Bug#971742: proftpd-basic: Symlink navigation broken

[Andrea Capriotti]

Package: proftpd-basic
Version: 1.3.6-4+deb10u5
Severity: important

Dear Maintainer,

symlinks are not working.

You can reproduce the issue by creating a link:

# ls -ltr
total 4
lrwxrwxrwx 1 user group    4 Oct  6 10:31 dir2 -> dir1
drwxr-xr-x 2 user group 4096 Oct  6 10:31 dir1

and accessing it with an ftp client:

lftp user at ftps.test.loc:/test> ls
drwxr-xr-x   2 user group      4096 Oct  6 10:31 dir1
lrwxrwxrwx   1 user group         4 Oct  6 10:31 dir2 -> /dir2/dir1

lftp user at ftps.test.loc:/test> cd dir2
cd: Access failed: 550 dir2: No such file or directory (/test/dir2)

I think it may be this upstream bug and patch:

http://bugs.proftpd.org/show_bug.cgi?id=4332

Can you have a look?



-- System Information:
Debian Release: 10.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 5.8.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=C.UTF-8 (charmap=UTF-8), LANGUAGE=C
(charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: unable to detect

Versions of packages proftpd-basic depends on:
ii  adduser            3.118
ii  debianutils        4.8.6.1
ii  libacl1            2.2.53-4
ii  libattr1           1:2.4.48-4
ii  libc6              2.28-10
ii  libcap2            1:2.25-2
ii  libhiredis0.14     0.14.0-3
ii  libmemcached11     1.0.18-4.2
ii  libmemcachedutil2  1.0.18-4.2
ii  libncursesw6       6.1+20181013-2+deb10u2
ii  libpam-runtime     1.3.1-5
ii  libpam0g           1.3.1-5
ii  libpcre3           2:8.39-12
ii  libssl1.1          1.1.1d-0+deb10u3
ii  libtinfo6          6.1+20181013-2+deb10u2
ii  libwrap0           7.6.q-28
ii  lsb-base           10.2019051400
ii  netbase            5.6
ii  sed                4.7-1
ii  ucf                3.0038+nmu1
ii  zlib1g             1:1.2.11.dfsg-1

Versions of packages proftpd-basic recommends:
ii  proftpd-doc  1.3.6-4+deb10u5

Versions of packages proftpd-basic suggests:
pn  openbsd-inetd | inet-superserver  <none>
ii  openssl                           1.1.1d-0+deb10u3
pn  proftpd-mod-geoip                 <none>
ii  proftpd-mod-ldap                  1.3.6-4+deb10u5
ii  proftpd-mod-mysql                 1.3.6-4+deb10u5
pn  proftpd-mod-odbc                  <none>
ii  proftpd-mod-pgsql                 1.3.6-4+deb10u5
pn  proftpd-mod-snmp                  <none>
pn  proftpd-mod-sqlite                <none>

-- no debconf information