<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="46">
<package pkgid="4a45cdae829abe6f65b2d5d26cb45ad9661d1dbd53c0bd33687b8582a4324ab7" name="ansifilter-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.23" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.21-4" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.21-5" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-1" date="1762171200">- update to 2.22 fixes rhbz#2394474</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-4" date="1773489600">- spec cleanup and modernization, silent rpmlint</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-5" date="1780401600">- opt-in to packit</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22-6" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-7" date="1784462400">- drop ix86 support</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.23-1" date="1787313600">- Update to 2.23</changelog>
</package>
<package pkgid="4e2e3568164f52311f2fba4d7c3aeb2c63385828c406eaa005d2df42a40b2516" name="ansifilter-debugsource" arch="aarch64">
  <version epoch="0" ver="2.23" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.21-4" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.21-5" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-1" date="1762171200">- update to 2.22 fixes rhbz#2394474</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-4" date="1773489600">- spec cleanup and modernization, silent rpmlint</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-5" date="1780401600">- opt-in to packit</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22-6" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-7" date="1784462400">- drop ix86 support</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.23-1" date="1787313600">- Update to 2.23</changelog>
</package>
<package pkgid="2c242c1aec3806cbb4103a1d8d178fcaba39c5a9e30335f2a37856db4666a8cc" name="ansifilter-gui-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.23" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.21-4" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.21-5" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-1" date="1762171200">- update to 2.22 fixes rhbz#2394474</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-4" date="1773489600">- spec cleanup and modernization, silent rpmlint</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-5" date="1780401600">- opt-in to packit</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.22-6" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.22-7" date="1784462400">- drop ix86 support</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.23-1" date="1787313600">- Update to 2.23</changelog>
</package>
<package pkgid="c8130f161df513d0b846f901864f109895303d2cea991c5c9fb8932f12679225" name="betterleaks-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="1.el10_2"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.1-1" date="1773748800">- Update to 1.1.1 upstream release
- Resolves: rhbz#2448368</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.2-1" date="1775649600">- Update to 1.1.2 upstream release
- Resolves: rhbz#2456601</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1778241600">- Update to 1.2.0 upstream release
- Resolves: rhbz#2468272</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.4.0-1" date="1780401600">- Update to 1.4.0 upstream release
- Resolves: rhbz#2480185</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.5.0-1" date="1781265600">- Update to 1.5.0 upstream release
- Resolves: rhbz#2485671</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.6.0-1" date="1782475200">- Update to 1.6.0 upstream release
- Resolves: rhbz#2493577</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.7.0-1" date="1784808000">- Update to 1.7.0 upstream release
- Resolves: rhbz#2495018</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.8.0-1" date="1787054400">- Update to 1.8.0 upstream release
- Resolves: rhbz#2509851</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.8.1-1" date="1787054401">- Update to 1.8.1 upstream release
- Resolves: rhbz#2519357</changelog>
</package>
<package pkgid="8580ce3d2c9e9e71cfdcec3cd45cb89b76aff0787b8097b34989314770eb9f0f" name="betterleaks-debugsource" arch="aarch64">
  <version epoch="0" ver="1.8.1" rel="1.el10_2"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.1-1" date="1773748800">- Update to 1.1.1 upstream release
- Resolves: rhbz#2448368</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.2-1" date="1775649600">- Update to 1.1.2 upstream release
- Resolves: rhbz#2456601</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1778241600">- Update to 1.2.0 upstream release
- Resolves: rhbz#2468272</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.4.0-1" date="1780401600">- Update to 1.4.0 upstream release
- Resolves: rhbz#2480185</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.5.0-1" date="1781265600">- Update to 1.5.0 upstream release
- Resolves: rhbz#2485671</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.6.0-1" date="1782475200">- Update to 1.6.0 upstream release
- Resolves: rhbz#2493577</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.0-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.7.0-1" date="1784808000">- Update to 1.7.0 upstream release
- Resolves: rhbz#2495018</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.8.0-1" date="1787054400">- Update to 1.8.0 upstream release
- Resolves: rhbz#2509851</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.8.1-1" date="1787054401">- Update to 1.8.1 upstream release
- Resolves: rhbz#2519357</changelog>
</package>
<package pkgid="a428a0e64599b0071b7ad18b395e99449ebac589aa797c15ed7f3223039a5705" name="bluechi-agent-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="1.el10_2"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="0d4eb70db855871f2b32dc6b5cba67b26d64896ac4bcd09389dcfd35103954eb" name="bluechi-controller-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="1.el10_2"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="b3cdf17357b9d9796c1836a75ce33eda485ed0833797c6867ab0c49108261e95" name="bluechi-ctl-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="1.el10_2"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="ff43352bfee52b71375c254f7d0aa656abd6faf21cb5ad9aa77a6069c45c965a" name="bluechi-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="1.el10_2"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="483b55a3d4a39f5d5d1ea4fc3bac66a4ec75949cfdc9cca4253aebbfcfad7e10" name="bluechi-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="1.el10_2"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="cb322cf26a58e3dc37c39ba465aa612b6a24e74207bf84b06450e20d69b26617" name="bluechi-is-online-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="1.el10_2"/>
  <changelog author="Mark Kemel &lt;mkemel@redhat.com&gt; - 0.9.0-2" date="1731499200">- Remove "Vendor" and "Packager" field</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.1-1" date="1740657600">- Update to version 0.10.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.10.2-1" date="1741262400">- Update to version 0.10.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.0-1" date="1748347200">- Update to version 1.0.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.0.1-1" date="1748433600">- Update to version 1.0.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.0-1" date="1753704000">- Update to version 1.1.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1763467200">- Update to version 1.2.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.1-1" date="1764158400">- Update to version 1.2.1</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.2-1" date="1770120000">- Update to version 1.2.2</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.3.0-1" date="1787572800">- Update to version 1.3.0</changelog>
</package>
<package pkgid="34f3af9226277c91c44fbd9cbd1629782fa09cc1be6550858432cfe07d371403" name="c-icap-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.6.5" rel="1.el10_2"/>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.2-4" date="1737892800">- Patch for GCC15 issues - BZ2339953.
- Remove mv due to unify /usr/bin and /usr/sbin</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 0.6.2-4" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-1" date="1742817600">- Update to 0.6.3 release.</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-2" date="1743336000">- Add sysusers.d config as a source file for F42 and above.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-3" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-4" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-5" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.6.3-6" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-7" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.5-1" date="1787227200">- Update to 0.6.5 release.</changelog>
</package>
<package pkgid="6c0e02c5561f1c7a12db2d127dbc94e4b4d5d37b42666304fd419e76bee2729d" name="c-icap-debugsource" arch="aarch64">
  <version epoch="0" ver="0.6.5" rel="1.el10_2"/>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.2-4" date="1737892800">- Patch for GCC15 issues - BZ2339953.
- Remove mv due to unify /usr/bin and /usr/sbin</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 0.6.2-4" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-1" date="1742817600">- Update to 0.6.3 release.</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-2" date="1743336000">- Add sysusers.d config as a source file for F42 and above.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-3" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-4" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-5" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.6.3-6" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-7" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.5-1" date="1787227200">- Update to 0.6.5 release.</changelog>
</package>
<package pkgid="d23e44503402aeb2f262979243b01fd5d09dc56be5a98127cb49efa2d21db0be" name="c-icap-libs-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.6.5" rel="1.el10_2"/>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.2-4" date="1737892800">- Patch for GCC15 issues - BZ2339953.
- Remove mv due to unify /usr/bin and /usr/sbin</changelog>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 0.6.2-4" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups automatically</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-1" date="1742817600">- Update to 0.6.3 release.</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.3-2" date="1743336000">- Add sysusers.d config as a source file for F42 and above.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-3" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-4" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-5" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.6.3-6" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.3-7" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Frank Crawford &lt;frank@crawford.emu.id.au&gt; - 0.6.5-1" date="1787227200">- Update to 0.6.5 release.</changelog>
</package>
<package pkgid="31a52e366aef3f7c298232a5ce347e361905db1be5f5fe94e686a27f9e7cada7" name="civetweb-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.16" rel="16.el10_2"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-7" date="1752667200">- civetweb 1.16, rhbz#2380496</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-8" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-9" date="1756900800">- civetweb 1.16</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-10" date="1759147200">- civetweb 1.16, rhbz 2400162-2400166</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-12" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-13" date="1771502400">- civetweb 1.16, handle cmake-4 doesn't support cmake &lt; 3.5
- upstream, civetweb-1.16+ has updated to minimum cmake-3.10, and there
  don't seem to be any adverse effects building civetweb with that change.
  And someday there might even be a civetweb-1.17.</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-14" date="1780920000">- enable WEBSOCKETS and X_DOM_SOCKET as requested</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 1.16-15" date="1786104000">- Add upstream's fix to actually support X_DOM_SOCKET with cmake
- Enable ZLIB compression support
- rhbz#2512488</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 1.16-16" date="1787227200">- Link to openssl libraries instead of using runtime dynamic loading
- Use openssl 3.0 API instead of the default openssl 1.1 API
- Let the devel package own the cmake subdirectory
- Run tests in check</changelog>
</package>
<package pkgid="c15db264b2ee7b7ca2a10280e4d08b2de37a9a765e244a311bb784e319c4b378" name="civetweb-debugsource" arch="aarch64">
  <version epoch="0" ver="1.16" rel="16.el10_2"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-7" date="1752667200">- civetweb 1.16, rhbz#2380496</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-8" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-9" date="1756900800">- civetweb 1.16</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-10" date="1759147200">- civetweb 1.16, rhbz 2400162-2400166</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-12" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-13" date="1771502400">- civetweb 1.16, handle cmake-4 doesn't support cmake &lt; 3.5
- upstream, civetweb-1.16+ has updated to minimum cmake-3.10, and there
  don't seem to be any adverse effects building civetweb with that change.
  And someday there might even be a civetweb-1.17.</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-14" date="1780920000">- enable WEBSOCKETS and X_DOM_SOCKET as requested</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 1.16-15" date="1786104000">- Add upstream's fix to actually support X_DOM_SOCKET with cmake
- Enable ZLIB compression support
- rhbz#2512488</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 1.16-16" date="1787227200">- Link to openssl libraries instead of using runtime dynamic loading
- Use openssl 3.0 API instead of the default openssl 1.1 API
- Let the devel package own the cmake subdirectory
- Run tests in check</changelog>
</package>
<package pkgid="4569342b1954ec72e018004ea842f43c82422b246f0a334bad324f43f3643fbc" name="clamav-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.6" rel="2.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="2c70e9df6431a03d3d109fc2150b1ec15186395d12efe6d18124ae56c169b8e5" name="clamav-debugsource" arch="aarch64">
  <version epoch="0" ver="1.4.6" rel="2.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="9972daf3eae7873c5443d183607ee1eda3bb53f65b042771d71feb8df023cd38" name="clamav-freshclam-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.6" rel="2.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="e689ca9f10ae16ef71f3c1bbd57fabc185dbcb9f6fe61fc7a17d4166136bf0a7" name="clamav-lib-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.6" rel="2.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="a642205a467d6e9886a67b4d8e27780876fc96011def643144c9aa4e710f5bc7" name="clamav-milter-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.6" rel="2.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="6235b8eb3b13db1aafb2d94f3ef28bbd26fd1b4c10cd0b46211021e479e21769" name="clamd-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.4.6" rel="2.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 1.4.5-2" date="1784289600">- Use sysusers_create_compat for EL10 compatibility (rhbz#2521354)</changelog>
</package>
<package pkgid="c9c856733fc5c780fa227f3bc0cb1a271721b347e29ef2ba4daa31ec302006fa" name="glab-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.114.0" rel="1.el10_2"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.91.0-1" date="1775044800">- Update to 1.91.0 upstream release
- Resolves: rhbz#2453971</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.92.1-1" date="1775822400">- Update to 1.92.1 upstream release
- Resolves: rhbz#2457079</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.95.0-1" date="1778241600">- Update to 1.95.0 upstream release
- Resolves: rhbz#2467246</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.102.0-1" date="1780660800">- Update to 1.102.0 upstream release
- Resolves: rhbz#2476559</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.104.0-1" date="1782216000">- Update to 1.104.0 upstream release
- Resolves: rhbz#2491693</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.106.0-1" date="1782820800">- Update to 1.106.0 upstream release
- Resolves: rhbz#2491958</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.106.0-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.109.0-1" date="1784635200">- Update to 1.109.0 upstream release
- Resolves: rhbz#2497701</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.112.0-1" date="1785844800">- Update to 1.112.0 upstream release
- Resolves: rhbz#2510985</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.114.0-1" date="1787054400">- Update to 1.114.0 upstream release
- Resolves: rhbz#2517911</changelog>
</package>
<package pkgid="9d9dc3def7e0081e0ba1e5797e0a2cb9c437ed50e33590dc8372ace7e0859396" name="glab-debugsource" arch="aarch64">
  <version epoch="0" ver="1.114.0" rel="1.el10_2"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.91.0-1" date="1775044800">- Update to 1.91.0 upstream release
- Resolves: rhbz#2453971</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.92.1-1" date="1775822400">- Update to 1.92.1 upstream release
- Resolves: rhbz#2457079</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.95.0-1" date="1778241600">- Update to 1.95.0 upstream release
- Resolves: rhbz#2467246</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.102.0-1" date="1780660800">- Update to 1.102.0 upstream release
- Resolves: rhbz#2476559</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.104.0-1" date="1782216000">- Update to 1.104.0 upstream release
- Resolves: rhbz#2491693</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.106.0-1" date="1782820800">- Update to 1.106.0 upstream release
- Resolves: rhbz#2491958</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.106.0-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.109.0-1" date="1784635200">- Update to 1.109.0 upstream release
- Resolves: rhbz#2497701</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.112.0-1" date="1785844800">- Update to 1.112.0 upstream release
- Resolves: rhbz#2510985</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.114.0-1" date="1787054400">- Update to 1.114.0 upstream release
- Resolves: rhbz#2517911</changelog>
</package>
<package pkgid="fc48e8743c455a49a6ffe205a2d47cf51f9de61048eab531c47b899c76373e5e" name="java-latest-openjdk-debugsource" arch="aarch64">
  <version epoch="1" ver="27.0.0.0.35" rel="0.0.1.0.ea.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:26.0.0.0.34-1" date="1774353600">- Bumped to jdk26+35 (ga)</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:26.0.0.0.35-1" date="1774440000">- Fixed errornouse 34 to 35</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:26.0.0.0.35-2" date="1774526400">- Bump nssadapter version to bring in shared PKCS11 session fix</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:26.0.1.0.8-1" date="1777464000">- Updated to repack 26.0.1+8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:26.0.1.0.8-2" date="1779883200">- Moved jcmd to JDK</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:26.0.1.0.8-3" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:26.0.2.0.10-1" date="1785240000">- Updated to  repack OpenJDK 26.0.2 (2026-07-21)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1:26.0.2.0.10-2" date="1785240001">- Enable docs on ELN</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:26.0.2.1.0-1" date="1787227200">- Bumoped to repack 26.0.2.1</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:27.0.0.0.35-1" date="1787486400">- Bumped to jdk27+35-ea</changelog>
</package>
<package pkgid="3281ffca695ee344e287377d8cb4526394032b8b27e05c7d2358754d8c2ce9db" name="java-latest-openjdk-headless-debuginfo" arch="aarch64">
  <version epoch="1" ver="27.0.0.0.35" rel="0.0.1.0.ea.el10_2"/>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:26.0.0.0.34-1" date="1774353600">- Bumped to jdk26+35 (ga)</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:26.0.0.0.35-1" date="1774440000">- Fixed errornouse 34 to 35</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:26.0.0.0.35-2" date="1774526400">- Bump nssadapter version to bring in shared PKCS11 session fix</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:26.0.1.0.8-1" date="1777464000">- Updated to repack 26.0.1+8</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:26.0.1.0.8-2" date="1779883200">- Moved jcmd to JDK</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1:26.0.1.0.8-3" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:26.0.2.0.10-1" date="1785240000">- Updated to  repack OpenJDK 26.0.2 (2026-07-21)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1:26.0.2.0.10-2" date="1785240001">- Enable docs on ELN</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:26.0.2.1.0-1" date="1787227200">- Bumoped to repack 26.0.2.1</changelog>
  <changelog author="Jiri Vanek &lt;jvanek@redhat.com&gt; - 1:27.0.0.0.35-1" date="1787486400">- Bumped to jdk27+35-ea</changelog>
</package>
<package pkgid="2ea0ba5e6e9f93bcac6fce6540c6eaa5f1c470c6835807928d557e9c102820d5" name="jigdo-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="9.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-5" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-6" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-7" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-8" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.8.2-9" date="1787313600">- Fix assertion error triggered by out-of-bound access</changelog>
</package>
<package pkgid="c7535933805f0383f7cb6118e9b4bbcfa8627b7419553021fb656bba80e7b14d" name="jigdo-debugsource" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="9.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-5" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-6" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-7" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.8.2-8" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.8.2-9" date="1787313600">- Fix assertion error triggered by out-of-bound access</changelog>
</package>
<package pkgid="d92ee9d14110a509579d6039e13983a7793809d45b058cde927ae143e114c255" name="openbao-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.2" rel="1.el10_2"/>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.4-1" date="1763985600">- update to 2.4.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.0-1" date="1770206400">- update to 2.5.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.1-1" date="1771934400">- update to upstream 2.5.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.2-1" date="1774440000">- update to upstream 2.5.2</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.3-1" date="1776772800">- update to upstream 2.5.3</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.4-1" date="1779278400">- update to upstream 2.5.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.5-1" date="1781697600">- update to upstream 2.5.5</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.0-1" date="1784030400">- update to 2.6.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.1-1" date="1784721600">- update to 2.6.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.2-1" date="1787054400">- update to 2.6.2</changelog>
</package>
<package pkgid="e4a6b96dcaa5d500e42a35c9e243d752fbbee8c45e834d4c3b1b04bc88ebd9ea" name="openbao-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.2" rel="1.el10_2"/>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.4-1" date="1763985600">- update to 2.4.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.0-1" date="1770206400">- update to 2.5.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.1-1" date="1771934400">- update to upstream 2.5.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.2-1" date="1774440000">- update to upstream 2.5.2</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.3-1" date="1776772800">- update to upstream 2.5.3</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.4-1" date="1779278400">- update to upstream 2.5.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.5-1" date="1781697600">- update to upstream 2.5.5</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.0-1" date="1784030400">- update to 2.6.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.1-1" date="1784721600">- update to 2.6.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.2-1" date="1787054400">- update to 2.6.2</changelog>
</package>
<package pkgid="c1e94db24d85e75da666d79239ec1cd7b8d20c967b2b78634c752a5bcec7a773" name="opkssh-debuginfo" arch="aarch64">
  <version epoch="0" ver="0.16.0" rel="2.el10_2"/>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-6" date="1773576000">- Properly use GO_LDFLAGS to overwrite ldflags</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.13.0-7" date="1773576001">- Add missing version ldflag</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-8" date="1775908800">- Update bundled go-jose to v4.1.4</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-1" date="1777809600">- Update to 0.14.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-2" date="1778673600">- Overwrite logfile path with a patch</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-3" date="1782129600">- Update bundled golang.org/x/crypto to 0.53.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-1" date="1782993600">- Update to 0.15.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-2" date="1782993601">- Drop obsolete golang.org/x/crypto override</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-1" date="1784462400">- Update to 0.16.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-2" date="1787140800">- Update bundled go-chi/chi to 5.3.1</changelog>
</package>
<package pkgid="d63fbc4de06d569adf50470421994dc145768add29283d9e3bfd2bc13c425c7d" name="opkssh-debugsource" arch="aarch64">
  <version epoch="0" ver="0.16.0" rel="2.el10_2"/>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-6" date="1773576000">- Properly use GO_LDFLAGS to overwrite ldflags</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.13.0-7" date="1773576001">- Add missing version ldflag</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-8" date="1775908800">- Update bundled go-jose to v4.1.4</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-1" date="1777809600">- Update to 0.14.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-2" date="1778673600">- Overwrite logfile path with a patch</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-3" date="1782129600">- Update bundled golang.org/x/crypto to 0.53.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-1" date="1782993600">- Update to 0.15.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-2" date="1782993601">- Drop obsolete golang.org/x/crypto override</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-1" date="1784462400">- Update to 0.16.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-2" date="1787140800">- Update bundled go-chi/chi to 5.3.1</changelog>
</package>
<package pkgid="8d93f392a68801fad7162dbdd26df46002ba6996d1e4c990d6374d6879ad3562" name="proftpd-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="5de9521de27083a04423c174d0bec3fddab283172348a7f37dfff5752c733a11" name="proftpd-debugsource" arch="aarch64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="7718975d090e32f6f4916111f353276bd492c707d71d8b2813cba100dcf03e5a" name="proftpd-ldap-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="271ae9789bd6e4caf6386fd9e12482582ef1d367e49de5511b0692530b225ab0" name="proftpd-mysql-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="6ef53c732650a040eaf199debb40d679a50654487ce1ffa53cb256d12f86bb16" name="proftpd-postgresql-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="cd9d17ae471fa13053f46b3d0dbfe544db1484ea30225bbd146f4cb786ffd722" name="proftpd-proxy-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="a06b2d90e3dc970d7be6f4af7acb9fef18bc8daa20cb9f7220eddc67e77e8cc6" name="proftpd-sqlite-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="bf8f21abfee51138fa7b6fc75a488951619c3735449599abcb4b0ee4502a9e6e" name="proftpd-utils-debuginfo" arch="aarch64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="8479a405638b66a19770a6e75d6887d03ff83dea31eac6c1b43557fa1cc9a32f" name="pyscard-debugsource" arch="aarch64">
  <version epoch="0" ver="2.2.2" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-6" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.0.5-7" date="1717761600">- Rebuilt for Python 3.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-8" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2.0.5-9" date="1725451200">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-10" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.0.5-11" date="1748865600">- Rebuilt for Python 3.14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-12" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.2.2-1" date="1753617600">- Update to 2.2.2</changelog>
</package>
<package pkgid="2f7db4898fba3345e0602677a0bbfc5bdd7d83947e0767f54cf8229788923bdd" name="python3-pyscard-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.2.2" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-5" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-6" date="1706270400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.0.5-7" date="1717761600">- Rebuilt for Python 3.13</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-8" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2.0.5-9" date="1725451200">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-10" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.0.5-11" date="1748865600">- Rebuilt for Python 3.14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.5-12" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 2.2.2-1" date="1753617600">- Update to 2.2.2</changelog>
</package>
<package pkgid="8a1eaf9055be6c5bddf044192f8b4316f4158faaf3362d533bc233a659823e50" name="rpki-client-debuginfo" arch="aarch64">
  <version epoch="0" ver="9.9" rel="1.el10_2"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.5-1" date="1744459200">- Upgrade to 9.5 (#2359198)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.5-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.6-1" date="1758456000">- Upgrade to 9.6 (#2397181)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.7-1" date="1768305600">- Upgrade to 9.7 (#2429390)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.7-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.8-1" date="1776340800">- Upgrade to 9.8 (#2458536)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.8-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.8-3.git20260609" date="1781352000">- Upgrade to upstream from 2026-06-09 with Git commits 3693bb9
  (portable) and 829f183 (openbsd) for OpenSSL 4.0 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.8-4.git20260609" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.9-1" date="1787572800">- Upgrade to 9.9 (#2521687)</changelog>
</package>
<package pkgid="50aad5836de04fa7eca01b13bd1051341f53edc15e452ef8cc687252c6d14e44" name="rpki-client-debugsource" arch="aarch64">
  <version epoch="0" ver="9.9" rel="1.el10_2"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.5-1" date="1744459200">- Upgrade to 9.5 (#2359198)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.5-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.6-1" date="1758456000">- Upgrade to 9.6 (#2397181)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.7-1" date="1768305600">- Upgrade to 9.7 (#2429390)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.7-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.8-1" date="1776340800">- Upgrade to 9.8 (#2458536)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 9.8-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.8-3.git20260609" date="1781352000">- Upgrade to upstream from 2026-06-09 with Git commits 3693bb9
  (portable) and 829f183 (openbsd) for OpenSSL 4.0 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 9.8-4.git20260609" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 9.9-1" date="1787572800">- Upgrade to 9.9 (#2521687)</changelog>
</package>
<package pkgid="2d0c1e02cafcb2394ed528b7e3fa8771beeaf7d096ba0e818c11efb423da3e2d" name="tin-debuginfo" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.4-4" date="1754481600">- Rebuilt for icu 77.1</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.5-1" date="1766750400">- update to 2.6.5 (rhbz#2424803)</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.5-2" date="1768305600">- stop verifying PGP-2 source tarball signature, gnupg1 was retired
  and it is considered insecure anyway due to MD5 hash usage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.5-4" date="1780920000">- Rebuilt for icu 78.3</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.6.5-5" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-6" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.6-1" date="1787486400">- update to 2.6.6 (resolves rhbz#2521568)</changelog>
</package>
<package pkgid="cef451a9bc21e88c76b64e4fb9df5acbb6333538357d4076abab012321a520c1" name="tin-debugsource" arch="aarch64">
  <version epoch="0" ver="2.6.6" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.4-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.4-4" date="1754481600">- Rebuilt for icu 77.1</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.5-1" date="1766750400">- update to 2.6.5 (rhbz#2424803)</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.5-2" date="1768305600">- stop verifying PGP-2 source tarball signature, gnupg1 was retired
  and it is considered insecure anyway due to MD5 hash usage</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Franti&#x161;ek Zatloukal &lt;fzatlouk@redhat.com&gt; - 2.6.5-4" date="1780920000">- Rebuilt for icu 78.3</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 2.6.5-5" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.5-6" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Dominik Mierzejewski &lt;dominik@greysector.net&gt; - 2.6.6-1" date="1787486400">- update to 2.6.6 (resolves rhbz#2521568)</changelog>
</package>
</otherdata>