Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

proftpd-doc-1.3.9e-2.1 RPM for noarch

From OpenSuSE Tumbleweed for noarch

Name: proftpd-doc Distribution: openSUSE Tumbleweed
Version: 1.3.9e Vendor: openSUSE
Release: 2.1 Build date: Mon Nov 9 18:35:13 2026
Group: Documentation/HTML Build host: reproducible
Size: 2069624 Source RPM: proftpd-1.3.9e-2.1.src.rpm
Packager: https://bugs.opensuse.org
Url: http://www.proftpd.org/
Summary: Documentation for ProFTPD
Here are Documentation for ProFTPD

Provides

Requires

License

GPL-2.0-or-later

Changelog

* Mon Nov 09 2026 Peter Simons <psimons@suse.com>
  - Apply "CVE-2026-35025.patch" to add the mod_procfs module from
    upstream (as of commit 448f055b1) and build it as a core module,
    as upstream does starting with 1.3.10rc3. Authenticated FTP users
    could bypass <Directory> ACL restrictions by prefixing paths with
    /proc/self/root, e.g. via RNFR. mod_procfs automatically rejects
    client requests that reference procfs and sysfs mount points in
    sessions that are not chrooted; it can be disabled with
    "ProcfsEngine off". [bsc#1269065, CVE-2026-35025]
* Thu Nov 05 2026 Peter Simons <psimons@suse.com>
  - Mark the proftpd-doc subpackage as noarch to fix the rpmlint
    no-binary error.
* Thu Nov 05 2026 chris@computersalat.de
  - Update to 1.3.9e
    * fix for boo#1289272 (CVE-2026-119147)
      Fix for Authorization bypass via mod_sftp copy-file extension
    * https://github.com/proftpd/proftpd/blob/v1.3.9e/NEWS
    * fix for bsc#1271945, bsc#1271097 (CVE-2026-63091), completed:
      properly detect ERANGE conversion errors for client-sent SCP file
      sizes
    * Support opt-in use of Huffman encoding only for SSH compression, to
      mitigate possible chosen-plaintext attack against concurrent channels
      sharing same SSH connection (Issue gh#2366).
  - Update to 1.3.9d
    * https://github.com/proftpd/proftpd/blob/v1.3.9d/NEWS
    * Addressed possible use-after-free issue in FTP STAT command.
    * Fixed handling of default AllowForeignAddress behavior for passive data
      transfers.
  - rebased patch
    * proftpd_no-BuildDate.patch
* Thu Aug 27 2026 Eugenio Paolantonio <eugenio.paolantonio@suse.com>
  - Disable redis support in CODE 16 too (jsc#PED-16500)
* Thu Jul 23 2026 chris@computersalat.de
  - Update to 1.3.9c
    * https://github.com/proftpd/proftpd/blob/v1.3.9c/NEWS
    * Fixed SFTP packet buffer overflow for authenticated sessions (Issue #2190).
    * fix for bsc#1271944, bsc#1271096 (CVE-2026-63090)
      Allocate sufficient space when assembling fragmented SFTP request
      chunks (Issue #2190)
    * fix for bsc#1271945, bsc#1271097 (CVE-2026-63091)
      Guard against overflow of the client-provided file size for SCP
      uploads
    * fix for bsc#1263183 (CVE-2026-42167)
      mod_sql now escapes client-provided group names for name-to-GID
      lookups (Issue #2188)
    * Fixed mod_exec regression with handling of ExecEnviron directives
      (Issue #2135).
  - rebased patch
    * proftpd_no-BuildDate.patch
* Thu Jun 04 2026 chris@computersalat.de
  - Update to 1.3.9b
    * https://github.com/proftpd/proftpd/blob/v1.3.9b/NEWS
    * Additional fixes for SQL injection (CVE-2026-42167), notably for handling
      `%{env:...}` and `%{note:...}` variables.
    * fix for bsc#1263183 (CVE-2026-42167), additional fixes as above
    * fix for bsc#1264262 (CVE-2026-44331)
      SQL injection in mod_wrap2_sql via reverse DNS hostname (Issue #2057)
    * fix for bsc#1271946 (CVE-2026-53994)
      Heap-based buffer overflow in mod_sftp due to SFTP request payload
      length underflow (Issue #2115)
    * Updated modules to build against OpenSSL 4.x.
  - Update to 1.3.9a
    * Fix for SQL injection (CVE-2026-42167)
    * fix for bsc#1263183 (CVE-2026-42167)
      SQL injection via mod_sql because of is_escaped_text() logic error
      (Issue #2052)
  - rebased patch
    * proftpd_no-BuildDate.patch
* Sun May 24 2026 Christian Boltz <suse-beta@cboltz.de>
  - Change owner of /etc/proftpd/auth to root:ftp to avoid the need
    for capabilities dac_read_search and dac_override (boo#1265862)
* Wed Feb 11 2026 Peter Simons <psimons@suse.com>
  - Removed "ProtectSystem=full" from proftpd.service. That directive
    prevents proftpd from writing to the /usr directory hierarchy,
    which means that logged-in and properly authorized FTP users
    cannot upload files or create directories there either. This is
    not what system administrators who set up FTP access for local
    users expect and it's inconsistent with how others FTP servers
    like vsftpd are configured by default. [bsc#1256827]
* Tue Jul 22 2025 Peter Simons <psimons@suse.com>
  - Explicitly list all installed proftpd modules in the %files
    section (rather than using a catch-all glob) to make sure we
    notice when changes to the package break the installation of any
    of those modules -- as has happened in bsc#1246853.
* Fri Jun 13 2025 chris@computersalat.de
  - switch to _service file
    * Add _service
    * Remove proftpd-1.3.9.tar.gz
    * Remove proftpd-1.3.9.tar.gz.asc
  - rename patches
    * proftpd-basic.conf.patch -> proftpd_basic.conf.patch
    * proftpd-dist.patch -> proftpd_dist.patch
    * proftpd-ftpasswd.patch -> proftpd_ftpasswd.patch
    * proftpd-no_BuildDate.patch -> proftpd_no-BuildDate.patch
    * proftpd-strip.patch -> proftpd_strip.patch
  - Update proftpd.service file
  - cleanup spec
    * Remove SysVinit stuff
  - Remove proftpd.init file
* Fri Jun 13 2025 chris@computersalat.de
  - 1.3.9 - Released 14-Mar-2025
    * http://proftpd.org/docs/NEWS-1.3.9
  - rebase patches
    * harden_proftpd.service.patch
    * proftpd-no_BuildDate.patch
* Thu Jun 12 2025 chris@computersalat.de
  - 1.3.8d - Released 14-Mar-2025
    * http://proftpd.org/docs/NEWS-1.3.8d
  - rebase patch
    * proftpd-no_BuildDate.patch
  - remove obsolete patch
    * proftpd-null_pointer.patch
* Fri Mar 14 2025 Andreas Stieger <andreas.stieger@gmx.de>
  - build with pcre2
* Thu Feb 20 2025 chris@computersalat.de
  - fix for boo#1236889 (CVE-2024-57392)
    https://github.com/proftpd/proftpd/issues/1866
    Some of the fuzzing tests submitted in the advisory ran into existing null
    pointer dereferences (not buffer overflows); let's correct them.
  - Add proftpd-null_pointer.patch
* Thu Jan 09 2025 chris@computersalat.de
  - 1.3.8c - Released 11-Dec-2024
    fix for boo#1233997 (CVE-2024-48651)
    * http://proftpd.org/docs/NEWS-1.3.8c
      gh#1830 - Supplemental group inheritance grants unintended access to GID 0
      due to lack of supplemental groups from mod_sql
      https://github.com/proftpd/proftpd/issues/1830
  - rebase patch
    * proftpd-no_BuildDate.patch
* Thu Feb 29 2024 Dominique Leuenberger <dimstar@opensuse.org>
  - Use %autosetup macro. Allows to eliminate the usage of deprecated
    %patchN.
* Wed Jan 03 2024 chris@computersalat.de
  - Update changes file
    * add missing boo#1218144 (CVE-2023-48795) info
    * add missing CVE-2023-51713 info
* Wed Dec 27 2023 chris@computersalat.de
  - 1.3.8b - Released 19-Dec-2023
      fix for boo#1218144 (CVE-2023-48795)
    * http://proftpd.org/docs/NEWS-1.3.8b
    * Implemented mitigations for "Terrapin" SSH attack (CVE-2023-48795).
  - rebase patch
    * proftpd-no_BuildDate.patch
* Thu Nov 02 2023 chris@computersalat.de
  - 1.3.8a - Released 08-Oct-2023
      fix for boo#1218344 (CVE-2023-51713):
      gh#1683 - Out-of-bounds buffer read when handling FTP commands.
      https://github.com/proftpd/proftpd/issues/1683
    * http://proftpd.org/docs/NEWS-1.3.8a
    * Fixed builds when using OpenSSL 3.x
* Wed Jan 25 2023 chris@computersalat.de
  - 1.3.7f - Released 04-Dec-2022
    * Issue 1533 - mod_tls module unexpectedly allows TLS handshake after
      authentication in some configurations.
    * Bug 4491 - unable to verify signed data: signature type 'rsa-sha2-512' does
      not match publickey algorithm 'ssh-rsa'.
* Mon Jan 16 2023 Stefan Schubert <schubi@suse.com>
  - Migration of PAM settings to /usr/lib/pam.d.

Files

/usr/share/doc/packages/proftpd-doc
/usr/share/doc/packages/proftpd-doc/contrib
/usr/share/doc/packages/proftpd-doc/contrib/ftpasswd.html
/usr/share/doc/packages/proftpd-doc/contrib/ftpmail.html
/usr/share/doc/packages/proftpd-doc/contrib/ftpquota.html
/usr/share/doc/packages/proftpd-doc/contrib/index.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_auth_otp.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_ban.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_copy.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_ctrls_admin.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_deflate.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_digest.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_dnsbl.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_dynmasq.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_exec.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_geoip.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_ifsession.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_ifversion.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_ldap.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_load.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_log_forensic.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_qos.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_quotatab.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_quotatab_file.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_quotatab_ldap.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_quotatab_radius.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_quotatab_sql.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_radius.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_ratio.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_readme.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_rewrite.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_sftp.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_sftp_pam.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_sftp_sql.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_shaper.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_site_misc.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_snmp.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_sql.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_sql_odbc.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_sql_passwd.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_sql_sqlite.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_statcache.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_tls.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_tls_fscache.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_tls_memcache.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_tls_redis.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_tls_shmcache.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_unique_id.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_wrap.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_wrap2.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_wrap2_file.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_wrap2_redis.html
/usr/share/doc/packages/proftpd-doc/contrib/mod_wrap2_sql.html
/usr/share/doc/packages/proftpd-doc/faq.html
/usr/share/doc/packages/proftpd-doc/howto
/usr/share/doc/packages/proftpd-doc/howto/ASCII.html
/usr/share/doc/packages/proftpd-doc/howto/AWS.html
/usr/share/doc/packages/proftpd-doc/howto/AuthFiles.html
/usr/share/doc/packages/proftpd-doc/howto/Authentication.html
/usr/share/doc/packages/proftpd-doc/howto/BCP.html
/usr/share/doc/packages/proftpd-doc/howto/Chroot.html
/usr/share/doc/packages/proftpd-doc/howto/Classes.html
/usr/share/doc/packages/proftpd-doc/howto/Compiling.html
/usr/share/doc/packages/proftpd-doc/howto/ConfigFile.html
/usr/share/doc/packages/proftpd-doc/howto/ConfigurationTricks.html
/usr/share/doc/packages/proftpd-doc/howto/ConnectionACLs.html
/usr/share/doc/packages/proftpd-doc/howto/Controls.html
/usr/share/doc/packages/proftpd-doc/howto/CreateHome.html
/usr/share/doc/packages/proftpd-doc/howto/DNS.html
/usr/share/doc/packages/proftpd-doc/howto/DSO.html
/usr/share/doc/packages/proftpd-doc/howto/Debugging.html
/usr/share/doc/packages/proftpd-doc/howto/Directory.html
/usr/share/doc/packages/proftpd-doc/howto/DisplayFiles.html
/usr/share/doc/packages/proftpd-doc/howto/ECCN.html
/usr/share/doc/packages/proftpd-doc/howto/FTP.html
/usr/share/doc/packages/proftpd-doc/howto/FXP.html
/usr/share/doc/packages/proftpd-doc/howto/Filters.html
/usr/share/doc/packages/proftpd-doc/howto/Globbing.html
/usr/share/doc/packages/proftpd-doc/howto/IPv6.html
/usr/share/doc/packages/proftpd-doc/howto/KeepAlives.html
/usr/share/doc/packages/proftpd-doc/howto/Limit.html
/usr/share/doc/packages/proftpd-doc/howto/ListOptions.html
/usr/share/doc/packages/proftpd-doc/howto/LogLevels.html
/usr/share/doc/packages/proftpd-doc/howto/LogMessages.html
/usr/share/doc/packages/proftpd-doc/howto/Logging.html
/usr/share/doc/packages/proftpd-doc/howto/Memcache.html
/usr/share/doc/packages/proftpd-doc/howto/Modules.html
/usr/share/doc/packages/proftpd-doc/howto/NAT.html
/usr/share/doc/packages/proftpd-doc/howto/Nonroot.html
/usr/share/doc/packages/proftpd-doc/howto/Quotas.html
/usr/share/doc/packages/proftpd-doc/howto/Radius.html
/usr/share/doc/packages/proftpd-doc/howto/Redis.html
/usr/share/doc/packages/proftpd-doc/howto/Regex.html
/usr/share/doc/packages/proftpd-doc/howto/Rewrite.html
/usr/share/doc/packages/proftpd-doc/howto/SQL.html
/usr/share/doc/packages/proftpd-doc/howto/SSH.html
/usr/share/doc/packages/proftpd-doc/howto/Scoreboard.html
/usr/share/doc/packages/proftpd-doc/howto/Sendfile.html
/usr/share/doc/packages/proftpd-doc/howto/ServerType.html
/usr/share/doc/packages/proftpd-doc/howto/Stopping.html
/usr/share/doc/packages/proftpd-doc/howto/TLS.html
/usr/share/doc/packages/proftpd-doc/howto/Testing.html
/usr/share/doc/packages/proftpd-doc/howto/Timestamps.html
/usr/share/doc/packages/proftpd-doc/howto/Tracing.html
/usr/share/doc/packages/proftpd-doc/howto/Translations.html
/usr/share/doc/packages/proftpd-doc/howto/Umask.html
/usr/share/doc/packages/proftpd-doc/howto/Upgrade.html
/usr/share/doc/packages/proftpd-doc/howto/Versioning.html
/usr/share/doc/packages/proftpd-doc/howto/Vhost.html
/usr/share/doc/packages/proftpd-doc/howto/VirtualUsers.html
/usr/share/doc/packages/proftpd-doc/howto/ftpaccess.html
/usr/share/doc/packages/proftpd-doc/howto/index.html
/usr/share/doc/packages/proftpd-doc/modules
/usr/share/doc/packages/proftpd-doc/modules/index.html
/usr/share/doc/packages/proftpd-doc/modules/mod_auth.html
/usr/share/doc/packages/proftpd-doc/modules/mod_auth_file.html
/usr/share/doc/packages/proftpd-doc/modules/mod_auth_pam.html
/usr/share/doc/packages/proftpd-doc/modules/mod_auth_unix.html
/usr/share/doc/packages/proftpd-doc/modules/mod_cap.html
/usr/share/doc/packages/proftpd-doc/modules/mod_core.html
/usr/share/doc/packages/proftpd-doc/modules/mod_ctrls.html
/usr/share/doc/packages/proftpd-doc/modules/mod_delay.html
/usr/share/doc/packages/proftpd-doc/modules/mod_dso.html
/usr/share/doc/packages/proftpd-doc/modules/mod_facl.html
/usr/share/doc/packages/proftpd-doc/modules/mod_facts.html
/usr/share/doc/packages/proftpd-doc/modules/mod_ident.html
/usr/share/doc/packages/proftpd-doc/modules/mod_lang.html
/usr/share/doc/packages/proftpd-doc/modules/mod_log.html
/usr/share/doc/packages/proftpd-doc/modules/mod_ls.html
/usr/share/doc/packages/proftpd-doc/modules/mod_memcache.html
/usr/share/doc/packages/proftpd-doc/modules/mod_procfs.html
/usr/share/doc/packages/proftpd-doc/modules/mod_redis.html
/usr/share/doc/packages/proftpd-doc/modules/mod_rlimit.html
/usr/share/doc/packages/proftpd-doc/modules/mod_site.html
/usr/share/doc/packages/proftpd-doc/modules/mod_xfer.html


Generated by rpm2html 1.8.1

Fabrice Bellet, Thu Nov 12 22:26:22 2026