PaulHowarth/Blog/2021-08-31

Tuesday 31st August 2021

Fedora Project

  • Jitka Plesnikova kindly reviewed and approved my perl-File-TreeCreate package submission

  • Updated proftpd to 1.3.7c in F-33, F-34, F-35, Rawhide and EPEL-8 playground:

    • Improve mod_tls log messages for unsupported older TLS protocol requests (GH#1273)

    • Fix memory disclosure to RADIUS servers by mod_radius (GH#1284)

    • Properly handle <VirtualHost> sections that use interface/device names (GH#1282)

    • PCRE expressions with capture groups are not being handled properly (GH#1300)

    • AuthUserFile permissions check fails during SIGHUP, causing ProFTPD to stop (GH#1307)

Local Packages

  • Updated proftpd to 1.3.7c as per the Fedora version

  • Updated proftpd (1.3.8) to 1.3.8rc2, building with libidn2 support:

    • mod_sftp crashes when handling aes256-ctr OpenSSH-specific key with some old OpenSSL versions (Bug #4401)

    • Improve mod_tls log messages for unsupported older TLS protocol requests (GH#1273)

    • Fix memory disclosure to RADIUS servers by mod_radius (GH#1284)

    • Properly handle <VirtualHost> sections that use interface/device names (GH#1282)

    • mod_ifsession failed to reset directory config lookup after <Directory> section merges (Bug #4315)

    • Support <Limit> configurations for HELP command (GH#1296)

    • PCRE expressions with capture groups are not being handled properly (GH#1300)

    • AuthUserFile permissions check fails during SIGHUP, causing ProFTPD to stop (GH#1307)

    • Add support for the libidn2 library, over libidn, for e.g. mod_rewrite mappings (GH#1286)

    • Changed the default behaviour of mod_tls, such that TLS renegotiations on control/data connections are not requested by default - TLS renegotiations have a long and sordid history; many SSL/TLS libraries no longer implement them, or disable them by default (Bug #4443)

    • mod_auth_otp should honour RequireTableEntry semantics for SFTP logins (GH#1319)


Recent