<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="51">
<package pkgid="3c071dc9c2fcf10381a7209526450993c1036e9506ecf67fc33b6c6d5d4b837f" name="abseil-cpp-debuginfo" arch="x86_64">
  <version epoch="0" ver="20240722.2" rel="1.el10_2"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240116.2-3" date="1720008000">- Rebuilt with upstream patch for NegativeNaN test failure on riscv64</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20240116.2-4" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240722.0-1" date="1722686400">- Update to 20240722.0 (close RHBZ#2302537)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240722.0-2" date="1736337600">- Report and skip a test regression on ppc64le</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240722.0-3" date="1736424000">- Patch for GCC 15 (fix RHBZ#2336266)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20240722.0-4" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240722.0-5" date="1737547200">- Rebuilt for gtest 1.15.2</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240722.1-1" date="1737720000">- Update to 20240722.1 (close RHBZ#2341808)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240722.2-1" date="1780660800">- Update to 20240722.2 (Abseil LTS branch, July 2024, Patch 2)</changelog>
</package>
<package pkgid="e593ece3c2bf5407d08ea0862a917765e74b5832b8b4d3dcb635130f3b38f90f" name="abseil-cpp-debugsource" arch="x86_64">
  <version epoch="0" ver="20240722.2" rel="1.el10_2"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240116.2-3" date="1720008000">- Rebuilt with upstream patch for NegativeNaN test failure on riscv64</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20240116.2-4" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240722.0-1" date="1722686400">- Update to 20240722.0 (close RHBZ#2302537)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240722.0-2" date="1736337600">- Report and skip a test regression on ppc64le</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240722.0-3" date="1736424000">- Patch for GCC 15 (fix RHBZ#2336266)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20240722.0-4" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240722.0-5" date="1737547200">- Rebuilt for gtest 1.15.2</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240722.1-1" date="1737720000">- Update to 20240722.1 (close RHBZ#2341808)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240722.2-1" date="1780660800">- Update to 20240722.2 (Abseil LTS branch, July 2024, Patch 2)</changelog>
</package>
<package pkgid="83324f103be2f0fb715b6093bd3579ebc0ec88697a340562cb97ea3fda24c032" name="abseil-cpp-testing-debuginfo" arch="x86_64">
  <version epoch="0" ver="20240722.2" rel="1.el10_2"/>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240116.2-3" date="1720008000">- Rebuilt with upstream patch for NegativeNaN test failure on riscv64</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20240116.2-4" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240722.0-1" date="1722686400">- Update to 20240722.0 (close RHBZ#2302537)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240722.0-2" date="1736337600">- Report and skip a test regression on ppc64le</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240722.0-3" date="1736424000">- Patch for GCC 15 (fix RHBZ#2336266)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 20240722.0-4" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240722.0-5" date="1737547200">- Rebuilt for gtest 1.15.2</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240722.1-1" date="1737720000">- Update to 20240722.1 (close RHBZ#2341808)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 20240722.2-1" date="1780660800">- Update to 20240722.2 (Abseil LTS branch, July 2024, Patch 2)</changelog>
</package>
<package pkgid="af442dc9d88d56c2d7e75dc3b49e04e7c1d554f32694219d22382709a3046b80" name="alertmanager-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.33.0" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.31.1-1" date="1772798400">- Initial package after rename - Closes rhbz#2444340</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.32.1-1" date="1777464000">- Update to 0.32.1 - Closes rhbz#2456659</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.33.0-1" date="1781265600">- Update to 0.33.0 - Closes rhbz#2485517</changelog>
</package>
<package pkgid="dc2cf9d7b0c2835fc1e7ea69488d7910fddac5252857f9da335ef9def45a0849" name="alertmanager-debugsource" arch="x86_64">
  <version epoch="0" ver="0.33.0" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.31.1-1" date="1772798400">- Initial package after rename - Closes rhbz#2444340</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.32.1-1" date="1777464000">- Update to 0.32.1 - Closes rhbz#2456659</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.33.0-1" date="1781265600">- Update to 0.33.0 - Closes rhbz#2485517</changelog>
</package>
<package pkgid="c42b7c5110084f87ddbfd56a98840df210250441469b7b8abb6b1a978360bea3" name="betterleaks-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.0.1-1" date="1772020800">- Initial package - Closes rhbz#2442477</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.1.0-1" date="1773403200">- Update to 1.1.0 - Closes rhbz#2444984</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.1-1" date="1773748800">- Update to 1.1.1 upstream release
- Resolves: rhbz#2448368</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.2-1" date="1775649600">- Update to 1.1.2 upstream release
- Resolves: rhbz#2456601</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1778241600">- Update to 1.2.0 upstream release
- Resolves: rhbz#2468272</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.4.0-1" date="1780401600">- Update to 1.4.0 upstream release
- Resolves: rhbz#2480185</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.5.0-1" date="1781265600">- Update to 1.5.0 upstream release
- Resolves: rhbz#2485671</changelog>
</package>
<package pkgid="f0e3b5a15c623ae4789a3ca2ba02b867d57551d4940424abbc8496d8f2c5abbf" name="betterleaks-debugsource" arch="x86_64">
  <version epoch="0" ver="1.5.0" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.0.1-1" date="1772020800">- Initial package - Closes rhbz#2442477</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.1.0-1" date="1773403200">- Update to 1.1.0 - Closes rhbz#2444984</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.1-1" date="1773748800">- Update to 1.1.1 upstream release
- Resolves: rhbz#2448368</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.1.2-1" date="1775649600">- Update to 1.1.2 upstream release
- Resolves: rhbz#2456601</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.2.0-1" date="1778241600">- Update to 1.2.0 upstream release
- Resolves: rhbz#2468272</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.4.0-1" date="1780401600">- Update to 1.4.0 upstream release
- Resolves: rhbz#2480185</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.5.0-1" date="1781265600">- Update to 1.5.0 upstream release
- Resolves: rhbz#2485671</changelog>
</package>
<package pkgid="a13b9dfaec9fe545668410c9d94b75c9b69fa1c15de53181e46b82bad03302f3" name="bird-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.2-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.1.3-1" date="1756987200">- Upgrade to 3.1.3 (#2393366)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.1.4-1" date="1758542400">- Upgrade to 3.1.4 (#2397496)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.1.5-1" date="1765022400">- Upgrade to 3.1.5</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.2.0-1" date="1766750400">- Upgrade to 3.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.2.1-1" date="1775217600">- Upgrade to 3.2.1</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.3.0-1" date="1780488000">- Upgrade to 3.3.0 (#2481185)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.3.1-1" date="1781092800">- Upgrade to 3.3.1 (#2487252)</changelog>
</package>
<package pkgid="2e79170c6b50b6ab041c014990a0c002c9040594dc6dfcd808b15776338e5e88" name="bird-debugsource" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.1.2-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.1.3-1" date="1756987200">- Upgrade to 3.1.3 (#2393366)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.1.4-1" date="1758542400">- Upgrade to 3.1.4 (#2397496)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.1.5-1" date="1765022400">- Upgrade to 3.1.5</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.2.0-1" date="1766750400">- Upgrade to 3.2.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.2.1-1" date="1775217600">- Upgrade to 3.2.1</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.3.0-1" date="1780488000">- Upgrade to 3.3.0 (#2481185)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 3.3.1-1" date="1781092800">- Upgrade to 3.3.1 (#2487252)</changelog>
</package>
<package pkgid="85766bf9f66bbe92818b7fb88dc35a96346ef637186c2e607881a73ee65deeac" name="coturn-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.12.0" rel="2.el10_2"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.7.0-3" date="1754827200">- Start after network-online.target not network.target</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.7.0-4" date="1767528000">- Backport upstream patches for CVE-2025-69217 (#2425955)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.8.0-1" date="1768046400">- Upgrade to 4.8.0 (#2427319)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.9.0-1" date="1772020800">- Upgrade to 4.9.0 (#2442144)
- Add patch to build successfully using OpenSSL 1.1.1 on RHEL 8</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.10.0-1" date="1776427200">- Upgrade to 4.10.0 (#2458094)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.11.0-1" date="1778328000">- Upgrade to 4.11.0 (#2466643)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-1" date="1779710400">- Upgrade to 4.12.0 (#2480998)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-2" date="1781179200">- Ensure that 'systemctl reload coturn' also reloads TLS certificate</changelog>
</package>
<package pkgid="2794ce6aed9c9101d97fb3071c30d7a22535069b5ca9f23717b3fac8e62aa666" name="coturn-debugsource" arch="x86_64">
  <version epoch="0" ver="4.12.0" rel="2.el10_2"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.7.0-3" date="1754827200">- Start after network-online.target not network.target</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.7.0-4" date="1767528000">- Backport upstream patches for CVE-2025-69217 (#2425955)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.8.0-1" date="1768046400">- Upgrade to 4.8.0 (#2427319)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.9.0-1" date="1772020800">- Upgrade to 4.9.0 (#2442144)
- Add patch to build successfully using OpenSSL 1.1.1 on RHEL 8</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.10.0-1" date="1776427200">- Upgrade to 4.10.0 (#2458094)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.11.0-1" date="1778328000">- Upgrade to 4.11.0 (#2466643)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-1" date="1779710400">- Upgrade to 4.12.0 (#2480998)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-2" date="1781179200">- Ensure that 'systemctl reload coturn' also reloads TLS certificate</changelog>
</package>
<package pkgid="7ee70a4c773babd6d6c0bfad8797df15d8e5fab3b6c3a17fce1b20dd81b2380d" name="coturn-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.12.0" rel="2.el10_2"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.7.0-3" date="1754827200">- Start after network-online.target not network.target</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.7.0-4" date="1767528000">- Backport upstream patches for CVE-2025-69217 (#2425955)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.8.0-1" date="1768046400">- Upgrade to 4.8.0 (#2427319)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.9.0-1" date="1772020800">- Upgrade to 4.9.0 (#2442144)
- Add patch to build successfully using OpenSSL 1.1.1 on RHEL 8</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.10.0-1" date="1776427200">- Upgrade to 4.10.0 (#2458094)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.11.0-1" date="1778328000">- Upgrade to 4.11.0 (#2466643)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-1" date="1779710400">- Upgrade to 4.12.0 (#2480998)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-2" date="1781179200">- Ensure that 'systemctl reload coturn' also reloads TLS certificate</changelog>
</package>
<package pkgid="7fee1035f70db034a84becc81076ba86751e498488df87f166ef61b1cd7cbbf2" name="dnsdist-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="1.el10_2"/>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 1.9.8-3" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups
  automatically</changelog>
  <changelog author="Sander Hoentjen &lt;shoentjen@antagonist.nl&gt; - 1.9.9-1" date="1746532800">- Update to 1.9.9
- fixes #2362922, #2362923, #2362924 (CVE-2025-30194)</changelog>
  <changelog author="Sander Hoentjen &lt;shoentjen@antagonist.nl&gt; - 1.9.10-1" date="1747828800">- Update to 1.9.10
- fixes #2367441
- fixes #2367560, #2367561, #2367562, #2367460 (CVE-2025-30193)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.10-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Sander Hoentjen &lt;shoentjen@antagonist.nl&gt; - 2.0.1-1" date="1758196800">- Update to 2.0.1
- Fixes CVE-2025-30187
- Fixes #2382309</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.1-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.1-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Sander Hoentjen &lt;shoentjen@antagonist.nl&gt; - 2.0.3-1" date="1775044800">- Update to new upstream
- Fixes #2453419 (CVE-2026-27854)
- Fixes #2453421 (CVE-2026-27853)
- Fixes #2453426 (CVE-2026-24030)
- Fixes #2453427 (CVE-2026-0397)
- Fixes #2453429 (CVE-2026-24029)
- Fixes #2453430 (CVE-2026-0396)
- Fixes #2453431 (CVE-2026-24028)</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2.0.3-2" date="1780056000">- rebuild for https://fedoraproject.org/wiki/Changes/Protobuf_5.x/6.x</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.0.6-1" date="1780660800">- update to 2.0.6 fixes rhbz#2460540</changelog>
</package>
<package pkgid="ffb24e81c4b1a04827908e4b59c94b2bb4b10b62895d93e9d3d42296ffa4e819" name="dnsdist-debugsource" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="1.el10_2"/>
  <changelog author="Zbigniew J&#x119;drzejewski-Szmek &lt;zbyszek@in.waw.pl&gt; - 1.9.8-3" date="1739275200">- Add sysusers.d config file to allow rpm to create users/groups
  automatically</changelog>
  <changelog author="Sander Hoentjen &lt;shoentjen@antagonist.nl&gt; - 1.9.9-1" date="1746532800">- Update to 1.9.9
- fixes #2362922, #2362923, #2362924 (CVE-2025-30194)</changelog>
  <changelog author="Sander Hoentjen &lt;shoentjen@antagonist.nl&gt; - 1.9.10-1" date="1747828800">- Update to 1.9.10
- fixes #2367441
- fixes #2367560, #2367561, #2367562, #2367460 (CVE-2025-30193)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.10-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Sander Hoentjen &lt;shoentjen@antagonist.nl&gt; - 2.0.1-1" date="1758196800">- Update to 2.0.1
- Fixes CVE-2025-30187
- Fixes #2382309</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.1-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.0.1-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Sander Hoentjen &lt;shoentjen@antagonist.nl&gt; - 2.0.3-1" date="1775044800">- Update to new upstream
- Fixes #2453419 (CVE-2026-27854)
- Fixes #2453421 (CVE-2026-27853)
- Fixes #2453426 (CVE-2026-24030)
- Fixes #2453427 (CVE-2026-0397)
- Fixes #2453429 (CVE-2026-24029)
- Fixes #2453430 (CVE-2026-0396)
- Fixes #2453431 (CVE-2026-24028)</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2.0.3-2" date="1780056000">- rebuild for https://fedoraproject.org/wiki/Changes/Protobuf_5.x/6.x</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.0.6-1" date="1780660800">- update to 2.0.6 fixes rhbz#2460540</changelog>
</package>
<package pkgid="dfea7ee903e88613d6390a59f24d6a9143c010c0c60dfa231c916517faf63a01" name="gh-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.94.0" rel="1.el10_2"/>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.86.0-3" date="1770033600">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.87.0-1" date="1771416000">- Update to 2.87.0 upstream release
- Resolves: rhbz#2440729</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 2.87.0-2" date="1771416001">- Drop patch included in 2.87.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.87.3-1" date="1771848000">- Update to 2.87.3 upstream release
- Resolves: rhbz#2441488</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.88.1-1" date="1773316800">- Update to 2.88.1 upstream release
- Resolves: rhbz#2446304</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.91.0-1" date="1777032000">- Update to 2.91.0. Fixes rhbz#2451741.</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.91.0-3" date="1777032001">- Make telemetry sending opt in</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.92.0-1" date="1777896000">- Update to 2.92.0. Fixes rhbz#2451741.</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.93.0-1" date="1779969600">- Update to 2.93.0. Fixes rhbz#2482337.</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.94.0-1" date="1781179200">- Update to 2.94.0 upstream release
- Resolves: rhbz#2487830</changelog>
</package>
<package pkgid="d8e1c3e76af9732552503efbea2b50f19977371d38cbd48be9573b1a0331a214" name="gh-debugsource" arch="x86_64">
  <version epoch="0" ver="2.94.0" rel="1.el10_2"/>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.86.0-3" date="1770033600">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.87.0-1" date="1771416000">- Update to 2.87.0 upstream release
- Resolves: rhbz#2440729</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 2.87.0-2" date="1771416001">- Drop patch included in 2.87.0</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.87.3-1" date="1771848000">- Update to 2.87.3 upstream release
- Resolves: rhbz#2441488</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.88.1-1" date="1773316800">- Update to 2.88.1 upstream release
- Resolves: rhbz#2446304</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.91.0-1" date="1777032000">- Update to 2.91.0. Fixes rhbz#2451741.</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.91.0-3" date="1777032001">- Make telemetry sending opt in</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.92.0-1" date="1777896000">- Update to 2.92.0. Fixes rhbz#2451741.</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.93.0-1" date="1779969600">- Update to 2.93.0. Fixes rhbz#2482337.</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 2.94.0-1" date="1781179200">- Update to 2.94.0 upstream release
- Resolves: rhbz#2487830</changelog>
</package>
<package pkgid="67b47d69fba61c164bfda99983a706033d73d1af3480580acfe2f9b06a018a26" name="glab-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.102.0" rel="1.el10_2"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.85.2-1" date="1771156800">- Update to 1.85.2 upstream release
- Resolves: rhbz#2435193</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.85.3-1" date="1771329600">- Update to 1.85.3 upstream release
- Resolves: rhbz#2440422</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.86.0-1" date="1771416000">- Update to 1.86.0 upstream release
- Resolves: rhbz#2440787</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.88.0-1" date="1772625600">- Update to 1.88.0 upstream release
- Resolves: rhbz#2443918</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.89.0-1" date="1772712000">- Update to 1.89.0 upstream release
- Resolves: rhbz#2444915</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.90.0-1" date="1774267200">- Update to 1.90.0 upstream release
- Resolves: rhbz#2450398</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.91.0-1" date="1775044800">- Update to 1.91.0 upstream release
- Resolves: rhbz#2453971</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.92.1-1" date="1775822400">- Update to 1.92.1 upstream release
- Resolves: rhbz#2457079</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.95.0-1" date="1778241600">- Update to 1.95.0 upstream release
- Resolves: rhbz#2467246</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.102.0-1" date="1780660800">- Update to 1.102.0 upstream release
- Resolves: rhbz#2476559</changelog>
</package>
<package pkgid="0aa17ddf0c41b1f36ec92f9c298e24728df5dc542ca3f3c651a76475337f491b" name="glab-debugsource" arch="x86_64">
  <version epoch="0" ver="1.102.0" rel="1.el10_2"/>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.85.2-1" date="1771156800">- Update to 1.85.2 upstream release
- Resolves: rhbz#2435193</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.85.3-1" date="1771329600">- Update to 1.85.3 upstream release
- Resolves: rhbz#2440422</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.86.0-1" date="1771416000">- Update to 1.86.0 upstream release
- Resolves: rhbz#2440787</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.88.0-1" date="1772625600">- Update to 1.88.0 upstream release
- Resolves: rhbz#2443918</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.89.0-1" date="1772712000">- Update to 1.89.0 upstream release
- Resolves: rhbz#2444915</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.90.0-1" date="1774267200">- Update to 1.90.0 upstream release
- Resolves: rhbz#2450398</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.91.0-1" date="1775044800">- Update to 1.91.0 upstream release
- Resolves: rhbz#2453971</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.92.1-1" date="1775822400">- Update to 1.92.1 upstream release
- Resolves: rhbz#2457079</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.95.0-1" date="1778241600">- Update to 1.95.0 upstream release
- Resolves: rhbz#2467246</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.102.0-1" date="1780660800">- Update to 1.102.0 upstream release
- Resolves: rhbz#2476559</changelog>
</package>
<package pkgid="51cd65578de15e0f0eaa5e9acdae252715587261746b711aa3cfaaa58250d412" name="hd-idle-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.05" rel="29.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.05-21" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 1.05-22" date="1722254400">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.05-23" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.05-24" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Kyle Lexmond &lt;fedora@kyl191.net&gt; - 1.05-25" date="1757678400">- Add patch to write hd-idle executable to /usr/bin instead of /usr/sbin</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.05-28" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 1.05-29" date="1780747200">- spec cleanup and modernization + opt-in to packit</changelog>
</package>
<package pkgid="c97f0dd185205ab4a7307619606ecb21794fe2df4ddbb5976e825ee652f1cad2" name="hd-idle-debugsource" arch="x86_64">
  <version epoch="0" ver="1.05" rel="29.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.05-21" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 1.05-22" date="1722254400">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.05-23" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.05-24" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Kyle Lexmond &lt;fedora@kyl191.net&gt; - 1.05-25" date="1757678400">- Add patch to write hd-idle executable to /usr/bin instead of /usr/sbin</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.05-28" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 1.05-29" date="1780747200">- spec cleanup and modernization + opt-in to packit</changelog>
</package>
<package pkgid="ac403eca2e9377a1a66feb1bce8da8b9625955208de7adcd7ce1704384306494" name="hddfancontrol-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="1.el10_2"/>
  <changelog author="Miro Hron&#x10D;ok &lt;miro@hroncok.cz&gt; - 1.6.2-8" date="1743163200">- Actually run tests during the build
- Fixes: rhbz#2354083</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-9" date="1748952000">- Rebuilt for Python 3.14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.2-10" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-11" date="1755259200">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-12" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 1.6.2-13" date="1762689600">- pyprojectize spec modernization</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.2-14" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 1.6.2-15" date="1772366400">- spec cleanup, silent rpmlint, prep for new upstream release</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-16" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.1.1-1" date="1780747200">- update to 2.1.1 (rust) + packit fixes rhbz#2321360</changelog>
</package>
<package pkgid="9f57c3c66a9b8e319a9aaaaf1e3df84070752f9233b8eaf997ad38c51959b817" name="hddfancontrol-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="1.el10_2"/>
  <changelog author="Miro Hron&#x10D;ok &lt;miro@hroncok.cz&gt; - 1.6.2-8" date="1743163200">- Actually run tests during the build
- Fixes: rhbz#2354083</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-9" date="1748952000">- Rebuilt for Python 3.14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.2-10" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-11" date="1755259200">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-12" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 1.6.2-13" date="1762689600">- pyprojectize spec modernization</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.2-14" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 1.6.2-15" date="1772366400">- spec cleanup, silent rpmlint, prep for new upstream release</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-16" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.1.1-1" date="1780747200">- update to 2.1.1 (rust) + packit fixes rhbz#2321360</changelog>
</package>
<package pkgid="dd589a84a7f3a983ec2fdab28721cc62238b87921a6149e8f78a5dfd9492cdc1" name="iverilog-debuginfo" arch="x86_64">
  <version epoch="0" ver="13.0" rel="7.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.0-10" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.0-11" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.0-12" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-1" date="1772625600">- update to iverilog-13, fixes rhbz#2443718</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-2" date="1772625601">- uploaded sources, remove upstreamed patch</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-3" date="1772625602">- added README.md to documentation</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-4" date="1772625603">- build documentation with python3-sphinx</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-5" date="1780920000">- opt-in to packit</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-6" date="1780920001">- split iverilog in devel, static and binary packages</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-7" date="1780920002">- simplify .gitignore</changelog>
</package>
<package pkgid="7c756fca4d0778b4a033a7ab414d595c033100fe7cf04547d0385b2e6bc20ef4" name="iverilog-debugsource" arch="x86_64">
  <version epoch="0" ver="13.0" rel="7.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.0-10" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.0-11" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 12.0-12" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-1" date="1772625600">- update to iverilog-13, fixes rhbz#2443718</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-2" date="1772625601">- uploaded sources, remove upstreamed patch</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-3" date="1772625602">- added README.md to documentation</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-4" date="1772625603">- build documentation with python3-sphinx</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-5" date="1780920000">- opt-in to packit</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-6" date="1780920001">- split iverilog in devel, static and binary packages</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 13.0-7" date="1780920002">- simplify .gitignore</changelog>
</package>
<package pkgid="c2098068e28e1de6592237a98d74a1bd676c1bf3c4fa5d4b4cfb437c5c5e36ab" name="nix-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.31.5" rel="3.el10_2"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.24.15-1" date="1764158400">- initial epel10 package</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.24.15-2" date="1775649600">- backport for nix-daemon critical GHSA-g3g9-5vj6-r3gj (CVE-2026-39860)</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-1" date="1778328000">- rebase to nix-2.31.5 using libgit_1.9
- fixes GHSA-vh5x-56v6-4368
- https://nix.dev/manual/nix/2.31/release-notes/rl-2.31.html</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-2" date="1780488000">- filter out pkgconfig garbage deps generated by meson-1.4</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-3" date="1780488001">- fixup meson version check during buildSRPMFromSCM</changelog>
</package>
<package pkgid="110e407715c1913720b2e4fa76045cdd03a668e5d20162e837d86958b9382636" name="nix-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.31.5" rel="3.el10_2"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.24.15-1" date="1764158400">- initial epel10 package</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.24.15-2" date="1775649600">- backport for nix-daemon critical GHSA-g3g9-5vj6-r3gj (CVE-2026-39860)</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-1" date="1778328000">- rebase to nix-2.31.5 using libgit_1.9
- fixes GHSA-vh5x-56v6-4368
- https://nix.dev/manual/nix/2.31/release-notes/rl-2.31.html</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-2" date="1780488000">- filter out pkgconfig garbage deps generated by meson-1.4</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-3" date="1780488001">- fixup meson version check during buildSRPMFromSCM</changelog>
</package>
<package pkgid="b3d6cd840dbbdcc8fd135d91b0394d48172b59f48788514c61946cb55ff71cf2" name="nix-debugsource" arch="x86_64">
  <version epoch="0" ver="2.31.5" rel="3.el10_2"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.24.15-1" date="1764158400">- initial epel10 package</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.24.15-2" date="1775649600">- backport for nix-daemon critical GHSA-g3g9-5vj6-r3gj (CVE-2026-39860)</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-1" date="1778328000">- rebase to nix-2.31.5 using libgit_1.9
- fixes GHSA-vh5x-56v6-4368
- https://nix.dev/manual/nix/2.31/release-notes/rl-2.31.html</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-2" date="1780488000">- filter out pkgconfig garbage deps generated by meson-1.4</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-3" date="1780488001">- fixup meson version check during buildSRPMFromSCM</changelog>
</package>
<package pkgid="d8e171ba780a6a39be521cd259b032ee4bb76334c692a205765765a77dfb6185" name="nix-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.31.5" rel="3.el10_2"/>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.24.15-1" date="1764158400">- initial epel10 package</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.24.15-2" date="1775649600">- backport for nix-daemon critical GHSA-g3g9-5vj6-r3gj (CVE-2026-39860)</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-1" date="1778328000">- rebase to nix-2.31.5 using libgit_1.9
- fixes GHSA-vh5x-56v6-4368
- https://nix.dev/manual/nix/2.31/release-notes/rl-2.31.html</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-2" date="1780488000">- filter out pkgconfig garbage deps generated by meson-1.4</changelog>
  <changelog author="Jens Petersen &lt;petersen@redhat.com&gt; - 2.31.5-3" date="1780488001">- fixup meson version check during buildSRPMFromSCM</changelog>
</package>
<package pkgid="77ae78aee6f95692b476c75ac59a1d76f21a5e2e0a392e38f4d3e1c06ffea0f6" name="perl-GD-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.86" rel="1.el10_2"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.82-2" date="1718020800">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.83-1" date="1719316800">- Update to 2.83
  - Fix missing PNG regression (CPAN RT#153923) on old systems without the .pc,
    but gdlib-config (the check was too strict)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.83-2" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.83-3" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.83-4" date="1751889600">- Perl 5.42 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.83-5" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.84-1" date="1767614400">- Update to 2.84
  - Added Makefile.PL --with and --without options to bypass autodetection
    errors or upstream libgd or subsequent library errors (GH#55)
  - Better support MSWin32 without gdlib.pc (requires manual --options and
    --lib_gd_path)
  - Work around broken ExtUtils::PkgConfig-&gt;find (GH#61)
  - Fixed snprintf for newer MSVC (&gt;= VS 2015)
  - Added GD::Image::supported() image types method
  - Added newFromTiffData() method
  - Fixed t/GD.t for unsupported image types
  - Add GIFANIM to the default since 2.0.33 (GH#56)
  - Honor PKG_CONFIG_PATH for finding gdlib.pc (GH#57)
  - Add demos/png2jpeg.pl
- Don't disable XPM support if GD config doesn't explicitly require -lX11
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.84-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.85-1" date="1780401600">- Update to 2.85
  - Tolerate runtime TIFF decode failures in autodetect (GH#62)
  - Replace cpm with cpanm in github actions
  - Fixed a minor precedence bug in t/z_manifest.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.86-1" date="1781006400">- Update to 2.86
  - Fix command injection via 2-arg open() in _make_filehandle (CVE-2026-11526)</changelog>
</package>
<package pkgid="0bc2c92f391d21c779f8b468a64cf50b97fdcb3981e83bd952791e98d94b2cb3" name="perl-GD-debugsource" arch="x86_64">
  <version epoch="0" ver="2.86" rel="1.el10_2"/>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.82-2" date="1718020800">- Perl 5.40 rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.83-1" date="1719316800">- Update to 2.83
  - Fix missing PNG regression (CPAN RT#153923) on old systems without the .pc,
    but gdlib-config (the check was too strict)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.83-2" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.83-3" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 2.83-4" date="1751889600">- Perl 5.42 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.83-5" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.84-1" date="1767614400">- Update to 2.84
  - Added Makefile.PL --with and --without options to bypass autodetection
    errors or upstream libgd or subsequent library errors (GH#55)
  - Better support MSWin32 without gdlib.pc (requires manual --options and
    --lib_gd_path)
  - Work around broken ExtUtils::PkgConfig-&gt;find (GH#61)
  - Fixed snprintf for newer MSVC (&gt;= VS 2015)
  - Added GD::Image::supported() image types method
  - Added newFromTiffData() method
  - Fixed t/GD.t for unsupported image types
  - Add GIFANIM to the default since 2.0.33 (GH#56)
  - Honor PKG_CONFIG_PATH for finding gdlib.pc (GH#57)
  - Add demos/png2jpeg.pl
- Don't disable XPM support if GD config doesn't explicitly require -lX11
- Use %{make_build} and %{make_install}</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.84-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.85-1" date="1780401600">- Update to 2.85
  - Tolerate runtime TIFF decode failures in autodetect (GH#62)
  - Replace cpm with cpanm in github actions
  - Fixed a minor precedence bug in t/z_manifest.t</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 2.86-1" date="1781006400">- Update to 2.86
  - Fix command injection via 2-arg open() in _make_filehandle (CVE-2026-11526)</changelog>
</package>
<package pkgid="aa547e81d6b9328de11a697b39c2f9dbdef24110f0cae605cf6a2c98d1507c1c" name="php-zstd-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.16.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.13.3-3" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 0.13.3-4" date="1728907200">- rebuild for https://fedoraproject.org/wiki/Changes/php84</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 0.13.3-5" date="1729166400">- modernize the spec file</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.14.0-1" date="1730894400">- update to 0.14.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.15.1-1" date="1756468800">- update to 0.15.1
- re-license spec file to CECILL-2.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.15.2-1" date="1756814400">- update to 0.15.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.16.0-1" date="1781006400">- update to 0.16.0</changelog>
</package>
<package pkgid="a59e99197fa5482bd3e23a2577a8ef7a95911b4772525118b8d798e482e137e2" name="php-zstd-debugsource" arch="x86_64">
  <version epoch="0" ver="0.16.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.13.3-3" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 0.13.3-4" date="1728907200">- rebuild for https://fedoraproject.org/wiki/Changes/php84</changelog>
  <changelog author="Remi Collet &lt;remi@fedoraproject.org&gt; - 0.13.3-5" date="1729166400">- modernize the spec file</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.14.0-1" date="1730894400">- update to 0.14.0</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.15.1-1" date="1756468800">- update to 0.15.1
- re-license spec file to CECILL-2.1</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.15.2-1" date="1756814400">- update to 0.15.2</changelog>
  <changelog author="Remi Collet &lt;remi@remirepo.net&gt; - 0.16.0-1" date="1781006400">- update to 0.16.0</changelog>
</package>
<package pkgid="3dc35b99214013d86165f5aec14f995ca549f75c5300740d69a6e333c762587e" name="proftpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9b" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
</package>
<package pkgid="25d978549326986be2bd406cc1d72969009975cf20595e6ccd441c01284d8ee1" name="proftpd-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.9b" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
</package>
<package pkgid="7cc0ccba6fd8ebb2490eb3e7135f81cb774070094b73a1336bd8e386e6e977d6" name="proftpd-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9b" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
</package>
<package pkgid="627b07c7a822f6ef1e10d84e1ad97f5bfd8d7cdfe89888ae4f30051152c054f9" name="proftpd-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9b" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
</package>
<package pkgid="02a275433aa3c5bf8717c9eed60310a87ebcdf419bb80fd7ac7201de1bbe700e" name="proftpd-postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9b" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
</package>
<package pkgid="118ae36f1e72acd9f4cc3a77f0717ca0baa6689e1f266f2f614dae66df787dda" name="proftpd-proxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9b" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
</package>
<package pkgid="33af9cc1b849008222f42ac27bba4ecac61d8e28422c192e339292ce0b360a61" name="proftpd-sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9b" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
</package>
<package pkgid="604e63e93b9a47aa81ecb5578d6dd5ad47190ebd2102d9994a8c46be5ca145b2" name="proftpd-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9b" rel="1.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-6" date="1720612800">- Fix support for building with no ENGINE support in OpenSSL (GH#1816)
- Avoid potential null pointer dereference in mod_tls and mod_proxy (GH#1817)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
</package>
<package pkgid="592777db8a60745f5265f0bbe9aa9cba9321ba4c9dbebc1369aece15607941a4" name="python3.13-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.13.14" rel="1.el10_2"/>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.13.8-1" date="1759838400">- Update to Python 3.13.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.13.9-1" date="1760443200">- Update to Python 3.13.9</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.13.10-1" date="1764763200">- Update to 3.13.10</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.13.11-1" date="1764936000">- Update to 3.13.11</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.13.11-2" date="1767700800">- Require at least the same expat version as used during the build time</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.13.11-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.13.12-1" date="1770206400">- Update to 3.13.12</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.13.12-2" date="1774526400">- Security fix for CVE-2026-4519 (rhbz#2449729)</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.13.13-1" date="1775649600">- Update to 3.13.13</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.13.14-1" date="1781179200">- Update to Python 3.13.14</changelog>
</package>
<package pkgid="d36ca0e8ae0f66b03eec808fbc5bb3340ae326b8f2a3856e006a41b8a6413c5f" name="python3.13-debugsource" arch="x86_64">
  <version epoch="0" ver="3.13.14" rel="1.el10_2"/>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.13.8-1" date="1759838400">- Update to Python 3.13.8</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.13.9-1" date="1760443200">- Update to Python 3.13.9</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.13.10-1" date="1764763200">- Update to 3.13.10</changelog>
  <changelog author="Miro Hron&#x10D;ok &lt;mhroncok@redhat.com&gt; - 3.13.11-1" date="1764936000">- Update to 3.13.11</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.13.11-2" date="1767700800">- Require at least the same expat version as used during the build time</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.13.11-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.13.12-1" date="1770206400">- Update to 3.13.12</changelog>
  <changelog author="Lum&#xED;r Balhar &lt;lbalhar@redhat.com&gt; - 3.13.12-2" date="1774526400">- Security fix for CVE-2026-4519 (rhbz#2449729)</changelog>
  <changelog author="Tom&#xE1;&#x161; Hrn&#x10D;iar &lt;thrnciar@redhat.com&gt; - 3.13.13-1" date="1775649600">- Update to 3.13.13</changelog>
  <changelog author="Karolina Surma &lt;ksurma@redhat.com&gt; - 3.13.14-1" date="1781179200">- Update to Python 3.13.14</changelog>
</package>
<package pkgid="b67fcdb90272f53a8c5ed888582264de6f04057197afb87fb076844d70e46f79" name="restic-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.19.0" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.17.3-2" date="1731931200">- Fix packit config</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17.3-3" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.0-1" date="1752235200">- Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
  rhbz#2350845 rhbz#2348839 rhbz#2331990</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.0-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.0-4" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 0.18.0-5" date="1760097600">- rebuild</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.1-1" date="1763985600">- Update to 0.18.1 - Closes rhbz#2397204 rhbz2416773</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.1-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.1-3" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.19.0-1" date="1781092800">- Update to 0.19.0 - Closes rhbz#2487290</changelog>
</package>
<package pkgid="51619cbeab641943a30f79992e9588db8e5b1fcd5d833283d0ac4700c3b71d40" name="restic-debugsource" arch="x86_64">
  <version epoch="0" ver="0.19.0" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.17.3-2" date="1731931200">- Fix packit config</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.17.3-3" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.0-1" date="1752235200">- Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
  rhbz#2350845 rhbz#2348839 rhbz#2331990</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.0-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.0-4" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 0.18.0-5" date="1760097600">- rebuild</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.1-1" date="1763985600">- Update to 0.18.1 - Closes rhbz#2397204 rhbz2416773</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.1-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.1-3" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.19.0-1" date="1781092800">- Update to 0.19.0 - Closes rhbz#2487290</changelog>
</package>
<package pkgid="99bcf3e478c8e48639af8c61895e77dfbcc9c9f1584e1243e0d8b088c007227f" name="singularity-ce-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.4.2" rel="1.el10_2"/>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.3.3-1" date="1755777600">- Upgrade to 4.3.3 upstream version.</changelog>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.3.3-2" date="1756987200">- Use source tarball without squashfuse build artefacts.
  rhbz#2392889</changelog>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.3.3-3" date="1758283200">- Update License with go_vendor_license report output.</changelog>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.3.4-1" date="1761825600">- Upgrade to 4.3.4 upstream version.</changelog>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.3.5-1" date="1764763200">- Upgrade to 4.3.5 upstream version.
- Fixes CVE-2025-64750</changelog>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.3.6-1" date="1766059200">- Upgrade to 4.3.6 upstream version.
- Fixes CVE-2025-67499</changelog>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.3.7-1" date="1768564800">- Upgrade to 4.3.7 upstream version.</changelog>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.4.0-1" date="1772193600">- Upgrade to 4.4.0 upstream version.</changelog>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.4.1-1" date="1774353600">- Upgrade to 4.4.1 upstream version.</changelog>
  <changelog author="David Trudgian &lt;dtrudg@sylabs.io&gt; - 4.4.2-1" date="1781092800">- Upgrade to 4.4.2 upstream version.
- Fix rhbz#2452368
- Fix rhbz#2453084
- Fix rhbz#2455643
- Fix rhbz#2458928
- Fix CVE-2026-47215</changelog>
</package>
<package pkgid="381c141d506793b0f81f6e49d397a5236203c6d61c26ccb0a6239936f7ab6fbb" name="tor-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.4.9.8" rel="1.el10_2"/>
  <changelog author="Marcel H&#xE4;rry &lt;mh+fedora@scrit.ch&gt; - 0.4.8.17-2" date="1752408000">- Enable drop-in configuration by default bz#2338912</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.8.17-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Marcel H&#xE4;rry &lt;mh+fedora@scrit.ch&gt;- 0.4.8.19-1" date="1760702400">- Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-19/20648</changelog>
  <changelog author="Marcel H&#xE4;rry &lt;mh+fedora@scrit.ch&gt;- 0.4.8.20-1" date="1763553600">- Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-19/20781</changelog>
  <changelog author="Marcel H&#xE4;rry &lt;mh+fedora@scrit.ch&gt;- 0.4.8.21-1" date="1763553601">- Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-21/20817</changelog>
  <changelog author="Marcel H&#xE4;rry &lt;mh+fedora@scrit.ch&gt;- 0.4.8.21-2" date="1764244800">- Fix build issue on newer glibc - https://gitlab.torproject.org/tpo/core/tor/-/issues/41170
- Include /etc/torrc.d/*.conf by default to avoid modifications from the core package (bz#2338912)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.8.21-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Marcel H&#xE4;rry &lt;mh+fedora@scrit.ch&gt; - 0.4.9.5-1" date="1771070400">- Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-9-5/21227
- Enable seccomp on aarch64, which is now supported</changelog>
  <changelog author="Marcel H&#xE4;rry &lt;mh+fedora@scrit.ch&gt; - 0.4.9.6-1" date="1775390400">- Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-23-and-0-4-9-6/21386</changelog>
  <changelog author="Marcel H&#xE4;rry &lt;mh+fedora@scrit.ch&gt; - 0.4.9.8-1" date="1778846400">- Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-25-and-0-4-9-8/21559
- Fix CVE-2026-44600 (bz#2476455 / bz#2476454)
- Fix CVE-2026-44599 (bz#2476453 / bz#2476452)
- Fix CVE-2026-44597 (bz#2476451 / bz#2476450)
- Fix CVE-2026-44601 (bz#2467732 / bz#2467731)
- Fix CVE-2026-44603 (bz#2467720 / bz#2467719)
- Fix CVE-2026-44602 (bz#2467718 / nz@2467717)</changelog>
</package>
<package pkgid="55137d97f83d993bc3c1a91d527a7fbb752658f316225378c69f757cb3138e89" name="tor-debugsource" arch="x86_64">
  <version epoch="0" ver="0.4.9.8" rel="1.el10_2"/>
  <changelog author="Marcel H&#xE4;rry &lt;mh+fedora@scrit.ch&gt; - 0.4.8.17-2" date="1752408000">- Enable drop-in configuration by default bz#2338912</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.8.17-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Marcel H&#xE4;rry &lt;mh+fedora@scrit.ch&gt;- 0.4.8.19-1" date="1760702400">- Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-19/20648</changelog>
  <changelog author="Marcel H&#xE4;rry &lt;mh+fedora@scrit.ch&gt;- 0.4.8.20-1" date="1763553600">- Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-19/20781</changelog>
  <changelog author="Marcel H&#xE4;rry &lt;mh+fedora@scrit.ch&gt;- 0.4.8.21-1" date="1763553601">- Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-8-21/20817</changelog>
  <changelog author="Marcel H&#xE4;rry &lt;mh+fedora@scrit.ch&gt;- 0.4.8.21-2" date="1764244800">- Fix build issue on newer glibc - https://gitlab.torproject.org/tpo/core/tor/-/issues/41170
- Include /etc/torrc.d/*.conf by default to avoid modifications from the core package (bz#2338912)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.4.8.21-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Marcel H&#xE4;rry &lt;mh+fedora@scrit.ch&gt; - 0.4.9.5-1" date="1771070400">- Update to latest upstream release https://forum.torproject.org/t/stable-release-0-4-9-5/21227
- Enable seccomp on aarch64, which is now supported</changelog>
  <changelog author="Marcel H&#xE4;rry &lt;mh+fedora@scrit.ch&gt; - 0.4.9.6-1" date="1775390400">- Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-23-and-0-4-9-6/21386</changelog>
  <changelog author="Marcel H&#xE4;rry &lt;mh+fedora@scrit.ch&gt; - 0.4.9.8-1" date="1778846400">- Update to latest upstream release https://forum.torproject.org/t/security-release-0-4-8-25-and-0-4-9-8/21559
- Fix CVE-2026-44600 (bz#2476455 / bz#2476454)
- Fix CVE-2026-44599 (bz#2476453 / bz#2476452)
- Fix CVE-2026-44597 (bz#2476451 / bz#2476450)
- Fix CVE-2026-44601 (bz#2467732 / bz#2467731)
- Fix CVE-2026-44603 (bz#2467720 / bz#2467719)
- Fix CVE-2026-44602 (bz#2467718 / nz@2467717)</changelog>
</package>
<package pkgid="3755e9810c580d5524629cfc6a0be7bd0c7eb939cd1d6a735f012e7fdd58dbb7" name="weechat-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.2" rel="1.el10_2"/>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.0-1" date="1764590400">- Update to 4.8.0</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.1-1" date="1764590401">- Update to 4.8.1</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 4.8.1-2" date="1767873600">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.1-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.2-1" date="1773057600">- Update to 4.8.2</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.2-2" date="1774785600">- Drop unnecessary -DPREFIX cmake arg</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.0-1" date="1774785601">- Update to 4.9.0</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.1-1" date="1780228800">- Update to 4.9.1</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.9.1-2" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.2-1" date="1780833600">- Update to 4.9.2</changelog>
</package>
<package pkgid="b60f8214886a480a0a1fe5fdce209d43cb895a6340b3fcc982b4de9bf76daec9" name="weechat-debugsource" arch="x86_64">
  <version epoch="0" ver="4.9.2" rel="1.el10_2"/>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.0-1" date="1764590400">- Update to 4.8.0</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.1-1" date="1764590401">- Update to 4.8.1</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 4.8.1-2" date="1767873600">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.1-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.2-1" date="1773057600">- Update to 4.8.2</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.2-2" date="1774785600">- Drop unnecessary -DPREFIX cmake arg</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.0-1" date="1774785601">- Update to 4.9.0</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.1-1" date="1780228800">- Update to 4.9.1</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.9.1-2" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.2-1" date="1780833600">- Update to 4.9.2</changelog>
</package>
<package pkgid="0588dc118c8a8c8ace7fa04d607be67033740ed9f913ed7d3b7b24c49d8a6758" name="ytree-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.13" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.09-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2.09-3" date="1721995200">- convert GPLv2+ license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.09-4" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.09-5" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.10-1" date="1762689600">- update to 2.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.12-1" date="1777032000">- update to 2.12 fixes rhbz#2459757</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.12-2" date="1780142400">- opt-in to packit</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.12-3" date="1780401600">- update gitignore</changelog>
  <changelog author="Filipe Rosset &lt;filiperosset@fedoraproject.org&gt; - 2.13-1" date="1781179200">- update to 2.13</changelog>
</package>
<package pkgid="299ffd0cafe6be8d717a4ae52f17a11657aa5ee7c7aeeed9ee0045134d8c888e" name="ytree-debugsource" arch="x86_64">
  <version epoch="0" ver="2.13" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.09-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2.09-3" date="1721995200">- convert GPLv2+ license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.09-4" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.09-5" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.10-1" date="1762689600">- update to 2.10</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.10-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.12-1" date="1777032000">- update to 2.12 fixes rhbz#2459757</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.12-2" date="1780142400">- opt-in to packit</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.12-3" date="1780401600">- update gitignore</changelog>
  <changelog author="Filipe Rosset &lt;filiperosset@fedoraproject.org&gt; - 2.13-1" date="1781179200">- update to 2.13</changelog>
</package>
</otherdata>