#1103154 proftpd-core: modules mod_ls and mod_xfer are not compiled in core

Package:
proftpd-core
Source:
proftpd-core
Description:
Versatile, virtual-hosting FTP daemon - binaries
Submitter:
Sylvain Faivre
Date:
2025-04-19 09:39:02 UTC
Severity:
normal
#1103154#5
Date:
2025-04-14 15:09:35 UTC
From:
To:
Dear Maintainer,

According to the changelog entry for 1.3.8.b+dfsg-3, mod_delay, mod_ls, mod_xfer should be in core modules, but they aren't.

Trixie box :
$ > proftpd -l
Compiled-in modules:
  mod_core.c
  mod_rlimit.c
  mod_auth_unix.c
  mod_auth_file.c
  mod_auth.c
  mod_log.c
  mod_site.c
  mod_facts.c
  mod_dso.c
  mod_auth_pam.c
  mod_cap.c
  mod_ctrls.c
  mod_lang.c

Bullseye box :
$ > proftpd -l
Compiled-in modules:
  mod_core.c
  mod_xfer.c
  mod_rlimit.c
  mod_auth_unix.c
  mod_auth_file.c
  mod_auth.c
  mod_ls.c
  mod_log.c
  mod_site.c
  mod_delay.c
  mod_facts.c
  mod_dso.c
  mod_auth_pam.c
  mod_cap.c
  mod_ctrls.c
  mod_lang.c

This causes some config directives to make proftpd fail to start. For example : TimeoutNoTransfer, TimeoutStalled
I suppose there is also missing runtime functionality, but I didn't test further.

#1103154#10
Date:
2025-04-17 22:10:04 UTC
From:
To:
On 14.04.25 Sylvain Faivre (sylvainfaivre@gmail.com) wrote:

Hello Sylvain,

I guess there is some misunderstanding. The command "proftpd -l"
lists the modules / features, which could be built as modules, but
are actually built into the proftp binary. The changelog says, that
the 3 features were moved out of the binary into modules files, which
are packaged in the Debian package, see [1].

So you just have to load them and the needed features are there.  And
yes, you are right: I could have added the "LoadModule xxxx"
statements into the /etc/proftpd/modules.conf file to make sure the
features are available, even after the upgrade (users may later
disable them).

Let me know, if I should implement this.

Hilmar

[1] https://packages.debian.org/sid/amd64/proftpd-core/filelist

#1103154#15
Date:
2025-04-19 09:36:22 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
proftpd-dfsg, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1103154@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Hilmar Preuße <hille42@debian.org> (supplier of updated proftpd-dfsg package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sat, 19 Apr 2025 11:20:43 +0200
Source: proftpd-dfsg
Architecture: source
Version: 1.3.8.c+dfsg-3
Distribution: unstable
Urgency: high
Maintainer: ProFTPD Maintainance Team <pkg-proftpd-maintainers@alioth-lists.debian.net>
Changed-By: Hilmar Preuße <hille42@debian.org>
Closes: 1103154
Changes:
 proftpd-dfsg (1.3.8.c+dfsg-3) unstable; urgency=high
 .
   * Load modules mod_delay.c, mod_ls.c & mod_xfer.c in modules.conf,
     else proftp won't start using default/sample configuration
     (Closes: #1103154).
Checksums-Sha1:
 1a480e9aacb3ef66585f666cb2b0444b6e8803f6 3371 proftpd-dfsg_1.3.8.c+dfsg-3.dsc
 e52b073a9776a42bd956baeea27a38be0a566102 79692 proftpd-dfsg_1.3.8.c+dfsg-3.debian.tar.xz
 b41e894a627f54ba78e3e0280c90d7ef97278a50 5946 proftpd-dfsg_1.3.8.c+dfsg-3_source.buildinfo
Checksums-Sha256:
 a506d4163e88fa77f9b457809f410d508fff2d40193ab20cc10246f6136e9b0c 3371 proftpd-dfsg_1.3.8.c+dfsg-3.dsc
 1209d78f0c5cb05efc5d20c769f83fa5a2d6f45c8c533d8de3a48bf5a3400687 79692 proftpd-dfsg_1.3.8.c+dfsg-3.debian.tar.xz
 d4e5f15d32589ec5572a8e0215e5427f71f367d400c817a193f6d8596a3d95fd 5946 proftpd-dfsg_1.3.8.c+dfsg-3_source.buildinfo
Files:
 156aceac0ce8d51cbb6acf4350fb27e7 3371 net optional proftpd-dfsg_1.3.8.c+dfsg-3.dsc
 113f6efca9ef8b931ee1466b5e644fa2 79692 net optional proftpd-dfsg_1.3.8.c+dfsg-3.debian.tar.xz
 95c724a5ee70b51bbe0866ae7a606e19 5946 net optional proftpd-dfsg_1.3.8.c+dfsg-3_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=N4xC
-----END PGP SIGNATURE-----