# changelog

author: Onuralp Sezer <thunderbirdtr@fedoraproject.org> - 0.9.0-5
changelog:
  - 00-fix-update-override.patch add into git source for fix build problem (#2024145)
  - cosmetic fixes


author: Hans Ulrich Niedermann <hun@n-dimensional.de> - 1.4.11-3
changelog:
  - only use %doc with absolute paths (removes duplicate listings)
  - stop using env vars in favour of rpm macros
  - remove non-functional explicit %attr


author: Dominik Mierzejewski <rpm@greysector.net> 104-1
changelog:
  - update to 104 (#2033827)
  - fixes CVE-2021-45290 (#2037323, #2037325)
  - fixes CVE-2021-45293 (#2037324, #2037326)


author: Dominik Mierzejewski <dominik@greysector.net> 111-1
changelog:
  - update to 111 (#2144160)
  - backport upstream fixes for OOB reads in string_view
  - disable multi_unit_abbrev_noprint.wasm test running out of memory on i686


author: Petr Menšík <pemensik@redhat.com> - 32:9.19.8-2
changelog:
  - Apply some review fixes (comment #6)
  - Own logrotate and chroot /usr/share
  - Install files with timestamp preservation
  - Skip PIE patch, remove some unused defines
  - Remove PIE patch altogether


author: Germano Massullo <germano.massullo@gmail.com> - 7.18.1-1
changelog:
  - 7.18.1 release
  - added openssl3.patch for Fedora > 35
  - added some pkgconfig
  - added BuildRequires: systemd-rpm-macros
  - temporarily disabled all patches except openssl3.patch
  - added openssl3.patch


author: Björn Esser <besser82@fedoraproject.org> - 4.0-3
changelog:
  - Apply two upstream patches fixing verbose file allocation table printout
  - Tweak Makefile to build all targets in parallel
  - Compile and link test binary during %build stage


author: Björn Esser <besser82@fedoraproject.org> - 4.0-4
changelog:
  - Patch Makefile to be thread-safe on all targets
  - Clean trailing white-space in some files during %prep


author: Todd Zullinger <tmz@pobox.com> - 1.2.3-5
changelog:
  - include output of cgit.conf and git/config.mak in build logs
  - explicitly disable expat, perl, python, and tcl/tk in git build
  - use %{gpgverify} macro to verify tarball signature
  - use %{build_cflags} and %{build_ldflags}
  - preserve timestamps when running install
  - clean up & improve dist conditionals
  - remove %_python_bytecompile_extra
  - limit *.py[co] %exclude to el7
  - refresh highlight v3 patch
  - use git to apply patches


author: Todd Zullinger <tmz@pobox.com> - 1.2.3-7
changelog:
  - update SELinux README
  - simplify install commands
  - improve httpd config file creation
  - explicitly list the cgit cgi-bin script
  - create /var/lib/git to improve SELinux compatibility


author: Robert Scheck <robert@fedoraproject.org> - 1.3.0-4
changelog:
  - Removed systemd(-rpm-macros) switch for old Fedora releases
  - Removed lowering of meson version for old Fedora/RHEL releases
  - Added upstream patch to fix building with meson 0.62.0


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:19.0.0.0.36-1.rolling
changelog:
  - Update to RC version of OpenJDK 19
  - Update release notes to 19.0.0
  - Rebase FIPS patches from fips-19u branch
  - Need to include the '.S' suffix in debuginfo checks after JDK-8284661
  - Add patch to provide translations for Europe/Kyiv added in tzdata2022b
  - Add test to ensure timezones can be translated
  - Remove references to sample directory removed by JDK-8284999


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:19.0.0.0.36-3.rolling
changelog:
  - The stdc++lib, zlib & freetype options should always be set from the global, so they are not altered for staticlibs builds
  - Remove freetype sources along with zlib sources


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:19.0.1.0.10-2.rolling
changelog:
  - Update in-tree tzdata to 2022e with JDK-8294357 & JDK-8295173
  - Update CLDR data with Europe/Kyiv (JDK-8293834)
  - Drop JDK-8292223 patch which we found to be unnecessary
  - Update TestTranslations.java to use public API based on TimeZoneNamesTest upstream


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:19.0.1.0.10-3.rolling
changelog:
  - Update in-tree tzdata & CLDR to 2022g with JDK-8296108, JDK-8296715 & JDK-8297804
  - Update TestTranslations.java to test the new America/Ciudad_Juarez zone


author: Andrew Hughes <gnu.andrew@redhat.com> - 1:19.0.2.0.7-1.rolling
changelog:
  - Update to jdk-19.0.2 release
  - Update release notes to 19.0.2
  - Drop JDK-8293834 (CLDR update for Kyiv) which is now upstream
  - Drop JDK-8294357 (tzdata2022d), JDK-8295173 (tzdata2022e) & JDK-8296108 (tzdata2022f) local patches which are now upstream
  - Drop JDK-8296715 (CLDR update for 2022f) which is now upstream
  - Add local patch JDK-8295447 (javac NPE) which was accepted into 19u upstream but not in the GA tag
  - Add local patches for JDK-8296239 & JDK-8299439 (Croatia Euro update) which are present in 8u, 11u & 17u releases


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.2-2
changelog:
  - Fix compilation with LLVM 13
  - Enable uClibc and POSIX runtime support as requested by upstream.
  - Due to uClibc, package is now buildable only on x86_64.
  - Enable SELinux support


author: Lukáš Zaoral <lzaoral@redhat.com> - 2.2-5
changelog:
  - uClibc must be built with clang (#2045767)
    - Caused by CC=gcc set by implicit %set_build_flags in %build


author: Jakub Ružička <jakub.ruzicka@nic.cz> - 3.2.0-1
changelog:
  - Update to 3.2.0
  - Patch: fix tests on 32-bit platforms
  - Patch: revert problematic hardening of service file
  - Enable QUIC
  - New knot-dnssecutils subpackage
  - Debian compat (knot-utils vs knot-dnsutils)
  - Remove bundled(jquery) version as it differes between distros


author: Peter Fordham <peter.fordham@gmail.com> - 3.3.11.1-14
changelog:
  - Fix autoconf check for C99 and update build to run autoreconf.
    https://sourceforge.net/p/mikmod/bugs/29/


author: Matt Domsch <mdomsch@fedoraproject.org> - 1.4.2-5
changelog:
  - Add systemd protections and restart
  - Use systemd RuntimeDirectory instead of tmpfiles where possible
  - Default config file to using local socket


author: David Levine <par.packager@gmail.com> - 1.7.1-23
changelog:
  - Try adding --docdir to 
    
    CFLAGS="${CFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -flto=auto -ffat-lto-objects -fexceptions -g -grecord-gcc-switches -pipe -Wall -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wp,-D_GLIBCXX_ASSERTIONS -specs=/usr/lib/rpm/redhat/redhat-hardened-cc1 -fstack-protector-strong -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1  -m64 -march=x86-64-v2 -mtune=generic -fasynchronous-unwind-tables -fstack-clash-protection -fcf-protection -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro -Wl,--as-needed  -Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld -specs=/usr/lib/rpm/redhat/redhat-annobin-cc1 }" ; export LDFLAGS ; 
    LT_SYS_LIBRARY_PATH="${LT_SYS_LIBRARY_PATH:-/usr/lib64:}" ; export LT_SYS_LIBRARY_PATH ; 
    CC="${CC:-gcc}" ; export CC ; 
    CXX="${CXX:-g++}" ; export CXX; 
    [ "-flto=auto -ffat-lto-objects"x != x ] && 
    for file in $(find . -type f -name configure -print); do 
      /usr/bin/sed -r --in-place=.backup 's/^char \(\*f\) \(\) = /__attribute__ ((used)) char (*f) () = /g' $file; 
      diff -u $file.backup $file && mv $file.backup $file 
      /usr/bin/sed -r --in-place=.backup 's/^char \(\*f\) \(\);/__attribute__ ((used)) char (*f) ();/g' $file; 
      diff -u $file.backup $file && mv $file.backup $file 
      /usr/bin/sed -r --in-place=.backup 's/^char \$2 \(\);/__attribute__ ((used)) char \$2 ();/g' $file; 
      diff -u $file.backup $file && mv $file.backup $file 
      /usr/bin/sed --in-place=.backup '1{$!N;$!N};$!N;s/int x = 1;\nint y = 0;\nint z;\nint nan;/volatile int x = 1; volatile int y = 0; volatile int z, nan;/;P;D' $file; 
      diff -u $file.backup $file && mv $file.backup $file 
      /usr/bin/sed --in-place=.backup 's#^lt_cv_sys_global_symbol_to_cdecl=.*#lt_cv_sys_global_symbol_to_cdecl="sed -n -e '"'"'s/^T .* \\(.*\\)$/extern int \\1();/p'"'"' -e '"'"'s/^$symcode* .* \\(.*\\)$/extern char \\1;/p'"'"'"#' $file; 
      diff -u $file.backup $file && mv $file.backup $file 
    done; 
    [ "1" = 1 ] && for i in $(find $(dirname ./configure) -name config.guess -o -name config.sub) ; do 
        [ -f /usr/lib/rpm/redhat/$(basename $i) ] && /usr/bin/rm -f $i && /usr/bin/cp -fv /usr/lib/rpm/redhat/$(basename $i) $i ; 
    done ; 
    [ "1" = 1 ] && [ x != "x-Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld" ] && 
        for i in $(find . -name ltmain.sh) ; do 
          /usr/bin/sed -i.backup -e 's~compiler_flags=$~compiler_flags="-Wl,-z,now -specs=/usr/lib/rpm/redhat/redhat-hardened-ld"~' $i 
        done ; 
    ./configure --build=x86_64-redhat-linux-gnu --host=x86_64-redhat-linux-gnu \
  	--program-prefix= \
  	--disable-dependency-tracking \
  	 \
  	--prefix=/usr \
  	--exec-prefix=/usr \
  	--bindir=/usr/bin \
  	--sbindir=/usr/sbin \
  	--sysconfdir=/etc \
  	--datadir=/usr/share \
  	--includedir=/usr/include \
  	--libdir=/usr/lib64 \
  	--libexecdir=/usr/libexec \
  	--localstatedir=/var \
  	--sharedstatedir=/var/lib \
  	--mandir=/usr/share/man \
  	--infodir=/usr/share/info.


author: Paul Howarth <paul@city-fan.org> - 1.3.7c-1
changelog:
  - Update to 1.3.7c
    - Improve mod_tls log messages for unsupported older TLS protocol requests
      (GH#1273)
    - Fix memory disclosure to RADIUS servers by mod_radius (GH#1284)
    - Properly handle <VirtualHost> sections that use interface/device names
      (GH#1282)
    - PCRE expressions with capture groups are not being handled properly
      (GH#1300)
    - AuthUserFile permissions check fails during SIGHUP, causing ProFTPD to
      stop (GH#1307)


author: Paul Howarth <paul@city-fan.org> - 1.3.8-0.1.rc2
changelog:
  - Update to 1.3.8rc2
    - mod_sftp crashes when handling aes256-ctr OpenSSH-specific key with some
      old OpenSSL versions (Bug #4401)
    - mod_ifsession failed to reset directory config lookup after <Directory>
      section merges (Bug #4315)
    - Support <Limit> configurations for HELP command (GH#1296)
    - Add support for the libidn2 library, over libidn, for e.g. mod_rewrite
      mappings (GH#1286)
    - Changed the default behaviour of mod_tls, such that TLS renegotiations on
      control/data connections are not requested by default - TLS renegotiations
      have a long and sordid history; many SSL/TLS libraries no longer implement
      them, or disable them by default (Bug #4443)
    - mod_auth_otp should honor RequireTableEntry semantics for SFTP logins
      (GH#1319)
  - Build with libidn2 support
  - Drop support for EOL distributions prior to EL-7
    - Always use systemd and assume preset support
    - %{rundir} is always /run
    - Use systemd scriptlet macros from systemd-rpm-macros
    - Always use libmemcached
    - Use %license unconditionally
  - Fix use of deprecated check APIs (GH#1262)


author: Paul Howarth <paul@city-fan.org> - 1.3.8-0.2.rc3
changelog:
  - Update to 1.3.8rc3
    - Support SSH hostkey rotation via OpenSSH extensions (GH#1323)
    - NLST did not behave consistently for relative paths (GH#1325)
    - Support AES Galois Counter Mode (AES-GCM) in SSH; support for the
      "aes128-gcm@openssh.com" and "aes256-gcm@openssh.com" ciphers has been
      added to mod_sftp (Bug #3759)
    - Implement an LDAPConnectTimeout directive, to configure the timeout used
      when connecting to LDAP servers (GH#1333)
    - Implement OpenSSH "Encrypt-Then-MAC" (ETM) algorithm extensions (GH#1330)
    - Implement AllowForeignAddress class matching for passive data transfers
      (GH#1346)
    - Implement support for PCRE2 (GH#1353)
    - ProFTPD wouldn't start with several locales (Bug #4466)
    - Auth sources providing space-bearing user/group names caused compliance
      issues with MLSD/MLST responses (GH#1367)
    - DeleteAbortedStores removed successfully transferred files unexpectedly
      (Bug #4467)
    - Omit EPRT/EPSV from FEAT response when denied by <Limit> configuration
      (GH#1383)
    - Support uploading to symlinked files (GH#1379)
    - Keepalive socket options should be set using IPPROTO_TCP, not SOL_SOCKET
      (GH#1401)
    - TCP keepalive SocketOptions should apply to control as well as data
      connection (GH#1402)
    - ProFTPD always used the same PassivePorts port for first transfer (GH#1396)
    - mod_sftp needs to handle unknown SSH messages in an RFC-compliant manner,
      ignoring rather than disconnecting (GH#1410)
    - Improve handling of some globally applied configuration directives (GH#1418)
    - Name-based virtual hosts not working as expected after upgrade from 1.3.7a
      to 1.3.7b (GH#1369)


author: Paul Howarth <paul@city-fan.org> - 1.3.8-0.3.rc4
changelog:
  - Update to 1.3.8rc4
    - mod_sftp should fail on startup when SFTP and TLS are both enabled for a
      vhost (GH#1434)
    - DelayTable not properly using documented default value; this is a
      regression caused by the changes for Bug#4020 (GH#1440)
    - Support customizing SSH ciphers, digests, key exchanges via SFTPClientMatch
      (GH#1444)
    - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x (GH#1448)
    - BanOnEvent BadProtocol triggers segfault (GH#1445)
    - SFTP "check-file" implementation computes incorrect results (GH#1439)
    - Implement SFTPHostKeys directive for configuring the SSH host key
      algorithms (GH#1457)
    - Implement the "curve448-sha512" SSH key exchange algorithm (GH#1437)
    - Include directive broken when using wildcards for directory components
      (GH#1472)
    - mod_sftp fails to build using OpenSSL 1.0.x: undefined reference to
      'EVP_MD_CTX_reset' (Bug #4485)
    - Reload after omitting explicit ModulePath value causes fatal module load
      failures (GH#1476)
  - Drop pcre build dependency since we have been explicitly disabling it for the
    last 5 years anyway
  - Fix X448 support check to fail properly with OpenSSL 1.1.0 (GH#1488)


author: Paul Howarth <paul@city-fan.org> - 1.3.8-0.4.rc4
changelog:
  - Update mod_vroot to 0.9.10
    - Fix unexpected filtering behaviour with mod_vroot (#2104972, GH#1491)


author: Paul Howarth <paul@city-fan.org> - 1.3.8-1
changelog:
  - Update to 1.3.8
    - 1.3.8rc4 failed to build mod_sftp with OpenSSL 1.1.0 due to X448 check
      (GH#1488)
    - 1.3.8rc4 failed to build on Solaris due to missing type declarations
      (GH#1494)
    - mod_ifsession doesn't change the effect of SFTPMaxChannels (GH#1500)
    - mod_tls module unexpectedly allows TLS handshake after authentication in
      some configurations (GH#1533)
    - Disable FSCachePolicy by default (GH#1528)
    - Avoid logging "session closed" messages unless there is a corresponding
      "session opened" log message, to avoid user confusion (GH#1539)
    - Implement support for the CSID FTP command (GH#1550)
    - Unable to verify signed data: signature type 'rsa-sha2-512' does not match
      publickey algorithm 'ssh-rsa' (Bug #4491)
    - mod_auth_otp improperly allows keyboard-interactive logins for users
      lacking OTP entries (GH#1560)
  - Update mod_vroot to 0.9.11
    - Addresses a bad interaction with mod_auth_file, and failed login attempts,
      which can lead to inexplicably "stuck" processes that cannot be terminated
      (https://github.com/proftpd/proftpd/issues/1384)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 1.3.8-4
changelog:
  - Ensure mod_rewrite is linked against libidn2 so that it loads properly
    (rhbz#2166454, https://github.com/proftpd/proftpd/issues/1590)
  - No longer need to explicitly remove libtool archives from Fedora 36 onwards


author: Pavel Raiskup <praiskup@redhat.com> - 5.5.5-1
changelog:
  - new upstream release, per release notes:
    https://github.com/okbob/pspg/releases/tag/5.5.4
    https://github.com/okbob/pspg/releases/tag/5.5.5


author: Pavel Raiskup <praiskup@redhat.com> - 5.5.13-1
changelog:
  - new upstream release, per release notes:
    https://github.com/okbob/pspg/releases/tag/5.5.13
    https://github.com/okbob/pspg/releases/tag/5.5.12
    https://github.com/okbob/pspg/releases/tag/5.5.11
    https://github.com/okbob/pspg/releases/tag/5.5.10
    https://github.com/okbob/pspg/releases/tag/5.5.9
    https://github.com/okbob/pspg/releases/tag/5.5.8
    https://github.com/okbob/pspg/releases/tag/5.5.7


author: Pavel Raiskup <praiskup@redhat.com> - 5.7.2-1
changelog:
  - new upstream release, per release notes:
    https://github.com/okbob/pspg/releases/tag/5.7.2
    https://github.com/okbob/pspg/releases/tag/5.7.1
    https://github.com/okbob/pspg/releases/tag/5.7.0
    https://github.com/okbob/pspg/releases/tag/5.6.4
    https://github.com/okbob/pspg/releases/tag/5.6.2
    https://github.com/okbob/pspg/releases/tag/5.6.0


author: Sérgio Basto <sergio@serjux.com> - 4.4.3-2
changelog:
  - Add unitdir, we may have unitdir but by default disabled, preset just enable service by default which understandably was not approved.
    to check presets run `systemctl status xpra | grep preset`
  - Un-split xpra-udev and other improvements
  - Add support to procps, avif, qrencode, libdrm and libwebp


author: Sérgio Basto <sergio@serjux.com> - 4.4.3-3
changelog:
  - Fix epel builds, seems upstream sort out py3cairo hack on el8
  - el8 now also have xorg-x11-drv-dummy


