# changelog

author: Joe Cooper <joe@virtualmin.com> - 2.19-1
changelog:
  - Update to 2.19
  - Apply patch and changes suggested in https://bugzilla.redhat.com/show_bug.cgi?id=967782
  - setcap on jk_chrootsh with %caps macro


author: Joe Cooper <joe@virtualmin.com> - 2.19-1
changelog:
  - Update to 2.19
  - Apply patch and changes suggested in https://bugzilla.redhat.com/show_bug.cgi?id=967782
  - setcap on jk_chrootsh with caps macro


author: Paul Howarth <paul@city-fan.org> - 1.3.5d-2
changelog:
  - Properly allocate (and clear) the UMAC contexts, to fix segfault in mod_sftp
    (#1420365, upstream bug 4287)


author: Paul Howarth <paul@city-fan.org> - 1.3.5e-1
changelog:
  - Update to 1.3.5e
    - SFTP clients using umac-64@openssh.com digest failed to connect
      (upstream bug 4287)
    - SFTP rekeying failure with ProFTPD 1.3.5d, caused by null pointer
      dereference (upstream bug 4288)
    - AllowChrootSymlinks off did not check entire DefaultRoot path for symlinks
      (CVE-2017-7418, upstream bug 4295)
  - Change shellbangs in shipped perl scripts to use system perl
  - Drop EL-5 support
    - Drop BuildRoot: and Group: tags
    - Drop explicit buildroot cleaning in %install section
    - Drop explicit %clean section
    - /etc/pam.d/password-auth always available now
    - pcre 7.0 or later always available now


author: Paul Howarth <paul@city-fan.org> - 1.3.5e-2
changelog:
  - AllowChrootSymlinks off could cause login failures depending on filesystem
    permissions: use the IDs of the logging-in user to perform the directory
    walk, looking for symlinks, to be more consistent with similar checks done
    during login (#1443507, upstream bug 4306)
  - Crypt::CrackLib always available now


author: Paul Howarth <paul@city-fan.org> - 1.3.5e-5
changelog:
  - An arbitrary file copy vulnerability in mod_copy in ProFTPD allowed for
    remote code execution and information disclosure without authentication
    (CVE-2019-12815)
    http://bugs.proftpd.org/show_bug.cgi?id=4372
    https://github.com/proftpd/proftpd/pull/816


author: Paul Howarth <paul@city-fan.org> - 1.3.5e-6
changelog:
  - Fixed pre-authentication remote denial-of-service issue
    (CVE-2019-18217, https://github.com/proftpd/proftpd/issues/846)


author: Paul Howarth <paul@city-fan.org> - 1.3.5e-7
changelog:
  - Fix build compatibility with MySQL 8 (#1764401)
    https://github.com/proftpd/proftpd/issues/824
    https://github.com/proftpd/proftpd/pull/825


author: Paul Howarth <paul@city-fan.org> - 1.3.5e-8
changelog:
  - Fix handling of CRL lookups by properly using issuer for lookups, and
    guarding against null pointers (GH#858, GH#859, GH#860, GH#861,
    CVE-2019-19269)


author: Joe Cooper <joe@virtualmin.com>
changelog:
  - Moved all distro neutral files into "universal" repo, which should
    save a lot of maintenance time


author: Joe Cooper <joe@virtualmin.com>
changelog:
  - Removed the up2date stuff...we have to use yum
  - Added import of the system RPM-GPG-KEY files, as it causes errors during
    install if we don't have them.


author: Joe Cooper <joe@virtualmin.com>
changelog:
  - Remove legacy cruft for dealing with old yum and up2date
  - Remove key importation of system keys...this is probably understood by users today, where it used to confuse and alarm users during install.


author: Joe Cooper <joe@virtualmin.com>
changelog:
  - Remove locate and updatedb stuff; was more trouble than it was worth
  - Rebuilding for Fedora, among others


