Changelog |
* Fri Aug 24 2018 Paul Howarth <paul@city-fan.org> - 1.3.6-17
- Fix infinite loop possible in mod_sftp's set_sftphostkey() function, by
actually iterating properly for the next configuration record
http://bugs.proftpd.org/show_bug.cgi?id=4356
https://github.com/proftpd/proftpd/pull/736
* Fri Jul 13 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.6-16
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Thu Jul 05 2018 Paul Howarth <paul@city-fan.org> - 1.3.6-15
- Don't assume ENOATTR is always defined in test suite
- Update mod_sftp to handle changed APIs in OpenSSL 1.1.x releases
https://github.com/proftpd/proftpd/issues/674
https://github.com/proftpd/proftpd/pull/710
* Fri Feb 09 2018 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.6-14
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Sun Jan 28 2018 Paul Howarth <paul@city-fan.org> - 1.3.6-13
- Account for systemd-units being merged into systemd at Fedora 17
- Use forward-looking conditionals
- Don't use full paths from commands in scriptlets, to aid readability
* Mon Jan 22 2018 Paul Howarth <paul@city-fan.org> - 1.3.6-12
- Disable strict linker checks for undefined symbols, which breaks build due
to modules containing references to symbols in the main daemon
* Sat Jan 20 2018 Björn Esser <besser82@fedoraproject.org> - 1.3.6-11
- Rebuilt for switch to libxcrypt
* Tue Jan 09 2018 Merlin Mathesius <mmathesi@redhat.com> - 1.3.6-10
- Cleanup spec file conditionals
* Fri Dec 01 2017 Paul Howarth <paul@city-fan.org> - 1.3.6-9
- Disable tcp_wrappers support via libwrap/mod_wrap from F-28 onwards; note
that similar functionality is still available using mod_wrap2, which does
not use libwrap (ref: https://bugzilla.redhat.com/show_bug.cgi?id=1518776)
* Mon Oct 30 2017 Paul Howarth <paul@city-fan.org> - 1.3.6-8
- With systemd, wait for network-online.target before starting (#1506805)
* Thu Sep 21 2017 Paul Howarth <paul@city-fan.org> - 1.3.6-7
- Switch to build with MariaDB Connector/C library rather than full mysql-devel
package from Fedora 28 onwards (#1493657,
https://fedoraproject.org/wiki/User:Hhorak/mariadb-connector-c-proposal)
* Wed Sep 20 2017 Paul Howarth <paul@city-fan.org> - 1.3.6-6
- Add sqlite sub-package with mod_sql_sqlite for SQLite support (#1328321)
* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.6-5
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild
* Fri Jul 28 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.6-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild
* Thu Jul 13 2017 Paul Howarth <paul@city-fan.org> - 1.3.6-3
- mod_sftp failed to check shadow password information when publickey
authentication used (http://bugs.proftpd.org/show_bug.cgi?id=4308)
- Use of "AllowEmptyPasswords off" broke SFTP/SCP logins
(http://bugs.proftpd.org/show_bug.cgi?id=4309)
* Thu Jul 13 2017 Petr Pisar <ppisar@redhat.com> - 1.3.6-2
- perl dependency renamed to perl-interpreter
<https://fedoraproject.org/wiki/Changes/perl_Package_to_Install_Core_Modules>
* Mon May 22 2017 Paul Howarth <paul@city-fan.org> - 1.3.6-1
- Update to 1.3.6 (see NEWS for details)
- Update mod_vroot to 0.9.5 (API compatibility with 1.3.6)
- Add upstream fixes for flaky API tests
(https://github.com/proftpd/proftpd/issues/483)
(https://github.com/proftpd/proftpd/pull/510)
(https://github.com/proftpd/proftpd/pull/514)
- Add functionality to disable external network tests
(https://github.com/proftpd/proftpd/pull/497)
- Update template TLS configuration
- PCRE 7.0 always available for use now
- Disable PCRE support for now as JIT compiler has SELinux issues
(https://bugs.exim.org/show_bug.cgi?id=1749)
- Update proftpd.service to use Type=simple rather than Type=forking
(https://github.com/proftpd/proftpd/pull/506)
- Remove redundant bind() to controls socket
(https://github.com/proftpd/proftpd/issues/501)
- Fix similars functionality and unit test
(https://github.com/proftpd/proftpd/pull/513)
- Integration tests can use system Test::Unit now
- tcpd.h can always be found in tcp_wrappers-devel now
* Wed May 03 2017 Paul Howarth <paul@city-fan.org> - 1.3.5e-2
- AllowChrootSymlinks off could cause login failures depending on filesystem
permissions: use the IDs of the logging-in user to perform the directory
walk, looking for symlinks, to be more consistent with similar checks done
during login (#1443507, upstream bug 4306)
- Crypt::CrackLib always available now
* Mon Apr 10 2017 Paul Howarth <paul@city-fan.org> - 1.3.5e-1
- Update to 1.3.5e
- SFTP clients using umac-64@openssh.com digest failed to connect
(upstream bug 4287)
- SFTP rekeying failure with ProFTPD 1.3.5d, caused by null pointer
dereference (upstream bug 4288)
- AllowChrootSymlinks off did not check entire DefaultRoot path for symlinks
(CVE-2017-7418, upstream bug 4295)
- Change shellbangs in shipped perl scripts to use system perl
- Drop EL-5 support
- Drop BuildRoot: and Group: tags
- Drop explicit buildroot cleaning in %install section
- Drop explicit %clean section
- /etc/pam.d/password-auth always available now
- pcre 7.0 or later always available now
* Sun Feb 12 2017 Paul Howarth <paul@city-fan.org> - 1.3.5d-3
- Properly allocate (and clear) the UMAC contexts, to fix segfault in mod_sftp
(#1420365, upstream bug 4287)
* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.5d-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Mon Jan 16 2017 Paul Howarth <paul@city-fan.org> - 1.3.5d-1
- Update to 1.3.5d
- Support OpenSSL 1.1.x API (upstream bug 4275)
Bug fixes:
- SSH rekey during authentication can cause issues with clients
(upstream bug 4254)
- Recursive SCP uploads of multiple directories not handled properly
(upstream bug 4257)
- LIST returns different results for file, depending on path syntax
(upstream bug 4259)
- "AuthAliasOnly on" in server config breaks anonymous logins
(upstream bug 4255)
- CapabilitiesEngine directive not honored for <IfUser>/<IfGroup> sections
(upstream bug 4272)
- Memory leak when mod_facl is used (upstream bug 4278)
- All FTP logins treated as anonymous logins again (upstream bug 4283,
regression in 1.3.5c of upstream bug 3307)
* Sat Nov 19 2016 Paul Howarth <paul@city-fan.org> - 1.3.5b-3
- Support OpenSSL 1.1.x API (upstream bug 4275)
|