Changelog for proftpd-utils-1.3.7c-4.fc36.x86_64.rpm :

* Fri Jan 21 2022 Fedora Release Engineering - 1.3.7c-4- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild
* Tue Sep 14 2021 Sahana Prasad - 1.3.7c-3- Rebuilt with OpenSSL 3.0.0
* Sun Sep 05 2021 Paul Howarth - 1.3.7c-2- Update to mod_vroot 0.9.9
* Tue Aug 31 2021 Paul Howarth - 1.3.7c-1- Update to 1.3.7c - Improve mod_tls log messages for unsupported older TLS protocol requests (GH#1273) - Fix memory disclosure to RADIUS servers by mod_radius (GH#1284) - Properly handle sections that use interface/device names (GH#1282) - PCRE expressions with capture groups are not being handled properly (GH#1300) - AuthUserFile permissions check fails during SIGHUP, causing ProFTPD to stop (GH#1307)
* Fri Jul 23 2021 Fedora Release Engineering - 1.3.7b-3- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild
* Tue Jun 22 2021 Paul Howarth - 1.3.7b-2- BR: glibc-gconv-extra for API tests from Fedora 35 onwards
* Mon Jun 14 2021 Paul Howarth - 1.3.7b-1- Update to 1.3.7b - Fixed occasional segfaults with FTPS data transfers using TLSv1.3, when session tickets could not be decrypted (GH#1063) - Passive transfers failed unexpectedly due to use of SO_REUSEPORT socket option (GH#1171) - Implemented support for Redis 6.x AUTH semantics (GH#1070) - Fixed memory use-after-free issue in mod_sftp, which could cause unexpected login/authentication issues - Fixed SQL syntax regression for some generated SQL statements (GH#1149) - Fixed \"Corrupted MAC on input\" errors when SFTP uses the umac-64AATTopenssh.com digest (GH#1111)
* Mon Feb 08 2021 Pavel Raiskup - 1.3.7a-6- Rebuild for libpq ABI fix rhbz#1908268
* Wed Jan 27 2021 Fedora Release Engineering - 1.3.7a-5- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild
* Tue Nov 24 2020 Paul Howarth - 1.3.7a-4- Package mod_unique_id (#1901100)
* Wed Jul 29 2020 Paul Howarth - 1.3.7a-3- Handle changed API in check 0.15 (see https://bugzilla.redhat.com/show_bug.cgi?id=1850198)- Work around getaddrinfo() returning EAGAIN in netaddr api test (https://github.com/proftpd/proftpd/pull/1075)
* Tue Jul 28 2020 Fedora Release Engineering - 1.3.7a-2- Rebuilt for https://fedoraproject.org/wiki/Fedora_33_Mass_Rebuild
* Wed Jul 22 2020 Paul Howarth - 1.3.7a-1- Update to 1.3.7a - Fix build-time regression when using the --localstatedir configure option (https://github.com/proftpd/proftpd/issues/1055)- Modernize spec using %{make_build} and %{make_install}
* Tue Jul 21 2020 Paul Howarth - 1.3.7-1- Update to 1.3.7 (see RELEASE_NOTES for details)- Fix regression in configure script https://github.com/proftpd/proftpd/issues/1055 https://github.com/proftpd/proftpd/pull/1056
* Tue Jul 21 2020 Paul Howarth - 1.3.6e-1- Update to 1.3.6e - Fixed null pointer dereference in mod_sftp when using SCP incorrectly (https://github.com/proftpd/proftpd/issues/1043)
* Sun May 31 2020 Paul Howarth - 1.3.6d-1- Update to 1.3.6d - Fixed issue with FTPS uploads of large files using TLSv1.3 (https://github.com/proftpd/proftpd/issues/959) - Fixed regression in the handling of \'%{env:...}\' configuration variables when the environment variable is not present (https://github.com/proftpd/proftpd/issues/857) - Second LIST of the same symlink shows different results (https://github.com/proftpd/proftpd/issues/940) - mod_sftp sends broken response when CREATETIME attribute is requested (https://github.com/proftpd/proftpd/issues/980) - Handle zero-length SFTP WRITE requests without error (http://bugs.proftpd.org/show_bug.cgi?id=4398) - PidFile should not be world-writable (https://github.com/proftpd/proftpd/issues/1018) - TLSv1.3 handshake fails due to missing session ticket key on some systems (https://github.com/proftpd/proftpd/issues/1014) - Lowercased FTP commands not properly identified (https://github.com/proftpd/proftpd/issues/1023)
* Sat May 09 2020 Paul Howarth - 1.3.6c-3- Avoid duplicate hostname and timestamps in syslog (#1808989) http://bugs.proftpd.org/show_bug.cgi?id=4185 https://github.com/proftpd/proftpd/issues/1002 https://github.com/proftpd/proftpd/pull/1009
* Mon Apr 20 2020 Paul Howarth - 1.3.6c-2- Retain a memory pool after an aborted transfer so that the %{transfer-status} LogFormat functionality still works- Own directory %{_sysconfdir}/logrotate.d
* Wed Feb 19 2020 Paul Howarth - 1.3.6c-1- Update to 1.3.6c - Use-after-free vulnerability in memory pools during data transfer (CVE-2020-9273, https://github.com/proftpd/proftpd/issues/903) - Fix mod_tls compilation with LibreSSL 2.9.x (https://github.com/proftpd/proftpd/issues/810) - MaxClientsPerUser was not enforced for SFTP logins when mod_digest was enabled (https://github.com/proftpd/proftpd/issues/750) - mod_sftp now handles an OpenSSH-specific private key format; it detects such keys, and logs a hint about reformatting them to a supported format (https://github.com/proftpd/proftpd/issues/793) - Directory listing was slower compared to previous ProFTPD versions (https://github.com/proftpd/proftpd/issues/793) - mod_sftp crashed when using pubkey-auth with DSA keys (https://github.com/proftpd/proftpd/issues/866) - Fix improper handling of TLS CRL lookups (CVE-2019-19269, CVE-2019-19270, https://github.com/proftpd/proftpd/issues/859) - Leaking PAM handler and data in case of unsuccessful authentication (https://github.com/proftpd/proftpd/issues/870) - SSH authentication failed for many clients due to receiving of SSH_MSG_IGNORE packet (http://bugs.proftpd.org/show_bug.cgi?id=4385) - SFTP publickey authentication failed unexpectedly when user had no shadow password info. (https://github.com/proftpd/proftpd/issues/890) - ftpasswd failed to restore password file permissions in some cases (https://github.com/proftpd/proftpd/issues/898) - Out-of-bounds read in mod_cap getstateflags() function; this has been addressed by updating the bundled version of libcap (CVE-2020-9272, https://github.com/proftpd/proftpd/issues/902) Note that this build of ProFTPD uses the system version of libcap and not the bundled version, and is not vulnerable to this issue
* Thu Jan 30 2020 Fedora Release Engineering - 1.3.6b-4- Rebuilt for https://fedoraproject.org/wiki/Fedora_32_Mass_Rebuild
* Wed Jan 22 2020 Paul Howarth - 1.3.6b-3- Fix API tests compile failure with GCC 10 https://github.com/proftpd/proftpd/pull/886- mod_sftp: When handling the \'keyboard-interactive\' authentication mechanism, as used for (e.g.) PAM, make sure to properly handle DEBUG, IGNORE, DISCONNECT, and UNIMPLEMENTED messages, per RFC 4253 (http://bugs.proftpd.org/show_bug.cgi?id=4385)