proftpd-core update from 1.3.7a to newer version because of FTPS with virtual host throws signal 11

[Ralf Eßwein]

Am 22.10.2022 um 22:40 schrieb Hilmar Preuße:

> Am 22.10.2022 um 15:15 teilte Ralf Eßwein mit:
>
> Hi Ralf,
>
>> my installation of debian 11 proftpd server, version 1.3.7a, does not
>> work anymore with FTPS access to the virtual host configuration in
>> standalone mode. I use it seldom, but remember it worked in a previous
>> version.  The observed failure on FTPS access with "signal 11" could
>> have been fixed in upstream available versions starting with i.e.
>> proftpd 1.3.7b in the realm of i.e.
>> https://github.com/proftpd/proftpd/issues/1063
>> https://github.com/proftpd/proftpd/issues/1239 .
>> IP based adressing still works.
>>
>> Would it be possible to update the package proftpd in a next debian 11
>> dot release?
>>
>
> The patch for 1063 is contained in
>
> proftpd-dfsg (1.3.7a-2) unstable; urgency=medium
>
>   [ Hilmar Preusse ]
>   * Applied some patches pulled from upstream.
>     - upstream_1063: Avoid segfaults for TLSv1.3 data transfers in
>       our session tickey callback by checking the status before using
>       SSL_SESSION pointer.
>
> The 1239 is just a reference to this one. Do have the chance to pull
> the 1.3.d-2 (in fact 1.3.7e) from our repo, build it and check if it
> solves your issue?
>
> Hilmar
>
Hi Hilmar,

a source build  is something I tried to avoid, but I will try it, may
take some time.

Thanks and Kind Regards
Ralf