<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="65">
<package pkgid="089d68cdc805f30852008fb6f3eef60a578d2a5c37eda92eba215c46c2594c53" name="apptainer-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.3" rel="1.el10_2"/>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.4" date="1761739200">- Update to upstream 1.4.4</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.5" date="1764590400">- Update to upstream 1.4.5</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.5-2" date="1764676800">- Include the real patches for e2fsprogs instead of empty files.  Fixes
  BZ#2417548.</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.5-3" date="1771329600">- Enable FIPS support.  Fixes BZ#2437258.</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.0~rc.1" date="1773316800">- Update to upstream 1.5.0~rc.1</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.0~rc.2" date="1776168000">- Update to upstream 1.5.0~rc.2</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.0" date="1778068800">- Update to upstream 1.5.0</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.1" date="1780574400">- Update to upstream 1.5.1</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.2" date="1782216000">- Update to upstream 1.5.2</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.3" date="1784635200">- Update to upstream 1.5.3</changelog>
</package>
<package pkgid="d8701b47050e0e4a3b718b2b5f2b99b4043a1de5a772eac2ab51890fbdc89360" name="apptainer-debugsource" arch="x86_64">
  <version epoch="0" ver="1.5.3" rel="1.el10_2"/>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.4" date="1761739200">- Update to upstream 1.4.4</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.5" date="1764590400">- Update to upstream 1.4.5</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.5-2" date="1764676800">- Include the real patches for e2fsprogs instead of empty files.  Fixes
  BZ#2417548.</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.5-3" date="1771329600">- Enable FIPS support.  Fixes BZ#2437258.</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.0~rc.1" date="1773316800">- Update to upstream 1.5.0~rc.1</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.0~rc.2" date="1776168000">- Update to upstream 1.5.0~rc.2</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.0" date="1778068800">- Update to upstream 1.5.0</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.1" date="1780574400">- Update to upstream 1.5.1</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.2" date="1782216000">- Update to upstream 1.5.2</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.3" date="1784635200">- Update to upstream 1.5.3</changelog>
</package>
<package pkgid="b3363381ff785fb49dbb6e2c7b355f1a7c1c20eca4a14fb9bf0f0df09343c7c4" name="apptainer-suid-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.5.3" rel="1.el10_2"/>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.4" date="1761739200">- Update to upstream 1.4.4</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.5" date="1764590400">- Update to upstream 1.4.5</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.5-2" date="1764676800">- Include the real patches for e2fsprogs instead of empty files.  Fixes
  BZ#2417548.</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.4.5-3" date="1771329600">- Enable FIPS support.  Fixes BZ#2437258.</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.0~rc.1" date="1773316800">- Update to upstream 1.5.0~rc.1</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.0~rc.2" date="1776168000">- Update to upstream 1.5.0~rc.2</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.0" date="1778068800">- Update to upstream 1.5.0</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.1" date="1780574400">- Update to upstream 1.5.1</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.2" date="1782216000">- Update to upstream 1.5.2</changelog>
  <changelog author="Dave Dykstra &lt;dwd@cern.ch&gt; - 1.5.3" date="1784635200">- Update to upstream 1.5.3</changelog>
</package>
<package pkgid="82f7ee94f37b1f201fa70bbc510f7e71297dba9f2380a1f1aba6ffbaaf430754" name="bitcoin-core-debuginfo" arch="x86_64">
  <version epoch="0" ver="31.1" rel="1.el10_2"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="ed4d419481b94b449e25f2ccd8ff07b6b9b13a3bdd83e8c5708a3f6e71da7801" name="bitcoin-core-debugsource" arch="x86_64">
  <version epoch="0" ver="31.1" rel="1.el10_2"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="3076e077b5f66d9d63a4536f572353dd92f7d99fd16ef7b1703f785edd34769d" name="bitcoin-core-desktop-debuginfo" arch="x86_64">
  <version epoch="0" ver="31.1" rel="1.el10_2"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="40775f3d080da233ac1fc3cf9fea4fb2cf99bbf4ba83aa0ccadac8c1e57d521a" name="bitcoin-core-server-debuginfo" arch="x86_64">
  <version epoch="0" ver="31.1" rel="1.el10_2"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="3c67e0962d0fd29a3dc16e058531552286d82ceb2c9bb42cf7c3068dc8adc412" name="bitcoin-core-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="31.1" rel="1.el10_2"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="4452f240d68e6418cee881ec64caec749c5b1149ff98a86277372542dc766032" name="converseen-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.15.2.7" rel="2.el10_2"/>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.2-1" date="1774526400">- update to 0.15.2.2</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.3-1" date="1776081600">- update to 0.15.2.3 fixes rhbz#2457847</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.3-2" date="1780142400">- opt-in to packit</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.4-1" date="1780142401">- Update to 0.15.2.4 upstream release
- Resolves: rhbz#2480322</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.15.2.5-1" date="1780315200">- Update to 0.15.2.5 upstream release
- Resolves: rhbz#2483749</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.15.2.6-1" date="1783512000">- Update to 0.15.2.6 upstream release
- Resolves: rhbz#2498237</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2.6-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.6-3" date="1784462400">- drop ix86 support</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.15.2.7-1" date="1784548800">- Update to 0.15.2.7 upstream release
- Resolves: rhbz#2502842</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.7-2" date="1784548801">- simplify .gitignore file</changelog>
</package>
<package pkgid="7d126e2e9983a9fa017a6c292a48e9f94f2401d29e4813baf9b0421bb3fe8a1a" name="converseen-debugsource" arch="x86_64">
  <version epoch="0" ver="0.15.2.7" rel="2.el10_2"/>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.2-1" date="1774526400">- update to 0.15.2.2</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.3-1" date="1776081600">- update to 0.15.2.3 fixes rhbz#2457847</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.3-2" date="1780142400">- opt-in to packit</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.4-1" date="1780142401">- Update to 0.15.2.4 upstream release
- Resolves: rhbz#2480322</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.15.2.5-1" date="1780315200">- Update to 0.15.2.5 upstream release
- Resolves: rhbz#2483749</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.15.2.6-1" date="1783512000">- Update to 0.15.2.6 upstream release
- Resolves: rhbz#2498237</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.15.2.6-2" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.6-3" date="1784462400">- drop ix86 support</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.15.2.7-1" date="1784548800">- Update to 0.15.2.7 upstream release
- Resolves: rhbz#2502842</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 0.15.2.7-2" date="1784548801">- simplify .gitignore file</changelog>
</package>
<package pkgid="d3c6f38d817d6c18aef4fb0f7f55616b7ced40db9bf94c991b59b39fb850fc90" name="coturn-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.15.0" rel="1.el10_2"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.11.0-1" date="1778328000">- Upgrade to 4.11.0 (#2466643)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-1" date="1779710400">- Upgrade to 4.12.0 (#2480998)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-2" date="1781179200">- Ensure that 'systemctl reload coturn' also reloads TLS certificate</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.12.0-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.13.0-1" date="1781438400">- Upgrade to 4.13.0 (#2488712)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.13.1-1" date="1781611200">- Upgrade to 4.13.1 (#2488712 #c1)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.14.0-1" date="1782216000">- Upgrade to 4.14.0 (#2491257)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.14.0-2" date="1782388800">- Enable prometheus support (thanks to Ricardo Domingues)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.14.0-3" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.15.0-1" date="1784894400">- Upgrade to 4.15.0 (#2506022)</changelog>
</package>
<package pkgid="33b14303e5da6b740453cc741a12a9ffebb54b932bca409095149a013cbedff0" name="coturn-debugsource" arch="x86_64">
  <version epoch="0" ver="4.15.0" rel="1.el10_2"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.11.0-1" date="1778328000">- Upgrade to 4.11.0 (#2466643)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-1" date="1779710400">- Upgrade to 4.12.0 (#2480998)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-2" date="1781179200">- Ensure that 'systemctl reload coturn' also reloads TLS certificate</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.12.0-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.13.0-1" date="1781438400">- Upgrade to 4.13.0 (#2488712)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.13.1-1" date="1781611200">- Upgrade to 4.13.1 (#2488712 #c1)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.14.0-1" date="1782216000">- Upgrade to 4.14.0 (#2491257)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.14.0-2" date="1782388800">- Enable prometheus support (thanks to Ricardo Domingues)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.14.0-3" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.15.0-1" date="1784894400">- Upgrade to 4.15.0 (#2506022)</changelog>
</package>
<package pkgid="d3021aa275293ac2f543d31bdf16377eee9e405767b8df3505c2fe71063b199a" name="coturn-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.15.0" rel="1.el10_2"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.11.0-1" date="1778328000">- Upgrade to 4.11.0 (#2466643)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-1" date="1779710400">- Upgrade to 4.12.0 (#2480998)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.12.0-2" date="1781179200">- Ensure that 'systemctl reload coturn' also reloads TLS certificate</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 4.12.0-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.13.0-1" date="1781438400">- Upgrade to 4.13.0 (#2488712)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.13.1-1" date="1781611200">- Upgrade to 4.13.1 (#2488712 #c1)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.14.0-1" date="1782216000">- Upgrade to 4.14.0 (#2491257)</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.14.0-2" date="1782388800">- Enable prometheus support (thanks to Ricardo Domingues)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.14.0-3" date="1784116800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; - 4.15.0-1" date="1784894400">- Upgrade to 4.15.0 (#2506022)</changelog>
</package>
<package pkgid="531979d4badb3f4067ba914a449d1a1e5195d8a669ffe8b028b52573441c5e0b" name="cube-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="2.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.2-5" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jan Andre Reuter &lt;j.reuter@fz-juelich.de&gt; - 4.8.2-6" date="1745496000">- Fix bash-completion (rhbz#2315798)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-1" date="1745496001">- Update to v4.9
- Remove el7 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-3" date="1761220800">- Reinstate cube-devel package (#2406039)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-1" date="1767787200">- Update to v4.9.1 [#2427578]</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-2" date="1784548800">- Don't include libcube4gui.so in cube-libs-devel</changelog>
</package>
<package pkgid="23b568e836190d158a0310e5f0e9b13ad8f1d53333fa779748f8b62b2d39ee3c" name="cube-debugsource" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="2.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.2-5" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jan Andre Reuter &lt;j.reuter@fz-juelich.de&gt; - 4.8.2-6" date="1745496000">- Fix bash-completion (rhbz#2315798)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-1" date="1745496001">- Update to v4.9
- Remove el7 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-3" date="1761220800">- Reinstate cube-devel package (#2406039)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-1" date="1767787200">- Update to v4.9.1 [#2427578]</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-2" date="1784548800">- Don't include libcube4gui.so in cube-libs-devel</changelog>
</package>
<package pkgid="cd383f4f3685460abb4c44b1572eb9121e8574a06e4de31699367807fcb67742" name="cube-guilib-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="2.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.2-5" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jan Andre Reuter &lt;j.reuter@fz-juelich.de&gt; - 4.8.2-6" date="1745496000">- Fix bash-completion (rhbz#2315798)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-1" date="1745496001">- Update to v4.9
- Remove el7 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-3" date="1761220800">- Reinstate cube-devel package (#2406039)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-1" date="1767787200">- Update to v4.9.1 [#2427578]</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-2" date="1784548800">- Don't include libcube4gui.so in cube-libs-devel</changelog>
</package>
<package pkgid="975c9f133bea6b4a24e9279c0b98188cac4c942ab3415c72964787861f08e982" name="cube-guilib-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="2.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.2-5" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jan Andre Reuter &lt;j.reuter@fz-juelich.de&gt; - 4.8.2-6" date="1745496000">- Fix bash-completion (rhbz#2315798)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-1" date="1745496001">- Update to v4.9
- Remove el7 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-3" date="1761220800">- Reinstate cube-devel package (#2406039)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-1" date="1767787200">- Update to v4.9.1 [#2427578]</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-2" date="1784548800">- Don't include libcube4gui.so in cube-libs-devel</changelog>
</package>
<package pkgid="62c74b7564e04865979137db568114c9dc6e3ce0fc2124737fc8be7ffd23b56a" name="cube-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="2.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.2-5" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jan Andre Reuter &lt;j.reuter@fz-juelich.de&gt; - 4.8.2-6" date="1745496000">- Fix bash-completion (rhbz#2315798)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-1" date="1745496001">- Update to v4.9
- Remove el7 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-3" date="1761220800">- Reinstate cube-devel package (#2406039)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-1" date="1767787200">- Update to v4.9.1 [#2427578]</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-2" date="1784548800">- Don't include libcube4gui.so in cube-libs-devel</changelog>
</package>
<package pkgid="37147d2207c33f6bbd34f7982f0ce3c1523ef340ffaccd1c0fe3342c4b9130d6" name="cube-libs-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.1" rel="2.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.2-5" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jan Andre Reuter &lt;j.reuter@fz-juelich.de&gt; - 4.8.2-6" date="1745496000">- Fix bash-completion (rhbz#2315798)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-1" date="1745496001">- Update to v4.9
- Remove el7 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9-3" date="1761220800">- Reinstate cube-devel package (#2406039)</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-1" date="1767787200">- Update to v4.9.1 [#2427578]</changelog>
  <changelog author="Dave Love &lt;loveshack@fedoraproject.org&gt; - 4.9.1-2" date="1784548800">- Don't include libcube4gui.so in cube-libs-devel</changelog>
</package>
<package pkgid="2442214a7b1de9ce0e1d2761a917dcb3f014a34d80abdcff9bd33523f6454abe" name="haveged-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.9.26" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-10" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.21-1" date="1779278400">- Update to 1.9.21
- Security fix: CVE-2026-41054 — privilege escalation via command socket
- Fix semaphore error handling (SEM_FAILED vs NULL)
- Fix /dev/shm permissions (use 01777 with sticky bit)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.22-1" date="1779364800">- Update to 1.9.22
- Fix systemd sandboxing: add ReadWritePaths=/dev/shm for semaphore creation</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-1" date="1781784000">- Update to 1.9.23
- Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
- Security: fix OOB memory access in safein()/safeout() on socket errors
- Security: reject command socket connections from different user namespaces
- Security: use O_NOFOLLOW for PID file to prevent symlink attacks
- Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
- Fix stale semaphore recovery after SIGKILL
- Fix compilation when NO_COMMAND_MODE is defined</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-2" date="1781784001">- Add SELinux policy module to allow semaphore creation in /dev/shm
- Add rpminspect.yaml to waive pre-existing annocheck false positive</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-3" date="1781870400">- Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
  (annocheck is a security inspection and cannot be disabled via inspections section)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.24-1" date="1781870401">- Update to 1.9.24
- Disable command mode in long-running service (--no-command flag)
- Enable PrivateNetwork=true in systemd service
- Remove SELinux policy module (no longer needed without command mode)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.25-1" date="1782302400">- Update to 1.9.25
- Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
- Add haveged-initramfs.service for use inside the initramfs</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.26-1" date="1782302401">- Update to 1.9.26
- Fix 100% CPU spin when --no-command is used (BZ#2492029)</changelog>
</package>
<package pkgid="b023293c549c49bd10819c090ec115fed73bde88f68df98cb85200f406b8a167" name="haveged-debugsource" arch="x86_64">
  <version epoch="0" ver="1.9.26" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-10" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.21-1" date="1779278400">- Update to 1.9.21
- Security fix: CVE-2026-41054 — privilege escalation via command socket
- Fix semaphore error handling (SEM_FAILED vs NULL)
- Fix /dev/shm permissions (use 01777 with sticky bit)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.22-1" date="1779364800">- Update to 1.9.22
- Fix systemd sandboxing: add ReadWritePaths=/dev/shm for semaphore creation</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-1" date="1781784000">- Update to 1.9.23
- Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
- Security: fix OOB memory access in safein()/safeout() on socket errors
- Security: reject command socket connections from different user namespaces
- Security: use O_NOFOLLOW for PID file to prevent symlink attacks
- Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
- Fix stale semaphore recovery after SIGKILL
- Fix compilation when NO_COMMAND_MODE is defined</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-2" date="1781784001">- Add SELinux policy module to allow semaphore creation in /dev/shm
- Add rpminspect.yaml to waive pre-existing annocheck false positive</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-3" date="1781870400">- Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
  (annocheck is a security inspection and cannot be disabled via inspections section)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.24-1" date="1781870401">- Update to 1.9.24
- Disable command mode in long-running service (--no-command flag)
- Enable PrivateNetwork=true in systemd service
- Remove SELinux policy module (no longer needed without command mode)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.25-1" date="1782302400">- Update to 1.9.25
- Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
- Add haveged-initramfs.service for use inside the initramfs</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.26-1" date="1782302401">- Update to 1.9.26
- Fix 100% CPU spin when --no-command is used (BZ#2492029)</changelog>
</package>
<package pkgid="720fdf9635e7606ec1e62327dc8286571c53e2697b0d491962135e5195bc70c1" name="intel-compute-runtime-debuginfo" arch="x86_64">
  <version epoch="0" ver="26.22.38646.6" rel="2.el10_2"/>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-1" date="1768478400">- Update to 25.48.36300.8</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-4" date="1768564800">- Use spirv-headers</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-5" date="1769428800">- Don't strip LTO</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.10-1" date="1775044800">- New release 26.09.37435.10</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-1" date="1776081600">- New version 26.09.37435.12</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-2" date="1778241600">- Rebuild with igc bundled headers and llvm</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.1-1" date="1779105600">- New version 26.18.38308.1</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.4-1" date="1781265600">- New hf version 26.18.38308.4</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.22.38646.6-1" date="1784116800">- New release 26.22.38646.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 26.22.38646.6-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
</package>
<package pkgid="14cde780b03ed1a727e4bb3607516f257c2e5eeef4a8775ef13fc2229680f757" name="intel-compute-runtime-debugsource" arch="x86_64">
  <version epoch="0" ver="26.22.38646.6" rel="2.el10_2"/>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-1" date="1768478400">- Update to 25.48.36300.8</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-4" date="1768564800">- Use spirv-headers</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-5" date="1769428800">- Don't strip LTO</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.10-1" date="1775044800">- New release 26.09.37435.10</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-1" date="1776081600">- New version 26.09.37435.12</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-2" date="1778241600">- Rebuild with igc bundled headers and llvm</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.1-1" date="1779105600">- New version 26.18.38308.1</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.4-1" date="1781265600">- New hf version 26.18.38308.4</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.22.38646.6-1" date="1784116800">- New release 26.22.38646.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 26.22.38646.6-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
</package>
<package pkgid="5c6af6ff932f10fad42e35ea714f2dc0ac4375a47ec25af8d1922d6ab640077a" name="intel-igc-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.36.3" rel="4.el10_2"/>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.2-1" date="1774872000">- New release v2.30.2</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-1" date="1776081600">- New version v2.30.3</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-2" date="1778068800">- RHEL: Add bundled spirv-headers/tools/translator llvm and intel-opencl-
  clang</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-3" date="1778241600">- RHEL: fix build and other things</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-4" date="1778587200">- RHEL: disable dwz</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.34.4-1" date="1779105600">- New version v2.34.4</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.34.4-2" date="1781006400">- Add patch for LLVM15 segfault</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.36.3-1" date="1784030400">- New release 2.36.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.36.3-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.36.3-3" date="1784635200">- Fix .git issues during koji build</changelog>
</package>
<package pkgid="a14deb33b9149373db73cbb23942616603da56c51db74b96a8db86e671f1cf5c" name="intel-igc-debugsource" arch="x86_64">
  <version epoch="0" ver="2.36.3" rel="4.el10_2"/>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.2-1" date="1774872000">- New release v2.30.2</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-1" date="1776081600">- New version v2.30.3</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-2" date="1778068800">- RHEL: Add bundled spirv-headers/tools/translator llvm and intel-opencl-
  clang</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-3" date="1778241600">- RHEL: fix build and other things</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-4" date="1778587200">- RHEL: disable dwz</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.34.4-1" date="1779105600">- New version v2.34.4</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.34.4-2" date="1781006400">- Add patch for LLVM15 segfault</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.36.3-1" date="1784030400">- New release 2.36.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.36.3-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.36.3-3" date="1784635200">- Fix .git issues during koji build</changelog>
</package>
<package pkgid="12ec7b0f9ab1b55a557e9af89c8404ca4b733d10bc9b54e00ab06f96b34bb74a" name="intel-igc-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.36.3" rel="4.el10_2"/>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.2-1" date="1774872000">- New release v2.30.2</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-1" date="1776081600">- New version v2.30.3</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-2" date="1778068800">- RHEL: Add bundled spirv-headers/tools/translator llvm and intel-opencl-
  clang</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-3" date="1778241600">- RHEL: fix build and other things</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.30.3-4" date="1778587200">- RHEL: disable dwz</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.34.4-1" date="1779105600">- New version v2.34.4</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.34.4-2" date="1781006400">- Add patch for LLVM15 segfault</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.36.3-1" date="1784030400">- New release 2.36.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.36.3-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 2.36.3-3" date="1784635200">- Fix .git issues during koji build</changelog>
</package>
<package pkgid="2ca0c769ca354065124ea33c1d16d651dca62c387a16f4fdc62fbc692d5e6027" name="intel-level-zero-debuginfo" arch="x86_64">
  <version epoch="0" ver="26.22.38646.6" rel="2.el10_2"/>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-1" date="1768478400">- Update to 25.48.36300.8</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-4" date="1768564800">- Use spirv-headers</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-5" date="1769428800">- Don't strip LTO</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.10-1" date="1775044800">- New release 26.09.37435.10</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-1" date="1776081600">- New version 26.09.37435.12</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-2" date="1778241600">- Rebuild with igc bundled headers and llvm</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.1-1" date="1779105600">- New version 26.18.38308.1</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.4-1" date="1781265600">- New hf version 26.18.38308.4</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.22.38646.6-1" date="1784116800">- New release 26.22.38646.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 26.22.38646.6-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
</package>
<package pkgid="20f19459b655e502d5a867c904d5c47ae5e7314ddec33c62c32e3cbbb38fa01f" name="intel-ocloc-debuginfo" arch="x86_64">
  <version epoch="0" ver="26.22.38646.6" rel="2.el10_2"/>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-1" date="1768478400">- Update to 25.48.36300.8</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-4" date="1768564800">- Use spirv-headers</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-5" date="1769428800">- Don't strip LTO</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.10-1" date="1775044800">- New release 26.09.37435.10</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-1" date="1776081600">- New version 26.09.37435.12</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-2" date="1778241600">- Rebuild with igc bundled headers and llvm</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.1-1" date="1779105600">- New version 26.18.38308.1</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.4-1" date="1781265600">- New hf version 26.18.38308.4</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.22.38646.6-1" date="1784116800">- New release 26.22.38646.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 26.22.38646.6-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
</package>
<package pkgid="0d1fd274720f3cb809443de3d64a866ecb4e8c5791b4da4ebf2097cf7e045741" name="intel-opencl-debuginfo" arch="x86_64">
  <version epoch="0" ver="26.22.38646.6" rel="2.el10_2"/>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-1" date="1768478400">- Update to 25.48.36300.8</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-4" date="1768564800">- Use spirv-headers</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 25.48.36300.8-5" date="1769428800">- Don't strip LTO</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.10-1" date="1775044800">- New release 26.09.37435.10</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-1" date="1776081600">- New version 26.09.37435.12</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.09.37435.12-2" date="1778241600">- Rebuild with igc bundled headers and llvm</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.1-1" date="1779105600">- New version 26.18.38308.1</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.18.38308.4-1" date="1781265600">- New hf version 26.18.38308.4</changelog>
  <changelog author="Androniychuk, Pavel &lt;pavel.androniychuk@intel.com&gt; - 26.22.38646.6-1" date="1784116800">- New release 26.22.38646.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 26.22.38646.6-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
</package>
<package pkgid="786a570bf80334300c3d9f976e925621b119189a57c1a1becf5808bb97d4ae76" name="libbitcoinkernel-debuginfo" arch="x86_64">
  <version epoch="0" ver="31.1" rel="1.el10_2"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="d51e921179acd2bd85011dfc8ddae3c9e5f42d89bd97bb8ee0105afb954defbb" name="libbitcoinkernel-devel-debuginfo" arch="x86_64">
  <version epoch="0" ver="31.1" rel="1.el10_2"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 30.2-4" date="1777723200">- RPMAUTOSPEC: unresolvable merge</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-1" date="1777723201">- Update to 31.0</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.0-2" date="1777723202">- Replace bitcoin-core-devel with libbitcoinkernel-devel</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 31.1-1" date="1784548800">- Update to 31.1</changelog>
</package>
<package pkgid="03ccb35705e6d1ff37fc313a46d3ea1676142150c5b2e779296240756c48358c" name="libgit2_1.9-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.9.6" rel="1.el10_2"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.3-1" date="1778155200">- Initial import (#2456496)</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.3-2" date="1778587200">- Explicitly conflict with other libgit2 devel packages</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.3-3" date="1779796800">- Enable SSH support in EPEL</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.4-1" date="1780574400">- Update to version 1.9.4</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.6-1" date="1784808000">- Update to version 1.9.6</changelog>
</package>
<package pkgid="8dc142c3975e303c466f89c55c4e047b5121536c95616e053e67be17cc23d47c" name="libgit2_1.9-debugsource" arch="x86_64">
  <version epoch="0" ver="1.9.6" rel="1.el10_2"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.3-1" date="1778155200">- Initial import (#2456496)</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.3-2" date="1778587200">- Explicitly conflict with other libgit2 devel packages</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.3-3" date="1779796800">- Enable SSH support in EPEL</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.4-1" date="1780574400">- Update to version 1.9.4</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.9.6-1" date="1784808000">- Update to version 1.9.6</changelog>
</package>
<package pkgid="86574d74017484cff27933b3211bbb1334d43ed5a8f3e5d82d7cd15cf5683b5a" name="mapserver-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.6.5" rel="1.el10_2"/>
  <changelog author="Elliott Sales de Andrade &lt;quantum.analyst@gmail.com&gt; - 8.6.0-4" date="1769342400">- Drop support for i686</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.1-1" date="1774612800">- Update to 8.6.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.2-1" date="1776859200">- Update to 8.6.2</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.3-1" date="1778241600">- Update to 8.6.3</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.4-1" date="1780401600">- Update to 8.6.4</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 8.6.4-2" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 8.6.4-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.4-4" date="1781870400">- Rebuild (gdal)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.6.4-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.5-1" date="1784289600">- Update to 8.6.5</changelog>
</package>
<package pkgid="11b6007e2f7b00fb433a6855ebd55c95ba521f18deff289c3c5dd47c5587a4bd" name="mapserver-debugsource" arch="x86_64">
  <version epoch="0" ver="8.6.5" rel="1.el10_2"/>
  <changelog author="Elliott Sales de Andrade &lt;quantum.analyst@gmail.com&gt; - 8.6.0-4" date="1769342400">- Drop support for i686</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.1-1" date="1774612800">- Update to 8.6.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.2-1" date="1776859200">- Update to 8.6.2</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.3-1" date="1778241600">- Update to 8.6.3</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.4-1" date="1780401600">- Update to 8.6.4</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 8.6.4-2" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 8.6.4-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.4-4" date="1781870400">- Rebuild (gdal)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.6.4-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.5-1" date="1784289600">- Update to 8.6.5</changelog>
</package>
<package pkgid="cfab4654697670cd578cb2a326747283792be74b68e14d04db284671e68be5ef" name="mapserver-libs-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.6.5" rel="1.el10_2"/>
  <changelog author="Elliott Sales de Andrade &lt;quantum.analyst@gmail.com&gt; - 8.6.0-4" date="1769342400">- Drop support for i686</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.1-1" date="1774612800">- Update to 8.6.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.2-1" date="1776859200">- Update to 8.6.2</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.3-1" date="1778241600">- Update to 8.6.3</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.4-1" date="1780401600">- Update to 8.6.4</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 8.6.4-2" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 8.6.4-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.4-4" date="1781870400">- Rebuild (gdal)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.6.4-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.5-1" date="1784289600">- Update to 8.6.5</changelog>
</package>
<package pkgid="039bf4622568eb8b4048afb05658a928862dae9348289aeb914ebd3ce1275778" name="mimedefang-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.7.1" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-8" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 3.6-1" date="1740830400">- Upgrade to 3.6 (#2301647)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 3.6-2" date="1751889600">- Perl 5.42 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-3" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-4" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 3.7.1-1" date="1784548800">- Upgrade to 3.7.1 (#2500792)</changelog>
</package>
<package pkgid="761ae45375919ddab0e44eb7514d3f602fc8c7237f5ac00aae91aeb458647c43" name="mimedefang-debugsource" arch="x86_64">
  <version epoch="0" ver="3.7.1" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-8" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 3.6-1" date="1740830400">- Upgrade to 3.6 (#2301647)</changelog>
  <changelog author="Jitka Plesnikova &lt;jplesnik@redhat.com&gt; - 3.6-2" date="1751889600">- Perl 5.42 rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-3" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-4" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 3.7.1-1" date="1784548800">- Upgrade to 3.7.1 (#2500792)</changelog>
</package>
<package pkgid="a78b90f75cb2918e566edeef52a914735d302c0992d2563d3ff2fde8c4b54b4e" name="ntfs-3g-debuginfo" arch="x86_64">
  <version epoch="2" ver="2022.10.3" rel="10.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2022.10.3-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2:2022.10.3-7" date="1721995200">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2022.10.3-8" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2:2022.10.3-9" date="1749124800">- apply upstream fixes committed after 2022.10.3</changelog>
  <changelog author="Carl George &lt;carlwgeorge@gmail.com&gt; - 2:2022.10.3-10" date="1784116800">- Backport upstream fix for CVE-2026-40706</changelog>
</package>
<package pkgid="256fe6f9b7925e610e6361dac90d49460f2b6c82ef8dc2f7f88f5930723c45f4" name="ntfs-3g-debugsource" arch="x86_64">
  <version epoch="2" ver="2022.10.3" rel="10.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2022.10.3-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2:2022.10.3-7" date="1721995200">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2022.10.3-8" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2:2022.10.3-9" date="1749124800">- apply upstream fixes committed after 2022.10.3</changelog>
  <changelog author="Carl George &lt;carlwgeorge@gmail.com&gt; - 2:2022.10.3-10" date="1784116800">- Backport upstream fix for CVE-2026-40706</changelog>
</package>
<package pkgid="c303bec23558172fc391424727f74e7e3c9a2a4d126bdafb326a365690ebe386" name="ntfs-3g-libs-debuginfo" arch="x86_64">
  <version epoch="2" ver="2022.10.3" rel="10.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2022.10.3-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2:2022.10.3-7" date="1721995200">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2022.10.3-8" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2:2022.10.3-9" date="1749124800">- apply upstream fixes committed after 2022.10.3</changelog>
  <changelog author="Carl George &lt;carlwgeorge@gmail.com&gt; - 2:2022.10.3-10" date="1784116800">- Backport upstream fix for CVE-2026-40706</changelog>
</package>
<package pkgid="2e71e5086c83de9679fe0f869e35911cc1ac469c271504ecb3b34453efd98c09" name="ntfsprogs-debuginfo" arch="x86_64">
  <version epoch="2" ver="2022.10.3" rel="10.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2022.10.3-6" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2:2022.10.3-7" date="1721995200">- convert license to SPDX</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:2022.10.3-8" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Tom Callaway &lt;spot@fedoraproject.org&gt; - 2:2022.10.3-9" date="1749124800">- apply upstream fixes committed after 2022.10.3</changelog>
  <changelog author="Carl George &lt;carlwgeorge@gmail.com&gt; - 2:2022.10.3-10" date="1784116800">- Backport upstream fix for CVE-2026-40706</changelog>
</package>
<package pkgid="35b223dec0b4351f6bbc23ed18f1cc96ea3ca43414bd2cd383b8df384c8af04a" name="openbao-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="1.el10_2"/>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.3-2" date="1763467200">- add hsm build tag</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.4-1" date="1763985600">- update to 2.4.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.0-1" date="1770206400">- update to 2.5.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.1-1" date="1771934400">- update to upstream 2.5.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.2-1" date="1774440000">- update to upstream 2.5.2</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.3-1" date="1776772800">- update to upstream 2.5.3</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.4-1" date="1779278400">- update to upstream 2.5.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.5-1" date="1781697600">- update to upstream 2.5.5</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.0-1" date="1784030400">- update to 2.6.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.1-1" date="1784721600">- update to 2.6.1</changelog>
</package>
<package pkgid="d30f67d3881ef5a17403f3d3aa844d566db81d59c750371e6ed755e39d71e10d" name="openbao-debugsource" arch="x86_64">
  <version epoch="0" ver="2.6.1" rel="1.el10_2"/>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.3-2" date="1763467200">- add hsm build tag</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.4.4-1" date="1763985600">- update to 2.4.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.0-1" date="1770206400">- update to 2.5.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.1-1" date="1771934400">- update to upstream 2.5.1</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.2-1" date="1774440000">- update to upstream 2.5.2</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.3-1" date="1776772800">- update to upstream 2.5.3</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.4-1" date="1779278400">- update to upstream 2.5.4</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.5.5-1" date="1781697600">- update to upstream 2.5.5</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.0-1" date="1784030400">- update to 2.6.0</changelog>
  <changelog author="Dave Dykstra &lt;2129743+DrDaveD@users.noreply.github.com&gt; - 2.6.1-1" date="1784721600">- update to 2.6.1</changelog>
</package>
<package pkgid="dd894cd995f6c2a96528803620bf90627d7d3f06a9f14323b09a004e8a460195" name="opkssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.16.0" rel="1.el10_2"/>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-5" date="1773576000">- Add logrotate config file</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-6" date="1773576001">- Properly use GO_LDFLAGS to overwrite ldflags</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.13.0-7" date="1773576002">- Add missing version ldflag</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-8" date="1775908800">- Update bundled go-jose to v4.1.4</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-1" date="1777809600">- Update to 0.14.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-2" date="1778673600">- Overwrite logfile path with a patch</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-3" date="1782129600">- Update bundled golang.org/x/crypto to 0.53.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-1" date="1782993600">- Update to 0.15.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-2" date="1782993601">- Drop obsolete golang.org/x/crypto override</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-1" date="1784462400">- Update to 0.16.0</changelog>
</package>
<package pkgid="98aca1415d6a5e9d474062c5a3b4b085c9b624673367869554c5f346ee2d5325" name="opkssh-debugsource" arch="x86_64">
  <version epoch="0" ver="0.16.0" rel="1.el10_2"/>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-5" date="1773576000">- Add logrotate config file</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-6" date="1773576001">- Properly use GO_LDFLAGS to overwrite ldflags</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.13.0-7" date="1773576002">- Add missing version ldflag</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-8" date="1775908800">- Update bundled go-jose to v4.1.4</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-1" date="1777809600">- Update to 0.14.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-2" date="1778673600">- Overwrite logfile path with a patch</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-3" date="1782129600">- Update bundled golang.org/x/crypto to 0.53.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-1" date="1782993600">- Update to 0.15.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-2" date="1782993601">- Drop obsolete golang.org/x/crypto override</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.16.0-1" date="1784462400">- Update to 0.16.0</changelog>
</package>
<package pkgid="3c474aa3bae35303084ce5aa18ccb0231e57ac53cc7e44d95aba9ba11035878f" name="pdns-recursor-debuginfo" arch="x86_64">
  <version epoch="0" ver="5.4.4" rel="2.el10_2"/>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.1-3" date="1779883200">- add make check section to silent rpmlint</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 5.4.1-4" date="1780056000">- rebuild for https://fedoraproject.org/wiki/Changes/Protobuf_5.x/6.x</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.2-1" date="1780574400">- update to 5.4.2 fixes rhbz#2484316</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.2-2" date="1780574401">- opt-in to packit</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.4.2-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.4.2-4" date="1781438400">- Drop unused openssl-devel-engine dependency</changelog>
  <changelog author="Filipe Rosset &lt;filiperosset@fedoraproject.org&gt; - 5.4.3-1" date="1782388800">- update to 5.4.3 fixes rhbz#2492868
- a bunch of other bugs were fixed and will be backported to all supported
  Fedora / EPEL versions</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.3-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.4-1" date="1784721600">- update to 5.4.4 fixes rhbz#2506049</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.4-2" date="1784721601">- remove unused patch</changelog>
</package>
<package pkgid="1faefc99bb319920da032cbedfd7abbb3dfd8e6e9f6233eb2c3f5d6301b71123" name="pdns-recursor-debugsource" arch="x86_64">
  <version epoch="0" ver="5.4.4" rel="2.el10_2"/>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.1-3" date="1779883200">- add make check section to silent rpmlint</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 5.4.1-4" date="1780056000">- rebuild for https://fedoraproject.org/wiki/Changes/Protobuf_5.x/6.x</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.2-1" date="1780574400">- update to 5.4.2 fixes rhbz#2484316</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.2-2" date="1780574401">- opt-in to packit</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.4.2-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 5.4.2-4" date="1781438400">- Drop unused openssl-devel-engine dependency</changelog>
  <changelog author="Filipe Rosset &lt;filiperosset@fedoraproject.org&gt; - 5.4.3-1" date="1782388800">- update to 5.4.3 fixes rhbz#2492868
- a bunch of other bugs were fixed and will be backported to all supported
  Fedora / EPEL versions</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 5.4.3-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.4-1" date="1784721600">- update to 5.4.4 fixes rhbz#2506049</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 5.4.4-2" date="1784721601">- remove unused patch</changelog>
</package>
<package pkgid="e57587305ec10970c5d8802fd1a53ce4236bbc6e14c4bacbee93c999ad8bc28a" name="php-mapserver-debuginfo" arch="x86_64">
  <version epoch="0" ver="8.6.5" rel="1.el10_2"/>
  <changelog author="Elliott Sales de Andrade &lt;quantum.analyst@gmail.com&gt; - 8.6.0-4" date="1769342400">- Drop support for i686</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.1-1" date="1774612800">- Update to 8.6.1</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.2-1" date="1776859200">- Update to 8.6.2</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.3-1" date="1778241600">- Update to 8.6.3</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.4-1" date="1780401600">- Update to 8.6.4</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 8.6.4-2" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 8.6.4-3" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.4-4" date="1781870400">- Rebuild (gdal)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 8.6.4-5" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Sandro Mani &lt;manisandro@gmail.com&gt; - 8.6.5-1" date="1784289600">- Update to 8.6.5</changelog>
</package>
<package pkgid="3dec0b6de7d7fd0517d2c701417015e7109e84e2ff58e4af7fb69e6516fcb198" name="proftpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="b631f14a7d1c9d328690ee0d9580bc1e0a3d4283ed6fe485f0535c8fed15c6bc" name="proftpd-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="e06dfe02a2de928518aef30044aa6dc0dcfe0ce81a47b093443042a651688690" name="proftpd-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="f9768935667bcd21d083bb3a47ca9758623128d61d41745b41e124b76834f26d" name="proftpd-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="bab37706b008f473a525ed79cbec3b8918fd877c4585c853de48c049270bcb5c" name="proftpd-postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="2c7734f763d4c413447a7695ca14e460f3717ea111a40f9ea41d1b57a3ec5aa1" name="proftpd-proxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="b0f2b7e5b7b55c02aba0a8b980f2793fe1471128591e95acc3de28b4c476a3c7" name="proftpd-sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="3b01b2850e30c4a319539165a4ef43cbb08c8a204ac4a3adb3e4b8a55bd26d00" name="proftpd-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="3.el10_2"/>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp
    (GH#2115, CVE-2026-53994)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer
    (GH#2190, CVE-2026-63090)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)
  - Exercise caution when reading the client-provided file size for SCP
    uploads, as it could possibly overflow our size type (CVE-2026-63091)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-3" date="1784635200">- Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
  /proc/self/root path prefix); this module disallows file accesses via procfs
  filesystems</changelog>
</package>
<package pkgid="fff7b659cadc5284bae7bba91729a9ee2ff9850299553b56fd914351ef94a441" name="radsecproxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.11.3" rel="1.el10_2"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.1-1" date="1733486400">- Upgrade to 1.11.1 (#2330848)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.1-2" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.2-1" date="1742904000">- Upgrade to 1.11.2 (#2354876)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.2-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.2-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.2-4" date="1780574400">- Use 'systemctl try-reload-or-restart' in logrotate postrotate
  script (#2371326, thanks to Marcos Mello)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.11.2-5" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.2-6" date="1781784000">- Add upstream patch for OpenSSL 4.0 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.2-7" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.3-1" date="1784289600">- Upgrade to 1.11.3 (#2499720)</changelog>
</package>
<package pkgid="612cf33ca8be98e83a3e59405d6a71d9f6751f243052755010a299292545aff8" name="radsecproxy-debugsource" arch="x86_64">
  <version epoch="0" ver="1.11.3" rel="1.el10_2"/>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.1-1" date="1733486400">- Upgrade to 1.11.1 (#2330848)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.1-2" date="1737201600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.2-1" date="1742904000">- Upgrade to 1.11.2 (#2354876)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.2-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.2-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.2-4" date="1780574400">- Use 'systemctl try-reload-or-restart' in logrotate postrotate
  script (#2371326, thanks to Marcos Mello)</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 1.11.2-5" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.2-6" date="1781784000">- Add upstream patch for OpenSSL 4.0 support</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.11.2-7" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Robert Scheck &lt;robert@fedoraproject.org&gt; 1.11.3-1" date="1784289600">- Upgrade to 1.11.3 (#2499720)</changelog>
</package>
<package pkgid="b98f932ca409825d3ab466fb51aac3bfe734352068e7d5ec010a2f7076b404e6" name="restic-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.19.1" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.0-1" date="1752235200">- Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
  rhbz#2350845 rhbz#2348839 rhbz#2331990</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.0-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.0-4" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 0.18.0-5" date="1760097600">- rebuild</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.1-1" date="1763985600">- Update to 0.18.1 - Closes rhbz#2397204 rhbz2416773</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.1-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.1-3" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.19.0-1" date="1781092800">- Update to 0.19.0 - Closes rhbz#2487290</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19.0-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.19.1-1" date="1784548800">- Update to 0.19.1 upstream release
- Resolves: rhbz#2497130</changelog>
</package>
<package pkgid="bc541d4d2df95eb0a92ac333daebf24611bfb94674f7c404f3a8064c9ca4d407" name="restic-debugsource" arch="x86_64">
  <version epoch="0" ver="0.19.1" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.0-1" date="1752235200">- Update to 0.18.0 - Closes rhbz#2355627 rhbz#2354447 rhbz#2352331
  rhbz#2350845 rhbz#2348839 rhbz#2331990</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.0-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.0-4" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 0.18.0-5" date="1760097600">- rebuild</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.18.1-1" date="1763985600">- Update to 0.18.1 - Closes rhbz#2397204 rhbz2416773</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.18.1-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 0.18.1-3" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.19.0-1" date="1781092800">- Update to 0.19.0 - Closes rhbz#2487290</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.19.0-2" date="1784203200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 0.19.1-1" date="1784548800">- Update to 0.19.1 upstream release
- Resolves: rhbz#2497130</changelog>
</package>
<package pkgid="6f04b7027adc9068dedbe0e06a3917522084e9f44a388f64cb1ffc7bb490a5ed" name="weechat-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.4" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.1-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.2-1" date="1773057600">- Update to 4.8.2</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.2-2" date="1774785600">- Drop unnecessary -DPREFIX cmake arg</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.0-1" date="1774785601">- Update to 4.9.0</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.1-1" date="1780228800">- Update to 4.9.1</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.9.1-2" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.2-1" date="1780833600">- Update to 4.9.2</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.3-1" date="1783252800">- Update to 4.9.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.3-2" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.4-1" date="1784462400">- Update to 4.9.4</changelog>
</package>
<package pkgid="7397eb3cd1d520a15a3d2b2c0d10eb6f2c3a0857fafdfdf5c0d5204c0c5c9d7b" name="weechat-debugsource" arch="x86_64">
  <version epoch="0" ver="4.9.4" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.1-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.2-1" date="1773057600">- Update to 4.8.2</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.2-2" date="1774785600">- Drop unnecessary -DPREFIX cmake arg</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.0-1" date="1774785601">- Update to 4.9.0</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.1-1" date="1780228800">- Update to 4.9.1</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.9.1-2" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.2-1" date="1780833600">- Update to 4.9.2</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.3-1" date="1783252800">- Update to 4.9.3</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.9.3-2" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.4-1" date="1784462400">- Update to 4.9.4</changelog>
</package>
<package pkgid="1f55576cf7eac58b06b0220ad2b13a74a6925a5dfe06d298ca39250b4167b648" name="xrootd-s3-http-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.6.9" rel="1.el10_2"/>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.1-1" date="1768910400">- Update to version 0.6.1</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.3-1" date="1769601600">- Update to version 0.6.3
- Drop patches accepted upstream</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.4-1" date="1770724800">- Update to version 0.6.4</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.5-1" date="1772625600">- Update to version 0.6.5</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.6-1" date="1775131200">- Update to version 0.6.6</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.6-2" date="1776772800">- Rebuilt for xrootd 6</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.6.6-3" date="1781352000">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.8-1" date="1781956800">- Update to version 0.6.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.8-2" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Mattias Ellert  &lt;mattias.ellert@physics.uu.se&gt; - 0.6.9-1" date="1784462400">- Update to version 0.6.9</changelog>
</package>
<package pkgid="84921581d7eb82e2427d6223294b13d6e6cf18da14b65ccbbfb58e88a56afd56" name="xrootd-s3-http-debugsource" arch="x86_64">
  <version epoch="0" ver="0.6.9" rel="1.el10_2"/>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.1-1" date="1768910400">- Update to version 0.6.1</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.3-1" date="1769601600">- Update to version 0.6.3
- Drop patches accepted upstream</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.4-1" date="1770724800">- Update to version 0.6.4</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.5-1" date="1772625600">- Update to version 0.6.5</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.6-1" date="1775131200">- Update to version 0.6.6</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.6-2" date="1776772800">- Rebuilt for xrootd 6</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.6.6-3" date="1781352000">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Mattias Ellert &lt;mattias.ellert@physics.uu.se&gt; - 0.6.8-1" date="1781956800">- Update to version 0.6.8</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.6.8-2" date="1784289600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_45_Mass_Rebuild</changelog>
  <changelog author="Mattias Ellert  &lt;mattias.ellert@physics.uu.se&gt; - 0.6.9-1" date="1784462400">- Update to version 0.6.9</changelog>
</package>
</otherdata>