# changelog

author: Than Ngo <than@redhat.com> - 119.0.6045.159-1
changelog:
  - update to 119.0.6045.159, upstream security release
     High CVE-2023-5997, use after free in Garbage Collection
     High CVE-2023-6112, use after free in Navigation
  - add Requires/Conflicts for ABI break in fmpeg-free 6.0.1
  - drop first_dts patch, reintroduce first_dts patch in ffmpeg-free-6.0.1
  - fixed python3 syntaxWarning: invalid escape sequenc
  - skip clang's patches for epel8 that now gets clang-16 update


author: Than Ngo <than@redhat.com> - 119.0.6045.199-2
changelog:
  - fixed bz#2242271, built with bundleminizip in fedora > 39
  - fixed bz#2251884, built with fstack-protector-strong for improved security


author: Than Ngo <than@redhat.com> - 120.0.6099.109-1
changelog:
  - update to 120.0.6099.109
     * High CVE-2023-6702: Type Confusion in V8
     * High CVE-2023-6703: Use after free in Blink
     * High CVE-2023-6704: Use after free in libavif
     * High CVE-2023-6705: Use after free in WebRTC
     * High CVE-2023-6706: Use after free in FedCM
     * Medium CVE-2023-6707: Use after free in CSS


author: David Michael <fedora.dm0@gmail.com> - 1.5-4
changelog:
  - Enable MicroLZMA support.
  - Switch the License tag to SPDX, and ship matching noneffective license files.


author: David Michael <fedora.dm0@gmail.com> - 1.6-3
changelog:
  - Backport patches for CVE-2023-33551 and CVE-2023-33552.
  - Change conditional build feature defaults for supporting EPEL 9.


author: Jens Petersen <petersen@redhat.com> - 9.4.4-15
changelog:
  - https://www.haskell.org/ghc/blog/20221224-ghc-9.4.4-released.html
  - https://downloads.haskell.org/~ghc/9.4.4/docs/users_guide/9.4.4-notes.html


author: Jens Petersen <petersen@redhat.com> - 9.4.4-17
changelog:
  - suffix hadrian with ghc_major
  - only add ld.so.conf.d and remove RPATH if _ghcdynlibdir
  - do not duplicate libHSrts-*.so in filelist
  - add debian haddock-remove-googleapis-fonts.patch
  - update buildpath-abi-stability.patch
  - mv ld.so.conf.d out of rts block
  - use ghcliblib everywhere and add its subdirs
  - update abicheck with ghc_major
  - sync packaging changes: subpackage ghc-bignum, llvm13, -W, _ghcdynlibdir
  - build with ghc9.2


author: Jens Petersen <petersen@redhat.com> - 9.4.5-19
changelog:
  - https://www.haskell.org/ghc/blog/20230418-ghc-9.4.5-released.html
  - https://downloads.haskell.org/~ghc/9.4.5/docs/users_guide/9.4.5-notes.html
  - version bumps for base, bytestring, containers, parsec, text


author: Jens Petersen <petersen@redhat.com> - 9.4.5-21
changelog:
  - backport bcond perfbuild changes from ghc9.6
  - build the ghc.1 manpage with sphinx and version not to conflict
  - patch hadrian to build with Cabal-3.8
  - s390x: no longer apply unregisterized patches


author: Jens Petersen <petersen@redhat.com> - 9.4.6-22
changelog:
  - https://downloads.haskell.org/~ghc/9.4.6/docs/users_guide/9.4.6-notes.html
  - update license tags to SPDX
  - base subpkg now owns ghcliblib and ghclibplatform dirs (#2185357)


author: Jens Petersen <petersen@redhat.com> - 9.4.8-25
changelog:
  - s390x: patch from @stefansf (IBM) to fix llvm alignment in data sections
    which should fix certain runtime crashes (#2248097)


author: Jiri Vanek <jvanek@redhat.com> - 1:21.0.0.0.35-2.rolling
changelog:
  - adapted to new path in sources
  - repacked alt-java from misc subpkg
  - adapted alt-java to grep correctly prctl
  - removed no longer prepared nss.cfg


author: Jiri Vanek <jvanek@redhat.com> - 1:21.0.1.0.12-2.rolling
changelog:
  - added setup and thus enabled debuginfo strip
  - note, that debugsources are now empty. Symlink from full sourcess to build/jdk21.build or build/vcstag is needed


author: Jiri Vanek <jvanek@redhat.com> - 1:21.0.1.0.12-3.rolling
changelog:
  - proeprly filing debugsources pkg
    by addedd symlinks restructuring the structure for original build sources
  - according to logs, some are still missing
    probably generated during the build, and thus not existing in prep,
    when the sources subpkg is created after patching


author: Davide Cavalca <dcavalca@fedoraproject.org> - 2023.06.20-1
changelog:
  - Update to 2023.06.20
  - Update license tag and convert it to SPDX
  - Tweak package summary and description
  - Rework specfile to follow the Fedora packaging guidelines


author: Richard Russon <rich@flatcap.org> - 20230322-1
changelog:
  - Features
    - #3372 - use DT_SLIST for charset variables
    - #3383 - support viewing html with embedded images, #3383
    - #3408 - account command, see the [feature page](https://neomutt.org/feature/account-cmd)
    - #3411 - check that `sendmail` and `inews` don't contain shell meta characters
    - #3412 - browser: add mailbox_folder_format config variable
    - #3421 - enter: add function kill-whole-line
    - #3414 - account command: add macOS keychain sample provider
    - #3430 - account command: add GPG+JSON sample provider
    - #3474 - expose italics attribute for colour scheme
    - #3471 - allow `source` in hooks to point to relative paths
    - #3506 - resolve alternates when subscribing/unsubscribing
    - #3492 - notmuch: allow specifying configuration file
    - #3547 - notmuch: allow usage of notmuch profiles
    - #3524 - add GNU SASL support for authentication (`--gsasl` configure option)
    - #3548 - extend colour objects to support patterns
    - #3586 - detect and fixup maildirs with missing "new" and "tmp" directories
    - #3634 - generate standard MIME types as application/pkcs7-* instead of legacy application/x-pkcs7-*
    - #3639 - compose: add Smime: pseudo header
    - #3641 - handle more X-Mutt pseudo-headers with `edit_headers`
    - #3702 - use `socket_timeout` to time out read/write operations
    - #3717 - allow `[fmt]` in `$folder_format`
    - #3719 - respect `attribution_locale` in `indent_string` and `post_indent_string`
    - #3720 - pattern: add `~K` to search Bcc, include Bcc in `~C`, `%C`, `~L`, and `~p`
    - #3726 - colour postponed emails list
    - #3734 - allow querying user-defined variables (`$my_var`) with `-Q`
    - #3737 - dump user-defined variables (`$my_var`) with `-D`
    - #3655 - generate purely random `Message-ID` headers
    - #3752 - allow an empty `sidebar_divider_char`
    - #3745 - fix handling and display of group addresses
  - Bug Fixes
    - #3386 - fix `status_on_top` to work on complex windows, e.g., attach
    - #3397 - imap: fix off-by-one error causing bogus "Progress message 10/9" message
    - #3423 - attach: fix segfault when viewing HTML attachment in compose mode
    - #3434 - allow for longer expansions in e.g., `index_format`
    - #3450 - accept unpadded base64-encoded data, as some mailers produce
    - #3465 - fix hangup when trying to add email address from help screens
    - #3468 - handle corrupted header caches
    - #3518 - fix slowdown when changing folders
    - #3828 - improve error detection for invalid `color` regexes
    - #3533 - distinguish between old/new with mark_old unset
    - #3539 - parse mboxes with unconventional `From` lines
    - #3572 - fix hostname detection for hostname ending with a "."
    - #3596 - fix truncated SMTP lines in case of very long lines
    - #3600 - use `smime_sign_as` instead of `pgp_sign_as` when signing S/MIME messages
    - #3697 - set `smime_sign_as` instead of `smime_default_key` when signing 
    - #3609 - fix wrong message being marked as read with `$pager_read_delay = 1`
    - #3653 - fix negative new-mail count on maildir
    - #3656 - skip zero width non-joiner character in the pager 
    - #3664 - handle text/vcard as not being an attachment, same as for text/x-vcard
    - #3666 - fix `hdr_order` not sorting last header correctly
    - #3673 - make exiting via SIGINT more graceful
    - #3700 - fix `unhook index-format-hook`
    - #3709 - send: delete signature when sending fails #3709 
    - #3727 - SMTP: try all available methods even if SASL is not compiled in
    - #3730 - fix decryption issue when postponing S/MIME encrypted mails
    - avoid unnecessary refreshes
    - fixed a number of memory leaks and crashes
  - Config
    - #3604 - rename `ask_follow_up` to `ask_followup_to`
    - #3659 - rename `sidebar_whitelist`/`unsidebar_whitelist` to `sidebar_pin`/`sidebar_unpin`
    - #3629 - skip line rest of line after a warning
    - #3670 - `vfolder_format` is now deprecated, use `folder_format`
    - #3702 - rename `connect_timeout` to `socket_timeout`
    - #3697 - `pgp_entry_format`: add %i expand for the key fingerprint 
    - #3724 - rename `attribution` to `attribution_intro` and
      `post_indent_string` to `attribution_trailer`
    - config variables are now properly spelled with underscores between names,
      e.g., `implicit_autoview` -> `implicit_auto_view`, `message_cachedir` ->
      `message_cache_dir`; the old names were kept as synonyms
  - Translations
    - 100% Czech
    - 100% German
    - 100% Hungarian
    - 100% Lithuanian
    - 100% Portuguese (Brazil)
    - 100% Serbian
    - 100% Slovak
    - 100% Turkish
    - 99% Spanish
    - 99% Ukrainian
    - 94% Polish
    - 72% Catalan
  - Docs
    - lots of documentation cleanups and updates
  - Code
    - a lot of refactor to make the code more organizes, especially in these
      areas: windowing, menu, browser, enter, function dispatching, key handling,
      auto-completion
    - fewer global variables
    - removal of some unmaintained contrib code
    - new maintained sample config and examples are in the `data` directory
    - the contrib script mutt_oauth2.py received a lot of love
  - Build
    - #3548 - support building with Undefined Behaviour Sanitizer (`--ubsan` configure option)
    - #3722 - generate compile_commands.json (`--compile-commands` configure option)
    - use pkg-config to locate most of the 3rd party dependencies
    - fix curses for netbsd
    - improve our CI stack
    - create libparse - parsing functions that can be easily tested
    - refactor commands / icommands


author: Richard Russon <rich@flatcap.org> - 20230407-1
changelog:
  - Features
    - imap : support IMAP4 ID extension (RFC2971)
    - parse: query all changed (`set`) / all (`set all`) config variables
  - Bug Fixes
    - lua: fix command registration
    - postpone: use colours from the right mailbox
    - smtp: ignore oauth if it isn't configured and not requested
  - Changed Config
    - New: `imap_send_id` - Send IMAP ID command when logging in
  - Translations
    - 100% Czech
    - 100% German
    - 100% Hungarian
    - 100% Lithuanian
    - 100% Portuguese (Brazil)
    - 100% Serbian
    - 100% Slovak
    - 99% Polish
  - Docs
    - Recommend GPGME
  - Build
    - fix race condition in `make install`
    - fallback to detect SASL manually if pkg-config fails, e.g., homebew
  - Code
    - libmutt: eliminate use of config variables
    - fix ubsan warning
    - mutt: optimize and inline mutt_str_is_email_wsp()
    - progress: update ncurses only when there is actual progress
    - email: Read assumed_charset outside loops
    - hcache: do less work when not in use
    - pager: add helper for getting $pager
    - hcache: remove spurious +1 from Buffer serialization.


author: Richard Russon <rich@flatcap.org> - 20230517-1
changelog:
  - Features
    - #3699 - Support 24bit colors, aka truecolor
    - #3738 - Show complete MIME structure in attachments
    - #3842 - Allow percentages to be localized
  - Bug Fixes
    - #3813 - Fix crash in op_browser_subscribe
    - #3844 - Select the first email when coming from an empty limit
    - #3848 - Fix counting new mails in maildir
    - #3759 - bind: fix incorrect conflict report
    - #3781 - index: only refresh the menu on non-focus window changes
    - #3856 - tunnel: fix reconnection with `ssl_force=true`
    - #3860 - maildir: stop parsing headers at the end of the headers section
    - #3864 - Fix handling of bright colours
    - Fix sorting of labels
  - Translations
    - 100% Serbian
    - 100% Turkish
    - 100% Lithuanian
    - 100% Hungarian
    - 100% German
    - 99% Norwegian (Bokmål)
    - 99% Slovak
    - 99% Portuguese (Brazil)
    - 99% Czech
    - 95% French
  - Build
    - #3798 - Build with libidn2 by default, remove support for libidn1
  - Code
    - config: dynamically create/delete variables
    - config: unify handling of NeoMutt and user (my_) variables
    - config: cache config variables used often
    - speed: various speedups in parsing emails
    - cleanups: lots of code cleanups
    - Huge refactoring towards a separation of Mailbox/MailboxView


author: Richard Russon <rich@flatcap.org> - 20231006-1
changelog:
  - Features
    - #3870 - color: allow 'alert', 'bright', 'light' prefix for colorNNN
    - #3871 - color: refactor parsing code
    - #3895 - imap: truncate large UIDVALIDITYs to support non-conforming IMAP servers
    - #3898 - hcache: shrink Email and Body caches
    - #3900 - prompt: treat complete-query as complete where it makes sense
    - #3925 - help: add message flags to help screen
    - #3932 - help: add alternating colors
    - #3982 - mailboxes: add `-label`, `-notify` and `-poll` options
    - #4038 - add help to questions
    - #4046 - color_directcolor: Also set the default/initial value on startup
  - Bug Fixes
    - #3897 - maildir: fix sync when a deleted file disappears
    - #3878 - gnutls: fix "certificate saved" message
    - #3895 - imap: truncate large UIDVALIDITYs to support non-conforming servers
    - #3897 - maildir: fix fix error with `<sync-mailbox>` on mbsync
    - #3901 - address: parse comments after address
    - #3915 - bind: fix truncated binding strings
    - #3956 - fix 'from' address when real name isn't set
    - #3962 - Fix crash on `<next-thread>` when the `<limit>`ed view is empty
    - #3985 - browser: fix autocompletion
    - #3988 - pager: fix search crash
    - #3999 - help: fix search highlight
    - #4049 - force mail check on current mailbox after `<shell-escape>`
    - #4051 - openssl: continue if a signal interrupts an SSL read/write
  - Changed Config
    - #3881 - Rename `$imap_keepalive` to `$imap_keep_alive`
    - #3889 - Change defaults to use `%<...>` conditional syntax
    `$attach_format`, `$index_format`, `$mailbox_folder_format`,
    `$status_format`, `$ts_icon_format`, `$ts_status_format`
    - #3949 - Add `browser_sort_dirs_first` to always list directories first
  - Translations
    - 100% Turkish
    - 100% Serbian
    - 100% Lithuanian
    - 100% German
    - 99% Czech
    - 99% Polish
    - 98% Slovak
  - Code
    - #3877 - imap: factor out tagged emails
    - #3799 - address: use struct Buffer instead of plain char pointers
    - #3868 - drop notifications relay
    - #3869 - move `$delete_untag` out of the backend
    - #3873 - respect `--[disable-]fmemopen` in tests
    - hcache: optimize storage requirements, reduce config
    - logging: catch format string errors
    - colour:  refactor colour parsing
    - refactoring, cleanup
    - fixed coverity defects
    - convert many functions to use a `Buffer`


author: Richard Russon <rich@flatcap.org> - 20231023-1
changelog:
  - Bug Fixes
    - #4060 fix crash on exit
    - #4061 fix header colour
    - #4064 fix 32-bit date overflow
    - #4078 fix new mail in limited view
    - nntp: fix use-after-free
    - color: fix ansi colours
    - color: add +truecolor to version string


author: Richard Russon <rich@flatcap.org> - 20231103-1
changelog:
  - Features
    - #4080 - info screen: enable <save-message>
    - #4075 - add color command
    - color: add ANSI RGB support
    - color: Support ANSI 2x clear sequences
  - Bug Fixes
    - #4074 - color: fix palette conversion
    - #4081 - fix logging on error
    - #4081 - log: vim-style
    - #4082 - fix file auto-completion
    - #4090 - improve logic for growing mailbox memory
  - Translations
    - 100% Czech
    - 100% German
    - 100% Lithuanian
    - 100% Serbian
    - 100% Slovak
    - 100% Turkish
  - Build
    - #4085 - fix CFLAGS/LDFLAGS for ncurses
    - #4085 - configure --with-iconv
  - Code
    - #4067 - remove unused count of new mails from index private data
    - #4086 - smtp: Simplify the API of smtp_code()
    - #4091 - simplify CLAMP by expressing it with MIN/MAX
    - color: introduce ColorElement
    - color: log gui info on startup
    - color: move business logic out of parsers
    - color: tidy OptNoCurses cases
    - log: add log_multiline()
    - test: increase coverage


author: Richard Russon <rich@flatcap.org> - 20231221-1
changelog:
  - Features
    - #4126 - add alias 'tags:'
  - Bug Fixes
    - #4115 - create HelpBar after colours
    - #4116 - Fix Batch Sending of Emails
    - #4119 - Fix Header Cache Key Handling
    - #4121 - mutt_oauth2.py: error out if ENCRYPTION_PIPE was not supplied
    - #4124 - config: fix flag overlaps
    - #4125 - compose: restore view-text/pager/mailcap
    - color: fix attr_color_copy()
    - fix :color dump
    - fix leak in completion
    - force mail check on current mailbox after `<imap-fetch-mail>`
    - Allow sending an empty mail
    - mutt_oauth2.py: Use readline to overcome macOS input() restrictions
  - Changed Config
    - add $history_format: '%s'
  - Translations
    - 100% Czech
    - 100% German
    - 100% Lithuanian
    - 100% Serbian
    - 100% Slovak
    - 100% Turkish
    - 99% Spanish
    - 99% Hungarian
  - Coverity defects
    - #4111 Educate Coverity about ARRAYs
    - fix defects
  - Build
    - #4098 - build: use fallthrough attribute
    - #4100 - build: split maildir and mh types
    - #4101 - version: drop default features
    - #4108 - strip non-conditionals
    - #4122 - add github action to check for unused functions (xunused)
    - update fedora action
    - coverage: fix build for lcov v2
    - tests: fix error cases
  - Code
    - #4097 - config: add DT_ON_STARTUP
    - #4104 - Change mutt_default_save() and addr_hook() to take a buffer
    - #4105 - Use buffer pool in tests
    - #4106 - Switch some buffers to use the buffer pool
    - #4109 - Improve the Progress Bar
    - #4117 - remove MxOps::path_parent() and mutt_path_parent()
    - #4120 - remove unused functions
    - #4131 - move editor test code
    - #4133 - move log_disp_null() into test folder
    - #4137 - move config string name functions into tests
    - add: hook_new()/hook_free()
    - fix more printf-style params
    - rename compare to equal
    - hcache: renaming for clarity


author: Paul Howarth <paul@city-fan.org> - 1.3.8-0.1.rc2
changelog:
  - Update to 1.3.8rc2
    - mod_sftp crashes when handling aes256-ctr OpenSSH-specific key with some
      old OpenSSL versions (Bug #4401)
    - mod_ifsession failed to reset directory config lookup after <Directory>
      section merges (Bug #4315)
    - Support <Limit> configurations for HELP command (GH#1296)
    - Add support for the libidn2 library, over libidn, for e.g. mod_rewrite
      mappings (GH#1286)
    - Changed the default behaviour of mod_tls, such that TLS renegotiations on
      control/data connections are not requested by default - TLS renegotiations
      have a long and sordid history; many SSL/TLS libraries no longer implement
      them, or disable them by default (Bug #4443)
    - mod_auth_otp should honor RequireTableEntry semantics for SFTP logins
      (GH#1319)
  - Build with libidn2 support
  - Drop support for EOL distributions prior to EL-7
    - Always use systemd and assume preset support
    - %{rundir} is always /run
    - Use systemd scriptlet macros from systemd-rpm-macros
    - Always use libmemcached
    - Use %license unconditionally
  - Fix use of deprecated check APIs (GH#1262)


author: Paul Howarth <paul@city-fan.org> - 1.3.8-0.2.rc3
changelog:
  - Update to 1.3.8rc3
    - Support SSH hostkey rotation via OpenSSH extensions (GH#1323)
    - NLST did not behave consistently for relative paths (GH#1325)
    - Support AES Galois Counter Mode (AES-GCM) in SSH; support for the
      "aes128-gcm@openssh.com" and "aes256-gcm@openssh.com" ciphers has been
      added to mod_sftp (Bug #3759)
    - Implement an LDAPConnectTimeout directive, to configure the timeout used
      when connecting to LDAP servers (GH#1333)
    - Implement OpenSSH "Encrypt-Then-MAC" (ETM) algorithm extensions (GH#1330)
    - Implement AllowForeignAddress class matching for passive data transfers
      (GH#1346)
    - Implement support for PCRE2 (GH#1353)
    - ProFTPD wouldn't start with several locales (Bug #4466)
    - Auth sources providing space-bearing user/group names caused compliance
      issues with MLSD/MLST responses (GH#1367)
    - DeleteAbortedStores removed successfully transferred files unexpectedly
      (Bug #4467)
    - Omit EPRT/EPSV from FEAT response when denied by <Limit> configuration
      (GH#1383)
    - Support uploading to symlinked files (GH#1379)
    - Keepalive socket options should be set using IPPROTO_TCP, not SOL_SOCKET
      (GH#1401)
    - TCP keepalive SocketOptions should apply to control as well as data
      connection (GH#1402)
    - ProFTPD always used the same PassivePorts port for first transfer (GH#1396)
    - mod_sftp needs to handle unknown SSH messages in an RFC-compliant manner,
      ignoring rather than disconnecting (GH#1410)
    - Improve handling of some globally applied configuration directives (GH#1418)
    - Name-based virtual hosts not working as expected after upgrade from 1.3.7a
      to 1.3.7b (GH#1369)


author: Paul Howarth <paul@city-fan.org> - 1.3.8-0.3.rc4
changelog:
  - Update to 1.3.8rc4
    - mod_sftp should fail on startup when SFTP and TLS are both enabled for a
      vhost (GH#1434)
    - DelayTable not properly using documented default value; this is a
      regression caused by the changes for Bug#4020 (GH#1440)
    - Support customizing SSH ciphers, digests, key exchanges via SFTPClientMatch
      (GH#1444)
    - Ensure that mod_sftp algorithms work properly with OpenSSL 3.x (GH#1448)
    - BanOnEvent BadProtocol triggers segfault (GH#1445)
    - SFTP "check-file" implementation computes incorrect results (GH#1439)
    - Implement SFTPHostKeys directive for configuring the SSH host key
      algorithms (GH#1457)
    - Implement the "curve448-sha512" SSH key exchange algorithm (GH#1437)
    - Include directive broken when using wildcards for directory components
      (GH#1472)
    - mod_sftp fails to build using OpenSSL 1.0.x: undefined reference to
      'EVP_MD_CTX_reset' (Bug #4485)
    - Reload after omitting explicit ModulePath value causes fatal module load
      failures (GH#1476)
  - Drop pcre build dependency since we have been explicitly disabling it for the
    last 5 years anyway
  - Fix X448 support check to fail properly with OpenSSL 1.1.0 (GH#1488)


author: Paul Howarth <paul@city-fan.org> - 1.3.8-0.4.rc4
changelog:
  - Update mod_vroot to 0.9.10
    - Fix unexpected filtering behaviour with mod_vroot (#2104972, GH#1491)


author: Paul Howarth <paul@city-fan.org> - 1.3.8-1
changelog:
  - Update to 1.3.8
    - 1.3.8rc4 failed to build mod_sftp with OpenSSL 1.1.0 due to X448 check
      (GH#1488)
    - 1.3.8rc4 failed to build on Solaris due to missing type declarations
      (GH#1494)
    - mod_ifsession doesn't change the effect of SFTPMaxChannels (GH#1500)
    - mod_tls module unexpectedly allows TLS handshake after authentication in
      some configurations (GH#1533)
    - Disable FSCachePolicy by default (GH#1528)
    - Avoid logging "session closed" messages unless there is a corresponding
      "session opened" log message, to avoid user confusion (GH#1539)
    - Implement support for the CSID FTP command (GH#1550)
    - Unable to verify signed data: signature type 'rsa-sha2-512' does not match
      publickey algorithm 'ssh-rsa' (Bug #4491)
    - mod_auth_otp improperly allows keyboard-interactive logins for users
      lacking OTP entries (GH#1560)
  - Update mod_vroot to 0.9.11
    - Addresses a bad interaction with mod_auth_file, and failed login attempts,
      which can lead to inexplicably "stuck" processes that cannot be terminated
      (https://github.com/proftpd/proftpd/issues/1384)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 1.3.8-4
changelog:
  - Ensure mod_rewrite is linked against libidn2 so that it loads properly
    (rhbz#2166454, https://github.com/proftpd/proftpd/issues/1590)
  - No longer need to explicitly remove libtool archives from Fedora 36 onwards


author: Paul Howarth <paul@city-fan.org> - 1.3.8a-1
changelog:
  - Update to 1.3.8a
    - Fix mod_sftp failure to handle SFTP requests to truncate files to zero size
      (GH#1581)
    - Fix mod_sftp improperly handling SFTP WRITE requests for files opened for
      appending (GH#1584)
    - Build-time detection of Linux POSIX ACL support was broken since 1.3.8rc2
      (GH#1568)
    - Fix failure to load mod_rewrite as a dynamic module due to
      incomplete/missing library linker flags (GH#1590)
    - <Class> section is allowed to be in <Global>, but From directive is not
      (GH#1597)
    - ExtendedLog SSH, SFTP classes not working as expected (GH#1617)
    - Fix mod_sftp not handling multiple concurrent open file handles/transfers
      well for logging (GH#1646)
    - "TLSRequired off" plus Protocols directive caused mod_tls to terminate the
      session abruptly (GH#1679)
    - Fix mod_tls failure to compile against OpenSSL 3.0.8 due to missing
      ENGINE_METHOD_ flags (GH#1689)
    - Unknown named connection error when using different SQL backends (GH#1659)
    - Fix mod_sql not properly closing all named backend connections on session
      exit (GH#1697)
    - SSH key exchanges failed unexpectedly with "unable to write X bytes of raw
      data" errors due to small ProFTPD buffer (GH#1694)
    - Fix high session memory usage caused by SFTP outgoing data buffering
      (GH#1678)
    - Out-of-bounds buffer read when handling FTP commands (GH#1683)
    - SFTP algorithm settings in <Global> section were not being used (GH#1712)


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-1
changelog:
  - Update to 1.3.8b
    - Compiling ProFTPD 1.3.8a mod_sftp, mod_tls using libressl 3.7.3 failed
      (GH#1735)
    - Build system failed for specific module names (GH#1756)
    - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
      (CVE-2023-48795, GH#1760)


