# changelog

author: Eduardo Echeverria <echevemaster@gmail.com> - 1.11-1
changelog:
  - Update to 1.11. Fixes rhbz#2502800
  - Added automatic, crash-safe migration of persisted databases to storage
    format version 3
  - Added configured zlib and AddressSanitizer options to the version output
  - Added fullscreen expand and collapse controls to geolocation maps in the
    HTML report
  - Added Traditional Chinese translation
  - Expanded Debian package builds to Ubuntu 26.04 and additional
    architectures, and updated the packaging workflow actions
  - Fixed a heap buffer overflow when parsing malformed Opera user agents
  - Fixed an infinite loop while writing log parsing errors from multiple
    input files
  - Fixed city lookups ignoring the City database when a Country database was
    listed first
  - Fixed geolocation maps appearing grey after restoring persisted city data
  - Fixed .gz file extensions being interpreted as macros in the man page
  - Fixed iOS version parsing from user-agent strings
  - Fixed unique visitor undercounting caused by collisions between reversed
    data and visitor key pairs
  - Fixed WebSocket payload size checks for large and fragmented messages
  - Grouped Lynx, Links, ELinks, w3m and Chawan under a new "Text-based"
    browser category
  - Reduced storage memory usage by about 20% and parsing time by about 35%


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.21-1
changelog:
  - Update to 1.9.21
  - Security fix: CVE-2026-41054 — privilege escalation via command socket
  - Fix semaphore error handling (SEM_FAILED vs NULL)
  - Fix /dev/shm permissions (use 01777 with sticky bit)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-1
changelog:
  - Update to 1.9.23
  - Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
  - Security: fix OOB memory access in safein()/safeout() on socket errors
  - Security: reject command socket connections from different user namespaces
  - Security: use O_NOFOLLOW for PID file to prevent symlink attacks
  - Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
  - Fix stale semaphore recovery after SIGKILL
  - Fix compilation when NO_COMMAND_MODE is defined


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-2
changelog:
  - Add SELinux policy module to allow semaphore creation in /dev/shm
  - Add rpminspect.yaml to waive pre-existing annocheck false positive


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.23-3
changelog:
  - Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
    (annocheck is a security inspection and cannot be disabled via inspections section)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.24-1
changelog:
  - Update to 1.9.24
  - Disable command mode in long-running service (--no-command flag)
  - Enable PrivateNetwork=true in systemd service
  - Remove SELinux policy module (no longer needed without command mode)


author: Jirka Hladky <hladky.jiri@gmail.com> - 1.9.25-1
changelog:
  - Update to 1.9.25
  - Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
  - Add haveged-initramfs.service for use inside the initramfs


author: Paul Howarth <paul@city-fan.org> - 1.3.8b-4
changelog:
  - Fix RADIUS Message-Authenticator verification in mod_radius
    - https://github.com/proftpd/proftpd/issues/1840
    - https://bugzilla.redhat.com/show_bug.cgi?id=2325448


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-1
changelog:
  - Update to 1.3.8c
    - Using FTPS after upgrading from 1.3.8a to 1.3.8b lead to crash (GH#1770)
    - Bad handling of lack of extended attributes lead to SFTP out of memory
      error (GH#1785)
    - mod_sftp_sql logged "header value too long" due to unexpected key header
      text (GH#1529)
    - SSH ECDSA host key algorithms were not used as expected despite configuring
      appropriate key (GH#1839)
    - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
      (GH#1840)
    - Supplemental group inheritance granted unintended access to GID 0 due to
      lack of supplemental groups from mod_sql (GH#1830)


author: Paul Howarth <paul@city-fan.org> - 1.3.8c-2
changelog:
  - Avoid NULL pointer dereferences in mod_ls (CVE-2024-57392)
    - https://github.com/proftpd/proftpd/issues/1866


author: Paul Howarth <paul@city-fan.org> - 1.3.8d-1
changelog:
  - Update to 1.3.8d
    - Use of HideNoAccess for SFTP sessions can lead to segfault and/or
      unexpected behaviour (GH#1855)
    - SFTP channel allocations can lead to high memory utilization over time
      (GH#1876)
    - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)


author: Paul Howarth <paul@city-fan.org> - 1.3.8d-2
changelog:
  - Fix potential SQL injection via mod_sql (CVE-2026-42167)
    - https://github.com/proftpd/proftpd/issues/2052


author: Paul Howarth <paul@city-fan.org> - 1.3.8d-3
changelog:
  - Additional escaping for avoidance of SQL injection issues with %{note:...}
    and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
    1.3.9a
  - Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
    (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)


author: Paul Howarth <paul@city-fan.org> - 1.3.8d-4
changelog:
  - Address another avenue for SQL injection, via custom SQLUserInfo queries
    (https://github.com/proftpd/proftpd/issues/2052#issuecomment-4489110598)
  - Fix SFTP request payload length underflow calculation in mod_sftp
    (CVE-2026-53994, https://github.com/proftpd/proftpd/issues/2115)
  - Exercise caution when reading the client-provided file size for SCP uploads,
    as it could possibly overflow our size type (CVE-2026-63091)
  - Authenticated SFTP sessions could overflow the SFTP packet buffer
    (CVE-2026-63090, https://github.com/proftpd/proftpd/issues/2190)
  - Add mod_procfs, enabled by default, to address CVE-2026-35025 (ACL bypass via
    /proc/self/root path prefix); this module disallows file accesses via procfs
    filesystems


author: Michel Lind <salimma@fedoraproject.org> - 0.62.1-1
changelog:
  - Update to 0.62.1 for ability to enforce SSO login/signups
  - Generate extras subpackages
  - Enforce that the license file is shipped


author: Bojan Smojver <bojan@rexursive com> - 4.5.1-5
changelog:
  - Drop unknown configure option --enable-tcpreplay-edit
  - Change tcpdump dependency to package
  - Remove checks for TX_RING support to avoid build problems


author: Jered Floyd <jered@redhat.com> 9.2.9-1
changelog:
  - Update to upstream 9.2.9
  - Resolves CVE-2024-38311, CVE-2024-56195, CVE-2024-56196, CVE-2024-56202


