public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Paul Howarth <paul@city-fan.org>
To: git-commits@fedoraproject.org
Subject: [rpms/proftpd] epel10: Update to 1.3.9c
Date: Thu, 09 Jul 2026 08:45:48 GMT [thread overview]
Message-ID: <178358674806.1.6338248695710830053.rpms-proftpd-f95a445e065f@fedoraproject.org> (raw)
A new commit has been pushed.
Repo : rpms/proftpd
Branch : epel10
Commit : f95a445e065f8179aa7a4150683444868f991ad5
Author : Paul Howarth <paul@city-fan.org>
Date : 2026-07-09T09:45:25+01:00
Stats : +20/-4 in 3 file(s)
URL : https://src.fedoraproject.org/rpms/proftpd/c/f95a445e065f8179aa7a4150683444868f991ad5?branch=epel10
Log:
Update to 1.3.9c
- New upstream release 1.3.9c
- ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
- Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
- MaxTransfersPerUser no longer enforces configured limits (GH#2158)
- AdminControlsACLs for config, get actions not honored as they should be
(GH#2163)
- Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
buffers without bounds checking (GH#2166)
- RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
to reject illegal characters (GH#2173)
- SQL group name lookup concatenates client-provided group names without
escaping (GH#2188)
- Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
- Default Controls socket ACLs unintentionally allow all users access for
sending Controls requests (GH#2210)
---
diff --git a/.gitignore b/.gitignore
index 7eeea01..2754037 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,5 @@
# rawhide/f44/f43/epel10
-/proftpd-1.3.9a.tar.gz
+/proftpd-1.3.9c.tar.gz
/v0.9.12.tar.gz
/v0.9.7.tar.gz
# epel9
@@ -9,4 +9,3 @@
# epel8
/proftpd-1.3.6e.tar.gz
/v0.9.5.tar.gz
-/proftpd-1.3.9b.tar.gz
diff --git a/proftpd.spec b/proftpd.spec
index 9274909..a49cd47 100644
--- a/proftpd.spec
+++ b/proftpd.spec
@@ -23,7 +23,7 @@
Summary: Flexible, stable and highly-configurable FTP server
Name: proftpd
-Version: 1.3.9b
+Version: 1.3.9c
Release: %{?prever:0.}%{baserelease}%{?prever:.%{prever}}%{?dist}
License: GPL-2.0-or-later
URL: http://www.proftpd.org/
@@ -461,6 +461,23 @@ fi
%{_mandir}/man1/ftpwho.1*
%changelog
+* Wed Jul 8 2026 Paul Howarth <paul@city-fan.org> - 1.3.9c-1
+- Update to 1.3.9c
+ - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
+ - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
+ - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
+ - AdminControlsACLs for config, get actions not honored as they should be
+ (GH#2163)
+ - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
+ buffers without bounds checking (GH#2166)
+ - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
+ to reject illegal characters (GH#2173)
+ - SQL group name lookup concatenates client-provided group names without
+ escaping (GH#2188)
+ - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
+ - Default Controls socket ACLs unintentionally allow all users access for
+ sending Controls requests (GH#2210)
+
* Mon Jun 8 2026 Paul Howarth <paul@city-fan.org> - 1.3.9b-1
- Update to 1.3.9b
- Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
diff --git a/sources b/sources
index 3354efa..e22e3a5 100644
--- a/sources
+++ b/sources
@@ -1,3 +1,3 @@
-SHA512 (proftpd-1.3.9b.tar.gz) = bfcfe013db3b93247abacd2fd8fb2d929feede4e7f804a2416ca161c5cc1a3a4a18e1cc5914ae6536ebc2f40da69c1713a65c1317a3a8cbfe63706709f2e4dec
+SHA512 (proftpd-1.3.9c.tar.gz) = b5003a02af58281cbad73edd4de81848c27def76cec88b1d234c32f1d04a5c8aa54cf08958815d5a927280fb2c6973df6f04209731bc92eee0f8f635e5e3aa5b
SHA512 (v0.9.12.tar.gz) = a84c14b9d05c4890abe50c86f832c91fa4d0971bc2b1866a3a34d73ff85acd1e902fc0cae739e22ea46e530c73230fb005ea9edeb68fd6cfb963e0c5ca9655ec
SHA512 (v0.9.7.tar.gz) = 9979dc21ebebf5f219303769cebd73be9ab66ae7f50756fa12bdf37bcac1cdc9ac70feeb557ef16bb4bb3fcf8121aed4d16b6a0e5c0738bbcc53a0055410c3cd
reply other threads:[~2026-07-09 8:45 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178358674806.1.6338248695710830053.rpms-proftpd-f95a445e065f@fedoraproject.org \
--to=paul@city-fan.org \
--cc=git-commits@fedoraproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox