425600">- Ensure mod_rewrite is linked against libidn2 so that it loads properly
  (rhbz#2166454, https://github.com/proftpd/proftpd/issues/1590)
- No longer need to explicitly remove libtool archives from Fedora 36 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8a-1" date="1696852800">- Update to 1.3.8a
  - Fix mod_sftp failure to handle SFTP requests to truncate files to zero size
    (GH#1581)
  - Fix mod_sftp improperly handling SFTP WRITE requests for files opened for
    appending (GH#1584)
  - Build-time detection of Linux POSIX ACL support was broken since 1.3.8rc2
    (GH#1568)
  - Fix failure to load mod_rewrite as a dynamic module due to
    incomplete/missing library linker flags (GH#1590)
  - &lt;Class&gt; section is allowed to be in &lt;Global&gt;, but From directive is not
    (GH#1597)
  - ExtendedLog SSH, SFTP classes not working as expected (GH#1617)
  - Fix mod_sftp not handling multiple concurrent open file handles/transfers
    well for logging (GH#1646)
  - "TLSRequired off" plus Protocols directive caused mod_tls to terminate the
    session abruptly (GH#1679)
  - Fix mod_tls failure to compile against OpenSSL 3.0.8 due to missing
    ENGINE_METHOD_ flags (GH#1689)
  - Unknown named connection error when using different SQL backends (GH#1659)
  - Fix mod_sql not properly closing all named backend connections on session
    exit (GH#1697)
  - SSH key exchanges failed unexpectedly with "unable to write X bytes of raw
    data" errors due to small ProFTPD buffer (GH#1694)
  - Fix high session memory usage caused by SFTP outgoing data buffering
    (GH#1678)
  - Out-of-bounds buffer read when handling FTP commands (GH#1683)
  - SFTP algorithm settings in &lt;Global&gt; section were not being used (GH#1712)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-1" date="1703073600">- Update to 1.3.8b
  - Compiling ProFTPD 1.3.8a mod_sftp, mod_tls using libressl 3.7.3 failed
    (GH#1735)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)</changelog>
  <changelog author="Brandon Locke &lt;blocke@liquidweb.com&gt;" date="1705320000">- Remove memcache to simplify dependency management</changelog>
  <changelog author="Brandon Locke &lt;blocke@liquidweb.com&gt;" date="1705492800">- Removed native systemd support for greater init.d compatibility</changelog>
  <changelog author="Brandon Locke &lt;blocke@liquidweb.com&gt;" date="1712145600">- Enabled bcrypt password support by default</changelog>
  <changelog author="Brandon Locke &lt;blocke@liquidweb.com&gt;" date="1715601600">- Enabled password engine to allow bcrypt passwords on CentOS 7</changelog>
  <changelog author="Brandon Locke &lt;blocke@liquidweb.com&gt;" date="1716292800">- Explicitly set mysql lib when launching proftpd</changelog>
</package>
<package pkgid="f9b1a47944e18df44b0bed1f056d0cb2696c07da" name="proftpd-devel" arch="x86_64">
  <version epoch="1" ver="1.3.8b" rel="126.rhe9x.iworx"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8-1" date="1670241600">- Update to 1.3.8
  - 1.3.8rc4 failed to build mod_sftp with OpenSSL 1.1.0 due to X448 check
    (GH#1488)
  - 1.3.8rc4 failed to build on Solaris due to missing type declarations
    (GH#1494)
  - mod_ifsession doesn't change the effect of SFTPMaxChannels (GH#1500)
  - mod_tls module unexpectedly allows TLS handshake after authentication in
    some configurations (GH#1533)
  - Disable FSCachePolicy by default (GH#1528)
  - Avoid logging "session closed" messages unless there is a corresponding
    "session opened" log message, to avoid user confusion (GH#1539)
  - Implement support for the CSID FTP command (GH#1550)
  - Unable to verify signed data: signature type 'rsa-sha2-512' does not match
    publickey algorithm 'ssh-rsa' (Bug #4491)
  - mod_auth_otp improperly allows keyboard-interactive logins for users
    lacking OTP entries (GH#1560)
- Update mod_vroot to 0.9.11
  - Addresses a bad interaction with mod_auth_file, and failed login attempts,
    which can lead to inexplicably "stuck" processes that cannot be terminated
    (https://github.com/proftpd/proftpd/issues/1384)
- Use SPDX-format license tag</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8-3" date="1674302400">- Add PCRE2 support (rhbz#2158885)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8-4" date="1675425600">- Ensure mod_rewrite is linked against libidn2 so that it loads properly
  (rhbz#2166454, https://github.com/proftpd/proftpd/issues/1590)
- No longer need to explicitly remove libtool archives from Fedora 36 onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8a-1" date="1696852800">- Update to 1.3.8a
  - Fix mod_sftp failure to handle SFTP requests to truncate files to zero size
    (GH#1581)
  - Fix mod_sftp improperly handling SFTP WRITE requests for files opened for
    appending (GH#1584)
  - Build-time detection of Linux POSIX ACL support was broken since 1.3.8rc2
    (GH#1568)
  - Fix failure to load mod_rewrite as a dynamic module due to
    incomplete/missing library linker flags (GH#1590)
  - &lt;Class&gt; section is allowed to be in &lt;Global&gt;, but From directive is not
    (GH#1597)
  - ExtendedLog SSH, SFTP classes not working as expected (GH#1617)
  - Fix mod_sftp not handling multiple concurrent open file handles/transfers
    well for logging (GH#1646)
  - "TLSRequired off" plus Protocols directive caused mod_tls to terminate the
    session abruptly (GH#1679)
  - Fix mod_tls failure to compile against OpenSSL 3.0.8 due to missing
    ENGINE_METHOD_ flags (GH#1689)
  - Unknown named connection error when using different SQL backends (GH#1659)
  - Fix mod_sql not properly closing all named backend connections on session
    exit (GH#1697)
  - SSH key exchanges failed unexpectedly with "unable to write X bytes of raw
    data" errors due to small ProFTPD buffer (GH#1694)
  - Fix high session memory usage caused by SFTP outgoing data buffering
    (GH#1678)
  - Out-of-bounds buffer read when handling FTP commands (GH#1683)
  - SFTP algorithm settings in &lt;Global&gt; section were not being used (GH#1712)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-1" date="1703073600">- Update to 1.3.8b
  - Compiling ProFTPD 1.3.8a mod_sftp, mod_tls using libressl 3.7.3 failed
    (GH#1735)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)</changelog>
  <changelog author="Brandon Locke &lt;blocke@liquidweb.com&gt;" date="1705320000">- Remove memcache to simplify dependency management</changelog>
  <changelog author="Brandon Locke &lt;blocke@liquidweb.com&gt;" date="1705492800">- Removed native systemd support for greater init.d compatibility</changelog>
  <changelog author="Brandon Locke &lt;blocke@liquidweb.com&gt;" date="1712145600">- Enabled bcrypt password support by default</changelog>
  <changelog author="Brandon Locke &lt;blocke@liquidweb.com&gt;" date="1715601600">- Enabled password engine to allow bcrypt passwords on CentOS 7</changelog>
  <changelog author="Brandon Locke &lt;blocke@liquidweb.com&gt;" date="1716292800">- Explicitly set mysql lib when launching proftpd</changelog>
</package>
</otherdata>