Accepted proftpd-dfsg 1.3.5e+r1.3.5-2+deb8u3 (source amd64 all) into oldoldstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 07 Aug 2019 17:07:51 +0200
Source: proftpd-dfsg
Binary: proftpd-basic proftpd-dev proftpd-doc proftpd-mod-mysql proftpd-mod-pgsql proftpd-mod-ldap proftpd-mod-odbc proftpd-mod-sqlite proftpd-mod-geoip
Architecture: source amd64 all
Version: 1.3.5e+r1.3.5-2+deb8u3
Distribution: jessie-security
Urgency: high
Maintainer: ProFTPD Maintainance Team <pkg-proftpd-maintainers@lists.alioth.debian.org>
Changed-By: Markus Koschany <apo@debian.org>
Description:
proftpd-basic - Versatile, virtual-hosting FTP daemon - binaries
proftpd-dev - Versatile, virtual-hosting FTP daemon - development files
proftpd-doc - Versatile, virtual-hosting FTP daemon - documentation
proftpd-mod-geoip - Versatile, virtual-hosting FTP daemon - GeoIP module
proftpd-mod-ldap - Versatile, virtual-hosting FTP daemon - LDAP module
proftpd-mod-mysql - Versatile, virtual-hosting FTP daemon - MySQL module
proftpd-mod-odbc - Versatile, virtual-hosting FTP daemon - ODBC module
proftpd-mod-pgsql - Versatile, virtual-hosting FTP daemon - PostgreSQL module
proftpd-mod-sqlite - Versatile, virtual-hosting FTP daemon - SQLite3 module
Changes:
proftpd-dfsg (1.3.5e+r1.3.5-2+deb8u3) jessie-security; urgency=high
.
* Non-maintainer upload by the LTS team.
* Fix CVE-2019-12815:
Tobias Maedel discovered that the mod_copy module of ProFTPD, a
FTP/SFTP/FTPS server, performed incomplete permission validation for the
CPFR/CPTO commands.
Checksums-Sha1:
a40860f8b49f6e804f5944395f1614177a2ca9f6 2985 proftpd-dfsg_1.3.5e+r1.3.5-2+deb8u3.dsc
7b38338c619775dfd3c321eeac586669692e883b 96960 proftpd-dfsg_1.3.5e+r1.3.5-2+deb8u3.debian.tar.xz
b8c47e08ce83537619b555251a3ac58670429615 2460658 proftpd-basic_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
7079589d82ae552d9d7df805a41cae3d61be3118 961248 proftpd-dev_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
9e29f33ed2f608343e881e8b23e5680dabab3001 476608 proftpd-mod-mysql_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
cc86e4f629b35cf32ef480d3f07a3ddc36e68bde 476292 proftpd-mod-pgsql_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
51754cbf9ded6362937f5826292b31de7d9ad7a3 484454 proftpd-mod-ldap_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
ed0ba68f85a5c5f80bd5c8d5ce58017fdb002fd1 477588 proftpd-mod-odbc_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
ce48b74f7c116c4177ff8848bbc062b922caaa58 475684 proftpd-mod-sqlite_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
1f12806aac5a024e1dcdc9999791908fea0e8af2 477296 proftpd-mod-geoip_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
b2f0516dd150d9fa6557603a5877f308d399def2 948774 proftpd-doc_1.3.5e+r1.3.5-2+deb8u3_all.deb
Checksums-Sha256:
e083e8f0b11b825ad7ef089553521ac86bb7058e29e67fb5af01799d862b67f4 2985 proftpd-dfsg_1.3.5e+r1.3.5-2+deb8u3.dsc
58fd61b0c49656d2eb28d4633f8838563c9d18503c646d0db746baa78c3e0436 96960 proftpd-dfsg_1.3.5e+r1.3.5-2+deb8u3.debian.tar.xz
7e99cfabb154c963deb1c2d08f9b786228b9fa6d4a1cc530a0f91d929964f442 2460658 proftpd-basic_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
cd3066e51df9c144e898b25a451c6786d8511de5d0fc397e22cff48a519f310e 961248 proftpd-dev_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
704fa08812c478a581834228cb6e828e606d9fbdbd974aea6bde64fd275669d8 476608 proftpd-mod-mysql_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
92a1e51a75e5703e075aa93ad51f0c12337bf15d7efc34c99215ca560211b5df 476292 proftpd-mod-pgsql_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
59ce7b4e91b538f79d0cc46de1aa1ac686a09539767eb509f2344848ed8657f5 484454 proftpd-mod-ldap_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
5de7788890d6f65cf10c8baf6401bc170f0c4907b0d319a66d413aa5186eb628 477588 proftpd-mod-odbc_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
bfe968bb396c399c179ea8eeca56b19cef60abe0bbf7b3ea867a90c113de8ea0 475684 proftpd-mod-sqlite_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
631fdf954e01028d5f27c90dac720f9254691d5dd8dd2005a6e5d5986f73bed1 477296 proftpd-mod-geoip_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
ff86f7bd06a9daab389d7a8feea0b24af2953ea4c7d7ba0f49cee0f555f223e7 948774 proftpd-doc_1.3.5e+r1.3.5-2+deb8u3_all.deb
Files:
fef40e244115f23dbe6a2bb97e44a460 2985 net optional proftpd-dfsg_1.3.5e+r1.3.5-2+deb8u3.dsc
e3cf82662ac1ad320176523f60ebc59c 96960 net optional proftpd-dfsg_1.3.5e+r1.3.5-2+deb8u3.debian.tar.xz
149f6954844f67b89f0a7f595ad8bbb5 2460658 net optional proftpd-basic_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
59d99d9156947be3b28b6b5dde84f556 961248 net optional proftpd-dev_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
c03d19783da28bde235579725224c118 476608 net optional proftpd-mod-mysql_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
7ffabb5954e1c0804e7a91582d10e655 476292 net optional proftpd-mod-pgsql_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
bd5eadabcf9ec91e6a09273c7815a43e 484454 net optional proftpd-mod-ldap_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
00234277d330bcc284bffa647b97a111 477588 net optional proftpd-mod-odbc_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
312cd6caa3a50d4b66320b0dc6bb01ca 475684 net optional proftpd-mod-sqlite_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
08e89ed770c3eec5c47eb4fe866aa73e 477296 net optional proftpd-mod-geoip_1.3.5e+r1.3.5-2+deb8u3_amd64.deb
91e1c4d3aa023ba8e047f0f6adfa430d 948774 doc optional proftpd-doc_1.3.5e+r1.3.5-2+deb8u3_all.deb
-----BEGIN PGP SIGNATURE-----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=Dm3J
-----END PGP SIGNATURE-----
Reply to: