proftpd/RELEASE_NOTES at master · heat1024/proftpd · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
                    1.3.7 Release Notes
                  ------------------------

This file contains a description of the major changes to ProFTPD for the
1.3.7 release cycle, from the 1.3.7rc1 release to the 1.3.7 maintenance
releases.  More information on these changes can be found in the NEWS and
ChangeLog files.

1.3.7rc1
---------

  + RootRevoke is now on by default, meaning that once authentication succeeds,
    all root privileges are dropped by default, unless the UserOwner directive
    (which requires root privileges) is used (Bug#4241).

  + The mod_ident module is no longer automatically built by default.
    To include the mod_ident module in the build, it must be explicitly
    requested via --enable-ident or --with-shared=mod_ident.

    This means that configuration files using the IdentLookups directive
    will now want to using an enclosing <IfModule> section, like so:

      <IfModule mod_ident.c>
        IdentLookups off
      </IfModule>

  + The mod_tls module now performs basic sanity checks of configured TLS
    files on startup (Issue#491).

  + The mod_deflate module now supports MODE Z data transfers when TLS
    is used (Issue#505).

  + The mod_xfer module now supports the RANG FTP command; see
    https://tools.ietf.org/html/draft-bryan-ftp-range-08 (Issue#351).

  + The ftpasswd script now supports a --change-home option, for changing
    the home directory of a user in an AuthUserFile (Issue#566).

  + The ftpasswd script supports deleting a user from a group (Issue#620).

  + Refactored the LogFormat handling code so that it is not longer
    duplicated by mod_log, mod_sql, etc.  The new Jot API is the common API
    to be used by modules for LogFormat variables and logging.

  + Generated new DH parameters for mod_sftp, mod_tls.


  + New Configuration Directives

    AuthFileOptions InsecurePerms

    RedisLogOnEvent (Issue#392)

    RedisOptions (Issue#477)

    RedisSentinel (Issue#396)


  + Changed Configuration Directives

    AllowForeignAddress class-name

    ExecEnviron %b (Issue#515)

    RedisServer db-index (Issue#550)

    RewriteMap idnatrans (Issue#231)

    RootRevoke on (Bug#4241)

    SFTPCipher, SFTPDigest
      Weak algorithms now disabled by default (Bug#4279)

    SFTPOptions IncludeSFTPTimes (Rebex lib bug)

    TLSProtocol TLSv1.3 (Issue#536)

    TLSServerCipherPreference
      The TLSServerCipherPreference directive is now enabled by default.

    TLSStaplingOptions NoFakeTryLater (Issue#518)


  + Removed Configuration Directives

    GroupPassword

    LoginPasswordPrompt

    TransferPriority (Issue#445)