<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="38">
<package pkgid="cfbbc71bf9207966b489aa69e09f4579f46fdac1561d4879cc9a6676440f7694" name="civetweb" arch="x86_64">
  <version epoch="0" ver="1.16" rel="16.el10_4"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-7" date="1752667200">- civetweb 1.16, rhbz#2380496</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-8" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-9" date="1756900800">- civetweb 1.16</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-10" date="1759147200">- civetweb 1.16, rhbz 2400162-2400166</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-12" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-13" date="1771502400">- civetweb 1.16, handle cmake-4 doesn't support cmake &lt; 3.5
- upstream, civetweb-1.16+ has updated to minimum cmake-3.10, and there
  don't seem to be any adverse effects building civetweb with that change.
  And someday there might even be a civetweb-1.17.</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-14" date="1780920000">- enable WEBSOCKETS and X_DOM_SOCKET as requested</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 1.16-15" date="1786104000">- Add upstream's fix to actually support X_DOM_SOCKET with cmake
- Enable ZLIB compression support
- rhbz#2512488</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 1.16-16" date="1787227200">- Link to openssl libraries instead of using runtime dynamic loading
- Use openssl 3.0 API instead of the default openssl 1.1 API
- Let the devel package own the cmake subdirectory
- Run tests in check</changelog>
</package>
<package pkgid="c532c2d4a366052dfd29f4a63e8febe4e097c4a77dacf6799155beec820f0d46" name="civetweb-devel" arch="x86_64">
  <version epoch="0" ver="1.16" rel="16.el10_4"/>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-7" date="1752667200">- civetweb 1.16, rhbz#2380496</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-8" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-9" date="1756900800">- civetweb 1.16</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-10" date="1759147200">- civetweb 1.16, rhbz 2400162-2400166</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.16-12" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-13" date="1771502400">- civetweb 1.16, handle cmake-4 doesn't support cmake &lt; 3.5
- upstream, civetweb-1.16+ has updated to minimum cmake-3.10, and there
  don't seem to be any adverse effects building civetweb with that change.
  And someday there might even be a civetweb-1.17.</changelog>
  <changelog author="Kaleb S. KEITHLEY &lt;kkeithle at redhat.com&gt; - 1.16-14" date="1780920000">- enable WEBSOCKETS and X_DOM_SOCKET as requested</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 1.16-15" date="1786104000">- Add upstream's fix to actually support X_DOM_SOCKET with cmake
- Enable ZLIB compression support
- rhbz#2512488</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 1.16-16" date="1787227200">- Link to openssl libraries instead of using runtime dynamic loading
- Use openssl 3.0 API instead of the default openssl 1.1 API
- Let the devel package own the cmake subdirectory
- Run tests in check</changelog>
</package>
<package pkgid="c5d40a524f2c2a70b8b7e610c1dc9323b9dbb944c410439c1edfea41d6054026" name="libbson" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="1.el10_4"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.6-1" date="1759924800">- update to 1.30.6</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.7-1" date="1770206400">- update to 1.30.7</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.3-1" date="1772625600">- update to 2.2.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.4-1" date="1775649600">- update to 2.2.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1776427200">- update to 2.3.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.1-1" date="1780401600">- update to 2.3.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1783512000">- update to 2.3.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.3-1" date="1784116800">- update to 2.3.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.4.0-1" date="1785931200">- update to 2.4.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.5.0-1" date="1787659200">- update to 2.5.0</changelog>
</package>
<package pkgid="b3d9c6198feee69edb481cb62a247f529eb495be2e51309f50207f25ea0671a5" name="libbson-devel" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="1.el10_4"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.6-1" date="1759924800">- update to 1.30.6</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.7-1" date="1770206400">- update to 1.30.7</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.3-1" date="1772625600">- update to 2.2.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.4-1" date="1775649600">- update to 2.2.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1776427200">- update to 2.3.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.1-1" date="1780401600">- update to 2.3.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1783512000">- update to 2.3.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.3-1" date="1784116800">- update to 2.3.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.4.0-1" date="1785931200">- update to 2.4.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.5.0-1" date="1787659200">- update to 2.5.0</changelog>
</package>
<package pkgid="a3622b9c487e468b16c5a9b80b6cc75d7043e1148bf74f32c18d501512994182" name="mongo-c-driver" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="1.el10_4"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.6-1" date="1759924800">- update to 1.30.6</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.7-1" date="1770206400">- update to 1.30.7</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.3-1" date="1772625600">- update to 2.2.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.4-1" date="1775649600">- update to 2.2.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1776427200">- update to 2.3.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.1-1" date="1780401600">- update to 2.3.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1783512000">- update to 2.3.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.3-1" date="1784116800">- update to 2.3.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.4.0-1" date="1785931200">- update to 2.4.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.5.0-1" date="1787659200">- update to 2.5.0</changelog>
</package>
<package pkgid="fc2284c7f64f65c0f6e849c68c81b47ac5329766e8538533dd20f8a4287e3e04" name="mongo-c-driver-devel" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="1.el10_4"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.6-1" date="1759924800">- update to 1.30.6</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.7-1" date="1770206400">- update to 1.30.7</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.3-1" date="1772625600">- update to 2.2.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.4-1" date="1775649600">- update to 2.2.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1776427200">- update to 2.3.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.1-1" date="1780401600">- update to 2.3.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1783512000">- update to 2.3.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.3-1" date="1784116800">- update to 2.3.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.4.0-1" date="1785931200">- update to 2.4.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.5.0-1" date="1787659200">- update to 2.5.0</changelog>
</package>
<package pkgid="00838e4e48025a890baeaa888c68dc2b8e2db0a2fc7a22292e1320b266853439" name="mongo-c-driver-libs" arch="x86_64">
  <version epoch="0" ver="2.5.0" rel="1.el10_4"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.6-1" date="1759924800">- update to 1.30.6</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.30.7-1" date="1770206400">- update to 1.30.7</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.3-1" date="1772625600">- update to 2.2.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.4-1" date="1775649600">- update to 2.2.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1776427200">- update to 2.3.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.1-1" date="1780401600">- update to 2.3.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1783512000">- update to 2.3.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.3-1" date="1784116800">- update to 2.3.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.4.0-1" date="1785931200">- update to 2.4.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.5.0-1" date="1787659200">- update to 2.5.0</changelog>
</package>
<package pkgid="69547e1f80d8355dd6bf7a595dc69ad1bd60e2a8ebbe65f42f2e052e0d720876" name="perl-Archive-Peek" arch="noarch">
  <version epoch="0" ver="0.37" rel="5.el10_4"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-22" date="1611662400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_34_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.35-23" date="1621684800">- Perl 5.34 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.35-24" date="1626955200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_35_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.37-1" date="1636977600">- Update to 0.37
  - Add repository metadata
  - Port from Moose to Moo and Type::Tiny
  - Make prereqs more specific with respect to phase
  - Add negative test</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.37-2" date="1642680000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 0.37-3" date="1654084800">- Perl 5.36 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.37-4" date="1658491200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.37-5" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
</package>
<package pkgid="21bc60e84b450096b14d9b0dbfab2ad5c56c057b71601b2357c07fcd1eba383f" name="perl-CPAN-Requirements-Dynamic" arch="noarch">
  <version epoch="0" ver="0.003" rel="1.el10_4"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.001-4" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.001-5" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.002-1" date="1744027200">- Update to 0.002
  - Remove unnecessary conditions</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.002-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.002-3" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.003-1" date="1783857600">- Update to 0.003 (rhbz#2499542)
  - Avoid undefinedness warning in config_defined</changelog>
</package>
<package pkgid="e8e442efeb29b5e4768c772e44240cb81ae11eb3b3cf834c7d1e95d0525cb91f" name="perl-DBD-ODBC" arch="x86_64">
  <version epoch="0" ver="1.61" rel="13.el10_4"/>
  <changelog author="Michal Josef &#x160;pa&#x10D;ek &lt;mspacek@redhat.com&gt; - 1.61-13" date="1786449600">- Re-submit package for Fedora review</changelog>
</package>
<package pkgid="503315f98612dd197fb8baf2203b607ba2b0d579e0a6afa7925e9f80c996496f" name="perl-ExtUtils-Helpers" arch="noarch">
  <version epoch="0" ver="0.028" rel="1.el10_4"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.026-22" date="1674216000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.026-23" date="1689854400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.026-24" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.026-25" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.027-1" date="1718798400">- Update to 0.027
  - Revert "Make split_like_shell always unixy"</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.027-2" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 0.028-1" date="1725364800">- Update to 0.028
  - Add ext argument to man1_pagename and man3_pagename</changelog>
</package>
<package pkgid="7254dd3adbce9be2beb3b911d37e11d90e2f8816a3b080ede71aafa92932d8de" name="perl-Parse-CPAN-Packages" arch="noarch">
  <version epoch="0" ver="2.40" rel="32.el10_4"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.40-28" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.40-29" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.40-30" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.40-31" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.40-32" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
</package>
<package pkgid="92bf8ac348c3a016abff5784921058be80bac347c0e263d76b9eb27dba16c043" name="perltidy" arch="noarch">
  <version epoch="0" ver="20260826" rel="1.el10_4"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250711-1" date="1752494400">- Update to 20250711 (see CHANGES.md for details)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20250711-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20250912-1" date="1757764800">- Update to 20250912 (see CHANGES.md for details) (rhbz#2394876)
- Package new SECURITY.md file</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260109-1" date="1767873600">- Update to 20260109 (see CHANGES.md for details) (rhbz#2428067)
- Change Pod::Html dependency to Pod::Simple::XHTML, which is now the preferred
  back-end option for HTML generation</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20260109-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260204-1" date="1770120000">- Update to 20260204 (see CHANGES.md for details) (rhbz#2436356)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260705-1" date="1783425600">- Update to 20260705 (see CHANGES.md for details) (rhbz#2497057)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20260705-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260808-1" date="1786104000">- Update to 20260808 (see CHANGES.md for details) (rhbz#2512515)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 20260826-1" date="1787659200">- Update to 20260826 (see CHANGES.md for details) (rhbz#2523519)</changelog>
</package>
<package pkgid="3ecf5da65b7b723aa8f539a1f35cfda75ee4ef657f753b7cd0e7b5c635b832f1" name="php-pecl-mongodb2" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="1.el10_4"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.21.0-1" date="1740744000">- update to 1.21.0
- raise dependency on PHP 8.1
- raise dependency on libbson and libmongc 1.30
- raise dependency on libmongocrypt 1.12
- re-license spec file to CECILL-2.1
- add pie virtual provides</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.0.0-1" date="1744286400">- update to 2.0.0
- rename to php-pecl-mongodb2 for new API</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.1.0-1" date="1748260800">- update to 2.1.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.1.8-1" date="1770292800">- update to 2.1.8</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.2.1-1" date="1771502400">- update to 2.2.1
- raise dependency on libmongoc 2.2.2 and libmongocrypt 1.17.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.0-1" date="1777377600">- update to 2.3.0
- raise dependency on libmongoc 2.3.0 and libmongocrypt 1.17.3
- drop pear/pecl dependency
- sources from github</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1779278400">- update to 2.3.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.3-1" date="1779537600">- update to 2.3.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.3-2" date="1781611200">- rebuild with default php 8.3 #2488949</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.4.0-1" date="1787659200">- update to 2.4.0
- raise dependency on libmongoc 2.4.0 and libmongocrypt 1.20.0
- run upstream test suite without server</changelog>
</package>
<package pkgid="1a25344b750910befb8350ff1f598c3aea47c901747260f54391f215f54a9d7a" name="php-pecl-yac" arch="x86_64">
  <version epoch="0" ver="2.3.2" rel="1.el10_4"/>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 2.3.1-13" date="1728907200">- rebuild for https://fedoraproject.org/wiki/Changes/php84</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 2.3.1-14" date="1730203200">- modernize the spec file</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 2.3.2-1" date="1787054400">- update to 2.3.2
- add pie virtual provides
- drop pear/pecl dependency
- sources from github
- re-license spec file to CECILL-2.1</changelog>
</package>
<package pkgid="651c60f4c86e5e4048a7374fadfb46bef42410568d9252dc51f34f25e467d8da" name="pie" arch="noarch">
  <version epoch="0" ver="1.4.10" rel="1.el10_4"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.4.0-1" date="1775649600">- update to 1.4.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.4.1-1" date="1776168000">- update to 1.4.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.4.2-1" date="1777118400">- update to 1.4.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.4.3-1" date="1778587200">- update to 1.4.3</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.4.4-1" date="1778673600">- update to 1.4.4</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.4.5-1" date="1779796800">- update to 1.4.5</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.4.6-1" date="1781697600">- update to 1.4.6</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.4.7-1" date="1782388800">- update to 1.4.7</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.4.8-1" date="1783425600">- update to 1.4.8</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 1.4.10-1" date="1787227200">- update to 1.4.10</changelog>
</package>
<package pkgid="28ce1517a91b3da16b1516781271665932a472cbd35e8bbfd41bf3b3c9a0eb50" name="proftpd" arch="x86_64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_4"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="3ad262910b2ef2d96fcbac14e75868735624877c3efa65f44d85ee41f160c2e9" name="proftpd-devel" arch="x86_64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_4"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="8de3163d86181849bfe77ec8fe6eaf771b403ebad4aa90064cf17257aaa34e2c" name="proftpd-ldap" arch="x86_64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_4"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="95cdb0252e5fcdddc3b8ed9106d062926bb15cb49a40de2cea456e340eacd9a5" name="proftpd-mysql" arch="x86_64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_4"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="2e415bf7bfa244101afde7b6c74579a84d56bf1da6b3d01b1f43d3d300e6e023" name="proftpd-postgresql" arch="x86_64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_4"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="ea843357987d893c83b45a3795a75ac81580c88f6321c1fe6507aded00234c6a" name="proftpd-proxy" arch="x86_64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_4"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="75c415c9375e68a9ec5d321fd584d5ec6993e3eb25f3452b65bc5620ae9623f6" name="proftpd-sqlite" arch="x86_64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_4"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="36aadd5195c55b270efceab0dd7f352df795f7e5a5438eae6b756809f27646ba" name="proftpd-utils" arch="x86_64">
  <version epoch="0" ver="1.3.9d" rel="2.el10_4"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004800">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-4" date="1785844800">- Update mod_procfs to 0.3
  - Also block access to sysfs filesystems</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-1" date="1787054400">- Update to 1.3.9d
  - SSH channel open request from authenticated client with max packet size of
    zero lead to infinite loop (GH#2242)
  - Aborted/failed data transfers incorrectly clear any "EPSV ALL" state
    (GH#2255)
  - Possible use-after-free issue via FTP STAT command using -C option; note
    that the -C option is now silently ignored for FTP STAT commands (GH#2265)
  - Passive FTP data transfers do not honor AllowForeignAddress policy properly
    (GH#2272)
  - Empty password fields should be rejected by the mod_sql_passwd module
    (GH#2275)
  - Empty password fields should be rejected by the mod_auth_file module
    (GH#2279)
  - .ftpaccess file policy bypass possible in certain configurations (GH#2282)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9d-2" date="1787572800">- Fix regression in mod_sql's SQLNamedQuery (upstream bug 4515, GH#2293)</changelog>
</package>
<package pkgid="aa5e57a1ae80e3eb8bc4694a5873564277efea59797fc1f688e8ec3ea11befc1" name="python3-msal" arch="noarch">
  <version epoch="0" ver="1.38.0" rel="1.el10_4"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.33.0-4" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.34.0-1" date="1758628800">- Update to 1.34.0 upstream release
- Resolves: rhbz#2397535</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.34.0-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Jeremy Cline &lt;jeremycline@linux.microsoft.com&gt; - 1.35.0~b1-1" date="1770811200">- Update to v1.35b1
- Includes support for Python 3.14</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.35.1-1" date="1772712000">- Update to 1.35.1 upstream release
- Resolves: rhbz#2444725</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.35.1-3" date="1772884800">- Fix wrong source for 1.35.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.36.0-1" date="1775736000">- Update to 1.36.0 upstream release
- Resolves: rhbz#2456886</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 1.36.0-2" date="1779192000">- Break the dependency loop on self via azure-identity</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.37.0-1" date="1781697600">- Update to 1.37.0 (close RHBZ#2483493)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 1.38.0-1" date="1787659200">- Update to 1.38.0 upstream release
- Resolves: rhbz#2521824</changelog>
</package>
<package pkgid="10d7193ba0d7ff9d25451ba385d96dac1170e5776ad65f21e38a82278c73051d" name="python3-ruff" arch="noarch">
  <version epoch="0" ver="0.16.4" rel="1.el10_4"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.15-2" date="1780833600">- Allow tikv-jemallocator 0.7</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.16-1" date="1780833601">- Update to 0.15.16 (close RHBZ#2484855)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.16-2" date="1780833602">- Allow get-size2 0.10</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.17-1" date="1782129600">- Update to 0.15.17</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.18-1" date="1782129601">- Update to 0.15.18 (close RHBZ#2488001)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.19-1" date="1782475200">- Update to 0.15.19 (close RHBZ#2492070)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.20-1" date="1782475201">- Update to 0.15.20 (close RHBZ#2493018)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.21-1" date="1783684800">- Update to 0.15.21 (close RHBZ#2498772)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.16.3-1" date="1786881600">- Update to 0.16.3 (close RHBZ#2501369)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.16.4-1" date="1787659200">- Update to 0.16.4 (close RHBZ#2520735)</changelog>
</package>
<package pkgid="d26d8d3e60ccd5625d9a565ae21be8f6408567c46b64fa312ed157abe06c67f8" name="ruff" arch="x86_64">
  <version epoch="0" ver="0.16.4" rel="1.el10_4"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.15-2" date="1780833600">- Allow tikv-jemallocator 0.7</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.16-1" date="1780833601">- Update to 0.15.16 (close RHBZ#2484855)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.16-2" date="1780833602">- Allow get-size2 0.10</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.17-1" date="1782129600">- Update to 0.15.17</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.18-1" date="1782129601">- Update to 0.15.18 (close RHBZ#2488001)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.19-1" date="1782475200">- Update to 0.15.19 (close RHBZ#2492070)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.20-1" date="1782475201">- Update to 0.15.20 (close RHBZ#2493018)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.15.21-1" date="1783684800">- Update to 0.15.21 (close RHBZ#2498772)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.16.3-1" date="1786881600">- Update to 0.16.3 (close RHBZ#2501369)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.16.4-1" date="1787659200">- Update to 0.16.4 (close RHBZ#2520735)</changelog>
</package>
<package pkgid="129c379d6e943094f738dc160edfb08f1019f211a8f55c1ed638bea16ceaf68a" name="rust-cap-primitives+arbitrary-devel" arch="noarch">
  <version epoch="0" ver="4.0.3" rel="1.el10_4"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.0.2-1" date="1787659200">- Unretire and update to version 4.0.2; Fixes RHBZ#2517207</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.0.3-1" date="1787659201">- Update to version 4.0.3</changelog>
</package>
<package pkgid="f5c68dfe5c386478dc74fbc842d4a7e15ef36eb0440c910ab3baccf484b76a28" name="rust-cap-primitives+default-devel" arch="noarch">
  <version epoch="0" ver="4.0.3" rel="1.el10_4"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.0.2-1" date="1787659200">- Unretire and update to version 4.0.2; Fixes RHBZ#2517207</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.0.3-1" date="1787659201">- Update to version 4.0.3</changelog>
</package>
<package pkgid="e86fc255dd39b6931e079cb472428a88dc3227b5c6e1f5e9d52a3ed2ce2795b8" name="rust-cap-primitives-devel" arch="noarch">
  <version epoch="0" ver="4.0.3" rel="1.el10_4"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.0.2-1" date="1787659200">- Unretire and update to version 4.0.2; Fixes RHBZ#2517207</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.0.3-1" date="1787659201">- Update to version 4.0.3</changelog>
</package>
<package pkgid="176f2cf5da85900526e034002c73644d975be96b022dee2ce345aa61b6422b3f" name="rust-cap-std+camino-devel" arch="noarch">
  <version epoch="0" ver="4.0.3" rel="1.el10_4"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.0.2-1" date="1787659200">- Unretire and update to version 4.0.2; Fixes RHBZ#2517210</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.0.3-1" date="1787659201">- Update to version 4.0.3</changelog>
</package>
<package pkgid="627dca8d5ceba349b7df229e9aa85e5d1612f1267acae0f10b52517061dcf94b" name="rust-cap-std+default-devel" arch="noarch">
  <version epoch="0" ver="4.0.3" rel="1.el10_4"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.0.2-1" date="1787659200">- Unretire and update to version 4.0.2; Fixes RHBZ#2517210</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.0.3-1" date="1787659201">- Update to version 4.0.3</changelog>
</package>
<package pkgid="718b4306ab2e6bcfeb03d690b4046e0edaa49bfd876aa658f815ccf5abb85955" name="rust-cap-std+fs_utf8-devel" arch="noarch">
  <version epoch="0" ver="4.0.3" rel="1.el10_4"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.0.2-1" date="1787659200">- Unretire and update to version 4.0.2; Fixes RHBZ#2517210</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.0.3-1" date="1787659201">- Update to version 4.0.3</changelog>
</package>
<package pkgid="6fccf6f152a85d38c3dddd9edeec3c7ab6fe5ecdf7c4d231255ad43524f45110" name="rust-cap-std-devel" arch="noarch">
  <version epoch="0" ver="4.0.3" rel="1.el10_4"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.0.2-1" date="1787659200">- Unretire and update to version 4.0.2; Fixes RHBZ#2517210</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 4.0.3-1" date="1787659201">- Update to version 4.0.3</changelog>
</package>
<package pkgid="27107c963c8054051c23096a2cbf7da174c63f41cd5564162af8fa25e70c4542" name="rust-fs-set-times+default-devel" arch="noarch">
  <version epoch="0" ver="0.20.3" rel="5.el10_4"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.20.2-1" date="1733745600">- Update to version 0.20.2; Fixes RHBZ#2330284</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.2-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.20.3-1" date="1745841600">- Update to version 0.20.3; Fixes RHBZ#2351125</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.3-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.3-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.3-4" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.20.3-5" date="1786708800">- Update io-lifetimes dependency to v3</changelog>
</package>
<package pkgid="9ee8f10ecbb03a9c42b315d241785f60441cf457351e6de1a2379a1a78799923" name="rust-fs-set-times-devel" arch="noarch">
  <version epoch="0" ver="0.20.3" rel="5.el10_4"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.20.2-1" date="1733745600">- Update to version 0.20.2; Fixes RHBZ#2330284</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.2-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 0.20.3-1" date="1745841600">- Update to version 0.20.3; Fixes RHBZ#2351125</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.3-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.3-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.20.3-4" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.20.3-5" date="1786708800">- Update io-lifetimes dependency to v3</changelog>
</package>
<package pkgid="d069d84c1569ef86a7fbd1edab18404e9dd4539b3c9638526854c3c7525f64b8" name="wordpress" arch="noarch">
  <version epoch="0" ver="7.1" rel="1.el10_4"/>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 6.9-1" date="1764763200">- WordPress 6.9 “Gene”</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 6.9.1-1" date="1770206400">- WordPress 6.9.1 Maintenance Release</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 6.9.3-1" date="1773230400">- WordPress 6.9.3 Release</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 6.9.4-1" date="1773316800">- WordPress 6.9.4 Release</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; -7.0-1" date="1779796800">- WordPress 7.0 “Armstrong”</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; -7.0.1-1" date="1783684800">- WordPress 7.0.1 Maintenance Release</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; -7.0.2-1" date="1784635200">- WordPress 7.0.2 Release</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; -7.0.3-1" date="1786104000">- WordPress 7.0.3 Release</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; -7.0.4-1" date="1786622400">- WordPress 7.0.4 Release</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; -7.1-1" date="1787659200">- WordPress 7.1 “Mary Lou”</changelog>
</package>
<package pkgid="ec45e584f8df1ea13e4259075ca29693b480d779a091fbc4f574fcb273d9d9bd" name="wprof" arch="x86_64">
  <version epoch="0" ver="0.6" rel="2.el10_4"/>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 0.2-2" date="1768996800">- Rebuild with the new 0.2 tag that has bugfixes</changelog>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 0.2.1-1" date="1768996801">- Update to version 0.2.1, fixing stack symbolization on aarch64</changelog>
  <changelog author="Davide Cavalca &lt;dcavalca@fb.com&gt; - 0.3-1" date="1778068800">- Update to version 0.3</changelog>
  <changelog author="Davide Cavalca &lt;dcavalca@fb.com&gt; - 0.3-2" date="1778068801">- Backport upstream fix for LTO builds on aarch64</changelog>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 0.4-1" date="1780056000">- Update to version 0.4
- Apply temporary blazesym workaround to swallow /proc/kcore EPERM when
  querying KASLR</changelog>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 0.5-1" date="1785412800">- Update to version 0.5
- Apply build flags consistently
- Update licenses to account for bundled dependencies</changelog>
  <changelog author="Michel Lind &lt;salimma@centosproject.org&gt; - 0.5-2" date="1785499200">- fix to show SHA commit in help text
- also ensure `make install` uses the right build flags
- include all bundled projects' licenses</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.5-3" date="1785499201">- Drop rust_arches; no longer needed. But limit builds to the architectures
  strobelight-libs supports</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.6-1" date="1787659200">- Update to version 0.6; Resolves: rhbz#2523222</changelog>
  <changelog author="Michel Lind &lt;salimma@fedoraproject.org&gt; - 0.6-2" date="1787659201">- Also refresh vmlinux.h</changelog>
</package>
</otherdata>