Changelog for
proftpd-sqlite-1.3.5e-lp150.2.3.1.x86_64.rpm :
* Fri Aug 02 2019 chrisAATTcomputersalat.de- fix for boo#1142281 (CVE-2019-12815, bpo#4372) arbitrary file copy in mod_copy allows for remote code execution and information disclosure without authentication- add patch
* proftpd-CVE-2019-12815.patch taken from: - http://bugs.proftpd.org/show_bug.cgi?id=4372 - https://github.com/proftpd/proftpd/commit/a73dbfe3b61459e7c2806d5162b12f0957990cb3
* Tue Jul 10 2018 chrisAATTcomputersalat.de- update to 1.3.5e
* Fixed SFTP issue with umac-64AATTopenssh.com digest/MAC.
* Fixed regression with mod_sftp rekeying.
* Backported fix for \"AllowChrootSymlinks off\" checking each component for symlinks (CVE-2017-7418).- remove obsolete patch
* proftpd-AllowChrootSymlinks.patch (now included)- rebase patches
* proftpd-dist.patch
* proftpd-no_BuildDate.patch
* proftpd_include-in-limit-section.patch
* Fri Jul 21 2017 bwiedemannAATTsuse.com- Sort SHARED_MODS list to fix build compare (boo#1041090)
* Fri Jun 16 2017 nmoudraAATTsuse.com- Removed xinetd service
* Fri Apr 07 2017 chrisAATTcomputersalat.de- fix for boo#1032443 (CVE-2017-7418)
* AllowChrootSymlinks not enforced by replacing a path component with a symbolic link
* add upstream commit (ecff21e0d0e84f35c299ef91d7fda088e516d4ed) as proftpd-AllowChrootSymlinks.patch- fix proftpd-tls.template
* reduce TLS protocols to TLSv1.1 and TLSv1.2
* disable TLSCACertificateFile
* add TLSCertificateChainFile
* Thu Mar 23 2017 jengelhAATTinai.de- Remove --with-pic, there are no static libs.- Replace %__-type macro indirections.- Replace old $RPM shell vars by macros.
* Mon Mar 06 2017 chrisAATTcomputersalat.de- fix and update proftpd-basic.conf.patch- add some sample config and templates for tls
* proftpd-tls.template
* proftpd-limit.conf
* proftpd-ssl.README
* Sun Feb 05 2017 chrisAATTcomputersalat.de- backport upstream feature
* include-in-limit-section (gh#410)
* add proftpd_include-in-limit-section.patch
* Tue Jan 17 2017 chrisAATTcomputersalat.de- update to 1.3.5d
* gh#4283 - All FTP logins treated as anonymous logins again. This is a regression of gh#3307.
* Sun Jan 15 2017 chrisAATTcomputersalat.de- update to 1.3.5c
* SSH rekey during authentication can cause issues with clients.
* Recursive SCP uploads of multiple directories not handled properly.
* LIST returns different results for file, depending on path syntax.
* \"AuthAliasOnly on\" in server config breaks anonymous logins.
* CapabilitiesEngine directive not honored for
/ sections.
* Support OpenSSL 1.1.x API.
* Memory leak when mod_facl is used.-rebase proftpd-no_BuildDate.patch
* Sat Aug 27 2016 chrisAATTcomputersalat.de- fix systemd vs SysVinit
* Sun May 08 2016 jengelhAATTinai.de- Remove redundant spec sections- Ensure systemd-tmpfiles is called for the provied config file
* Sun May 08 2016 chrisAATTcomputersalat.de- fix for boo#970890 (CVE-2016-3125)- update to 1.3.5b: http://www.proftpd.org/docs/RELEASE_NOTES-1.3.5b
* SSH RSA hostkeys smaller than 2048 bits now work properly.
* MLSD response lines are now properly CRLF terminated.
* Fixed selection of DH groups from TLSDHParamFile.- rebase proftpd-no_BuildDate.patch
* Sun May 31 2015 chrisAATTcomputersalat.de- fix for boo#927290 (CVE-2015-3306)- update to 1.3.5a: See http://www.proftpd.org/docs/NEWS-1.3.5a- rebase patches
* proftpd-ftpasswd.patch
* proftpd-no_BuildDate.patch- remove gpg-offline dependency- fix permissions on passwd file
* unable to use world-readable AuthUserFile \'.../passwd\' (perms 0644):
* 0644 -> 0440