<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="53">
<package pkgid="5b00bbb37ad9971cc343e20ab99f5ee7713780be24753646e4e948b7c2648c9d" name="awf-gtk2-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.2.0" rel="1.el10_2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 2.9.0-1" date="1743768000">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.0.0-1" date="1746446400">- New upstream release
- Add support for CSD window
- Add --enable-only-gtkx and --disable-gtkx options</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.1.0-1" date="1754654400">- New upstream release
- Add support for CSD dialog</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.2.0-1" date="1760097600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.0.0-1" date="1772539200">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.1.0-1" date="1777982400">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.2.0-1" date="1783425600">- New upstream release
- Use make install</changelog>
</package>
<package pkgid="087120578b1d1d1a177069114501030ed7ca9f3ff61a0e6391ada32ce164c8db" name="awf-gtk2-debugsource" arch="x86_64">
  <version epoch="0" ver="4.2.0" rel="1.el10_2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 2.9.0-1" date="1743768000">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.0.0-1" date="1746446400">- New upstream release
- Add support for CSD window
- Add --enable-only-gtkx and --disable-gtkx options</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.1.0-1" date="1754654400">- New upstream release
- Add support for CSD dialog</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.2.0-1" date="1760097600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.0.0-1" date="1772539200">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.1.0-1" date="1777982400">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.2.0-1" date="1783425600">- New upstream release
- Use make install</changelog>
</package>
<package pkgid="d3fd3e4a3306f23a5ef310536e492673aeff0f5d0f099bc8cea4f9918b93aa05" name="awf-gtk3-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.2.0" rel="1.el10_2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 2.9.0-1" date="1743768000">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.0.0-1" date="1746446400">- New upstream release
- Add support for CSD window
- Add --enable-only-gtkx and --disable-gtkx options</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.1.0-1" date="1754654400">- New upstream release
- Add support for CSD dialog</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.2.0-1" date="1760097600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.0.0-1" date="1772539200">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.1.0-1" date="1777982400">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.2.0-1" date="1783425600">- New upstream release
- Use make install</changelog>
</package>
<package pkgid="e75049376242b5a637f971beb91d047f0cd40f6682b00285839825daabed1bbc" name="awf-gtk3-debugsource" arch="x86_64">
  <version epoch="0" ver="4.2.0" rel="1.el10_2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 2.9.0-1" date="1743768000">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.0.0-1" date="1746446400">- New upstream release
- Add support for CSD window
- Add --enable-only-gtkx and --disable-gtkx options</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.1.0-1" date="1754654400">- New upstream release
- Add support for CSD dialog</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.2.0-1" date="1760097600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.0.0-1" date="1772539200">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.1.0-1" date="1777982400">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.2.0-1" date="1783425600">- New upstream release
- Use make install</changelog>
</package>
<package pkgid="87154661ff1334640d4d5431d4175a16e8d483c2fad41a5c2ec2ccd753237c61" name="awf-gtk4-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.2.0" rel="1.el10_2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 2.9.0-1" date="1743768000">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.0.0-1" date="1746446400">- New upstream release
- Add support for CSD window
- Add --enable-only-gtkx and --disable-gtkx options</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.1.0-1" date="1754654400">- New upstream release
- Add support for CSD dialog</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.2.0-1" date="1760097600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.0.0-1" date="1772539200">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.1.0-1" date="1777982400">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.2.0-1" date="1783425600">- New upstream release
- Use make install</changelog>
</package>
<package pkgid="ead6af77c33a92a97ccc4d2df274830add9b3979c701b9294a30f420a941006e" name="awf-gtk4-debugsource" arch="x86_64">
  <version epoch="0" ver="4.2.0" rel="1.el10_2"/>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 2.9.0-1" date="1743768000">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.0.0-1" date="1746446400">- New upstream release
- Add support for CSD window
- Add --enable-only-gtkx and --disable-gtkx options</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.0.0-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.1.0-1" date="1754654400">- New upstream release
- Add support for CSD dialog</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 3.2.0-1" date="1760097600">- New upstream release</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.2.0-3" date="1768564801">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.0.0-1" date="1772539200">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.1.0-1" date="1777982400">- New upstream release</changelog>
  <changelog author="Fabrice Creuzot &lt;code@luigifab.fr&gt; - 4.2.0-1" date="1783425600">- New upstream release
- Use make install</changelog>
</package>
<package pkgid="b9cc59348eeca0f456ad4c0e87b253dcb257b5877793003b258ae515a4de3ac6" name="fastfetch-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.65.2" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.48.1-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.49.0-1" date="1768478400">- update to 2.49.0</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.50.2-1" date="1768478401">- update to 2.50.2</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.57.1-1" date="1768478402">- update to 2.57.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.57.1-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.59.0-1" date="1771416000">- update to 2.59.0 rhbz#2385354
- Fix issue with Plasma 6.6 rhbz#2440585 rhbz#2440584</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.60.0-1" date="1774353600">- update to 2.60.0 rhbz#2445445</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.61.0-1" date="1775217600">- update to 1.61.0 rhbz#2452665</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.63.1-1" date="1779969600">- update to 2.63.1 rhbz#2460499</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.65.2-1" date="1783339200">- update to 2.65.2 rhbz#2484357</changelog>
</package>
<package pkgid="f23f688fcc3c77e470e40e0fc3c30d6666ef494c36b9ef10dfda1c56d9aae01e" name="fastfetch-debugsource" arch="x86_64">
  <version epoch="0" ver="2.65.2" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.48.1-2" date="1753272000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.49.0-1" date="1768478400">- update to 2.49.0</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.50.2-1" date="1768478401">- update to 2.50.2</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.57.1-1" date="1768478402">- update to 2.57.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.57.1-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.59.0-1" date="1771416000">- update to 2.59.0 rhbz#2385354
- Fix issue with Plasma 6.6 rhbz#2440585 rhbz#2440584</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.60.0-1" date="1774353600">- update to 2.60.0 rhbz#2445445</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.61.0-1" date="1775217600">- update to 1.61.0 rhbz#2452665</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.63.1-1" date="1779969600">- update to 2.63.1 rhbz#2460499</changelog>
  <changelog author="Jonathan Wright &lt;jonathan@almalinux.org&gt; - 2.65.2-1" date="1783339200">- update to 2.65.2 rhbz#2484357</changelog>
</package>
<package pkgid="2442214a7b1de9ce0e1d2761a917dcb3f014a34d80abdcff9bd33523f6454abe" name="haveged-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.9.26" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-10" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.21-1" date="1779278400">- Update to 1.9.21
- Security fix: CVE-2026-41054 — privilege escalation via command socket
- Fix semaphore error handling (SEM_FAILED vs NULL)
- Fix /dev/shm permissions (use 01777 with sticky bit)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.22-1" date="1779364800">- Update to 1.9.22
- Fix systemd sandboxing: add ReadWritePaths=/dev/shm for semaphore creation</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-1" date="1781784000">- Update to 1.9.23
- Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
- Security: fix OOB memory access in safein()/safeout() on socket errors
- Security: reject command socket connections from different user namespaces
- Security: use O_NOFOLLOW for PID file to prevent symlink attacks
- Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
- Fix stale semaphore recovery after SIGKILL
- Fix compilation when NO_COMMAND_MODE is defined</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-2" date="1781784001">- Add SELinux policy module to allow semaphore creation in /dev/shm
- Add rpminspect.yaml to waive pre-existing annocheck false positive</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-3" date="1781870400">- Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
  (annocheck is a security inspection and cannot be disabled via inspections section)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.24-1" date="1781870401">- Update to 1.9.24
- Disable command mode in long-running service (--no-command flag)
- Enable PrivateNetwork=true in systemd service
- Remove SELinux policy module (no longer needed without command mode)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.25-1" date="1782302400">- Update to 1.9.25
- Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
- Add haveged-initramfs.service for use inside the initramfs</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.26-1" date="1782302401">- Update to 1.9.26
- Fix 100% CPU spin when --no-command is used (BZ#2492029)</changelog>
</package>
<package pkgid="b023293c549c49bd10819c090ec115fed73bde88f68df98cb85200f406b8a167" name="haveged-debugsource" arch="x86_64">
  <version epoch="0" ver="1.9.26" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-10" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.18-11" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.21-1" date="1779278400">- Update to 1.9.21
- Security fix: CVE-2026-41054 — privilege escalation via command socket
- Fix semaphore error handling (SEM_FAILED vs NULL)
- Fix /dev/shm permissions (use 01777 with sticky bit)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.22-1" date="1779364800">- Update to 1.9.22
- Fix systemd sandboxing: add ReadWritePaths=/dev/shm for semaphore creation</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-1" date="1781784000">- Update to 1.9.23
- Security: use O_EXCL with sem_open to prevent semaphore pre-planting attacks
- Security: fix OOB memory access in safein()/safeout() on socket errors
- Security: reject command socket connections from different user namespaces
- Security: use O_NOFOLLOW for PID file to prevent symlink attacks
- Harden: open random device with O_CLOEXEC, restrict semaphore to 0600
- Fix stale semaphore recovery after SIGKILL
- Fix compilation when NO_COMMAND_MODE is defined</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-2" date="1781784001">- Add SELinux policy module to allow semaphore creation in /dev/shm
- Add rpminspect.yaml to waive pre-existing annocheck false positive</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.23-3" date="1781870400">- Fix rpminspect.yaml: use annocheck failure_severity instead of inspections toggle
  (annocheck is a security inspection and cannot be disabled via inspections section)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.24-1" date="1781870401">- Update to 1.9.24
- Disable command mode in long-running service (--no-command flag)
- Enable PrivateNetwork=true in systemd service
- Remove SELinux policy module (no longer needed without command mode)</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.25-1" date="1782302400">- Update to 1.9.25
- Fix initramfs switch-root failure caused by --no-command (BZ#2491739)
- Add haveged-initramfs.service for use inside the initramfs</changelog>
  <changelog author="Jirka Hladky &lt;hladky.jiri@gmail.com&gt; - 1.9.26-1" date="1782302401">- Update to 1.9.26
- Fix 100% CPU spin when --no-command is used (BZ#2492029)</changelog>
</package>
<package pkgid="d35557840f70a5ff070ff00fe743d9996a04f65f6cf24dfd6a8eca3ac4fedc0d" name="hddfancontrol-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.2" rel="2.el10_2"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-11" date="1755259200">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-12" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 1.6.2-13" date="1762689600">- pyprojectize spec modernization</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.2-14" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 1.6.2-15" date="1772366400">- spec cleanup, silent rpmlint, prep for new upstream release</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-16" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.1.1-1" date="1780747200">- update to 2.1.1 (rust) + packit fixes rhbz#2321360</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.1.1-2" date="1780833600">- Rebuilt for Python 3.15</changelog>
  <changelog author="Filipe Rosset &lt;filiperosset@fedoraproject.org&gt; - 2.1.2-1" date="1783598400">- update to 2.1.2 fixes rhbz#2498274</changelog>
  <changelog author="Filipe Rosset &lt;filiperosset@fedoraproject.org&gt; - 2.1.2-2" date="1783598401">- commit vendored sources</changelog>
</package>
<package pkgid="4d62237731431f94d41ebbd8bea3f39fde5ca5f3d0cb5bc878ac8ae7ad454865" name="hddfancontrol-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1.2" rel="2.el10_2"/>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-11" date="1755259200">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-12" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 1.6.2-13" date="1762689600">- pyprojectize spec modernization</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.6.2-14" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 1.6.2-15" date="1772366400">- spec cleanup, silent rpmlint, prep for new upstream release</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 1.6.2-16" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="Filipe Rosset &lt;rosset.filipe@gmail.com&gt; - 2.1.1-1" date="1780747200">- update to 2.1.1 (rust) + packit fixes rhbz#2321360</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.1.1-2" date="1780833600">- Rebuilt for Python 3.15</changelog>
  <changelog author="Filipe Rosset &lt;filiperosset@fedoraproject.org&gt; - 2.1.2-1" date="1783598400">- update to 2.1.2 fixes rhbz#2498274</changelog>
  <changelog author="Filipe Rosset &lt;filiperosset@fedoraproject.org&gt; - 2.1.2-2" date="1783598401">- commit vendored sources</changelog>
</package>
<package pkgid="d497d321d9d6b82a80db10df1f1febf9bd61b9ecf033d86e52498d55b753203d" name="libb64-debugsource" arch="x86_64">
  <version epoch="0" ver="1.2" rel="19.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-14" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-15" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-16" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-17" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-18" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-19" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="5e2484a277f9460542d6d143e3712fff2a219db4b7adba6fad30a00897e6060f" name="libb64-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.2" rel="19.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-14" date="1705838400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-15" date="1706184000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-16" date="1721304000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-17" date="1737115200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-18" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-19" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
</package>
<package pkgid="8bab68b9399ba7f8a0d5c541d67cd642aab3952425f5ff5b1e88cd19357c2ebd" name="mbedtls-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="1.el10_2"/>
  <changelog author="Bill Roberts &lt;bill.roberts@arm.com&gt; - 3.6.2-3" date="1742385600">- Rebuild for mbedtls 3.6</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 3.6.3-1" date="1742904000">- Update to 3.6.3</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 3.6.4-1" date="1751544000">- Update to 3.6.4</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 3.6.4-2" date="1751544001">- Add conditional CFLAGS for Fedora and RHEL</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.4-3" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 3.6.5-1" date="1760616000">- Update to 3.6.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.5-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 3.6.6-1" date="1775131200">- Update to 3.6.6</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 3.6.6-2" date="1777636800">- Update licence to Apache-2.0 or GPLv2.0-or-later</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 3.6.7-1" date="1783771200">- Update to 3.6.7</changelog>
</package>
<package pkgid="7e507b21828e79d858c862fde03be994335ec4ab2e7f7ce61337bbe3cb28b6e5" name="mbedtls-debugsource" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="1.el10_2"/>
  <changelog author="Bill Roberts &lt;bill.roberts@arm.com&gt; - 3.6.2-3" date="1742385600">- Rebuild for mbedtls 3.6</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 3.6.3-1" date="1742904000">- Update to 3.6.3</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 3.6.4-1" date="1751544000">- Update to 3.6.4</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 3.6.4-2" date="1751544001">- Add conditional CFLAGS for Fedora and RHEL</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.4-3" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 3.6.5-1" date="1760616000">- Update to 3.6.5</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.6.5-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 3.6.6-1" date="1775131200">- Update to 3.6.6</changelog>
  <changelog author="Peter Robinson &lt;pbrobinson@fedoraproject.org&gt; - 3.6.6-2" date="1777636800">- Update licence to Apache-2.0 or GPLv2.0-or-later</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 3.6.7-1" date="1783771200">- Update to 3.6.7</changelog>
</package>
<package pkgid="15bd58f50d31cc0f7839192fa2c56b937a7a836a8669ffe2cca17b5461f07b29" name="nginx-mod-headers-more-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.40" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.39-3" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-4" date="1766750400">- Rebuild for 1.28.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.39-5" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-6" date="1770206400">- Rebuild for 1.28.2</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-7" date="1774440000">- Rebuild for 1.28.3</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-8" date="1776254400">- Rebuild for 1.30.0</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-9" date="1778673600">- Rebuild for 1.30.1</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-10" date="1779537600">- Rebuild for 1.30.2</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-11" date="1781697600">- Rebuild for 1.30.3</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.40-1" date="1783512000">- Update to 0.40 rhbz#2491062</changelog>
</package>
<package pkgid="1667a6e24df8036bc53382c04de08f887652a5025b3c8878f975f7ee8cfddfb1" name="nginx-mod-headers-more-debugsource" arch="x86_64">
  <version epoch="0" ver="0.40" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.39-3" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-4" date="1766750400">- Rebuild for 1.28.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 0.39-5" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-6" date="1770206400">- Rebuild for 1.28.2</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-7" date="1774440000">- Rebuild for 1.28.3</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-8" date="1776254400">- Rebuild for 1.30.0</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-9" date="1778673600">- Rebuild for 1.30.1</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-10" date="1779537600">- Rebuild for 1.30.2</changelog>
  <changelog author="Felix Kaechele &lt;felix@kaechele.ca&gt; - 0.39-11" date="1781697600">- Rebuild for 1.30.3</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.40-1" date="1783512000">- Update to 0.40 rhbz#2491062</changelog>
</package>
<package pkgid="2dd9cb4457e0a89317e7b102d44d79f16ddc5ead7d41ec7c905d038a72b7291d" name="node-exporter-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.1-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 1.9.1-3" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.9.1-4" date="1760097600">- rebuild</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.10.2-1" date="1764849600">- Update to 1.10.2 - Closes rhbz#2406209 rhbz#2408331 rhbz#2409804
  rhbz#2410754 rhbz#2411650</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.2-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.10.2-3" date="1769774400">- Fix race condition</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 1.10.2-4" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.11.0-1" date="1775304000">- Update to 1.11.0 - Closes rhbz#2455090</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.11.1-1" date="1775563200">- Update to 1.11.1 upstream release
- Resolves: rhbz#2456247</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.12.0-1" date="1783771200">- Update to 1.12.0 - Closes rhbz#2499355</changelog>
</package>
<package pkgid="82dc682bc8120c441cc55b39eacd3546d25d5f18b3d63de6bfdb4e19f561bc50" name="node-exporter-debugsource" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.9.1-2" date="1753358400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 1.9.1-3" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.9.1-4" date="1760097600">- rebuild</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.10.2-1" date="1764849600">- Update to 1.10.2 - Closes rhbz#2406209 rhbz#2408331 rhbz#2409804
  rhbz#2410754 rhbz#2411650</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.10.2-2" date="1768564800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Alejandro S&#xE1;ez &lt;asm@redhat.com&gt; - 1.10.2-3" date="1769774400">- Fix race condition</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 1.10.2-4" date="1770120000">- Rebuild for https://fedoraproject.org/wiki/Changes/golang1.26</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.11.0-1" date="1775304000">- Update to 1.11.0 - Closes rhbz#2455090</changelog>
  <changelog author="Packit &lt;hello@packit.dev&gt; - 1.11.1-1" date="1775563200">- Update to 1.11.1 upstream release
- Resolves: rhbz#2456247</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 1.12.0-1" date="1783771200">- Update to 1.12.0 - Closes rhbz#2499355</changelog>
</package>
<package pkgid="6c9557706aa2759b007ceaaaf122b3b29e925ac7b1226b07425d59d52c2b669d" name="opkssh-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.15.0" rel="2.el10_2"/>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-4" date="1773576000">- Add log file and logrotate config</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-5" date="1773576001">- Add logrotate config file</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-6" date="1773576002">- Properly use GO_LDFLAGS to overwrite ldflags</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.13.0-7" date="1773576003">- Add missing version ldflag</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-8" date="1775908800">- Update bundled go-jose to v4.1.4</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-1" date="1777809600">- Update to 0.14.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-2" date="1778673600">- Overwrite logfile path with a patch</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-3" date="1782129600">- Update bundled golang.org/x/crypto to 0.53.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-1" date="1782993600">- Update to 0.15.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-2" date="1782993601">- Drop obsolete golang.org/x/crypto override</changelog>
</package>
<package pkgid="d7058fdd7490750f618f2fc09400fb00338f30163bd9c2dccae935fa40b161c8" name="opkssh-debugsource" arch="x86_64">
  <version epoch="0" ver="0.15.0" rel="2.el10_2"/>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-4" date="1773576000">- Add log file and logrotate config</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-5" date="1773576001">- Add logrotate config file</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-6" date="1773576002">- Properly use GO_LDFLAGS to overwrite ldflags</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 0.13.0-7" date="1773576003">- Add missing version ldflag</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.13.0-8" date="1775908800">- Update bundled go-jose to v4.1.4</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-1" date="1777809600">- Update to 0.14.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-2" date="1778673600">- Overwrite logfile path with a patch</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.14.0-3" date="1782129600">- Update bundled golang.org/x/crypto to 0.53.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-1" date="1782993600">- Update to 0.15.0</changelog>
  <changelog author="Till Hofmann &lt;thofmann@fedoraproject.org&gt; - 0.15.0-2" date="1782993601">- Drop obsolete golang.org/x/crypto override</changelog>
</package>
<package pkgid="fbffccbaa7c23e988ce737cb7ef5f0fac473b4467d9ffe7670a1f0a02e37ffbb" name="proftpd-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="dcd0e91ebb0d8d3103fa1527b242a164ef1a5bf0f04bba61d02fa10f8f6d10af" name="proftpd-debugsource" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="055b09c4babd096081348271f98b18686852b0c78de3030fd57f1371ab15c78d" name="proftpd-ldap-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="60ee21fe32f65f8e30b70e7bc4b19e95df596839ab0f1391834d2877e8d17570" name="proftpd-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="f090d94e34c700051e48d65d3883b772c2ed97fe927ebba517eee16a361f2fc7" name="proftpd-postgresql-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="e779645aae3713373aad2335fe00834784ab92b81718678ddef614c61ad40ef9" name="proftpd-proxy-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="b9acec745e016225ad034879aee4b2f123297a5cdd90f0e468fdd3b52277c39d" name="proftpd-sqlite-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="27418a17a09c18aabbebdb30eb26dd759a5ea527f8b2ad513c305422f328fe0e" name="proftpd-utils-debuginfo" arch="x86_64">
  <version epoch="0" ver="1.3.9c" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.3.8b-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.8b-8" date="1728648000">- Drop EL-7 support
  - Drop mod_geoip support
  - Drop mod_wrap support
  - Always build mod_proxy
  - Always use libpcre2
  - Always use maridb client library in preference to mysql
  - Always use libpq client library in preference to postgresql
  - Always use OpenSSL Cipher Profiles
- Explicitly switch from libmemcached to libmemcached-awesome from Fedora 35
  onwards</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.1.rc2" date="1728648001">- Update to 1.3.9rc2
  - Fix mod_tls build failing for OpenSSL before 1.1.x (Bug #4494)
  - Fix mod_sftp not advertising standard extensions for protocol version 3
    (GH#1570)
  - Fix mod_sftp "check-file" extension using wrong block size when offset and
    length are specified (GH#1569)
  - Use JSON for Controls protocol messages (GH#379)
  - Provide richer exit status values for ftpdctl for better scripting (GH#1114)
  - Enforce requirement of preceding RewriteCondition for RewriteRule directives
    to avoid confusion (Bug #4495)
  - Implement LogFormat variable for data transfer average speed (GH#535)
  - Optimize per-connection file I/O when reading SFTPHostKey from disk
    (GH#1596)
  - ProFTPD did not detect FIPS when using OpenSSL 3.x built with FIPS support
    (GH#1610)
  - Reduce latency due to signal handling in the daemon process (GH#1623)
  - SSH key exchange requests should be classified into the "SEC" ExtendedLog
    class (GH#1626)
  - Update mod_exec to use the Jot API for resolving variables (GH#1630)
  - Use system TCP backlog value by default (GH#1636)
  - Gracefully handle directory creation requests when the directory already
    exists (GH#1639)
  - Remove asynchronous FTP responses emitted while computing digest values
    (GH#1661)
  - Support terminating connection after USER command when TLS is required
    (GH#1640)
  - Support OPTS commands for querying configured policy for resumed uploads,
    downloads (GH#1676)
  - MaxStoreFileSize for single user was not properly honored for SFTP uploads
    (GH#1686)
  - DisplayChdir using absolute path should work properly with DefaultRoot
    (GH#1688)
  - Clients should be disconnected when unable to be added to the
    ScoreboardFile (GH#1700)
  - Support injecting random delay when clients connect via DelayOnEvent
    (GH#1701)
  - Support OpenSSH FIDO security keys in mod_sftp (GH#1118)
  - Support obtaining default UID/GID values for AD directories in mod_ldap
    (GH#1716)
  - Update upload progress in scoreboard when throttling (GH#1433)
  - Null pointer reference encountered for FTPS connection due to config
    parser ignoring Include file problem (GH#1721)
  - Support the chacha20-poly1305@openssh.com SSH cipher (GH#456)
  - mod_auth_otp should require per-user OTP entries by default (GH#1562)
  - 1.3.9rc1 mod_sftp failed to compile if EVP_chacha20 was unavailable, as
    when using older OpenSSL versions (GH#1730)
  - Error resolving DNS name for implicit "server config" vhost lead to
    DelayTable not being found (GH#1746)
  - Log message for exceeding quota did not include the user/group/class quota
    type (GH#1749)
  - Build system failed for specific module names (GH#1756)
  - "Terrapin" Prefix Truncation Attacks in SSH Specification affected mod_sftp
    (CVE-2023-48795, GH#1760)
- Additional C compatibility fix</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.2.rc3" date="1734004800">- Update to 1.3.9rc3
  - Bad handling of lack of extended attributes lead to SFTP out of memory
    error (GH#1785)
  - Using mod_facl and mod_vroot at same time caused unexpected permissions
    issues (GH#1780)
  - mod_sftp_sql logged "header value too long" due to unexpected key header
    text (GH#1529)
  - SFTP statvfs extension failed when mod_vroot was in use (GH#1792)
  - Implement limits@openssh.com SFTP extension (GH#1798)
  - Implement SFTPAuthPublicKeys directive for configuring the list of public
    key algorithms allowed for authentication (GH#1806)
  - Fix stack trace changing to directory with DisplayChdir file using %F
    variable on a large filesystem (GH#1819)
  - Remove inherited supplemental groups when started with root privileges
    (GH#1836)
  - SSH ECDSA host key algorithms were not being used as expected despite
    configuring appropriate key (GH#1839)
  - RADIUS Message-Authenticator verification failed with ProFTPD mod_radius
    (GH#1840)
  - Supplemental group inheritance granted unintended access to GID 0 due to
    lack of supplemental groups from mod_sql (GH#1830)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-0.3.rc3" date="1734004801">- Update mod_vroot to 0.9.12
  - Implement a realpath(3) callback for the FSIO API, for better
    interoperability of other modules when mod_vroot is in effect</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9-1" date="1742385600">- Update to 1.3.9
  - Use of HideNoAccess for SFTP sessions could lead to segfault and/or
    unexpected behavior (GH#1855)
  - Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
  - Added Polish translation (Bug #4511)
  - SFTP channel allocations can lead to high memory utilization over time
    (GH#1876)
  - Update libtool.m4 for better MacOSX support (GH#1878)
- Update mod_proxy to 0.9.5
  - Implemented new IgnoreForeignAddress ProxyOption
  - Fixed passive data transfers to backend IPv4 address when IPv6 support is
    enabled</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-1" date="1777550400">- Update to 1.3.9a
  - SCP transfers failed for files with spaces in their names (GH#1886)
  - LDAPDefaultGID ignored since 1.3.9 (GH#1898)
  - Compilation of mod_wrap2 failed when the --enable-wrapper-options configure
    option was used (Bug #4512)
  - mod_sftp failed to parse authorized user/host public keys with CRLF line
    endings (GH#1904)
  - Uploads using MODE Z sometimes resulted in corrupted files or broken
    transfers (GH#1896)
  - Remove usage of the deprecated MySQL_OPT_RECONNECT option for newer MySQL
    versions (GH#1911)
  - Update usage of MySQL API for SSL/TLS connections to server (GH#340)
  - mod_sftp leaked file descriptor when reading SFTPHostKey file (GH#1959)
  - Large/slow SCP downloads could be unnecessarily truncated by TimeoutStalled
    (GH#1964)
  - Handling of CRLs in mod_tls was incorrect, leading to confusing errors
    (GH#1960)
  - Resumed SSL_SESSION management in mod_tls lead to memory growth, infinite
    loop using newer OpenSSL versions (GH#1963)
  - mod_quotatab_ldap interactions could lead to segfault due to stale pointer
    (GH#1984)
  - RNTO before authentication lead to out-of-order response codes (GH#2003)
  - MaxLoginAttemptsFromUser event never triggered in mod_ban for SFTP sessions
    (GH#2009)
  - Using toupper(3) on non-ASCII FTP command bytes might cause remote DoS
    (GH#2019)
  - Out-of-bounds single byte read when FTP command input buffer starts with LF
    (GH#2020)
  - FTP command LIST/NLST -B could cause buffer overflow when listing certain
    crafted filenames (GH#2030)
  - Memory exhaustion with mod_log_forensic when downloading very large files
    via SFTP (GH#2043)
  - Setting process groups during authentication crashed when using mod_radius
    and &lt;IfGroup&gt; (GH#2046)
  - SQL injection possible via mod_sql because of is_escaped_text() logic error
    (GH#2052, CVE-2026-42167)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9a-2" date="1778500800">- Additional escaping for avoidance of SQL injection issues with %{note:...}
  and %{env:...}; these are on top of the existing fix for CVE-2026-42167 in
  1.3.9a
- Fix for SQL Injection in mod_wrap2_sql via reverse DNS hostname
  (CVE-2026-44331, rhbz#2466899, https://github.com/proftpd/proftpd/issues/2057)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9b-1" date="1780920000">- Update to 1.3.9b
  - Fix SQL Injection in mod_wrap2_sql via reverse DNS hostname (GH#2057,
    CVE-2026-44331)
  - Additional fix for session management with OpenSSL 3.2.x or later, when
    using TLSv1.2 or earlier; this complements the fix for GH#1963 (GH#2096)
  - Hard quota limits on uploads do not cause SFTP WRITE requests to fail as
    expected (GH#2098)
  - Fix SSH payload length underflow calculation for ETM/ChaChaPoly algorithms
    in mod_sftp (GH#2102)
  - SSH packet with empty payload triggered null pointer dereference in
    mod_sftp (GH#2104)
  - Bad DSA signatures could lead to out-of-bounds read of heap memory in
    mod_sftp (GH#2106)
  - Mismatched RSA/DSA algorithm signatures could lead to null dereference in
    mod_sftp (GH#2108)
  - SFTP request payload length underflow calculation in mod_sftp (GH#2115)
  - Several modules failed to build using OpenSSL 4.0 (GH#2120)
- Update mod_proxy to 0.9.7
  - Add a check on the maximum allowed SSH payload (vs. packet) length (GH#291)
  - Set the payload_len field before checking its value (GH#292)
  - Keep the SSH packet reading code in mod_proxy more in line with what is
    done in mod_sftp, for legibility (GH#294)
  - Implement support for the OpenSSH-specific ChaChaPoly SSH algorithm
    (GH#295, GH#296)
  - Correct misspellings noted by codespell (GH#297)
  - Use clang-tidy to start polishing the codebase (GH#298)
  - Disable the Nagle algorithm by default on our TCP connections to back-end
    servers (GH#299)
  - Require OpenSSL for building (GH#249, GH#300)
  - Documentation fixes
  - Implement a limit on the number of EXT_INFO extensions we'll be willing to
    accept (GH#303)
  - Comparison of expected/provided MAC data should be done in a constant-time
    manner
  - Support PKCS11-stored private keys
  - Implement the "mlkem768x25519-sha256" and "sntrup761x25519-sha512"
    post-quantum SSH key exchange mechanisms (GH#306)
  - Add sanity check for SRV record lengths
  - Ensure that the SSH payload length computation, for ETM/ChaChaPoly packets,
    does not underflow
  - If we detect a bad DSA signature length, properly error out
  - Ensure that RSA/DSA signatures match their expected algorithm types, and
    avoid null pointer dereferences
  - Update to build against OpenSSL 4.x (GH#313)</changelog>
  <changelog author="Paul Howarth &lt;paul@city-fan.org&gt; - 1.3.9c-1" date="1783512000">- Update to 1.3.9c
  - ExecEnviron values not passed due to regression since 1.3.8.d (GH#2135)
  - Stack buffer overflow in MLSD/MLST handling for long path names (GH#2146)
  - MaxTransfersPerUser no longer enforces configured limits (GH#2158)
  - AdminControlsACLs for config, get actions not honored as they should be
    (GH#2163)
  - Memcached/Redis-cached JSON TLS session/OCSP entries decoded into fixed
    buffers without bounds checking (GH#2166)
  - RewriteMap unescape builtin use causes one-byte out-of-bounds write, fails
    to reject illegal characters (GH#2173)
  - SQL group name lookup concatenates client-provided group names without
    escaping (GH#2188)
  - Authenticated SFTP sessions can overflow the SFTP packet buffer (GH#2190)
  - Default Controls socket ACLs unintentionally allow all users access for
    sending Controls requests (GH#2210)</changelog>
</package>
<package pkgid="c3b64f2caa2f95761f8edbaf643574089c0f04c8c5b6da941c0c70f8242d043b" name="prometheus-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.13.1" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 2.55.1-1" date="1771848000">- Initial package after renaming from golang-github-prometheus - Closes
  rhbz#2383787</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.10.0-1" date="1772107200">- Update to 3.10.0 - Closes rhbz#2390501</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.11.0-1" date="1775217600">- Update to 3.11.0 - Close rhbz#2454467</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.11.1-1" date="1775563200">- Update to 3.11.1 - Closes rhbz#2456248</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.11.2-1" date="1776081600">- Update to 3.11.2 - Closes rhbz#2457952</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.12.0-1" date="1781265600">- Update to 3.12.0 - Closes rhbz#2482792</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.13.0-1" date="1782993600">- Update to 3.13.0 - Closes rhbz#2495979</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.13.1-1" date="1783771200">- Update to 3.13.1 - Closes rhbz#2498963</changelog>
</package>
<package pkgid="b556246b662954bf45c7a5976033950f630db3b3c91f8fdddd3960a2285f9370" name="prometheus-debugsource" arch="x86_64">
  <version epoch="0" ver="3.13.1" rel="1.el10_2"/>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 2.55.1-1" date="1771848000">- Initial package after renaming from golang-github-prometheus - Closes
  rhbz#2383787</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.10.0-1" date="1772107200">- Update to 3.10.0 - Closes rhbz#2390501</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.11.0-1" date="1775217600">- Update to 3.11.0 - Close rhbz#2454467</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.11.1-1" date="1775563200">- Update to 3.11.1 - Closes rhbz#2456248</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.11.2-1" date="1776081600">- Update to 3.11.2 - Closes rhbz#2457952</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.12.0-1" date="1781265600">- Update to 3.12.0 - Closes rhbz#2482792</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.13.0-1" date="1782993600">- Update to 3.13.0 - Closes rhbz#2495979</changelog>
  <changelog author="Mikel Olasagasti Uranga &lt;mikel@olasagasti.info&gt; - 3.13.1-1" date="1783771200">- Update to 3.13.1 - Closes rhbz#2498963</changelog>
</package>
<package pkgid="2b0ffdba2451db8ff7f86396119b38f51a0eacef1f01d4ee51d4835ed6cc271d" name="python-photutils-debugsource" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="4.el10_2"/>
  <changelog author="Sergio Pascual &lt;sergiopr@fis.ucm.es&gt; - 2.1.0-1" date="1739188800">- New upstream source 2.1.0</changelog>
  <changelog author="Sergio Pascual &lt;sergiopr@fis.ucm.es&gt; - 2.2.0-1" date="1739966400">- New upstream version 2.2.0</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.0-2" date="1749211200">- Rebuilt for Python 3.14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.0-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.0-4" date="1755259200">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.0-5" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Sergio Pascual &lt;sergiopr@fis.ucm.es&gt; - 2.3.0-1" date="1758888000">- New upstream source 2.3.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.3.0-3" date="1780660800">- Rebuilt for Python 3.15</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 2.3.0-4" date="1782475200">- Prepare photutils for EPEL10 build</changelog>
</package>
<package pkgid="9c73a69958293fc28ea7d167e28f293623fee171b6fa92278452305c20f44b1c" name="python-xxhash-debugsource" arch="x86_64">
  <version epoch="0" ver="3.8.1" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.5.0-1" date="1759924800">- Update to 3.5.0 (close RHBZ#2307449)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.6.0-1" date="1759924801">- Update to 3.6.0 (close RHBZ#2402506)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.7.0-1" date="1777204800">- Update to version 3.7.0; Fixes RHBZ#2461823</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.7.0-2" date="1782648000">- Use various long options</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.8.0-1" date="1782648001">- Update to 3.8.0 (close RHBZ#2492139)
- Run tests with pytest, as upstream is gradually adopting it</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.8.1-1" date="1783425600">- Update to 3.8.1 upstream release
- Resolves: rhbz#2497360</changelog>
</package>
<package pkgid="e12db7de8982109b24e6c9d02c0b97fe94970614a2168d1bff5b39bfacae9803" name="python3-photutils-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.3.0" rel="4.el10_2"/>
  <changelog author="Sergio Pascual &lt;sergiopr@fis.ucm.es&gt; - 2.1.0-1" date="1739188800">- New upstream source 2.1.0</changelog>
  <changelog author="Sergio Pascual &lt;sergiopr@fis.ucm.es&gt; - 2.2.0-1" date="1739966400">- New upstream version 2.2.0</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.0-2" date="1749211200">- Rebuilt for Python 3.14</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.2.0-3" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.0-4" date="1755259200">- Rebuilt for Python 3.14.0rc2 bytecode</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.2.0-5" date="1758283200">- Rebuilt for Python 3.14.0rc3 bytecode</changelog>
  <changelog author="Sergio Pascual &lt;sergiopr@fis.ucm.es&gt; - 2.3.0-1" date="1758888000">- New upstream source 2.3.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.3.0-2" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 2.3.0-3" date="1780660800">- Rebuilt for Python 3.15</changelog>
  <changelog author="Federico Pellegrin &lt;fede@evolware.org&gt; - 2.3.0-4" date="1782475200">- Prepare photutils for EPEL10 build</changelog>
</package>
<package pkgid="99518b3c7feaf1435582c811072693fbc3a84a0ffd2130e8d2b8413c7120b295" name="python3-xxhash-debuginfo" arch="x86_64">
  <version epoch="0" ver="3.8.1" rel="1.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 3.4.1-7" date="1721390400">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.5.0-1" date="1759924800">- Update to 3.5.0 (close RHBZ#2307449)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.6.0-1" date="1759924801">- Update to 3.6.0 (close RHBZ#2402506)</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.7.0-1" date="1777204800">- Update to version 3.7.0; Fixes RHBZ#2461823</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.7.0-2" date="1782648000">- Use various long options</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.8.0-1" date="1782648001">- Update to 3.8.0 (close RHBZ#2492139)
- Run tests with pytest, as upstream is gradually adopting it</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 3.8.1-1" date="1783425600">- Update to 3.8.1 upstream release
- Resolves: rhbz#2497360</changelog>
</package>
<package pkgid="cf54aada475116bcd822b8b97727e3eae4995053b412a2e1c8f7b1ade70e0865" name="rust-siguldry-debugsource" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="1.el10_2"/>
  <changelog author="Jeremy Cline &lt;jeremycline@microsoft.com&gt; - 0.6.0-3" date="1774872000">- Backport fix for default client config location</changelog>
  <changelog author="Jeremy Cline &lt;jeremycline@microsoft.com&gt; - 0.7.0-1" date="1775476800">- Update to v0.7.0</changelog>
  <changelog author="Jeremy Cline &lt;jeremycline@microsoft.com&gt; - 0.7.0-2" date="1776168000">- Add tpmfiles config to create /var/lib/siguldry</changelog>
  <changelog author="Jeremy Cline &lt;jeremycline@microsoft.com&gt; - 0.7.0-3" date="1776168001">- Include the database migrations</changelog>
  <changelog author="Jeremy Cline &lt;jeremycline@microsoft.com&gt; - 0.7.1-1" date="1780315200">- Update to v0.7.1</changelog>
  <changelog author="Jeremy Cline &lt;jeremycline@microsoft.com&gt; - 0.7.2-1" date="1780488000">- Update to v0.7.2</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.7.2-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.7.2-3" date="1782820800">- Update PyO3 to 0.29
- Update `License` expression based on a current build</changelog>
  <changelog author="Jeremy Cline &lt;jeremycline@microsoft.com&gt; - 0.7.3-1" date="1783339200">- Update to v0.7.3</changelog>
  <changelog author="Jeremy Cline &lt;jeremycline@microsoft.com&gt; - 0.8.0-1" date="1783598400">- Update to v0.8.0</changelog>
</package>
<package pkgid="395cad23542ec6501234fec866f20534b8103bade8e92ed9cd8ce72d06c73809" name="siguldry-debuginfo" arch="x86_64">
  <version epoch="0" ver="0.8.0" rel="1.el10_2"/>
  <changelog author="Jeremy Cline &lt;jeremycline@microsoft.com&gt; - 0.6.0-3" date="1774872000">- Backport fix for default client config location</changelog>
  <changelog author="Jeremy Cline &lt;jeremycline@microsoft.com&gt; - 0.7.0-1" date="1775476800">- Update to v0.7.0</changelog>
  <changelog author="Jeremy Cline &lt;jeremycline@microsoft.com&gt; - 0.7.0-2" date="1776168000">- Add tpmfiles config to create /var/lib/siguldry</changelog>
  <changelog author="Jeremy Cline &lt;jeremycline@microsoft.com&gt; - 0.7.0-3" date="1776168001">- Include the database migrations</changelog>
  <changelog author="Jeremy Cline &lt;jeremycline@microsoft.com&gt; - 0.7.1-1" date="1780315200">- Update to v0.7.1</changelog>
  <changelog author="Jeremy Cline &lt;jeremycline@microsoft.com&gt; - 0.7.2-1" date="1780488000">- Update to v0.7.2</changelog>
  <changelog author="Yaakov Selkowitz &lt;yselkowi@redhat.com&gt; - 0.7.2-2" date="1781265600">- Rebuilt for openssl 4.0</changelog>
  <changelog author="Benjamin A. Beasley &lt;code@musicinmybrain.net&gt; - 0.7.2-3" date="1782820800">- Update PyO3 to 0.29
- Update `License` expression based on a current build</changelog>
  <changelog author="Jeremy Cline &lt;jeremycline@microsoft.com&gt; - 0.7.3-1" date="1783339200">- Update to v0.7.3</changelog>
  <changelog author="Jeremy Cline &lt;jeremycline@microsoft.com&gt; - 0.8.0-1" date="1783598400">- Update to v0.8.0</changelog>
</package>
<package pkgid="91f8d8c1279b3d9cd25e49b3c452ae47461794f402831e428ccb1dd22e8da061" name="syncthing-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="1.el10_2"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.29.6-1" date="1748260800">- Update to version 1.29.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.29.6-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 1.29.6-3" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.30.0-1" date="1755432000">- Update to version 1.30.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.30.0-2" date="1781870400">- Rebuild with golang-1.26.3</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.0.11-1" date="1783252800">- Update to version 2.0.11</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.0.14-1" date="1783252801">- Update to 2.0.14.</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.0.14-2" date="1783252802">- Update quic-go to newer version that supports Go 1.26</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.0.14-3" date="1783252803">- Require syncthing and syncthing-tools packages to be updated together</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.1.1-1" date="1783252804">- Update to version 2.1.1; Fixes RHBZ#2444191</changelog>
</package>
<package pkgid="90664e69821bcaa517e49353efa4696869df86878592768c52b5b2e52a1b8bf7" name="syncthing-debugsource" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="1.el10_2"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.29.6-1" date="1748260800">- Update to version 1.29.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.29.6-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 1.29.6-3" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.30.0-1" date="1755432000">- Update to version 1.30.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.30.0-2" date="1781870400">- Rebuild with golang-1.26.3</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.0.11-1" date="1783252800">- Update to version 2.0.11</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.0.14-1" date="1783252801">- Update to 2.0.14.</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.0.14-2" date="1783252802">- Update quic-go to newer version that supports Go 1.26</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.0.14-3" date="1783252803">- Require syncthing and syncthing-tools packages to be updated together</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.1.1-1" date="1783252804">- Update to version 2.1.1; Fixes RHBZ#2444191</changelog>
</package>
<package pkgid="16a47452bf9a34c9ec8c4ab50b9602e807f9470edbddc6ac9dd3e29b034873de" name="syncthing-tools-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="1.el10_2"/>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.29.6-1" date="1748260800">- Update to version 1.29.6</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.29.6-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 1.29.6-3" date="1755259200">- Rebuild for golang-1.25.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.30.0-1" date="1755432000">- Update to version 1.30.0</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 1.30.0-2" date="1781870400">- Rebuild with golang-1.26.3</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.0.11-1" date="1783252800">- Update to version 2.0.11</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.0.14-1" date="1783252801">- Update to 2.0.14.</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.0.14-2" date="1783252802">- Update quic-go to newer version that supports Go 1.26</changelog>
  <changelog author="Maxwell G &lt;maxwell@gtmx.me&gt; - 2.0.14-3" date="1783252803">- Require syncthing and syncthing-tools packages to be updated together</changelog>
  <changelog author="Fabio Valentini &lt;decathorpe@gmail.com&gt; - 2.1.1-1" date="1783252804">- Update to version 2.1.1; Fixes RHBZ#2444191</changelog>
</package>
<package pkgid="daa2c0baeacbd59f99e0501b6dddd55eb3e8cc7f875f13b56a6ba019279140ac" name="weechat-debuginfo" arch="x86_64">
  <version epoch="0" ver="4.9.3" rel="1.el10_2"/>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.1-1" date="1764590400">- Update to 4.8.1</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 4.8.1-2" date="1767873600">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.1-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.2-1" date="1773057600">- Update to 4.8.2</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.2-2" date="1774785600">- Drop unnecessary -DPREFIX cmake arg</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.0-1" date="1774785601">- Update to 4.9.0</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.1-1" date="1780228800">- Update to 4.9.1</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.9.1-2" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.2-1" date="1780833600">- Update to 4.9.2</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.3-1" date="1783252800">- Update to 4.9.3</changelog>
</package>
<package pkgid="fb0d70d0f9201b8ddc0eb83ed36d8863b7b271a9b2e35760352df358b11d3550" name="weechat-debugsource" arch="x86_64">
  <version epoch="0" ver="4.9.3" rel="1.el10_2"/>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.1-1" date="1764590400">- Update to 4.8.1</changelog>
  <changelog author="Mamoru TASAKA &lt;mtasaka@fedoraproject.org&gt; - 4.8.1-2" date="1767873600">- Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_4.0</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 4.8.1-3" date="1768651200">- Rebuilt for https://fedoraproject.org/wiki/Fedora_44_Mass_Rebuild</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.2-1" date="1773057600">- Update to 4.8.2</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.8.2-2" date="1774785600">- Drop unnecessary -DPREFIX cmake arg</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.0-1" date="1774785601">- Update to 4.9.0</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.1-1" date="1780228800">- Update to 4.9.1</changelog>
  <changelog author="Python Maint &lt;python-maint@redhat.com&gt; - 4.9.1-2" date="1780488000">- Rebuilt for Python 3.15</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.2-1" date="1780833600">- Update to 4.9.2</changelog>
  <changelog author="LuK1337 &lt;priv.luk@gmail.com&gt; - 4.9.3-1" date="1783252800">- Update to 4.9.3</changelog>
</package>
<package pkgid="01a59c3f51da88017363ac238fa79181f08168025f16783a0824c299b7b91a30" name="yubihsm-shell-debuginfo" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="3.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.0-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2.5.0-3" date="1721822400">- convert license to SPDX</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.5.0-4" date="1722340800">- Fix build against pcsc-lite &gt;= 2.2 (#2301379)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.6.0-1" date="1726056000">- New upstream release (#2311424)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.6.0-3" date="1738756800">- Fix gcc15 warnings (#2341598)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.7.0-1" date="1750161600">- New upstream release (#2372452)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.7.0-3" date="1782216000">- Use low-level AES operations to prevent session leak (#2487009)</changelog>
</package>
<package pkgid="08c05ccfe70ab5bc14d570480f789f58bd4d17836e7e62f21cc911f30407b0d9" name="yubihsm-shell-debugsource" arch="x86_64">
  <version epoch="0" ver="2.7.0" rel="3.el10_2"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.5.0-2" date="1721476800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Miroslav Such&#xFD; &lt;msuchy@redhat.com&gt; - 2.5.0-3" date="1721822400">- convert license to SPDX</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.5.0-4" date="1722340800">- Fix build against pcsc-lite &gt;= 2.2 (#2301379)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.6.0-1" date="1726056000">- New upstream release (#2311424)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.6.0-2" date="1737288000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.6.0-3" date="1738756800">- Fix gcc15 warnings (#2341598)</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.7.0-1" date="1750161600">- New upstream release (#2372452)</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2.7.0-2" date="1753444800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild</changelog>
  <changelog author="Jakub Jelen &lt;jjelen@redhat.com&gt; - 2.7.0-3" date="1782216000">- Use low-level AES operations to prevent session leak (#2487009)</changelog>
</package>
<package pkgid="5d557f98e44e27c823176baad87b909a745b197e3a8cc89d3bd80bf732c2385d" name="zabbix7.0-agent-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.28" rel="1.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.9-2" date="1739880000">- Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
  to zabbixX.Y in one transaction</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.11-1" date="1743595200">- Update to 7.0.11 (CVE-2024-45700)</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.16-1" date="1751889600">- Update to 7.0.16</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.18-1" date="1756296000">- Update to 7.0.18</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.20-1" date="1761825600">- Update to 7.0.20</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.22-1" date="1765972800">- Update to 7.0.22</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.23-1" date="1772884800">- Update to 7.0.23</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.25-1" date="1777291200">- Update to 7.0.25</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.26-1" date="1778414400">- Update to 7.0.26</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.28-1" date="1783684800">- Update to 7.0.28 upstream release</changelog>
</package>
<package pkgid="4ecd523f33ca2a00a6d98dd3e559557174acb26f659af0fc25aed1fe8c3bd29a" name="zabbix7.0-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.28" rel="1.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.9-2" date="1739880000">- Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
  to zabbixX.Y in one transaction</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.11-1" date="1743595200">- Update to 7.0.11 (CVE-2024-45700)</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.16-1" date="1751889600">- Update to 7.0.16</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.18-1" date="1756296000">- Update to 7.0.18</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.20-1" date="1761825600">- Update to 7.0.20</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.22-1" date="1765972800">- Update to 7.0.22</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.23-1" date="1772884800">- Update to 7.0.23</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.25-1" date="1777291200">- Update to 7.0.25</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.26-1" date="1778414400">- Update to 7.0.26</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.28-1" date="1783684800">- Update to 7.0.28 upstream release</changelog>
</package>
<package pkgid="c06387380d58ebd0fd59a25be52e7131cce6aaca2e451a66bdda8535c87ad2ae" name="zabbix7.0-debugsource" arch="x86_64">
  <version epoch="0" ver="7.0.28" rel="1.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.9-2" date="1739880000">- Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
  to zabbixX.Y in one transaction</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.11-1" date="1743595200">- Update to 7.0.11 (CVE-2024-45700)</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.16-1" date="1751889600">- Update to 7.0.16</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.18-1" date="1756296000">- Update to 7.0.18</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.20-1" date="1761825600">- Update to 7.0.20</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.22-1" date="1765972800">- Update to 7.0.22</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.23-1" date="1772884800">- Update to 7.0.23</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.25-1" date="1777291200">- Update to 7.0.25</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.26-1" date="1778414400">- Update to 7.0.26</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.28-1" date="1783684800">- Update to 7.0.28 upstream release</changelog>
</package>
<package pkgid="d53435dcd06edfc3f96a166230a0820570c109c2b89815e9173bae4f9aef9757" name="zabbix7.0-proxy-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.28" rel="1.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.9-2" date="1739880000">- Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
  to zabbixX.Y in one transaction</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.11-1" date="1743595200">- Update to 7.0.11 (CVE-2024-45700)</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.16-1" date="1751889600">- Update to 7.0.16</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.18-1" date="1756296000">- Update to 7.0.18</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.20-1" date="1761825600">- Update to 7.0.20</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.22-1" date="1765972800">- Update to 7.0.22</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.23-1" date="1772884800">- Update to 7.0.23</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.25-1" date="1777291200">- Update to 7.0.25</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.26-1" date="1778414400">- Update to 7.0.26</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.28-1" date="1783684800">- Update to 7.0.28 upstream release</changelog>
</package>
<package pkgid="17a79fe2c563c2aa336cef115386be92177122d4a00e727aa1b40acf28723c76" name="zabbix7.0-proxy-pgsql-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.28" rel="1.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.9-2" date="1739880000">- Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
  to zabbixX.Y in one transaction</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.11-1" date="1743595200">- Update to 7.0.11 (CVE-2024-45700)</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.16-1" date="1751889600">- Update to 7.0.16</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.18-1" date="1756296000">- Update to 7.0.18</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.20-1" date="1761825600">- Update to 7.0.20</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.22-1" date="1765972800">- Update to 7.0.22</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.23-1" date="1772884800">- Update to 7.0.23</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.25-1" date="1777291200">- Update to 7.0.25</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.26-1" date="1778414400">- Update to 7.0.26</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.28-1" date="1783684800">- Update to 7.0.28 upstream release</changelog>
</package>
<package pkgid="9d3506ff0791922ce3aaa8beb3565d2bfc3be09cba43fc16acd827e270b463cd" name="zabbix7.0-proxy-sqlite3-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.28" rel="1.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.9-2" date="1739880000">- Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
  to zabbixX.Y in one transaction</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.11-1" date="1743595200">- Update to 7.0.11 (CVE-2024-45700)</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.16-1" date="1751889600">- Update to 7.0.16</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.18-1" date="1756296000">- Update to 7.0.18</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.20-1" date="1761825600">- Update to 7.0.20</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.22-1" date="1765972800">- Update to 7.0.22</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.23-1" date="1772884800">- Update to 7.0.23</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.25-1" date="1777291200">- Update to 7.0.25</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.26-1" date="1778414400">- Update to 7.0.26</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.28-1" date="1783684800">- Update to 7.0.28 upstream release</changelog>
</package>
<package pkgid="6c40a8510ad9d483886bfbbff12514f6f42e98e9731b60e8940693b1a04f7250" name="zabbix7.0-server-mysql-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.28" rel="1.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.9-2" date="1739880000">- Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
  to zabbixX.Y in one transaction</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.11-1" date="1743595200">- Update to 7.0.11 (CVE-2024-45700)</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.16-1" date="1751889600">- Update to 7.0.16</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.18-1" date="1756296000">- Update to 7.0.18</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.20-1" date="1761825600">- Update to 7.0.20</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.22-1" date="1765972800">- Update to 7.0.22</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.23-1" date="1772884800">- Update to 7.0.23</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.25-1" date="1777291200">- Update to 7.0.25</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.26-1" date="1778414400">- Update to 7.0.26</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.28-1" date="1783684800">- Update to 7.0.28 upstream release</changelog>
</package>
<package pkgid="3f3c723734c946f357c7e3916d069922f053b40a87af23101bc0e63aebca617f" name="zabbix7.0-server-pgsql-debuginfo" arch="x86_64">
  <version epoch="0" ver="7.0.28" rel="1.el10_2"/>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.9-2" date="1739880000">- Re-install SELinux module in %posttrans to address "upgrade" from zabbixA.B
  to zabbixX.Y in one transaction</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.11-1" date="1743595200">- Update to 7.0.11 (CVE-2024-45700)</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.16-1" date="1751889600">- Update to 7.0.16</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.18-1" date="1756296000">- Update to 7.0.18</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.20-1" date="1761825600">- Update to 7.0.20</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.22-1" date="1765972800">- Update to 7.0.22</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.23-1" date="1772884800">- Update to 7.0.23</changelog>
  <changelog author="Morten Stevens &lt;mstevens@fedoraproject.org&gt; - 7.0.25-1" date="1777291200">- Update to 7.0.25</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.26-1" date="1778414400">- Update to 7.0.26</changelog>
  <changelog author="Orion Poplawski &lt;orion@nwra.com&gt; - 7.0.28-1" date="1783684800">- Update to 7.0.28 upstream release</changelog>
</package>
</otherdata>