程业春

CVE-2022-20385

5

https://security-tracker.debian.org/tracker/CVE-2022-20385

The mode of obtaining the system time through the lftp process is modified to rectify the timeout mechanism of the lftp process. https://github.com/lavv17/lftp/issues/718

Lftp Timeout Mechanism

1

When you run the lftp command to connect to an unknown host, the connection times out and the connection is disconnected. However, after the lftp command is started, the local...

Repeated reload operations may cause memory leakage.

3

### What I Did Run the kill -hup {pid} command for the proftpd process repeatedly. As a result, the RSS of the process increases. Memory leakage may occur. After analysis,...

The file growth logic and retransmission judgment logic are optimized.

2

The file growth logic and retransmission judgment logic are optimized.