proftpd-devel-1.3.6e-11.el8

Date	Author	Change
2026-07-27	Paul Howarth <paul at city dash fan dot org> - 1.3.6e-11	- Address another avenue for SQL injection, via custom SQLUserInfo queries (https://github.com/proftpd/proftpd/issues/2052#issuecomment-4489110598) - Fix SFTP request payload length underflow calculation in mod_sftp (CVE-2026-53994, https://github.com/proftpd/proftpd/issues/2115) - Exercise caution when reading the client-provided file size for SCP uploads, as it could possibly overflow our size type (CVE-2026-63091) - Authenticated SFTP sessions could overflow the SFTP packet buffer (CVE-2026-63090, https://github.com/proftpd/proftpd/issues/2190) - Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via /proc/self/root path prefix); this module disallows file accesses via procfs filesystems
2026-05-11	Paul Howarth <paul at city dash fan dot org> - 1.3.6e-10	- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)
2024-11-13	Paul Howarth <paul at city dash fan dot org> - 1.3.6e-9	- Fix RADIUS Message-Authenticator verification in mod_radius - https://github.com/proftpd/proftpd/issues/1840 - https://bugzilla.redhat.com/show_bug.cgi?id=2325448
2024-09-20	Paul Howarth <paul at city dash fan dot org> - 1.3.6e-8	- Add fix for slow accesses in large directory trees (rhbz#2310341) - http://bugs.proftpd.org/show_bug.cgi?id=4307 - https://github.com/proftpd/proftpd/pull/525
2024-03-22	Paul Howarth <paul at city dash fan dot org> - 1.3.6e-7	- Fix slow reading of passwd/group files in mod_auth_file (#2270686, GH#1134, GH#1192, GH#1195, GH#1213)
2023-12-27	Paul Howarth <paul at city dash fan dot org> - 1.3.6e-6	- Fix one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics (#2255609, GH#1683, CVE-2023-51713) - Use SPDX-format license tag
2022-08-01	Paul Howarth <paul at city dash fan dot org> - 1.3.6e-5	- Fix unexpected filtering behaviour with mod_vroot (#2104972, GH#1491)
2021-09-07	Paul Howarth <paul at city dash fan dot org> - 1.3.6e-4	- Fix memory disclosure to RADIUS servers by mod_radius (#2001690) https://github.com/proftpd/proftpd/issues/1284 https://github.com/proftpd/proftpd/pull/1285
2021-06-29	Paul Howarth <paul at city dash fan dot org> - 1.3.6e-3	- Avoid segfaults with TLSv1.3 https://github.com/proftpd/proftpd/issues/1063 https://github.com/proftpd/proftpd/commit/adf43dd4ddaab0332e74abc86bbcef9cf27ee54a - Use %license unconditionally
2020-11-24	Paul Howarth <paul at city dash fan dot org> - 1.3.6e-2	- Package mod_unique_id (#1901100)

usr/
- bin/
  - prxs
- include/
  - proftpd/
    - ascii.h
    - auth.h
    - bindings.h
    - buildstamp.h
    - ccan-json.h
    - child.h
    - class.h
    - cmd.h
    - compat.h
    - conf.h
    - config.h
    - configdb.h
    - ctrls.h
    - data.h
    - default_paths.h
    - dirtree.h
    - display.h
    - encode.h
    - env.h
    - event.h
    - expr.h
    - feat.h
    - filter.h
    - fsio.h
    - ftp.h
    - glibc-glob.h
    - hanson-tpl.h
    - help.h
    - ident.h
    - inet.h
    - json.h
    - lastlog.h
    - libsupp.h
    - log.h
    - logfmt.h
    - memcache.h
    - mkhome.h
    - mod_ctrls.h
    - mod_load.h
    - mod_quotatab.h
    - mod_sftp.h
    - mod_sql.h
    - mod_tls.h
    - mod_vroot.h
    - mod_wrap2.h
    - modules.h
    - netacl.h
    - netaddr.h
    - netio.h
    - options.h
    - parser.h
    - pidfile.h
    - pool.h
    - pr-syslog.h
    - privs.h
    - proctitle.h
    - proftpd.h
    - redis.h
    - regexp.h
    - response.h
    - rlimit.h
    - scoreboard.h
    - session.h
    - sets.h
    - signals.h
    - stash.h
    - str.h
    - support.h
    - table.h
    - throttle.h
    - timers.h
    - trace.h
    - utf8.h
    - var.h
    - version.h
    - xferlog.h
- lib64/
  - pkgconfig/
    - proftpd.pc

proftpd-devel-1.3.6e-11.el8 in Fedora EPEL 8

Changelog

Dependencies

Provides

Files