# changelog

author: Andy Li <andy@onthewings.net> - 2.1.0-9
changelog:
  - Add nekotools test.
  - Use Ninja to build.
  - Add upstream patch of avoiding recompile nekoc/nekoml.


author: Richard W.M. Jones <rjones@redhat.com> - 2.2.0-5
changelog:
  - Remove ldconfig
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/SU3LJVDZ7LUSJGZR5MS72BMRAFP3PQQL/


author: Japheth Cleaver <cleaver@terabithia.org> 4.3.28-8
changelog:
  - Fix tirpc testing (only use when rpc fails)
  - Build requiring dash on EL7 now that it's in EPEL (BZ #1381509)


author: Japheth Cleaver <cleaver@terabithia.org> 4.3.29-0.7
changelog:
  - Revert use of dash on EL7+; client-only installs may not have EPEL
  - Fix duplicate logrotate configs on server+client installs
  - Gate tirpc usage to recent Fedora and EL6+
  - Downgrade to xxHash 0.6.5 on EL5 due to FTFBS


author: Japheth Cleaver <cleaver@terabithia.org> 4.3.29-0.8.1
changelog:
  - Add RHEL8 logic
  - Remove ntpdate RPM Requires
  - Backport xxHash 0.7.0 fix for EL5: https://github.com/Cyan4973/xxHash/pull/206/files


author: Japheth Cleaver <cleaver@terabithia.org> 4.3.29-1
changelog:
  - Disable GCC diagnostic pragmas
  - Code cleanup for addressing string length issues (Henrik), 
    addressing the following CVEs:
    CVE-2019-13451, CVE-2019-13452, CVE-2019-13455, CVE-2019-13473, 
    CVE-2019-13474, CVE-2019-13484, CVE-2019-13485, CVE-2019-13486


author: Japheth Cleaver <cleaver@terabithia.org> 4.3.30-0.7
changelog:
  - Fix crashes in xymongen availbility report generation
  - Wrap GCC pragmas
  - Remove upstreamed netstat-W patch
  - systemd: support xymonlaunch reload; enable restart-on-failure


author: Paul Howarth <paul@city-fan.org> - 1.3.6-23
changelog:
  - Refactor configuration to support /etc/proftpd/conf.d configuration and use
    config snippets (#1589441)
  - Drop legacy GeoIP support from F-32, EL-8 onwards
    http://bugs.proftpd.org/show_bug.cgi?id=4053
    https://github.com/proftpd/proftpd/issues/605


author: Paul Howarth <paul@city-fan.org> - 1.3.6a-1
changelog:
  - Update to 1.3.6a
    - Configure script wrongly detected AIX lastlog functions
      (http://bugs.proftpd.org/show_bug.cgi?id=4304)
    - AllowChrootSymlinks off could cause login failures depending on filesystem
      permissions (http://bugs.proftpd.org/show_bug.cgi?id=4306)
    - mod_ctrls: error: unable to bind to local socket: Address already in use
      (https://github.com/proftpd/proftpd/issues/501)
    - Failed to handle multiple %{env:...} variables in single word in
      configuration (https://github.com/proftpd/proftpd/issues/507)
    - mod_sftp failed to check shadow password information when publickey
      authentication used (http://bugs.proftpd.org/show_bug.cgi?id=4308)
    - Use of "AllowEmptyPasswords off" broke SFTP/SCP logins
      (http://bugs.proftpd.org/show_bug.cgi?id=4309)
    - Use of mod_facl as static module caused ProFTPD to die on SIGHUP/restart
      (http://bugs.proftpd.org/show_bug.cgi?id=4310)
    - Use of curve25519-sha256@libssh.org SSH2 key exchange sometimes failed
      (https://github.com/proftpd/proftpd/issues/556)
    - Close extra file descriptors at startup
      (http://bugs.proftpd.org/show_bug.cgi?id=4312)
    - <Anonymous> with AuthAliasOnly in effect did not work as expected
      (http://bugs.proftpd.org/show_bug.cgi?id=4314)
    - CreateHome NoRootPrivs only worked partially
      (https://github.com/proftpd/proftpd/issues/568)
    - SFTP OPEN response included attribute flags that are not actually provided
      (https://github.com/proftpd/proftpd/issues/578)
    - Truncation of file while being downloaded with sendfile enabled caused
      timeouts due to infinite loop (http://bugs.proftpd.org/show_bug.cgi?id=4318)
    - FTP uploads frequently broke due to "Interrupted system call" error
      (http://bugs.proftpd.org/show_bug.cgi?id=4319)
    - Site-to-site transfers over TLS failed
      (https://github.com/proftpd/proftpd/issues/618)
    - Can't see symlinks using any FTP client when using MLSD
      (http://bugs.proftpd.org/show_bug.cgi?id=4322)
    - mod_tls 1.3.6 failed to compile using OpenSSL 0.9.8e
      (http://bugs.proftpd.org/show_bug.cgi?id=4325)
    - Using MaxClientsPerHost 1 in <Anonymous> section denied logins
      (http://bugs.proftpd.org/show_bug.cgi?id=4326)
    - SQLNamedConnectInfo with different backend database did not work properly
      (https://github.com/proftpd/proftpd/issues/642)
    - Segfault with mod_sftp+mod_sftp_pam after successful authentication using
      keyboard-interactive method (https://github.com/proftpd/proftpd/issues/656)
    - autoconf always failed to detect support for FIPS
      (https://github.com/proftpd/proftpd/issues/660)
    - SFTP connections failed when using "arcfour256" cipher
      (https://github.com/proftpd/proftpd/issues/663)
    - mod_auth_otp failed to build with OpenSSL 1.1.x
      (http://bugs.proftpd.org/show_bug.cgi?id=4335)
    - scp broken on FreeBSD 11 (http://bugs.proftpd.org/show_bug.cgi?id=4341)
    - Update mod_sftp to handle changed APIs in OpenSSL 1.1.x releases
      (https://github.com/proftpd/proftpd/issues/674)
    - Infinite loop possible in mod_sftp's set_sftphostkey() function
      (http://bugs.proftpd.org/show_bug.cgi?id=4356)
    - Some ASCII text files corrupted when downloading
      (http://bugs.proftpd.org/show_bug.cgi?id=4352)
    - Properly use the --includedir, --libdir configure variables in the
      generated proftpd.pc pkgconfig file
      (https://github.com/proftpd/proftpd/issues/797)
    - Reading invalid SSH key from database resulted in unexpected/unlogged
      disconnect failures (http://bugs.proftpd.org/show_bug.cgi?id=4350)
    - Symlink navigation broken after 1.3.6 update
      (http://bugs.proftpd.org/show_bug.cgi?id=4332)
    - Unable to connect to ProFTPD using TLSSessionTickets and TLSv1.3
      (https://github.com/proftpd/proftpd/issues/795)
    - SITE CPFR/CPTO did not honor <Limit> configurations
      (http://bugs.proftpd.org/show_bug.cgi?id=4372)
    - Using "TLSProtocol SSLv23" did not enable all protocol versions
      (https://github.com/proftpd/proftpd/issues/807)


author: Paul Howarth <paul@city-fan.org> - 1.3.6b-1
changelog:
  - Update to 1.3.6b
    - Fixed pre-authentication remote denial-of-service issue
      (CVE-2019-18217, https://github.com/proftpd/proftpd/issues/846)


author: Paul Howarth <paul@city-fan.org> - 1.3.6b-2
changelog:
  - Fix handling of CRL lookups by properly using issuer for lookups, and
    guarding against null pointers (GH#859, GH#861, CVE-2019-19269,
    CVE-2019-19270)


author: Paul Howarth <paul@city-fan.org> - 1.3.6b-3
changelog:
  - Fix API tests compile failure with GCC 10
    https://github.com/proftpd/proftpd/pull/886
  - mod_sftp: When handling the 'keyboard-interactive' authentication mechanism,
    as used for (e.g.) PAM, make sure to properly handle DEBUG, IGNORE,
    DISCONNECT, and UNIMPLEMENTED messages, per RFC 4253
    (http://bugs.proftpd.org/show_bug.cgi?id=4385)


author: Paul Howarth <paul@city-fan.org> - 1.3.6c-1
changelog:
  - Update to 1.3.6c
    - Use-after-free vulnerability in memory pools during data transfer
      (CVE-2020-9273, https://github.com/proftpd/proftpd/issues/903)
    - Fix mod_tls compilation with LibreSSL 2.9.x
      (https://github.com/proftpd/proftpd/issues/810)
    - MaxClientsPerUser was not enforced for SFTP logins when mod_digest was
      enabled (https://github.com/proftpd/proftpd/issues/750)
    - mod_sftp now handles an OpenSSH-specific private key format; it detects
      such keys, and logs a hint about reformatting them to a supported format
      (https://github.com/proftpd/proftpd/issues/793)
    - Directory listing was slower compared to previous ProFTPD versions
      (https://github.com/proftpd/proftpd/issues/793)
    - mod_sftp crashed when using pubkey-auth with DSA keys
      (https://github.com/proftpd/proftpd/issues/866)
    - Fix improper handling of TLS CRL lookups (CVE-2019-19269, CVE-2019-19270,
      https://github.com/proftpd/proftpd/issues/859)
    - Leaking PAM handler and data in case of unsuccessful authentication
      (https://github.com/proftpd/proftpd/issues/870)
    - SSH authentication failed for many clients due to receiving of
      SSH_MSG_IGNORE packet (http://bugs.proftpd.org/show_bug.cgi?id=4385)
    - SFTP publickey authentication failed unexpectedly when user had no shadow
      password info. (https://github.com/proftpd/proftpd/issues/890)
    - ftpasswd failed to restore password file permissions in some cases
      (https://github.com/proftpd/proftpd/issues/898)
    - Out-of-bounds read in mod_cap getstateflags() function; this has been
      addressed by updating the bundled version of libcap
      (CVE-2020-9272, https://github.com/proftpd/proftpd/issues/902)
      Note that this build of ProFTPD uses the system version of libcap and not
      the bundled version, and is not vulnerable to this issue


author: Paul Howarth <paul@city-fan.org> - 1.3.6c-2
changelog:
  - Retain a memory pool after an aborted transfer so that the %{transfer-status}
    LogFormat functionality still works
  - Own directory %{_sysconfdir}/logrotate.d


author: Paul Howarth <paul@city-fan.org> - 1.3.6c-3
changelog:
  - Avoid duplicate hostname and timestamps in syslog (#1808989)
    http://bugs.proftpd.org/show_bug.cgi?id=4185
    https://github.com/proftpd/proftpd/issues/1002
    https://github.com/proftpd/proftpd/pull/1009


author: Paul Howarth <paul@city-fan.org> - 1.3.6d-1
changelog:
  - Update to 1.3.6d
    - Fixed issue with FTPS uploads of large files using TLSv1.3
      (https://github.com/proftpd/proftpd/issues/959)
    - Fixed regression in the handling of '%{env:...}' configuration variables
      when the environment variable is not present
      (https://github.com/proftpd/proftpd/issues/857)
    - Second LIST of the same symlink shows different results
      (https://github.com/proftpd/proftpd/issues/940)
    - mod_sftp sends broken response when CREATETIME attribute is requested
      (https://github.com/proftpd/proftpd/issues/980)
    - Handle zero-length SFTP WRITE requests without error
      (http://bugs.proftpd.org/show_bug.cgi?id=4398)
    - PidFile should not be world-writable
      (https://github.com/proftpd/proftpd/issues/1018)
    - TLSv1.3 handshake fails due to missing session ticket key on some systems
      (https://github.com/proftpd/proftpd/issues/1014)
    - Lowercased FTP commands not properly identified
      (https://github.com/proftpd/proftpd/issues/1023)


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-1
changelog:
  - Update to 1.3.6e
    - Fixed null pointer dereference in mod_sftp when using SCP incorrectly
      (https://github.com/proftpd/proftpd/issues/1043)


author: Lawrence R. Rogers <lrr@cert.org> 9.01-1
changelog:
  * Release 9.01-1
  	* Adds this file (NEWS) to document newsworthy changes since the last
  	  release.

  	* Profile configurations for Visual Studio projects are now supported.

  	* Implementation for JPEG-XR (previously known as HD-Photo) has been
  	  completed for XPS.

  	* The languages: PCL, XPS and SVG, now support and default to the
  	  display device on Windows.

  	* Optimizations related to clipping and blank pages, for details see
  	  logs for revisions 12036 and 12027.

  	* pcl/PCL5C_Color_Laserjet_4700_Differences.xls and
  	  pxl/PXL_Color_Laserjet_4700_Differences.xls document and illustrate
  	  differences between the Artifex PCL interpreter and the HP Color
  	  Laserjet 4700.

  	* Include the new tiffscaled device.  This entry overlaps with a
  	  similar news entry in ghostscript news but the device is important
  	  for PCL fax customers and was worthy of mention here as well.  See
  	  Ghostscript news for details.

  	* The languages (PCL, XPS and SVG) now support the ps2write device.
  	  This is intended to replace pswrite which will eventually be
  	  deprecated in a future release.  The output of ps2write is
  	  DSC-compliant level 2 PostScript.


author: Lawrence R. Rogers <lrr@cert.org> 9.02-1
changelog:
  * Release 9.02-1
  	* Revised approach for applying a halftone to sampled image data
  	  for monochrome output devices.


author: Lawrence R. Rogers <lrr@cert.org> 9.04-1
changelog:
  * Release 9.04-1
  	* This release is primarily a bug fixing release with some
  	  improvements to auto configuration for unix and Mac OS X
  	  environments.


author: T.C. Hollingsworth <tchollingsworth@gmail.com> - 1.6-6.g
changelog:
  - fix hman bug that caused linked to wrong URLs for sections (e.g. `hman 1`)
  - don't ship Italian man pages; they're provided by man-pages-it


author: Philip Gwyn <philip@awale.qc.ca>
changelog:
  - Update spec file so that it works on CentOS 6
  - Check for upstart, so it installs OK on CentOS 6
  - Make svscanboot longer


author: Balasubramanian Kandasamy <balasubramanian.kandasamy@oracle.com> - 5.7.8-0.2.rc
changelog:
  - Added libtest_framework.so, libtest_services.so, libtest_services_threaded.so plugins
  - Build and ship mecab plugin


author: Balasubramanian Kandasamy <balasubramanian.kandasamy@oracle.com> - 5.7.9-1
changelog:
  - Updated for 5.7.9
  - Added libtest_* plugins to test package subpackage
  - Add mysqlpump man page
  - Obsolete mysql-connector-c-shared dependencies


author: Julian Sikorski <belegdol@fedoraproject.org> - 0.4.3-9
changelog:
  - Removed ldconfig scriptlets as per
    https://fedoraproject.org/wiki/Changes/Removing_ldconfig_scriptlets


author: Paul Howarth <paul@city-fan.org> - 0.25-24
changelog:
  - Spec tidy-up
    - Use author-independent source URL
    - Specify all build dependencies
    - Simplify find command using -delete
    - Fix permissions verbosely


author: Luca Beltrame <lbeltrame@kde.org>
changelog:
  - Initial package for openSUSE
  - Add upstream patch to add proper installability and library
    versioning:
    * fix-library-installation-and-versioning.patch


author: Christophe Giboudeaux <christophe@krop.fr>
changelog:
  - Update to 1.1.0
    * Add Python binding
    * Bug fixes from upstream XZing project
    * Many performance improvements for 1D readers
    * More meta-data exported when reading specific format
    * Minor bug fixes and improvements for corner cases
    * Improve DataMatrix encoder
    * Add interface to simplify basic usage
    * WASM API to support pixels array as input
    * Few minor bug fixes
    * A new and (hopefully) 'future proof' single ReadBarcode entry point
      into the decoding functionality.
    * The LuminanceSource based API is now deprecated but still compiles.
    * A new BarcodeFormats flag type to specify the set of barcodes to look for.
    * Deprecated unrelyable Result::resultPoints in favor of well defined
      Result::position.
    * Deprecated Result::metadata() -> ORIENTATION in favor
      of Result::orientation.
    * New Binarizer enum in DecodeHints to specify the binarizer for
      the ReadBarcode API.
    * New DecodeHints::isPure property to speed up detection for
      'pure' input use-cases.
    * New 'unified' CMake structure to build (most) of the project from
      the top-level project.
    * New ZXingReader and ZXingWriter example code also meant for distributing.
    * New simplified and consistent Python API (breaking change)
    * ReedSolomon error detection code 2x speedup.
    * Enable basic MaxiCode support.
    * Fix coutry-code metatdata decoding for UPC/EAN codes.
    * Slightly improved QRCode detection for rotated symbols.
    * Faster PDF417 decoder.
    * Lots of minor code readability and general cleanup improvements.
  - Drop patches:
    * add-missing-includes-of-stdexcept-header.patch
    * fix-library-installation-and-versioning.patch


author: Antonio Larrosa <alarrosa@suse.com>
changelog:
  - Add fix for pkg-config file so the version and library are set properly
    in the resulting .pc file:
    * fix-pkg-config-file.patch


