After two and a half years of development published Significant release of the FTP server Proftpd 1.3.8 , the strengths of which are extensibility and functionality, and weak are the periodic owl dangerous vulnerability. At the same time, the corrective issue of Proftpd 1.3.7F , which will be the last in the Proftpd 1.3.7 series.
The main innovations Proftpd 1.3.8:
- Support for the FTP command csid Server ID), which can be used to send information to identify client software on the server and receive an answer with information for the identification of the server. For example, the client may weave “CSID NAME = BSD FTP; Version = 7.3” and get in response “200 NAME = ProftPD; Version = 1.3.8; OS = Ubuntu Linux; Osver = 22.04; CaseSensitive = 1; Dirasep =/;” ” .
- The implementation of the SFTP protocol has added support for the expansion of “Home-Directory” for revealing ways ~/ and ~ user/. To turn on, you can use the directive “SFTpeXTensions Homedirectory”.
- Mod_SFTP Support for ciphers AES-gCM “[email protected]” and “[email protected]”, as well as the rotation of the hosts (“SFTPOPTIONS NOHOSTKEROTATION”) @Opensh.com “and” [email protected] “. SFTPCIPHers directive added on the inclusion of ciphers AES GCM.
- Added option “–enable-PCRE2” for assembly with the PCRE2 library instead of PCre. REGEXOPTIONS Directive added the ability to choose regular expressions between PCRE2, POSIX and PCre.
- Added the SFTPHOSTKEYS directive to specify the algorithms of host keys for customers for the module Mod_SFTP.
- Added the directive of Factsdefault to explicitly determine the list of returned “facts” in FTP answers of MLSD/MLSD.
- Added the directive of LDAPCONNECTIOUT to determine the TIMUUT connection to the LDAP server.
- Added ListStyle Directive, which allows to include the output of the list of catalogs in the Windows style.
- Redislogformatextra directive has been implemented to add its own keys and values to the JSON-therapy included in the Redislogoncommand and Redislogonevent Directors
- The Banonevent Directive added the MaxloginatTemptsfromuser parameter to block the specified combinations of users and IP addresses.
- Redissentinel directive added TLS support when connecting to the Redis DBMS. Redisserver directive has added support for the altered AUTH team syntax, used from Redis 6.x.
- SFTPDIGESTS Directive Added support for Hashi ETM (Encrypt-Ten-Mac).
- The refractOptions directive added the Reuseport flag to turn on the SO_REUSEPORT socket mode
- Transferoptions Directive added the AllowsMlinkUpload flag to return the opportunity to download to symbolic links.
/Media reports cited above.