Pambuyo pa zaka ziwiri ndi theka za chitukuko, kumasulidwa kwakukulu kwa seva ya ftp ProFTPD 1.3.8 kwasindikizidwa, ndi mphamvu zowonjezera ndi ntchito, ndi zofooka pakuzindikiritsa zowonongeka zoopsa. Kutulutsidwa kowongolera kwa ProFTPD 1.3.7f kumapezeka nthawi yomweyo ndipo kudzakhala komaliza pamndandanda wa ProFTPD 1.3.7.
Zatsopano zazikulu za ProFTPD 1.3.8:
- Thandizo la lamulo la FTP CSID (ID ya kasitomala / Seva) ikugwiritsidwa ntchito, yomwe ingagwiritsidwe ntchito kutumiza chidziwitso kuti mudziwe pulogalamu ya kasitomala pa seva ndi kulandira yankho ndi chidziwitso kuti mudziwe seva. Mwachitsanzo, kasitomala akhoza kulemba "CSID Name=BSD FTP; Version=7.3" ndi kulandira moyankha "200 Name=ProFTPD; Mtundu=1.3.8; OS=Ubuntu Linux; OSVer=22.04; CaseSensitive=1; DirSep=/;".
- Thandizo lowonjezera pakuwonjezedwa kwa "home-directory" kuti mukulitse ~/ ndi ~user/ njira zakukhazikitsa protocol ya SFTP. Mutha kugwiritsa ntchito malangizo a "SFTExtensions homeDirectory" kuti muthe.
- Thandizo lowonjezera la AES-GCM ciphers ku mod_sftp "[imelo ndiotetezedwa]"Ndipo"[imelo ndiotetezedwa]", komanso kuzungulira kwa makiyi olandila ("SFTPOptions NoHostkeyRotation") pogwiritsa ntchito zowonjezera za OpenSSH "[imelo ndiotetezedwa]"Ndipo"[imelo ndiotetezedwa]". Thandizo lothandizira ma ciphers a AES GCM awonjezedwa ku malangizo a SFTPCiphers.
- Chowonjezera "-enable-pcre2" njira yomanga ndi laibulale ya PCRE2 m'malo mwa PCRE. Kutha kusankha injini yanthawi zonse pakati pa PCRE2, POSIX ndi PCRE yawonjezedwa ku malangizo a RegexOptions.
- Onjezani malangizo a SFTPHostKeys kuti mutchule ma algorithms ofunikira omwe amaperekedwa kwa makasitomala a mod_sftp module.
- Dongosolo Lowonjezera la FactsDefault kuti mufotokoze bwino mndandanda wa "zowona" zomwe zabwezedwa mu mayankho a MLSD/MLSD FTP.
- Adawonjezera malangizo a LDAPConnectTimeout kuti afotokoze nthawi yolumikizana ndi seva ya LDAP.
- Malangizo a ListStyle awonjezedwa kuti azitha kulemba zomwe zili mumayendedwe a Windows.
- Lamulo la RedisLogFormatExtra lakhazikitsidwa kuti liwonjezere makiyi ndi zikhalidwe pa chipika cha JSON, chophatikizidwa ndi malangizo a RedisLogOnCommand ndi RedisLogOnEvent.
- The MaxLoginAttemptsFromUser parameter yawonjezedwa ku malangizo a BanOnEvent kuti aletse anthu ophatikizika ndi ma adilesi a IP.
- Thandizo lowonjezera la TLS polumikizana ndi Redis DBMS ku malangizo a RedisSentinel. Thandizo lowonjezeredwa ku malangizo a RedisServer pamawu osinthidwa a AUTH omwe amagwiritsidwa ntchito kuyambira Redis 6.x.
- Thandizo la ETM (Encrypt-Then-MAC) ma hashes awonjezedwa ku malangizo a SFTPDigests.
- Onjezani mbendera ya ReusePort ku malangizo a SocketOptions kuti mutsegule SO_REUSEPORT socket mode.
- Mbendera ya AllowSymlinkUpload yawonjezedwa ku malangizo a TransferOptions kuti muthe kutsitsanso maulalo ophiphiritsa.
- Thandizo la "curve448-sha512" makiyi osinthira makiyi awonjezedwa ku SFTPKeyExchanges malangizo.
- Kutha kuyika mafayilo owonjezera m'matebulo olola / kukana awonjezedwa ku mod_wrap2 module.
- Mtengo wosasinthika wa FSCachePolicy parameter wasinthidwa kukhala "off".
- Mod_sftp module yasinthidwa kuti igwiritsidwe ntchito ndi laibulale ya OpenSSL 3.x.
- Thandizo lowonjezera lomanga ndi laibulale ya libidn2 kuti mugwiritse ntchito Mayina Odziwika Padziko Lonse (IDNs).
- Chida cha ftpasswd chopangira ma hashes achinsinsi chili ndi SHA256 m'malo mwa MD5 yothandizidwa mwachisawawa.
Source: opennet.ru