Changelog for
proftpd-1.3.8b-4.el9.x86_64.rpm :
* Tue Nov 19 2024 Paul Howarth
- 1.3.8b-4- Fix RADIUS Message-Authenticator verification in mod_radius - https://github.com/proftpd/proftpd/issues/1840 - https://bugzilla.redhat.com/show_bug.cgi?id=2325448
* Sun Mar 31 2024 Paul Howarth - 1.3.8b-3- Add \'proxy\' sub-package with unbundled mod_proxy (rhbz#2272051)- Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677)
* Mon Jan 01 2024 Paul Howarth - 1.3.8b-2- Use libsodium to provide ed25519 key support for mod_sftp (#2256340)- Update logrotate snippet to use try-reload-or-restart rather than reload for distributions with systemd 229 or later (PR#3)
* Wed Dec 20 2023 Paul Howarth - 1.3.8b-1- Update to 1.3.8b - Compiling ProFTPD 1.3.8a mod_sftp, mod_tls using libressl 3.7.3 failed (GH#1735) - Build system failed for specific module names (GH#1756) - \"Terrapin\" Prefix Truncation Attacks in SSH Specification affected mod_sftp (CVE-2023-48795, GH#1760)
* Mon Oct 09 2023 Paul Howarth - 1.3.8a-1- Update to 1.3.8a - Fix mod_sftp failure to handle SFTP requests to truncate files to zero size (GH#1581) - Fix mod_sftp improperly handling SFTP WRITE requests for files opened for appending (GH#1584) - Build-time detection of Linux POSIX ACL support was broken since 1.3.8rc2 (GH#1568) - Fix failure to load mod_rewrite as a dynamic module due to incomplete/missing library linker flags (GH#1590) - section is allowed to be in , but From directive is not (GH#1597) - ExtendedLog SSH, SFTP classes not working as expected (GH#1617) - Fix mod_sftp not handling multiple concurrent open file handles/transfers well for logging (GH#1646) - \"TLSRequired off\" plus Protocols directive caused mod_tls to terminate the session abruptly (GH#1679) - Fix mod_tls failure to compile against OpenSSL 3.0.8 due to missing ENGINE_METHOD_ flags (GH#1689) - Unknown named connection error when using different SQL backends (GH#1659) - Fix mod_sql not properly closing all named backend connections on session exit (GH#1697) - SSH key exchanges failed unexpectedly with \"unable to write X bytes of raw data\" errors due to small ProFTPD buffer (GH#1694) - Fix high session memory usage caused by SFTP outgoing data buffering (GH#1678) - Out-of-bounds buffer read when handling FTP commands (GH#1683, CVE-2023-51713) - SFTP algorithm settings in section were not being used (GH#1712)
* Fri Feb 03 2023 Paul Howarth - 1.3.8-4- Ensure mod_rewrite is linked against libidn2 so that it loads properly (rhbz#2166454, https://github.com/proftpd/proftpd/issues/1590)- No longer need to explicitly remove libtool archives from Fedora 36 onwards
* Sat Jan 21 2023 Paul Howarth - 1.3.8-3- Add PCRE2 support (rhbz#2158885)
* Mon Dec 05 2022 Paul Howarth - 1.3.8-1- Update to 1.3.8 - 1.3.8rc4 failed to build mod_sftp with OpenSSL 1.1.0 due to X448 check (GH#1488) - 1.3.8rc4 failed to build on Solaris due to missing type declarations (GH#1494) - mod_ifsession doesn\'t change the effect of SFTPMaxChannels (GH#1500) - mod_tls module unexpectedly allows TLS handshake after authentication in some configurations (GH#1533) - Disable FSCachePolicy by default (GH#1528) - Avoid logging \"session closed\" messages unless there is a corresponding \"session opened\" log message, to avoid user confusion (GH#1539) - Implement support for the CSID FTP command (GH#1550) - Unable to verify signed data: signature type \'rsa-sha2-512\' does not match publickey algorithm \'ssh-rsa\' (Bug #4491) - mod_auth_otp improperly allows keyboard-interactive logins for users lacking OTP entries (GH#1560)- Update mod_vroot to 0.9.11 - Addresses a bad interaction with mod_auth_file, and failed login attempts, which can lead to inexplicably \"stuck\" processes that cannot be terminated (https://github.com/proftpd/proftpd/issues/1384)- Use SPDX-format license tag
