#acl PaulHowarth:read,write,admin,revert,delete All:read

=== Monday 25th April 2022 ===

==== Fedora Project ====

 * Updated `perl-IO-Compress-Lzma` to 2.103 in Rawhide (no changes)
 * Updated `perl-PPI` to 1.273 in Rawhide:
  * Whitespace in signatures is now preserved ([[https://github.com/Perl-Critic/PPI/pull/257|GH#257]])
 * Updated `proftpd` to 1.3.7d in F-34, F-35, F-36 and Rawhide:
  * Fix crash with long lines in `AuthGroupFile` due to large `realloc`(3) ([[https://github.com/proftpd/proftpd/issues/1321|GH#1321]])
  * `NLST` did not behave consistently for relative paths ([[https://github.com/proftpd/proftpd/issues/1325|GH#1325]])
  * Implement `AllowForeignAddress` class matching for passive data transfers ([[https://github.com/proftpd/proftpd/issues/1346|GH#1346]])
  * `DeleteAbortedStores` removed successfully transferred files unexpectedly ([[ProftpdBugzilla:4467|Bug #4467]])
  * Keepalive socket options should be set using `IPPROTO_TCP`, not `SOL_SOCKET` ([[https://github.com/proftpd/proftpd/issues/1401|GH#1401]])
  * TCP keepalive `SocketOptions` should apply to control as well as data connection ([[https://github.com/proftpd/proftpd/issues/1402|GH#1402]])
  * ProFTPD always used the same `PassivePorts` port for first transfer ([[https://github.com/proftpd/proftpd/issues/1396|GH#1396]])
  * Name-based virtual hosts not working as expected after upgrade from 1.3.7a to 1.3.7b ([[https://github.com/proftpd/proftpd/issues/1369|GH#1369]])
 * Updated `proftpd` to 1.3.8rc3 in EPEL-9:
  * Support SSH hostkey rotation via OpenSSH extensions ([[https://github.com/proftpd/proftpd/issues/1323|GH#1323]])
  * `NLST` did not behave consistently for relative paths ([[https://github.com/proftpd/proftpd/issues/1325|GH#1325]])
  * Support AES Galois Counter Mode (AES-GCM) in SSH; support for the "`aes128-gcm@openssh.com`" and "`aes256-gcm@openssh.com`" ciphers has been added to `mod_sftp` ([[ProftpdBugzilla:3759|Bug #3759]])
  * Implement an `LDAPConnectTimeout` directive, to configure the timeout used when connecting to LDAP servers ([[https://github.com/proftpd/proftpd/issues/1333|GH#1333]])
  * Implement OpenSSH "Encrypt-Then-MAC" (ETM) algorithm extensions ([[https://github.com/proftpd/proftpd/issues/1330|GH#1330]])
  * Implement `AllowForeignAddress` class matching for passive data transfers ([[https://github.com/proftpd/proftpd/issues/1346|GH#1346]])
  * Implement support for PCRE2 ([[https://github.com/proftpd/proftpd/issues/1353|GH#1353]])
  * ProFTPD wouldn't start with several locales ([[ProftpdBugzilla:4466|Bug #4466]])
  * Auth sources providing space-bearing user/group names caused compliance issues with `MLSD`/`MLST` responses ([[https://github.com/proftpd/proftpd/issues/1367|GH#1367]])
  * `DeleteAbortedStores` removed successfully transferred files unexpectedly ([[ProftpdBugzilla:4467|Bug #4467]])
  * Omit `EPRT`/`EPSV` from `FEAT` response when denied by `<Limit>` configuration ([[https://github.com/proftpd/proftpd/issues/1383|GH#1383]])
  * Support uploading to symlinked files ([[https://github.com/proftpd/proftpd/issues/1379|GH#1379]])
  * Keepalive socket options should be set using `IPPROTO_TCP`, not `SOL_SOCKET` ([[https://github.com/proftpd/proftpd/issues/1401|GH#1401]])
  * TCP keepalive `SocketOptions` should apply to control as well as data connection ([[https://github.com/proftpd/proftpd/issues/1402|GH#1402]])
  * ProFTPD always used the same `PassivePorts` port for first transfer ([[https://github.com/proftpd/proftpd/issues/1396|GH#1396]])
  * `mod_sftp` needs to handle unknown SSH messages in an RFC-compliant manner, ignoring rather than disconnecting ([[https://github.com/proftpd/proftpd/issues/1410|GH#1410]])
  * Improve handling of some globally applied configuration directives ([[https://github.com/proftpd/proftpd/issues/1418|GH#1418]])
  * Name-based virtual hosts not working as expected after upgrade from 1.3.7a to 1.3.7b ([[https://github.com/proftpd/proftpd/issues/1369|GH#1369]])

==== Local Packages ====

 * Updated `perl-DateTime-Locale` to 1.35:
  * The code passed to `DateTime::Locale->load` is now validated and untainted before using it to load and `eval` data from the filesystem (based on [[https://github.com/houseabsolute/DateTime-Locale/pull/30|GH#30]])
 * Updated `perl-PPI` to 1.273 as per the Fedora version
 * Updated `proftpd` to 1.3.7d as per the Fedora version
 * Updated `proftpd` to 1.3.8rc3 as per the EPEL-9 version

----