# changelog

author: Tim Semeijn <tim@goat.re> - 0.9.4-2
changelog:
  - Fix failing builds with *_poll build patch (3proxy-0.9.4-poll-build.patch)
  - Convert license to SPDX


author: Chris Patterson <cpatterson@microsoft.com> - 0.5.0-1
changelog:
  - Uprev to 0.5.0
  - Drop 0001-cmake-Allow-the-install-directory-to-be-configurable.patch
  - Delete selftest executable after install
  - Add new json-c and libcmocka build dependencies.


author: Packit <hello@packit.dev> - 9-1
changelog:
  Changes with 9
  ----------------
    * ci/packit: set downstream name (#116)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai
    * specfile: build requires `libxcrypt-compat` (#117)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai

  — Somewhere on the Internet, 2025-02-03


author: Packit <hello@packit.dev> - 10-1
changelog:
  Changes with 10
  ----------------
    * main: fix auto-detected distro that is non-visible, tweak order (#124)
      * Author: Michael Vogt, Reviewers: Ondřej Budai
    * main: reset the terminal properly on SIGINT (#125)
      * Author: Michael Vogt, Reviewers: Ondřej Budai

  — Somewhere on the Internet, 2025-02-05


author: Packit <hello@packit.dev> - 11-1
changelog:
  Changes with 11
  ----------------
    * describeimg: typo in describe output (#129)
      * Author: Simon de Vlieger, Reviewers: Michael Vogt
    * go.mod: update to get the latest `progress` fixes from `bib` (#127)
      * Author: Michael Vogt, Reviewers: Simon de Vlieger
    * main: add `-v,--verbose` switch that enables verbose build logging (#126)
      * Author: Michael Vogt, Reviewers: Ondřej Budai
    * main: add add `--force-repo` flag (#134)
      * Author: Michael Vogt, Reviewers: Simon de Vlieger, Tomáš Hozza
    * main: add new `--extra-repo` flag (#113)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Tomáš Hozza
    * main: add new upload command (#119)
      * Author: Michael Vogt, Reviewers: Tomáš Hozza
    * main: update for new reporegistry.New() api (c.f. pr#1179) (#128)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou

  — Somewhere on the Internet, 2025-02-14


author: Packit <hello@packit.dev> - 13-1
changelog:
  Changes with 13
  ----------------
    * chore: bump deps (#146)
      * Author: Simon de Vlieger, Reviewers: Brian C. Lane
    * main: add build --with-buildlog (#106)
      * Author: Michael Vogt, Reviewers: Ondřej Budai, Simon de Vlieger
    * main: argument names (#138)
      * Author: Simon de Vlieger, Reviewers: Michael Vogt, Tomáš Hozza
    * more doc updates (#132)
      * Author: Simon de Vlieger, Reviewers: Michael Vogt
    * readme: update installation instructions (#143)
      * Author: Simon de Vlieger, Reviewers: Ondřej Budai

  — Somewhere on the Internet, 2025-03-05


author: Packit <hello@packit.dev> - 14-1
changelog:
  Changes with 14
  ----------------
    * build(deps): bump github.com/cheggaaa/pb/v3 from 3.1.6 to 3.1.7 in the go-deps group (#147)
      * Author: dependabot[bot], Reviewers: Simon de Vlieger
    * doc: fix typo (#152)
      * Author: Simon de Vlieger, Reviewers: Michael Vogt
    * ibcli: add new --output-name flag and predictable default names (#158)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * main: fix creating output dir for `--with-buildlog` (#150)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
    * main: show "success" message with output dir when build finishes (#154)
      * Author: Michael Vogt, Reviewers: Simon de Vlieger
    * main: skip arch checks on`IMAGE_BUILDER_EXPERIMENTAL=bootstrap` (#155)
      * Author: Michael Vogt, Reviewers: Achilleas Koutsou
    * packit: enable epel-9 and epel-10 (#149)
      * Author: Simon de Vlieger, Reviewers: Michael Vogt, Ondřej Budai

  — Somewhere on the Internet, 2025-03-14


author: Simone Caronni <negativo17@gmail.com> - 0.15.0-6
changelog:
  - Leave autodetection of hardware extensions as per developer's comment at
    https://bugzilla.redhat.com/show_bug.cgi?id=2307795#c16


author: Karel Volný <kvolny@redhat.com> - 2.7.0-1
changelog:
  - Update to 2.7.0 (rhbz#2272301)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.7.1-1
changelog:
  - Update to 2.7.1 (rhbz#2281508)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.8.0-1
changelog:
  - Update to 2.8.0 (rhbz#2291131)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.9.0-1
changelog:
  - Update to 2.9.0 (rhbz#2304188)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.10.1-1
changelog:
  - Update to 2.10.1 (rhbz#2316762)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.11.0-1
changelog:
  - Update to 2.11.0 (rhbz#2323581)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Karel Volný <kvolny@redhat.com> - 2.12.0-1
changelog:
  - Update to 2.12.0 (rhbz#2329741)
  - See the upstream changes at https://github.com/libsidplayfp/libsidplayfp/releases


author: Paul Howarth <paul@city-fan.org> - 1.3.8a-1
changelog:
  - Update to 1.3.8a
    - Fix mod_sftp failure to handle SFTP requests to truncate files to zero size
      (GH#1581)
    - Fix mod_sftp improperly handling SFTP WRITE requests for files opened for
      appending (GH#1584)
    - Build-time detection of Linux POSIX ACL support was broken since 1.3.8rc2
      (GH#1568)
    - Fix failure to load mod_rewrite as a dynamic module due to
      incomplete/missing library linker flags (GH#1590)
    - <Class> section is allowed to be in <Global>, but From directive is not
      (GH#1597)
    - ExtendedLog SSH, SFTP classes not working as expected (GH#1617)
    - Fix mod_sftp not handling multiple concurrent open file handles/transfers
      well for logging (GH#1646)
    - "TLSRequired off" plus Protocols directive caused mod_tls to terminate the
      session abruptly (GH#1679)
    - Fix mod_tls failure to compile against OpenSSL 3.0.8 due to missing
      ENGINE_METHOD_ flags (GH#1689)
    - Unknown named connection error when using different SQL backends (GH#1659)
    - Fix mod_sql not properly closing all named backend connections on session
      exit (GH#1697)
    - SSH key exchanges failed unexpectedly with "unable to write X bytes of raw
      data" errors due to small ProFTPD buffer (GH#1694)
    - Fix high session memory usage caused by SFTP outgoing data buffering
      (GH#1678)
    - Out-of-bounds buffer read when handling FTP commands (GH#1683,
      CVE-2023-51713)
    - SFTP algorithm settings in <Global> section were not being used (GH#1712)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-1
changelog:
  - Update to 1.3.8b
    - Compiling ProFTPD 1.3.8a mod_sftp, mod_tls using libressl 3.7.3 failed
      (GH#1735)
    - Build system failed for specific module names (GH#1756)
    - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
      (CVE-2023-48795, GH#1760)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-2
changelog:
  - Use libsodium to provide ed25519 key support for mod_sftp (#2256340)
  - Update logrotate snippet to use try-reload-or-restart rather than reload
    for distributions with systemd 229 or later (PR#3)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-3
changelog:
  - Add 'proxy' sub-package with unbundled mod_proxy (rhbz#2272051)
  - Update fsio.c: if mkdir fails with EEXIST, also clear the cache (GH#1677)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-4
changelog:
  - Fix RADIUS Message-Authenticator verification in mod_radius
    - https://github.com/proftpd/proftpd/issues/1840
    - https://bugzilla.redhat.com/show_bug.cgi?id=2325448


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-1
changelog:
  - Update to 1.3.8c
    - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
    - Bad handling of lack of extended attributes lead to SFTP out of memory
      error (GH#1785)
    - mod_sftp_sql logged "header value too long" due to unexpected key header
      text (GH#1529)
    - SSH ECDSA host key algorithms were not used as expected despite configuring
      appropriate key (GH#1839)
    - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
      (GH#1840)
    - Supplemental group inheritance granted unintended access to GID 0 due to
      lack of supplemental groups from mod_sql (GH#1830)


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-2
changelog:
  - Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
    - https://github.com/proftpd/proftpd/issues/1866


author: Paul Howarth <paul@city-fan.org> - 1.3.8d-1
changelog:
  - Update to 1.3.8d
    - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
      unexpected behaviour (GH#1855)
    - SFTP channel allocations can lead to high memory utilization over time
      (GH#1876)
    - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)


author: Richard W.M. Jones <rjones@redhat.com> - 7.0.7-2
changelog:
  - Rebuild for Jansson 2.14
    (https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/3PYINSQGKQ4BB25NQUI2A2UCGGLAG5ND/)


