[rpms/proftpd] rawhide: Update to 1.3.9d

[rpms/proftpd] rawhide: Update to 1.3.9d

[Paul Howarth]

            A new commit has been pushed.

            Repo   : rpms/proftpd
            Branch : rawhide
            Commit : cce0ead29997814133a8bad79e613280a1869390
            Author : Paul Howarth <paul@city-fan.org>
            Date   : 2026-08-18T14:34:02+01:00
            Stats  : +22/-4 in 3 file(s)
            URL    : https://src.fedoraproject.org/rpms/proftpd/c/cce0ead29997814133a8bad79e613280a1869390?branch=rawhide

            Log:
            Update to 1.3.9d

- New upstream release 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)

---
diff --git a/.gitignore b/.gitignore
index 12b1d5a..ac03362 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,5 @@
 # rawhide/f44/f43/epel10
-/proftpd-1.3.9c.tar.gz
+/proftpd-1.3.9d.tar.gz
 /v0.9.12.tar.gz
 /v0.9.7.tar.gz
 /v0.3.tar.gz
@@ -7,6 +7,8 @@
 /proftpd-1.3.8d.tar.gz
 /v0.9.11.tar.gz
 /v0.9.4.tar.gz
+/v0.2.tar.gz
 # epel8
 /proftpd-1.3.6e.tar.gz
 /v0.9.5.tar.gz
+/v0.2.tar.gz

diff --git a/proftpd.spec b/proftpd.spec
index 3125db7..06b84cc 100644
--- a/proftpd.spec
+++ b/proftpd.spec
@@ -17,14 +17,14 @@
 %undefine _strict_symbol_defs_build
 
 #global prever rc4
-%global baserelease 4
+%global baserelease 1
 %global mod_procfs_version 0.3
 %global mod_proxy_version 0.9.7
 %global mod_vroot_version 0.9.12
 
 Summary:		Flexible, stable and highly-configurable FTP server
 Name:			proftpd
-Version:		1.3.9c
+Version:		1.3.9d
 Release:		%{?prever:0.}%{baserelease}%{?prever:.%{prever}}%{?dist}
 License:		GPL-2.0-or-later
 URL:			http://www.proftpd.org/
@@ -468,6 +468,22 @@ fi
 %{_mandir}/man1/ftpwho.1*
 
 %changelog
+* Tue Aug 18 2026 Paul Howarth <paul@city-fan.org> - 1.3.9d-1
+- Update to 1.3.9d
+  - SSH channel open request from authenticated client with max packet size of
+    zero lead to infinite loop (GH#2242)
+  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
+    (GH#2255)
+  - Possible use-after-free issue via FTP STAT command using -C option; note
+    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
+  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
+    (GH#2272)
+  - Empty password fields should be rejected by the mod_sql_passwd module
+    (GH#2275)
+  - Empty password fields should be rejected by the mod_auth_file module
+    (GH#2279)
+  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)
+
 * Tue Aug  4 2026 Paul Howarth <paul@city-fan.org> - 1.3.9c-4
 - Update mod_procfs to 0.3
   - Also block access to sysfs filesystems

diff --git a/sources b/sources
index 418176f..480271f 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (proftpd-1.3.9c.tar.gz) = b5003a02af58281cbad73edd4de81848c27def76cec88b1d234c32f1d04a5c8aa54cf08958815d5a927280fb2c6973df6f04209731bc92eee0f8f635e5e3aa5b
+SHA512 (proftpd-1.3.9d.tar.gz) = c939ba389cfeebb6071c2c58261802af987d12d5a71a78c9bf56861081443c7c6d27786d48e2ed96a96fb65e8dae94221aa756fc6dce6a5ccdab9d78dd9e6ee8
 SHA512 (v0.9.12.tar.gz) = a84c14b9d05c4890abe50c86f832c91fa4d0971bc2b1866a3a34d73ff85acd1e902fc0cae739e22ea46e530c73230fb005ea9edeb68fd6cfb963e0c5ca9655ec
 SHA512 (v0.9.7.tar.gz) = 9979dc21ebebf5f219303769cebd73be9ab66ae7f50756fa12bdf37bcac1cdc9ac70feeb557ef16bb4bb3fcf8121aed4d16b6a0e5c0738bbcc53a0055410c3cd
 SHA512 (v0.3.tar.gz) = 7b9f3812eb83e394dae894094ab28c59ff2a7e77036ea1e33c70344a26e47c13ef882affbc0316de8d763be535d7bb3d6ebda89564feacf79288cdcda9ef0f8c