Updating vsftpd to 2.0.7?
 

Hi everyone,

I'd like your opinion about a possible update of vsftpd from 2.0.6 to 2.0.7.
I know we're past FF, but I didn't care about it earlier, thinking the package
would have been updated in Debian and synced/merged to Ubuntu. Obviously it
isn't the case, and I was told that no one in particular takes care of that
package in Ubuntu.

The main reason for which I'd like 2.0.7 is because it fixes a bug [1] that
makes it impossible to connect with FTPS using a recent version of FileZilla.
(This is by the way a fix I'd like to backport to hardy-updates).

- Shutdown the SSL data connections properly. This prevents clients such as
recent FileZilla from complaining. Reported by various people.

[1] https://launchpad.net/bugs/254905

Moreover, the changelog [2] is pretty small. Some changes don't affect us or are
trivial, some are bug fixes, and 2 are added config options.

- Fix finding libcap for the link on Slackware systems, thanks to Roman
Kravchenko <roman@atech.lv>.
- Fix build on Solaris 2.8 due to non-standard C, thanks to IIDA Yosiaki
<y-iida@secom.co.jp>.
- Fix man page typo, thanks Matt Selsky <selsky@columbia.edu>.
- Bring the PASV listen() into the bind() retry loop to resolve a race under
extreme load. Thanks to Curtis Taylor <cjt@us.ibm.com>.
- Enhance logging for debug_ssl.
- Shutdown the SSL data connections properly. This prevents clients such as
recent FileZilla from complaining. Reported by various people.
- Add option to enforce proper SSL shutdown on uploads. Left it off after much
agonizing because clients are so broken in this area.
- Add option to delete failed uploads.

[2] ftp://vsftpd.beasts.org/users/cevans/untar/vsftpd-2.0.7/Changelog

The diffstat looks like this:

Changelog | 17 ++++++
README | 2
ftpdataio.c | 6 +-
ftpdataio.h | 5 +-
parseconf.c | 4 +
postlogin.c | 33 ++++++++++---
privops.c | 3 -
readwrite.c | 4 -
readwrite.h | 3 -
ssl.c | 138 +++++++++++++++++++++++++++++++++++++++++++++++++-------
ssl.h | 4 -
standalone.c | 6 ++
sysutil.c | 12 +++-
sysutil.h | 2
tunables.c | 4 +
tunables.h | 4 +
vsf_findlibs.sh | 1
vsftpd.conf.5 | 32 ++++++++++++
vsftpver.h | 2
19 files changed, 239 insertions(+), 43 deletions(-)

This update doesn't seem to require any packaging change. The few tests I've
done so far were successful.

What do you think about this?

If there is no strong opposition, I'll file an FFe request as soon as possible,
so that we can hopefully get this in before Alpha 6 freeze.

--
Adrien Cunin aka Adri2000
--
ubuntu-server mailing list
ubuntu-server@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server
More info: https://wiki.ubuntu.com/ServerTeam