<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="24">
<package pkgid="a9420df5954c0e1baafefd0352a47e94608beacf22728fce3ced6910a1b8564f" name="civetweb-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.16" rel="16.el10_4"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-7" date="1752667200">- civetweb 1.16, rhbz#2380496</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-8" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-9" date="1756900800">- civetweb 1.16</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-10" date="1759147200">- civetweb 1.16, rhbz 2400162-2400166</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-12" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-13" date="1771502400">- civetweb 1.16, handle cmake-4 doesn't support cmake &lt; 3.5
- upstream, civetweb-1.16+ has updated to minimum cmake-3.10, and there
  don't seem to be any adverse effects building civetweb with that change.
  And someday there might even be a civetweb-1.17.</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-14" date="1780920000">- enable WEBSOCKETS and X_DOM_SOCKET as requested</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 1.16-15" date="1786104000">- Add upstream's fix to actually support X_DOM_SOCKET with cmake
- Enable ZLIB compression support
- rhbz#2512488</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 1.16-16" date="1787227200">- Link to openssl libraries instead of using runtime dynamic loading
- Use openssl 3.0 API instead of the default openssl 1.1 API
- Let the devel package own the cmake subdirectory
- Run tests in check</changelog>
</package>
<package pkgid="8b4d0eee7d2ff51d98c62f5ee729693152a02c3abd63c12a0594045597102eed" name="civetweb-debugsource" arch="x86_64">
  <version epoch="0" ver="1.16" rel="16.el10_4"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-7" date="1752667200">- civetweb 1.16, rhbz#2380496</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-8" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-9" date="1756900800">- civetweb 1.16</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-10" date="1759147200">- civetweb 1.16, rhbz 2400162-2400166</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-12" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-13" date="1771502400">- civetweb 1.16, handle cmake-4 doesn't support cmake &lt; 3.5
- upstream, civetweb-1.16+ has updated to minimum cmake-3.10, and there
  don't seem to be any adverse effects building civetweb with that change.
  And someday there might even be a civetweb-1.17.</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-14" date="1780920000">- enable WEBSOCKETS and X_DOM_SOCKET as requested</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 1.16-15" date="1786104000">- Add upstream's fix to actually support X_DOM_SOCKET with cmake
- Enable ZLIB compression support
- rhbz#2512488</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 1.16-16" date="1787227200">- Link to openssl libraries instead of using runtime dynamic loading
- Use openssl 3.0 API instead of the default openssl 1.1 API
- Let the devel package own the cmake subdirectory
- Run tests in check</changelog>
</package>
<package pkgid="d4a4de1ae12e52c9ab5cd43805a083776a83f2574d0dc9784fe2631acdc8d8ab" name="libbson-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="1.el10_4"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.6-1" date="1759924800">- update to 1.30.6</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.7-1" date="1770206400">- update to 1.30.7</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.3-1" date="1772625600">- update to 2.2.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.4-1" date="1775649600">- update to 2.2.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1776427200">- update to 2.3.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.1-1" date="1780401600">- update to 2.3.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1783512000">- update to 2.3.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.3-1" date="1784116800">- update to 2.3.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.4.0-1" date="1785931200">- update to 2.4.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.5.0-1" date="1787659200">- update to 2.5.0</changelog>
</package>
<package pkgid="024e09096e6450865d07b9812e7496f144ca1272adac83ba1fdd393177cd8268" name="mongo-c-driver-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="1.el10_4"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.6-1" date="1759924800">- update to 1.30.6</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.7-1" date="1770206400">- update to 1.30.7</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.3-1" date="1772625600">- update to 2.2.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.4-1" date="1775649600">- update to 2.2.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1776427200">- update to 2.3.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.1-1" date="1780401600">- update to 2.3.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1783512000">- update to 2.3.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.3-1" date="1784116800">- update to 2.3.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.4.0-1" date="1785931200">- update to 2.4.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.5.0-1" date="1787659200">- update to 2.5.0</changelog>
</package>
<package pkgid="ecfc9db4c3f2aa0ea432b0fa9cd7dc74a40318f71bbf40fd0af6b64750bfc1c9" name="mongo-c-driver-debugsource" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="1.el10_4"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.6-1" date="1759924800">- update to 1.30.6</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.7-1" date="1770206400">- update to 1.30.7</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.3-1" date="1772625600">- update to 2.2.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.4-1" date="1775649600">- update to 2.2.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1776427200">- update to 2.3.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.1-1" date="1780401600">- update to 2.3.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1783512000">- update to 2.3.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.3-1" date="1784116800">- update to 2.3.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.4.0-1" date="1785931200">- update to 2.4.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.5.0-1" date="1787659200">- update to 2.5.0</changelog>
</package>
<package pkgid="3792447d30fbb4be858541591c8ce61634bd264e979d29d94d26cb48904b9bd3" name="mongo-c-driver-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="1.el10_4"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.6-1" date="1759924800">- update to 1.30.6</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.7-1" date="1770206400">- update to 1.30.7</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.3-1" date="1772625600">- update to 2.2.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.4-1" date="1775649600">- update to 2.2.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1776427200">- update to 2.3.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.1-1" date="1780401600">- update to 2.3.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1783512000">- update to 2.3.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.3-1" date="1784116800">- update to 2.3.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.4.0-1" date="1785931200">- update to 2.4.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.5.0-1" date="1787659200">- update to 2.5.0</changelog>
</package>
<package pkgid="747b36596a181321c7c2a28c1819269c424b7c7431c103ec50b92f05ac334e24" name="perl-DBD-ODBC-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.61" rel="13.el10_4"/>
  <changelog author="Michal Josef &#x160;pa&#x10D;ek &lt;mspacek@redhat.com&gt; - 1.61-13" date="1786449600">- Re-submit package for Fedora review</changelog>
</package>
<package pkgid="eb13306953db7fe2ad46fbb59bb30e48065cdc50b8061267bfff9305abeb6fc5" name="perl-DBD-ODBC-debugsource" arch="x86_64">
  <version epoch="0" ver="1.61" rel="13.el10_4"/>
  <changelog author="Michal Josef &#x160;pa&#x10D;ek &lt;mspacek@redhat.com&gt; - 1.61-13" date="1786449600">- Re-submit package for Fedora review</changelog>
</package>
<package pkgid="59b28411da517f2f865a2efd69d16ce614dc9cd040213857717e1d7930e2b9f9" name="php-pecl-mongodb2-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="1.el10_4"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.21.0-1" date="1740744000">- update to 1.21.0
- raise dependency on PHP 8.1
- raise dependency on libbson and libmongc 1.30
- raise dependency on libmongocrypt 1.12
- re-license spec file to CECILL-2.1
- add pie virtual provides</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.0.0-1" date="1744286400">- update to 2.0.0
- rename to php-pecl-mongodb2 for new API</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.1.0-1" date="1748260800">- update to 2.1.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.1.8-1" date="1770292800">- update to 2.1.8</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.1-1" date="1771502400">- update to 2.2.1
- raise dependency on libmongoc 2.2.2 and libmongocrypt 1.17.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1777377600">- update to 2.3.0
- raise dependency on libmongoc 2.3.0 and libmongocrypt 1.17.3
- drop pear/pecl dependency
- sources from github</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1779278400">- update to 2.3.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.3-1" date="1779537600">- update to 2.3.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.3-2" date="1781611200">- rebuild with default php 8.3 #2488949</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.4.0-1" date="1787659200">- update to 2.4.0
- raise dependency on libmongoc 2.4.0 and libmongocrypt 1.20.0
- run upstream test suite without server</changelog>
</package>
<package pkgid="6a065ff0b0a0498c58109a694e6b16ca9573a62085e6a72d64a22c7dea01857c" name="php-pecl-mongodb2-debugsource" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="1.el10_4"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.21.0-1" date="1740744000">- update to 1.21.0
- raise dependency on PHP 8.1
- raise dependency on libbson and libmongc 1.30
- raise dependency on libmongocrypt 1.12
- re-license spec file to CECILL-2.1
- add pie virtual provides</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.0.0-1" date="1744286400">- update to 2.0.0
- rename to php-pecl-mongodb2 for new API</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.1.0-1" date="1748260800">- update to 2.1.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.1.8-1" date="1770292800">- update to 2.1.8</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.1-1" date="1771502400">- update to 2.2.1
- raise dependency on libmongoc 2.2.2 and libmongocrypt 1.17.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1777377600">- update to 2.3.0
- raise dependency on libmongoc 2.3.0 and libmongocrypt 1.17.3
- drop pear/pecl dependency
- sources from github</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1779278400">- update to 2.3.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.3-1" date="1779537600">- update to 2.3.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.3-2" date="1781611200">- rebuild with default php 8.3 #2488949</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.4.0-1" date="1787659200">- update to 2.4.0
- raise dependency on libmongoc 2.4.0 and libmongocrypt 1.20.0
- run upstream test suite without server</changelog>
</package>
<package pkgid="96e8c50a868c30e0ca1f3d304235d7d9249069a28b2782f02dbda42ce8c229d9" name="php-pecl-yac-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.2" rel="1.el10_4"/>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 2.3.1-13" date="1728907200">- rebuild for https://fedoraproject.org/wiki/Changes/php84</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 2.3.1-14" date="1730203200">- modernize the spec file</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1787054400">- update to 2.3.2
- add pie virtual provides
- drop pear/pecl dependency
- sources from github
- re-license spec file to CECILL-2.1</changelog>
</package>
<package pkgid="5ec8515e5b6d112605d7406a5b23ec9fd0f0633cfac86346814b4314a86cce02" name="php-pecl-yac-debugsource" arch="x86_64">
  <version epoch="0" ver="2.3.2" rel="1.el10_4"/>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 2.3.1-13" date="1728907200">- rebuild for https://fedoraproject.org/wiki/Changes/php84</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 2.3.1-14" date="1730203200">- modernize the spec file</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1787054400">- update to 2.3.2
- add pie virtual provides
- drop pear/pecl dependency
- sources from github
- re-license spec file to CECILL-2.1</changelog>
</package>
<package pkgid="0495bd26534fbd125a4b06b90092e74ef38df117d2dee87cac8fe357b21e3c8e" name="proftpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_4"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="5f26ea5f248ce813a9b7c506ee92ba74124a8dbec6cf84286810e56692a9e200" name="proftpd-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_4"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="92c14ad98227de98114a630a76ba7036c36cf207fabe594a938a6d7378911977" name="proftpd-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_4"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="696d9499be259d34f491be66f30425be07e9f51bf2f1ab48fd15934476fd8293" name="proftpd-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_4"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="b4f54cf214e22874a36c08f2381e12517362b136a90ffb383f8da0db9b039045" name="proftpd-postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_4"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="85a09c8cc09e36b0f6c86506ed8979d67512a57b94862ec536110b995ed42bac" name="proftpd-proxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_4"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="e301de14ec9321f63f21a2c8875e582fcf4cb33f4bbc02b96a46fc2386af7bef" name="proftpd-sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_4"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="eb6921d5be31f5e5f06065c70b63e20b8d5d473c2b133a8f13de80c3036498e4" name="proftpd-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_4"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="184b16461bae1f167f76b5c510c19540ded7fd2704882da0aafebc62b0e1148a" name="ruff-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.16.4" rel="1.el10_4"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.15-2" date="1780833600">- Allow tikv-jemallocator 0.7</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.16-1" date="1780833601">- Update to 0.15.16 (close RHBZ#2484855)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.16-2" date="1780833602">- Allow get-size2 0.10</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.17-1" date="1782129600">- Update to 0.15.17</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.18-1" date="1782129601">- Update to 0.15.18 (close RHBZ#2488001)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.19-1" date="1782475200">- Update to 0.15.19 (close RHBZ#2492070)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.20-1" date="1782475201">- Update to 0.15.20 (close RHBZ#2493018)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.21-1" date="1783684800">- Update to 0.15.21 (close RHBZ#2498772)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.16.3-1" date="1786881600">- Update to 0.16.3 (close RHBZ#2501369)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.16.4-1" date="1787659200">- Update to 0.16.4 (close RHBZ#2520735)</changelog>
</package>
<package pkgid="406996aec4dbf2bc5448f3eeb913e55d8e4e3b51c95b13f1c3c66f63b48bef5e" name="ruff-debugsource" arch="x86_64">
  <version epoch="0" ver="0.16.4" rel="1.el10_4"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.15-2" date="1780833600">- Allow tikv-jemallocator 0.7</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.16-1" date="1780833601">- Update to 0.15.16 (close RHBZ#2484855)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.16-2" date="1780833602">- Allow get-size2 0.10</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.17-1" date="1782129600">- Update to 0.15.17</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.18-1" date="1782129601">- Update to 0.15.18 (close RHBZ#2488001)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.19-1" date="1782475200">- Update to 0.15.19 (close RHBZ#2492070)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.20-1" date="1782475201">- Update to 0.15.20 (close RHBZ#2493018)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.21-1" date="1783684800">- Update to 0.15.21 (close RHBZ#2498772)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.16.3-1" date="1786881600">- Update to 0.16.3 (close RHBZ#2501369)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.16.4-1" date="1787659200">- Update to 0.16.4 (close RHBZ#2520735)</changelog>
</package>
<package pkgid="0801d714ab0b8384b65bae655bbf84df842a5683d38e4eac8249bae3f43c4d10" name="wprof-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.6" rel="2.el10_4"/>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 0.2-2" date="1768996800">- Rebuild with the new 0.2 tag that has bugfixes</changelog>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 0.2.1-1" date="1768996801">- Update to version 0.2.1, fixing stack symbolization on aarch64</changelog>
  <changelog author="Davide Cavalca &lt;dcavalca@fb.com&gt; - 0.3-1" date="1778068800">- Update to version 0.3</changelog>
  <changelog author="Davide Cavalca &lt;dcavalca@fb.com&gt; - 0.3-2" date="1778068801">- Backport upstream fix for LTO builds on aarch64</changelog>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 0.4-1" date="1780056000">- Update to version 0.4
- Apply temporary blazesym workaround to swallow /proc/kcore EPERM when
  querying KASLR</changelog>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 0.5-1" date="1785412800">- Update to version 0.5
- Apply build flags consistently
- Update licenses to account for bundled dependencies</changelog>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 0.5-2" date="1785499200">- fix to show SHA commit in help text
- also ensure `make install` uses the right build flags
- include all bundled projects' licenses</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.5-3" date="1785499201">- Drop rust_arches; no longer needed. But limit builds to the architectures
  strobelight-libs supports</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.6-1" date="1787659200">- Update to version 0.6; Resolves: rhbz#2523222</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.6-2" date="1787659201">- Also refresh vmlinux.h</changelog>
</package>
<package pkgid="3f442ecc78203c4871af9a8cb2a6ce57d438d25824bcf7e0730b2ac1dfc91824" name="wprof-debugsource" arch="x86_64">
  <version epoch="0" ver="0.6" rel="2.el10_4"/>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 0.2-2" date="1768996800">- Rebuild with the new 0.2 tag that has bugfixes</changelog>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 0.2.1-1" date="1768996801">- Update to version 0.2.1, fixing stack symbolization on aarch64</changelog>
  <changelog author="Davide Cavalca &lt;dcavalca@fb.com&gt; - 0.3-1" date="1778068800">- Update to version 0.3</changelog>
  <changelog author="Davide Cavalca &lt;dcavalca@fb.com&gt; - 0.3-2" date="1778068801">- Backport upstream fix for LTO builds on aarch64</changelog>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 0.4-1" date="1780056000">- Update to version 0.4
- Apply temporary blazesym workaround to swallow /proc/kcore EPERM when
  querying KASLR</changelog>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 0.5-1" date="1785412800">- Update to version 0.5
- Apply build flags consistently
- Update licenses to account for bundled dependencies</changelog>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 0.5-2" date="1785499200">- fix to show SHA commit in help text
- also ensure `make install` uses the right build flags
- include all bundled projects' licenses</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.5-3" date="1785499201">- Drop rust_arches; no longer needed. But limit builds to the architectures
  strobelight-libs supports</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.6-1" date="1787659200">- Update to version 0.6; Resolves: rhbz#2523222</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.6-2" date="1787659201">- Also refresh vmlinux.h</changelog>
</package>
</otherdata>