Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

proftpd-debuginfo-1.3.9c-1.fc43 RPM for x86_64

From Fedora 43 testing updates for x86_64 / debug / Packages / p

Name: proftpd-debuginfo Distribution: Fedora Project
Version: 1.3.9c Vendor: Fedora Project
Release: 1.fc43 Build date: Thu Jul 9 10:36:34 2026
Group: Development/Debug Build host: buildhw-x86-12.rdu3.fedoraproject.org
Size: 7985127 Source RPM: proftpd-1.3.9c-1.fc43.src.rpm
Packager: Fedora Project
Url: http://www.proftpd.org/
Summary: Debug information for package proftpd
 
This package provides debug information for package proftpd.
Debug information is useful when developing applications that use this
package or when debugging this package.

Provides

Requires

License

GPL-2.0-or-later

Changelog

* Wed Jul 08 2026 Paul Howarth <paul@city-fan.org> - 1.3.9c-1
  - Update to 1.3.9c
    - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
    - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
    - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
    - AdminControlsACLs for config, get actions not honored as they should be
      (GH#2163)
    - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
      buffers without bounds checking (GH#2166)
    - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
      to reject illegal characters (GH#2173)
    - SQL group name lookup concatenates client-provided group names without
      escaping (GH#2188)
    - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
    - Default Controls socket ACLs unintentionally allow all users access for
      sending Controls requests (GH#2210)
* Fri Jun 12 2026 Yaakov Selkowitz <yselkowi@redhat.com> - 1.3.9b-2
  - Rebuilt for openssl 4.0
* Mon Jun 08 2026 Paul Howarth <paul@city-fan.org> - 1.3.9b-1
  - Update to 1.3.9b
    - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
      CVE-2026-44331)
    - Additional fix for session management with OpenSSL 3.2.x or later, when
      using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
    - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
      expected (GH#2098)
    - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
      in mod_sftp (GH#2102)
    - SSH packet with empty payload triggered null pointer dereference in
      mod_sftp (GH#2104)
    - Bad DSA signatures could lead to out-of-bounds read of heap memory in
      mod_sftp (GH#2106)
    - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
      mod_sftp (GH#2108)
    - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
    - Several modules failed to build using OpenSSL 4.0 (GH#2120)
  - Update mod_proxy to 0.9.7
    - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
    - Set the payload_len field before checking its value (GH#292)
    - Keep the SSH packet reading code in mod_proxy more in line with what is
      done in mod_sftp, for legibility (GH#294)
    - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
      (GH#295, GH#296)
    - Correct misspellings noted by codespell (GH#297)
    - Use clang-tidy to start polishing the codebase (GH#298)
    - Disable the Nagle algorithm by default on our TCP connections to back-end
      servers (GH#299)
    - Require OpenSSL for building (GH#249, GH#300)
    - Documentation fixes
    - Implement a limit on the number of EXT_INFO extensions we'll be willing to
      accept (GH#303)
    - Comparison of expected/provided MAC data should be done in a constant-time
      manner
    - Support PKCS11-stored private keys
    - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
      post-quantum SSH key exchange mechanisms (GH#306)
    - Add sanity check for SRV record lengths
    - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
      does not underflow
    - If we detect a bad DSA signature length, properly error out
    - Ensure that RSA/DSA signatures match their expected algorithm types, and
      avoid null pointer dereferences
    - Update to build against OpenSSL 4.x (GH#313)
* Tue May 19 2026 Paul Howarth <paul@city-fan.org> - 1.3.9a-3
  - Address another avenue for SQL injection, via custom SQLUserInfo queries
* Mon May 11 2026 Paul Howarth <paul@city-fan.org> - 1.3.9a-2
  - Additional escaping for avoidance of SQL injection issues with %{note:...}
    and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
    1.3.9a
  - Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
    (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)
* Thu Apr 30 2026 Paul Howarth <paul@city-fan.org> - 1.3.9a-1
  - Update to 1.3.9a
    - SCP transfers failed for files with spaces in their names (GH#1886)
    - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
    - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
      option was used (Bug #4512)
    - mod_sftp failed to parse authorized user/host public keys with CRLF line
      endings (GH#1904)
    - Uploads using MODE Z sometimes resulted in corrupted files or broken
      transfers (GH#1896)
    - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
      versions (GH#1911)
    - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
    - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
    - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
      (GH#1964)
    - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
      (GH#1960)
    - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
      loop using newer OpenSSL versions (GH#1963)
    - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
      (GH#1984)
    - RNTO before authentication lead to out-of-order response codes (GH#2003)
    - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
      (GH#2009)
    - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
      (GH#2019)
    - Out-of-bounds single byte read when FTP command input buffer starts with LF
      (GH#2020)
    - FTP command LIST/NLST -B could cause buffer overflow when listing certain
      crafted filenames (GH#2030)
    - Memory exhaustion with mod_log_forensic when downloading very large files
      via SFTP (GH#2043)
    - Setting process groups during authentication crashed when using mod_radius
      and <IfGroup> (GH#2046)
    - SQL injection possible via mod_sql because of is_escaped_text() logic error
      (GH#2052, CVE-2026-42167)
* Sat Jan 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.9-3
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Fri Jul 25 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.9-2
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Thu Mar 20 2025 Paul Howarth <paul@city-fan.org> - 1.3.9-1
  - Update to 1.3.9 (see RELEASE_NOTES for details)
  - Update mod_proxy to 0.9.5
    - Implemented new IgnoreForeignAddress ProxyOption
    - Fixed passive data transfers to backend IPv4 address when IPv6 support is
      enabled
* Tue Mar 18 2025 Paul Howarth <paul@city-fan.org> - 1.3.8d-1
  - Update to 1.3.8d
    - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
      unexpected behaviour (GH#1855)
    - SFTP channel allocations can lead to high memory utilization over time
      (GH#1876)
    - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
* Thu Feb 13 2025 Paul Howarth <paul@city-fan.org> - 1.3.8c-3
  - Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
    - https://github.com/proftpd/proftpd/issues/1866
  - Add explicit BR: libxcrypt-devel
* Fri Jan 17 2025 Paul Howarth <paul@city-fan.org> - 1.3.8c-2
  - Fixes for C23 compatibility
  - Update mod_vroot to 0.9.12
    - Implement a realpath(3) callback for the FSIO API, for better
      interoperability of other modules when mod_vroot is in effect
* Thu Dec 12 2024 Paul Howarth <paul@city-fan.org> - 1.3.8c-1
  - Update to 1.3.8c
    - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
    - Bad handling of lack of extended attributes lead to SFTP out of memory
      error (GH#1785)
    - mod_sftp_sql logged "header value too long" due to unexpected key header
      text (GH#1529)
    - SSH ECDSA host key algorithms were not used as expected despite configuring
      appropriate key (GH#1839)
    - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
      (GH#1840)
    - Supplemental group inheritance granted unintended access to GID 0 due to
      lack of supplemental groups from mod_sql (GH#1830)
* Tue Nov 19 2024 Paul Howarth <paul@city-fan.org> - 1.3.8b-9
  - Fix RADIUS Message-Authenticator verification in mod_radius
    - https://github.com/proftpd/proftpd/issues/1840
    - https://bugzilla.redhat.com/show_bug.cgi?id=2325448
* Fri Oct 11 2024 Paul Howarth <paul@city-fan.org> - 1.3.8b-8
  - Drop EL-7 support
    - Drop mod_geoip support
    - Drop mod_wrap support
    - Always build mod_proxy
    - Always use libpcre2
    - Always use maridb client library in preference to mysql
    - Always use libpq client library in preference to postgresql
    - Always use OpenSSL Cipher Profiles
  - Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
    onwards
* Fri Jul 19 2024 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.8b-7
  - Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild
* Wed Jul 10 2024 Paul Howarth <paul@city-fan.org> - 1.3.8b-6
  - Fix support for building with no ENGINE support in OpenSSL (GH#1816)
  - Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)

Files

/usr/lib/debug
/usr/lib/debug/.build-id
/usr/lib/debug/.build-id/02
/usr/lib/debug/.build-id/02/942284d03906a4a4cc71ab292d0ec062218e5e
/usr/lib/debug/.build-id/02/942284d03906a4a4cc71ab292d0ec062218e5e.debug
/usr/lib/debug/.build-id/0a
/usr/lib/debug/.build-id/0a/d57be640ee8ca5de6f35a1f69663891783f905
/usr/lib/debug/.build-id/0a/d57be640ee8ca5de6f35a1f69663891783f905.debug
/usr/lib/debug/.build-id/12
/usr/lib/debug/.build-id/12/f9aebf43cd57ddce1b117bb9542cac8466f41a
/usr/lib/debug/.build-id/12/f9aebf43cd57ddce1b117bb9542cac8466f41a.debug
/usr/lib/debug/.build-id/1f
/usr/lib/debug/.build-id/1f/7031b2cda7369419cd322cf7d86ff876ba0e70
/usr/lib/debug/.build-id/1f/7031b2cda7369419cd322cf7d86ff876ba0e70.debug
/usr/lib/debug/.build-id/26
/usr/lib/debug/.build-id/26/e520d89f93c9d9fdbae9e039e9597a986ce331
/usr/lib/debug/.build-id/26/e520d89f93c9d9fdbae9e039e9597a986ce331.debug
/usr/lib/debug/.build-id/28
/usr/lib/debug/.build-id/28/150ad9a985d7c3333253ac3bd14b11f8c2eff2
/usr/lib/debug/.build-id/28/150ad9a985d7c3333253ac3bd14b11f8c2eff2.debug
/usr/lib/debug/.build-id/3c
/usr/lib/debug/.build-id/3c/87d9878843052bf40752e983c96d037eb8fbe2
/usr/lib/debug/.build-id/3c/87d9878843052bf40752e983c96d037eb8fbe2.debug
/usr/lib/debug/.build-id/45
/usr/lib/debug/.build-id/45/4873e03e4cc63bae81850df49285d6fc50b00b
/usr/lib/debug/.build-id/45/4873e03e4cc63bae81850df49285d6fc50b00b.debug
/usr/lib/debug/.build-id/46
/usr/lib/debug/.build-id/46/181e31d43bdf9a46b0dc5d08f77f307a9f09ec
/usr/lib/debug/.build-id/46/181e31d43bdf9a46b0dc5d08f77f307a9f09ec.debug
/usr/lib/debug/.build-id/49
/usr/lib/debug/.build-id/49/f689988533acccee2eb14ba11ce49dcab88610
/usr/lib/debug/.build-id/49/f689988533acccee2eb14ba11ce49dcab88610.debug
/usr/lib/debug/.build-id/4f
/usr/lib/debug/.build-id/4f/bccc231f642243629442d5d6cf26aa6be43241
/usr/lib/debug/.build-id/4f/bccc231f642243629442d5d6cf26aa6be43241.debug
/usr/lib/debug/.build-id/4f/ff803ba73f5fbcf063c6a21712f32586d62129
/usr/lib/debug/.build-id/4f/ff803ba73f5fbcf063c6a21712f32586d62129.debug
/usr/lib/debug/.build-id/56
/usr/lib/debug/.build-id/56/3967dc06873e91fa5d5669326b9d42bb92d336
/usr/lib/debug/.build-id/56/3967dc06873e91fa5d5669326b9d42bb92d336.debug
/usr/lib/debug/.build-id/68
/usr/lib/debug/.build-id/68/5880c6735724af9e1cecd914b16a359848f0de
/usr/lib/debug/.build-id/68/5880c6735724af9e1cecd914b16a359848f0de.debug
/usr/lib/debug/.build-id/79
/usr/lib/debug/.build-id/79/518a5237878337c16f5c28e55c0322cb459b7e
/usr/lib/debug/.build-id/79/518a5237878337c16f5c28e55c0322cb459b7e.debug
/usr/lib/debug/.build-id/79/80659ad783af2f53b10319be29bc36960aee6a
/usr/lib/debug/.build-id/79/80659ad783af2f53b10319be29bc36960aee6a.debug
/usr/lib/debug/.build-id/82
/usr/lib/debug/.build-id/82/6c7f81f2220c237afc6739879553e5caae7086
/usr/lib/debug/.build-id/82/6c7f81f2220c237afc6739879553e5caae7086.debug
/usr/lib/debug/.build-id/8d
/usr/lib/debug/.build-id/8d/5048d0b7b5ee12192df719c95d9141c847ced1
/usr/lib/debug/.build-id/8d/5048d0b7b5ee12192df719c95d9141c847ced1.debug
/usr/lib/debug/.build-id/90
/usr/lib/debug/.build-id/90/550c1a1467c21262d6bcc20769a0bc344b4b66
/usr/lib/debug/.build-id/90/550c1a1467c21262d6bcc20769a0bc344b4b66.debug
/usr/lib/debug/.build-id/ac
/usr/lib/debug/.build-id/ac/5db8e390c6831d3f0bd8dd341b0b08ba708419
/usr/lib/debug/.build-id/ac/5db8e390c6831d3f0bd8dd341b0b08ba708419.debug
/usr/lib/debug/.build-id/b0
/usr/lib/debug/.build-id/b0/4a72618e770a0f4d618d140ac334e0d19c4824
/usr/lib/debug/.build-id/b0/4a72618e770a0f4d618d140ac334e0d19c4824.debug
/usr/lib/debug/.build-id/b0/d4563f1de0690fef3d1d84ef23cbd451f3b45b
/usr/lib/debug/.build-id/b0/d4563f1de0690fef3d1d84ef23cbd451f3b45b.debug
/usr/lib/debug/.build-id/b6
/usr/lib/debug/.build-id/b6/f149d5b9cfae4d685635cda34381483bc45a08
/usr/lib/debug/.build-id/b6/f149d5b9cfae4d685635cda34381483bc45a08.debug
/usr/lib/debug/.build-id/bc
/usr/lib/debug/.build-id/bc/9cceeab34a248480eba7b714ee1583ef8e9edf
/usr/lib/debug/.build-id/bc/9cceeab34a248480eba7b714ee1583ef8e9edf.debug
/usr/lib/debug/.build-id/c2
/usr/lib/debug/.build-id/c2/b35037dc2e4dd51380dcaf7b53e2e214388aa5
/usr/lib/debug/.build-id/c2/b35037dc2e4dd51380dcaf7b53e2e214388aa5.debug
/usr/lib/debug/.build-id/c3
/usr/lib/debug/.build-id/c3/43381d0d590a8bceed74e89b710f97064c48da
/usr/lib/debug/.build-id/c3/43381d0d590a8bceed74e89b710f97064c48da.debug
/usr/lib/debug/.build-id/cc
/usr/lib/debug/.build-id/cc/15cb824d93e5bb0dc4dac63afe48ad51ce0a11
/usr/lib/debug/.build-id/cc/15cb824d93e5bb0dc4dac63afe48ad51ce0a11.debug
/usr/lib/debug/.build-id/cd
/usr/lib/debug/.build-id/cd/020de78834f17364978a48ac4fd815f5588d42
/usr/lib/debug/.build-id/cd/020de78834f17364978a48ac4fd815f5588d42.debug
/usr/lib/debug/.build-id/d0
/usr/lib/debug/.build-id/d0/80a4f4d870f7ab1d71910b62bbe27ee486d44b
/usr/lib/debug/.build-id/d0/80a4f4d870f7ab1d71910b62bbe27ee486d44b.debug
/usr/lib/debug/.build-id/e2
/usr/lib/debug/.build-id/e2/6b5815825f70c38464789589fcb896fd05c40d
/usr/lib/debug/.build-id/e2/6b5815825f70c38464789589fcb896fd05c40d.debug
/usr/lib/debug/.build-id/e9
/usr/lib/debug/.build-id/e9/849636b4540ed8e65e47007e68180c7c736a82
/usr/lib/debug/.build-id/e9/849636b4540ed8e65e47007e68180c7c736a82.debug
/usr/lib/debug/.build-id/ee
/usr/lib/debug/.build-id/ee/516cfd816b8532b858af6bd54fb41239087238
/usr/lib/debug/.build-id/ee/516cfd816b8532b858af6bd54fb41239087238.debug
/usr/lib/debug/.build-id/f7
/usr/lib/debug/.build-id/f7/2479d61b942faf8f88c06e445b4410c80020ce
/usr/lib/debug/.build-id/f7/2479d61b942faf8f88c06e445b4410c80020ce.debug
/usr/lib/debug/.build-id/fc
/usr/lib/debug/.build-id/fc/16c8a39952b1b204532ad71f81570f3ce05095
/usr/lib/debug/.build-id/fc/16c8a39952b1b204532ad71f81570f3ce05095.debug
/usr/lib/debug/.build-id/fc/59af9422476c3e093b22afe1966451b65fd850
/usr/lib/debug/.build-id/fc/59af9422476c3e093b22afe1966451b65fd850.debug
/usr/lib/debug/.dwz
/usr/lib/debug/.dwz/proftpd-1.3.9c-1.fc43.x86_64
/usr/lib/debug/usr
/usr/lib/debug/usr/bin
/usr/lib/debug/usr/bin/ftpdctl-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/bin/ftpscrub-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/bin/ftpshut-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/bin/proftpd-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec
/usr/lib/debug/usr/libexec/proftpd
/usr/lib/debug/usr/libexec/proftpd/mod_ban.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_copy.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_ctrls_admin.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_deflate.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_exec.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_facl.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_ifsession.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_ifversion.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_load.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_qos.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_quotatab.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_quotatab_file.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_quotatab_radius.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_quotatab_sql.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_radius.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_ratio.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_rewrite.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_sftp.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_sftp_pam.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_sftp_sql.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_shaper.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_site_misc.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_sql.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_sql_passwd.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_tls_memcache.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_tls_shmcache.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_unique_id.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_vroot.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_wrap2.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_wrap2_file.so-1.3.9c-1.fc43.x86_64.debug
/usr/lib/debug/usr/libexec/proftpd/mod_wrap2_sql.so-1.3.9c-1.fc43.x86_64.debug

Generated by rpm2html 1.8.1

Fabrice Bellet, Sun Jul 12 22:49:50 2026