# changelog

author: Robert Scheck <robert@fedoraproject.org> - 4.7.0-1
changelog:
  - Upgrade to 4.7.0 (#2369521)
  - Use 'systemctl try-reload-or-restart' in logrotate postrotate
    script (#2371578, thanks to Marcos Mello)


author: Benjamin A. Beasley <code@musicinmybrain.net> - 0.12.6-1
changelog:
  - Update to 0.12.6 (close RHBZ#2162811)
  - Update License to SPDX
  - Document and/or unbundle all bundled libraries


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-1
changelog:
  - Update to 1.3.6e
    - Fixed null pointer dereference in mod_sftp when using SCP incorrectly
      (https://github.com/proftpd/proftpd/issues/1043)


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-3
changelog:
  - Avoid segfaults with TLSv1.3
    https://github.com/proftpd/proftpd/issues/1063
    https://github.com/proftpd/proftpd/commit/adf43dd4ddaab0332e74abc86bbcef9cf27ee54a
  - Use %license unconditionally


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-4
changelog:
  - Fix memory disclosure to RADIUS servers by mod_radius (#2001690)
    https://github.com/proftpd/proftpd/issues/1284
    https://github.com/proftpd/proftpd/pull/1285


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-6
changelog:
  - Fix one-byte out-of-bounds read, and daemon crash, because of mishandling of
    quote/backslash semantics (#2255609, GH#1683, CVE-2023-51713)
  - Use SPDX-format license tag


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-7
changelog:
  - Fix slow reading of passwd/group files in mod_auth_file (#2270686, GH#1134,
    GH#1192, GH#1195, GH#1213)


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-8
changelog:
  - Add fix for slow accesses in large directory trees (rhbz#2310341)
    - http://bugs.proftpd.org/show_bug.cgi?id=4307
    - https://github.com/proftpd/proftpd/pull/525


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-9
changelog:
  - Fix RADIUS Message-Authenticator verification in mod_radius
    - https://github.com/proftpd/proftpd/issues/1840
    - https://bugzilla.redhat.com/show_bug.cgi?id=2325448


author: Paul Howarth <paul@city-fan.org> - 1.3.6e-10
changelog:
  - Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
    (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)


author: Remi Collet <remi@fedoraproject.org> - 8.0.6-1
changelog:
  - update to 8.0.6
    fixes CVE-2025-49844 CVE-2025-46817 CVE-2025-46818 and CVE-2025-46819
  - update documentation to 8.0.5


author: Remi Collet <remi@fedoraproject.org> - 8.0.7-1
changelog:
  - Valkey 8.0.7 - Released Mon 23 February 2026
  - Upgrade urgency SECURITY: This release includes security fixes


author: Orion Poplawski <orion@nwra.com> - 6.0.29-1
changelog:
  - Update to 6.0.29
  - Hopefully really get the zabbix_run_sudo SELinux boolean working for
    zabbix-agent and allow it to run lvm when enabled


author: Orion Poplawski <orion@nwra.com> - 6.0.33-1
changelog:
  - Update to 6.0.33 (CVE-2024-22114, CVE-2024-22122, CVE-2024-22123,
    CVE-2024-36460, CVE-2024-36461, CVE-2024-36463)


author: Orion Poplawski <orion@nwra.com> - 6.0.38-1
changelog:
  - Update to 6.0.38 (CVE-2024-36469, CVE-2024-42325, CVE-2024-45699)
  - Fix selinux module name in uninstall scriptlet


author: Orion Poplawski <orion@nwra.com> - 7.0.9-2
changelog:
  - Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
    to zabbixX.Y in one transaction


