| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: proftpd-debuginfo | Distribution: Fedora Project |
| Version: 1.3.9c | Vendor: Fedora Project |
| Release: 3.fc44 | Build date: Tue Jul 21 18:12:52 2026 |
| Group: Development/Debug | Build host: buildhw-x86-07.rdu3.fedoraproject.org |
| Size: 8373612 | Source RPM: proftpd-1.3.9c-3.fc44.src.rpm |
| Packager: Fedora Project | |
| Url: http://www.proftpd.org/ | |
| Summary: Debug information for package proftpd | |
This package provides debug information for package proftpd. Debug information is useful when developing applications that use this package or when debugging this package.
GPL-2.0-or-later
* Tue Jul 21 2026 Paul Howarth <paul@city-fan.org> - 1.3.9c-3
- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
/proc/self/root path prefix); this module disallows file accesses via procfs
filesystems
* Thu Jul 16 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.9c-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild
* Wed Jul 08 2026 Paul Howarth <paul@city-fan.org> - 1.3.9c-1
- Update to 1.3.9c
- ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
- Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
- MaxTransfersPerUser no longer enforces configured limits (GH#2158)
- AdminControlsACLs for config, get actions not honored as they should be
(GH#2163)
- Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
buffers without bounds checking (GH#2166)
- RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
to reject illegal characters (GH#2173)
- SQL group name lookup concatenates client-provided group names without
escaping (GH#2188)
- Authenticated SFTP sessions can overflow the SFTP packet buffer
(GH#2190, CVE-2026-63090)
- Default Controls socket ACLs unintentionally allow all users access for
sending Controls requests (GH#2210)
- Exercise caution when reading the client-provided file size for SCP
uploads, as it could possibly overflow our size type (CVE-2026-63091)
* Fri Jun 12 2026 Yaakov Selkowitz <yselkowi@redhat.com> - 1.3.9b-2
- Rebuilt for openssl 4.0
* Mon Jun 08 2026 Paul Howarth <paul@city-fan.org> - 1.3.9b-1
- Update to 1.3.9b
- Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
CVE-2026-44331)
- Additional fix for session management with OpenSSL 3.2.x or later, when
using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
- Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
expected (GH#2098)
- Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
in mod_sftp (GH#2102)
- SSH packet with empty payload triggered null pointer dereference in
mod_sftp (GH#2104)
- Bad DSA signatures could lead to out-of-bounds read of heap memory in
mod_sftp (GH#2106)
- Mismatched RSA/DSA algorithm signatures could lead to null dereference in
mod_sftp (GH#2108)
- SFTP request payload length underflow calculation in mod_sftp
(GH#2115, CVE-2026-53994)
- Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
- Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
- Set the payload_len field before checking its value (GH#292)
- Keep the SSH packet reading code in mod_proxy more in line with what is
done in mod_sftp, for legibility (GH#294)
- Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
(GH#295, GH#296)
- Correct misspellings noted by codespell (GH#297)
- Use clang-tidy to start polishing the codebase (GH#298)
- Disable the Nagle algorithm by default on our TCP connections to back-end
servers (GH#299)
- Require OpenSSL for building (GH#249, GH#300)
- Documentation fixes
- Implement a limit on the number of EXT_INFO extensions we'll be willing to
accept (GH#303)
- Comparison of expected/provided MAC data should be done in a constant-time
manner
- Support PKCS11-stored private keys
- Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
post-quantum SSH key exchange mechanisms (GH#306)
- Add sanity check for SRV record lengths
- Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
does not underflow
- If we detect a bad DSA signature length, properly error out
- Ensure that RSA/DSA signatures match their expected algorithm types, and
avoid null pointer dereferences
- Update to build against OpenSSL 4.x (GH#313)
* Tue May 19 2026 Paul Howarth <paul@city-fan.org> - 1.3.9a-3
- Address another avenue for SQL injection, via custom SQLUserInfo queries
* Mon May 11 2026 Paul Howarth <paul@city-fan.org> - 1.3.9a-2
- Additional escaping for avoidance of SQL injection issues with %{note:...}
and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
(CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)
* Thu Apr 30 2026 Paul Howarth <paul@city-fan.org> - 1.3.9a-1
- Update to 1.3.9a
- SCP transfers failed for files with spaces in their names (GH#1886)
- LDAPDefaultGID ignored since 1.3.9 (GH#1898)
- Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
option was used (Bug #4512)
- mod_sftp failed to parse authorized user/host public keys with CRLF line
endings (GH#1904)
- Uploads using MODE Z sometimes resulted in corrupted files or broken
transfers (GH#1896)
- Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
versions (GH#1911)
- Update usage of MySQL API for SSL/TLS connections to server (GH#340)
- mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
- Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
(GH#1964)
- Handling of CRLs in mod_tls was incorrect, leading to confusing errors
(GH#1960)
- Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
loop using newer OpenSSL versions (GH#1963)
- mod_quotatab_ldap interactions could lead to segfault due to stale pointer
(GH#1984)
- RNTO before authentication lead to out-of-order response codes (GH#2003)
- MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
(GH#2009)
- Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
(GH#2019)
- Out-of-bounds single byte read when FTP command input buffer starts with LF
(GH#2020)
- FTP command LIST/NLST -B could cause buffer overflow when listing certain
crafted filenames (GH#2030)
- Memory exhaustion with mod_log_forensic when downloading very large files
via SFTP (GH#2043)
- Setting process groups during authentication crashed when using mod_radius
and <IfGroup> (GH#2046)
- SQL injection possible via mod_sql because of is_escaped_text() logic error
(GH#2052, CVE-2026-42167)
* Sat Jan 17 2026 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.9-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild
* Fri Jul 25 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1.3.9-2
- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
* Thu Mar 20 2025 Paul Howarth <paul@city-fan.org> - 1.3.9-1
- Update to 1.3.9 (see RELEASE_NOTES for details)
- Update mod_proxy to 0.9.5
- Implemented new IgnoreForeignAddress ProxyOption
- Fixed passive data transfers to backend IPv4 address when IPv6 support is
enabled
* Tue Mar 18 2025 Paul Howarth <paul@city-fan.org> - 1.3.8d-1
- Update to 1.3.8d
- Use of HideNoAccess for SFTP sessions can lead to segfault and/or
unexpected behaviour (GH#1855)
- SFTP channel allocations can lead to high memory utilization over time
(GH#1876)
- Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
* Thu Feb 13 2025 Paul Howarth <paul@city-fan.org> - 1.3.8c-3
- Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
- https://github.com/proftpd/proftpd/issues/1866
- Add explicit BR: libxcrypt-devel
* Fri Jan 17 2025 Paul Howarth <paul@city-fan.org> - 1.3.8c-2
- Fixes for C23 compatibility
- Update mod_vroot to 0.9.12
- Implement a realpath(3) callback for the FSIO API, for better
interoperability of other modules when mod_vroot is in effect
* Thu Dec 12 2024 Paul Howarth <paul@city-fan.org> - 1.3.8c-1
- Update to 1.3.8c
- Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
- Bad handling of lack of extended attributes lead to SFTP out of memory
error (GH#1785)
- mod_sftp_sql logged "header value too long" due to unexpected key header
text (GH#1529)
- SSH ECDSA host key algorithms were not used as expected despite configuring
appropriate key (GH#1839)
- RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
(GH#1840)
- Supplemental group inheritance granted unintended access to GID 0 due to
lack of supplemental groups from mod_sql (GH#1830)
* Tue Nov 19 2024 Paul Howarth <paul@city-fan.org> - 1.3.8b-9
- Fix RADIUS Message-Authenticator verification in mod_radius
- https://github.com/proftpd/proftpd/issues/1840
- https://bugzilla.redhat.com/show_bug.cgi?id=2325448
* Fri Oct 11 2024 Paul Howarth <paul@city-fan.org> - 1.3.8b-8
- Drop EL-7 support
- Drop mod_geoip support
- Drop mod_wrap support
- Always build mod_proxy
- Always use libpcre2
- Always use maridb client library in preference to mysql
- Always use libpq client library in preference to postgresql
- Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
onwards
/usr/lib/debug /usr/lib/debug/.build-id /usr/lib/debug/.build-id/02 /usr/lib/debug/.build-id/02/55196d56d6d195a470e41060f35e82fb5d4211 /usr/lib/debug/.build-id/02/55196d56d6d195a470e41060f35e82fb5d4211.debug /usr/lib/debug/.build-id/08 /usr/lib/debug/.build-id/08/0f7cb3d5c14350d380e5dc336279736965b8b8 /usr/lib/debug/.build-id/08/0f7cb3d5c14350d380e5dc336279736965b8b8.debug /usr/lib/debug/.build-id/08/942e0fb52a2605d76ab7a8dbc2f50d68f663ef /usr/lib/debug/.build-id/08/942e0fb52a2605d76ab7a8dbc2f50d68f663ef.debug /usr/lib/debug/.build-id/09 /usr/lib/debug/.build-id/09/a04d9b6981cb38a2363d60c48df3f1aad1c4c7 /usr/lib/debug/.build-id/09/a04d9b6981cb38a2363d60c48df3f1aad1c4c7.debug /usr/lib/debug/.build-id/0b /usr/lib/debug/.build-id/0b/3f880c3d437eb2ed4dc32fb9d3049bfac105ec /usr/lib/debug/.build-id/0b/3f880c3d437eb2ed4dc32fb9d3049bfac105ec.debug /usr/lib/debug/.build-id/1c /usr/lib/debug/.build-id/1c/f3f7f0e2384fd23635dc960ed581d584a92693 /usr/lib/debug/.build-id/1c/f3f7f0e2384fd23635dc960ed581d584a92693.debug /usr/lib/debug/.build-id/25 /usr/lib/debug/.build-id/25/40f1e21512332745575bdcb6eac2c2aaa41a20 /usr/lib/debug/.build-id/25/40f1e21512332745575bdcb6eac2c2aaa41a20.debug /usr/lib/debug/.build-id/30 /usr/lib/debug/.build-id/30/bde5258c8a5d33e93aeb89417cff901d2a1a5a /usr/lib/debug/.build-id/30/bde5258c8a5d33e93aeb89417cff901d2a1a5a.debug /usr/lib/debug/.build-id/31 /usr/lib/debug/.build-id/31/36351b4e2c09800bde1465c809538e84cf0c2f /usr/lib/debug/.build-id/31/36351b4e2c09800bde1465c809538e84cf0c2f.debug /usr/lib/debug/.build-id/32 /usr/lib/debug/.build-id/32/dcc61c477fc8d6a4a46568fd5f75c266ca5e32 /usr/lib/debug/.build-id/32/dcc61c477fc8d6a4a46568fd5f75c266ca5e32.debug /usr/lib/debug/.build-id/34 /usr/lib/debug/.build-id/34/256f05f735d7e5283207ad338558d6593313ec /usr/lib/debug/.build-id/34/256f05f735d7e5283207ad338558d6593313ec.debug /usr/lib/debug/.build-id/42 /usr/lib/debug/.build-id/42/322c692155a0f509ed148a3941d7585b695258 /usr/lib/debug/.build-id/42/322c692155a0f509ed148a3941d7585b695258.debug /usr/lib/debug/.build-id/49 /usr/lib/debug/.build-id/49/930d98f5377578cd9ce873cb9362ca649cf7b8 /usr/lib/debug/.build-id/49/930d98f5377578cd9ce873cb9362ca649cf7b8.debug /usr/lib/debug/.build-id/52 /usr/lib/debug/.build-id/52/ca1e67e21cfe2e14ba6b7b2c40e1cd33113738 /usr/lib/debug/.build-id/52/ca1e67e21cfe2e14ba6b7b2c40e1cd33113738.debug /usr/lib/debug/.build-id/57 /usr/lib/debug/.build-id/57/d1b06a2996cd919b8ec10b31b82ec0dbb00c32 /usr/lib/debug/.build-id/57/d1b06a2996cd919b8ec10b31b82ec0dbb00c32.debug /usr/lib/debug/.build-id/60 /usr/lib/debug/.build-id/60/e4bb94f01c077f4fb50b2c43460f60a3599196 /usr/lib/debug/.build-id/60/e4bb94f01c077f4fb50b2c43460f60a3599196.debug /usr/lib/debug/.build-id/64 /usr/lib/debug/.build-id/64/91b545f33c3710926d45bb915594c639d25826 /usr/lib/debug/.build-id/64/91b545f33c3710926d45bb915594c639d25826.debug /usr/lib/debug/.build-id/6d /usr/lib/debug/.build-id/6d/702a628d357a6b4f500fcfd954e3df77d75312 /usr/lib/debug/.build-id/6d/702a628d357a6b4f500fcfd954e3df77d75312.debug /usr/lib/debug/.build-id/73 /usr/lib/debug/.build-id/73/3225abdbf51b1118e385a05414efb18b72ba45 /usr/lib/debug/.build-id/73/3225abdbf51b1118e385a05414efb18b72ba45.debug /usr/lib/debug/.build-id/73/ff81630f0ecc24a39567837a002a696b4be7ff /usr/lib/debug/.build-id/73/ff81630f0ecc24a39567837a002a696b4be7ff.debug /usr/lib/debug/.build-id/7a /usr/lib/debug/.build-id/7a/5c61f2a0857864430d71d5f33f0c590202546d /usr/lib/debug/.build-id/7a/5c61f2a0857864430d71d5f33f0c590202546d.debug /usr/lib/debug/.build-id/7e /usr/lib/debug/.build-id/7e/77275860bb175d48251ef07af0bd7b02bf293b /usr/lib/debug/.build-id/7e/77275860bb175d48251ef07af0bd7b02bf293b.debug /usr/lib/debug/.build-id/82 /usr/lib/debug/.build-id/82/af8153065cdba7601aef4a8b426785dd29238a /usr/lib/debug/.build-id/82/af8153065cdba7601aef4a8b426785dd29238a.debug /usr/lib/debug/.build-id/86 /usr/lib/debug/.build-id/86/63f0972a97ba34395d3706ac45c2e818917030 /usr/lib/debug/.build-id/86/63f0972a97ba34395d3706ac45c2e818917030.debug /usr/lib/debug/.build-id/99 /usr/lib/debug/.build-id/99/390fcceeb80b1d1ba04874137ec251be60daf7 /usr/lib/debug/.build-id/99/390fcceeb80b1d1ba04874137ec251be60daf7.debug /usr/lib/debug/.build-id/9b /usr/lib/debug/.build-id/9b/c2d88ccd60c19afbf41f8b2b3544f2e050d22a /usr/lib/debug/.build-id/9b/c2d88ccd60c19afbf41f8b2b3544f2e050d22a.debug /usr/lib/debug/.build-id/9e /usr/lib/debug/.build-id/9e/f8b69d33019a8d5243a06ab0e1b51d68a52883 /usr/lib/debug/.build-id/9e/f8b69d33019a8d5243a06ab0e1b51d68a52883.debug /usr/lib/debug/.build-id/a6 /usr/lib/debug/.build-id/a6/fa8fcfe8d5eee556d4c67010d1f7a4f3061fac /usr/lib/debug/.build-id/a6/fa8fcfe8d5eee556d4c67010d1f7a4f3061fac.debug /usr/lib/debug/.build-id/b7 /usr/lib/debug/.build-id/b7/514edfc7ec087ce6275cf1e2a4d468f6278d27 /usr/lib/debug/.build-id/b7/514edfc7ec087ce6275cf1e2a4d468f6278d27.debug /usr/lib/debug/.build-id/bd /usr/lib/debug/.build-id/bd/a2f199ac600ecc947c267e43e6a0cb9467a55f /usr/lib/debug/.build-id/bd/a2f199ac600ecc947c267e43e6a0cb9467a55f.debug /usr/lib/debug/.build-id/dd /usr/lib/debug/.build-id/dd/6a843f636ff0cf5746e0424e024adc5dcfcca3 /usr/lib/debug/.build-id/dd/6a843f636ff0cf5746e0424e024adc5dcfcca3.debug /usr/lib/debug/.build-id/e3 /usr/lib/debug/.build-id/e3/f2539b1dcd69dd4712d55bfd5de3ebf7e5b393 /usr/lib/debug/.build-id/e3/f2539b1dcd69dd4712d55bfd5de3ebf7e5b393.debug /usr/lib/debug/.build-id/e4 /usr/lib/debug/.build-id/e4/9a7783a10548081c9f06e5d14b4f60f53bed38 /usr/lib/debug/.build-id/e4/9a7783a10548081c9f06e5d14b4f60f53bed38.debug /usr/lib/debug/.build-id/e8 /usr/lib/debug/.build-id/e8/3e6b456f46b6c4be769ecdd7b6c0b7be17fc5b /usr/lib/debug/.build-id/e8/3e6b456f46b6c4be769ecdd7b6c0b7be17fc5b.debug /usr/lib/debug/.build-id/f3 /usr/lib/debug/.build-id/f3/727eabe2c3e12b2d9312abd1c048d738758cde /usr/lib/debug/.build-id/f3/727eabe2c3e12b2d9312abd1c048d738758cde.debug /usr/lib/debug/.build-id/fb /usr/lib/debug/.build-id/fb/b9e3b7269d89f898d81e32d149207f7c0a9001 /usr/lib/debug/.build-id/fb/b9e3b7269d89f898d81e32d149207f7c0a9001.debug /usr/lib/debug/.dwz /usr/lib/debug/.dwz/proftpd-1.3.9c-3.fc44.x86_64 /usr/lib/debug/usr /usr/lib/debug/usr/bin /usr/lib/debug/usr/bin/ftpdctl-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/bin/ftpscrub-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/bin/ftpshut-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/bin/proftpd-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec /usr/lib/debug/usr/libexec/proftpd /usr/lib/debug/usr/libexec/proftpd/mod_ban.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_copy.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_ctrls_admin.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_deflate.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_exec.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_facl.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_ifsession.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_ifversion.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_load.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_procfs.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_qos.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_quotatab.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_quotatab_file.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_quotatab_radius.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_quotatab_sql.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_radius.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_ratio.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_rewrite.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_sftp.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_sftp_pam.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_sftp_sql.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_shaper.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_site_misc.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_sql.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_sql_passwd.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_tls_memcache.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_tls_shmcache.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_unique_id.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_vroot.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_wrap2.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_wrap2_file.so-1.3.9c-3.fc44.x86_64.debug /usr/lib/debug/usr/libexec/proftpd/mod_wrap2_sql.so-1.3.9c-3.fc44.x86_64.debug
Generated by rpm2html 1.8.1
Fabrice Bellet, Thu Jul 23 22:26:24 2026