Skip to content

Commit

Permalink
Preparing to release 1.3.7rc3.
Browse files Browse the repository at this point in the history
  • Loading branch information
Castaglia committed Feb 19, 2020
1 parent e7ae9ee commit a117ed7
Show file tree
Hide file tree
Showing 2 changed files with 23 additions and 8 deletions.
29 changes: 22 additions & 7 deletions RELEASE_NOTES
Expand Up @@ -9,25 +9,40 @@ ChangeLog files.
1.3.7rc3
---------

+ Fixed regression in directory listing latency (Issue#863).
+ Fixed regression in directory listing latency (Issue #863).

+ Fixed use-after-free vulnerability during data transfers (Issue#903).
+ Fixed use-after-free vulnerability during data transfers (Issue #903).

+ Addressed out-of-bounds read in mod_cap by removing bundled libcap, and
relying solely on the system-provided libcap (Issue#902).
relying solely on the system-provided libcap (Issue #902). Note that
building ProFTPD from source will *not* automatically include the
mod_cap module, unless the libcap library is available.

+ mod_sftp now supports OpenSSH-specific private host keys (Issue#793).
+ mod_sftp now supports OpenSSH-specific private host keys (Issue #793).
Newer versions of OpenSSH ssh-keygen(1) automatically generate private
keys formatted with this OpenSSH-specific format.

+ mod_sftp now supports Ed25519 keys (Bug#4221)
+ mod_sftp now supports Ed25519 keys (Bug #4221).

+ mod_tls now honors client-provided SNI as part of the TLS handshake,
for implementing name-based virtual hosts via TLS SNI.

+ Changed Configuration Directives

SQLAuthTypes bcrypt (Issue#692)
SQLAuthTypes bcrypt
The mod_sql_passwd module now supports bcrypt-encrypted passwords.
This can be enabled using:

TLSOption IgnoreSNI (Issue#850)
SQLAuthTypes bcrypt

in your mod_sql configuration. See doc/contrib/mod_sql_password.html
for more information.

TLSOption IgnoreSNI
The TLSOption directive now supports an "IgnoreSNI" setting, to
tell mod_tls to ignore/not use any SNI, provided by the client in the
TLS handshake, for determining any name-based virtual hosts. See
doc/contrib/mod_tls.html#TLSOption for more details.


1.3.7rc2
Expand Down
2 changes: 1 addition & 1 deletion include/version.h
Expand Up @@ -12,4 +12,4 @@ unsigned long pr_version_get_number(void);
const char *pr_version_get_str(void);

/* PR_STATUS is reported by --version-status -- don't ask why */
#define PR_STATUS "(git)"
#define PR_STATUS "(devel)"

0 comments on commit a117ed7

Please sign in to comment.