MGASA-2021-0434
Updated proftpd packages fix security vulnerability
Fixes memory disclosure to RADIUS servers by mod_radius.
Ftp clients like filezilla fail to detect locale with in log : "Status: Server does not support non-ASCII characters."
This comes from proftpd MultilineRFC2228 directive enabled by default.
Without this directive Filezilla is able to enable utf8 options correctly.
Fixed by disabling MultilineRFC2228 directive.
What each source reports
OSV No score
Updated proftpd packages fix security vulnerability
Fixes memory disclosure to RADIUS servers by mod_radius.
Ftp clients like filezilla fail to detect locale with in log : "Status: Server does not support non-ASCII characters."
This comes from proftpd MultilineRFC2228 directive enabled by default.
Without this directive Filezilla is able to enable utf8 options correctly.
Fixed by disabling MultilineRFC2228 directive.
- Record
MGASA-2021-0434- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
proftpdMageia:8 |
before 1.3.7a-3.1.mga8 | 1.3.7a-3.1.mga8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2021-0434 is a vulnerability with no CVSS score yet in proftpd, published September 23, 2021. No source lists public exploit code. Fixed in proftpd 1.3.7a-3.1.mga8.