public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Paul Howarth <paul@city-fan.org>
To: git-commits@fedoraproject.org
Subject: [rpms/proftpd] epel10: Update to 1.3.9d
Date: Tue, 18 Aug 2026 14:29:46 GMT [thread overview]
Message-ID: <178706338668.1.8877534085565138530.rpms-proftpd-940a6fb1a7af@fedoraproject.org> (raw)
A new commit has been pushed.
Repo : rpms/proftpd
Branch : epel10
Commit : 940a6fb1a7af46ed347eee278bb4ab47eab0d644
Author : Paul Howarth <paul@city-fan.org>
Date : 2026-08-18T15:29:03+01:00
Stats : +22/-4 in 3 file(s)
URL : https://src.fedoraproject.org/rpms/proftpd/c/940a6fb1a7af46ed347eee278bb4ab47eab0d644?branch=epel10
Log:
Update to 1.3.9d
- New upstream release 1.3.9d
- SSH channel open request from authenticated client with max packet size of
zero lead to infinite loop (GH#2242)
- Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
(GH#2255)
- Possible use-after-free issue via FTP STAT command using -C option; note
that the -C option is now silently ignored for FTP STAT commands (GH#2265)
- Passive FTP data transfers do not honor AllowForeignAddress policy properly
(GH#2272)
- Empty password fields should be rejected by the mod_sql_passwd module
(GH#2275)
- Empty password fields should be rejected by the mod_auth_file module
(GH#2279)
- .ftpaccess file policy bypass possible in certain configurations (GH#2282)
---
diff --git a/.gitignore b/.gitignore
index 12b1d5a..ac03362 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,5 @@
# rawhide/f44/f43/epel10
-/proftpd-1.3.9c.tar.gz
+/proftpd-1.3.9d.tar.gz
/v0.9.12.tar.gz
/v0.9.7.tar.gz
/v0.3.tar.gz
@@ -7,6 +7,8 @@
/proftpd-1.3.8d.tar.gz
/v0.9.11.tar.gz
/v0.9.4.tar.gz
+/v0.2.tar.gz
# epel8
/proftpd-1.3.6e.tar.gz
/v0.9.5.tar.gz
+/v0.2.tar.gz
diff --git a/proftpd.spec b/proftpd.spec
index bcb7ff9..bc7a81f 100644
--- a/proftpd.spec
+++ b/proftpd.spec
@@ -17,14 +17,14 @@
%undefine _strict_symbol_defs_build
#global prever rc4
-%global baserelease 4
+%global baserelease 1
%global mod_procfs_version 0.3
%global mod_proxy_version 0.9.7
%global mod_vroot_version 0.9.12
Summary: Flexible, stable and highly-configurable FTP server
Name: proftpd
-Version: 1.3.9c
+Version: 1.3.9d
Release: %{?prever:0.}%{baserelease}%{?prever:.%{prever}}%{?dist}
License: GPL-2.0-or-later
URL: http://www.proftpd.org/
@@ -468,6 +468,22 @@ fi
%{_mandir}/man1/ftpwho.1*
%changelog
+* Tue Aug 18 2026 Paul Howarth <paul@city-fan.org> - 1.3.9d-1
+- Update to 1.3.9d
+ - SSH channel open request from authenticated client with max packet size of
+ zero lead to infinite loop (GH#2242)
+ - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
+ (GH#2255)
+ - Possible use-after-free issue via FTP STAT command using -C option; note
+ that the -C option is now silently ignored for FTP STAT commands (GH#2265)
+ - Passive FTP data transfers do not honor AllowForeignAddress policy properly
+ (GH#2272)
+ - Empty password fields should be rejected by the mod_sql_passwd module
+ (GH#2275)
+ - Empty password fields should be rejected by the mod_auth_file module
+ (GH#2279)
+ - .ftpaccess file policy bypass possible in certain configurations (GH#2282)
+
* Tue Aug 4 2026 Paul Howarth <paul@city-fan.org> - 1.3.9c-4
- Update mod_procfs to 0.3
- Also block access to sysfs filesystems
diff --git a/sources b/sources
index 418176f..480271f 100644
--- a/sources
+++ b/sources
@@ -1,4 +1,4 @@
-SHA512 (proftpd-1.3.9c.tar.gz) = b5003a02af58281cbad73edd4de81848c27def76cec88b1d234c32f1d04a5c8aa54cf08958815d5a927280fb2c6973df6f04209731bc92eee0f8f635e5e3aa5b
+SHA512 (proftpd-1.3.9d.tar.gz) = c939ba389cfeebb6071c2c58261802af987d12d5a71a78c9bf56861081443c7c6d27786d48e2ed96a96fb65e8dae94221aa756fc6dce6a5ccdab9d78dd9e6ee8
SHA512 (v0.9.12.tar.gz) = a84c14b9d05c4890abe50c86f832c91fa4d0971bc2b1866a3a34d73ff85acd1e902fc0cae739e22ea46e530c73230fb005ea9edeb68fd6cfb963e0c5ca9655ec
SHA512 (v0.9.7.tar.gz) = 9979dc21ebebf5f219303769cebd73be9ab66ae7f50756fa12bdf37bcac1cdc9ac70feeb557ef16bb4bb3fcf8121aed4d16b6a0e5c0738bbcc53a0055410c3cd
SHA512 (v0.3.tar.gz) = 7b9f3812eb83e394dae894094ab28c59ff2a7e77036ea1e33c70344a26e47c13ef882affbc0316de8d763be535d7bb3d6ebda89564feacf79288cdcda9ef0f8c
reply other threads:[~2026-08-18 14:29 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178706338668.1.8877534085565138530.rpms-proftpd-940a6fb1a7af@fedoraproject.org \
--to=paul@city-fan.org \
--cc=git-commits@fedoraproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox