ProFTPD 1.3.8 FTP server release

After two and a half years of development, a significant release of the ProFTPD 1.3.8 FTP server has been published, with strengths being extensibility and functionality, while weaknesses include the occasional discovery of dangerous vulnerabilities. At the same time, a corrective release ProFTPD 1.3.7f is available, which will be the last in the ProFTPD 1.3.7 series.

Key innovations of ProFTPD 1.3.8:

• Support for the FTP command CSID (Client/Server ID) has been implemented, which can be used to send information for identifying client software on the server and to receive a response with server identification information. For example, a client may send “CSID Name=BSD FTP; Version=7.3” and receive in response “200 Name=ProFTPD; Version=1.3.8; OS=Ubuntu Linux; OSVer=22.04; CaseSensitive=1; DirSep=/;”.
• Support for the SFTP protocol has been added with the extension "home-directory" to disclose paths ~/ and ~user/. To enable it, the directive "SFTPExtensions homeDirectory" can be used.
• Support for AES-GCM ciphers "aes128-gcm@openssh.com" and "aes256-gcm@openssh.com" has been added to mod_sftp, as well as host key rotation ("SFTPOptions NoHostkeyRotation") using OpenSSH extensions "hostkeys-00@openssh.com" and "hostkeys-prove-00@openssh.com". The directive SFTPCiphers has been augmented to include support for AES GCM ciphers.
• An option "--enable-pcre2" has been added for building with the PCRE2 library instead of PCRE. The directive RegexOptions now allows for selection of the regular expression engine between PCRE2, POSIX, and PCRE.
• A directive SFTPHostKeys has been added to specify the host key algorithms offered to clients for the mod_sftp module.
• A directive FactsDefault has been added to explicitly define the list of "facts" returned in FTP responses MLSD/MLSD.
• A directive LDAPConnectTimeout has been added to set the timeout for connecting to the LDAP server.
• A directive ListStyle has been added to enable output of directory content listings in Windows style.
• The directive RedisLogFormatExtra has been implemented to add custom keys and values to the JSON log included by the directives RedisLogOnCommand and RedisLogOnEvent.
• A parameter MaxLoginAttemptsFromUser has been added to the directive BanOnEvent for blocking specified user combinations. IP adreses.
• Support for TLS in connection with the Redis database has been added to the directive RedisSentinel. The directive RedisServer now supports a modified syntax for the AUTH command used since Redis 6.x.
• Support for ETM (Encrypt-Then-MAC) hashes has been added to the directive SFTPDigests.
• SocketOptions direktīvā ir pievienots karogs ReusePort, lai aktivizētu SO_REUSEPORT soketu režīmu.
• TransferOptions direktīvā ir pievienots karogs AllowSymlinkUpload, lai atjaunotu iespēju augšupielādēt simboliskus saites.
• SFTPKeyExchanges direktīvā ir pievienota atbalsts atslēgu apmaiņas algoritmam „curve448-sha512”.
• Moduļī mod_wrap2 ir pievienota iespēja ievietot papildu failus atļauju/aizliegumu tabulās.
• Parametra FSCachePolicy noklusējuma vērtība ir mainīta uz „off”.
• Moduļi mod_sftp ir pielāgoti, lai strādātu ar OpenSSL 3.x bibliotēku.
• Ir pievienots atbalsts būvēšanai ar libidn2 bibliotēku, lai izmantotu internacionalizētus domēna nosaukumu (IDN).
• Ftpasswd utilitāte, lai ģenerētu paroļu hash, noklusējuma iestatījumā ir iekļauts SHA256 algoritms, nevis MD5.

Avots: opennet.lv