Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package proftpd for openSUSE:Factory checked in at 2026-11-05 18:20:39 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/proftpd (Old) and /work/SRC/openSUSE:Factory/.proftpd.new.3759290 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "proftpd" Thu Nov 5 18:20:39 2026 rev:62 rq:1395094 version:1.3.9e Changes: -------- --- /work/SRC/openSUSE:Factory/proftpd/proftpd.changes 2026-08-31 15:58:15.728247214 +0200 +++ /work/SRC/openSUSE:Factory/.proftpd.new.3759290/proftpd.changes 2026-11-05 18:22:27.967077928 +0100 @@ -1,0 +2,18 @@ +Thu Nov 5 08:09:31 UTC 2026 - [email protected] + +- Update to 1.3.9e + * fix for boo#1289272 (CVE-2026-119147) + Fix for Authorization bypass via mod_sftp copy-file extension + * https://github.com/proftpd/proftpd/blob/v1.3.9d/NEWS + * Support opt-in use of Huffman encoding only for SSH compression, to + mitigate possible chosen-plaintext attack against concurrent channels + sharing same SSH connection (Issue gh#2366). +- Update to 1.3.9d + * https://github.com/proftpd/proftpd/blob/v1.3.9e/NEWS + * Addressed possible use-after-free issue in FTP STAT command. + * Fixed handling of default AllowForeignAddress behavior for passive data + transfers. +- rebased patch + * proftpd_no-BuildDate.patch + +------------------------------------------------------------------- Old: ---- proftpd-1.3.9c.obscpio New: ---- proftpd-1.3.9e.obscpio ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ proftpd.spec ++++++ --- /var/tmp/diff_new_pack.nXUHe5/_old 2026-11-05 18:22:29.561144193 +0100 +++ /var/tmp/diff_new_pack.nXUHe5/_new 2026-11-05 18:22:29.562144234 +0100 @@ -28,7 +28,7 @@ # We only accept updates for "STABLE" Versions License: GPL-2.0-or-later Group: Productivity/Networking/Ftp/Servers -Version: 1.3.9c +Version: 1.3.9e Release: 0 URL: http://www.proftpd.org/ Source0: %{name}-%{version}.tar.xz ++++++ _service ++++++ --- /var/tmp/diff_new_pack.nXUHe5/_old 2026-11-05 18:22:29.613146354 +0100 +++ /var/tmp/diff_new_pack.nXUHe5/_new 2026-11-05 18:22:29.616146479 +0100 @@ -3,7 +3,7 @@ <service name="obs_scm" mode="manual"> <param name="url">https://github.com/proftpd/proftpd.git</param> <param name="scm">git</param> - <param name="revision">v1.3.9c</param> + <param name="revision">v1.3.9e</param> <param name="versionformat">@PARENT_TAG@</param> <param name="versionrewrite-pattern">v(.*)</param> <param name="exclude">.git</param> ++++++ proftpd-1.3.9c.obscpio -> proftpd-1.3.9e.obscpio ++++++ ++++ 8335 lines of diff (skipped) ++++++ proftpd.obsinfo ++++++ --- /var/tmp/diff_new_pack.nXUHe5/_old 2026-11-05 18:22:30.827196822 +0100 +++ /var/tmp/diff_new_pack.nXUHe5/_new 2026-11-05 18:22:30.831196988 +0100 @@ -1,5 +1,5 @@ name: proftpd -version: 1.3.9c -mtime: 1783455420 -commit: 78a1bea439969913d7002bfb16ee7f0f60e262b4 +version: 1.3.9e +mtime: 1793051447 +commit: fc3f908a0d07fa3b17fbe1e3054b7520806bc75a ++++++ proftpd_no-BuildDate.patch ++++++ --- /var/tmp/diff_new_pack.nXUHe5/_old 2026-11-05 18:22:30.896199691 +0100 +++ /var/tmp/diff_new_pack.nXUHe5/_new 2026-11-05 18:22:30.899199815 +0100 @@ -22,7 +22,7 @@ =================================================================== --- src/main.c.orig +++ src/main.c -@@ -1987,8 +1987,8 @@ static void standalone_main(void) { +@@ -1994,8 +1994,8 @@ static void standalone_main(void) { exit(1); } @@ -33,7 +33,7 @@ daemon_loop(); } -@@ -2143,7 +2143,6 @@ static void show_settings(void) { +@@ -2150,7 +2150,6 @@ static void show_settings(void) { show_os_release(); @@ -41,7 +41,7 @@ printf("%s", " Built With:\n configure " PR_BUILD_OPTS "\n\n"); printf("%s", " CFLAGS: " PR_BUILD_CFLAGS "\n"); -@@ -2740,7 +2739,6 @@ int main(int argc, char *argv[], char ** +@@ -2747,7 +2746,6 @@ int main(int argc, char *argv[], char ** if (show_version >= 2) { printf("ProFTPD Version: %s", PROFTPD_VERSION_TEXT " " PR_STATUS "\n"); printf(" Scoreboard Version: %08x\n", PR_SCOREBOARD_VERSION); @@ -99,6 +99,6 @@ -#include "buildstamp.h" - /* Application version (in various forms) */ - #define PROFTPD_VERSION_NUMBER 0x0001030907 - #define PROFTPD_VERSION_TEXT "1.3.9c" + #define PROFTPD_VERSION_NUMBER 0x0001030909 + #define PROFTPD_VERSION_TEXT "1.3.9e"
