Package: release.debian.org Severity: normal Tags: trixie X-Debbugs-Cc: [email protected] Control: affects -1 + src:proftpd-dfsg User: [email protected] Usertags: pu
[ Reason ] The upload fixes 3 security leaks in the current proftp package in stable. CVE-2026-119147, CVE-2026-119146 & CVE-2026-119364. [ Impact ] Vulnerability remains unfixed. [ Tests ] Upstream provides test suite, which still runs fine. [ Risks ] Risks are covered by the test suite. The fixes were copied from the current proftp version or backported to version in stable. [ Checklist ] [X] *all* changes are documented in the d/changelog [X] I reviewed all changes and I approve them [X] attach debdiff against the package in (old)stable [X] the issue is verified as fixed in unstable [ Changes ] The debdiff just contains the three patches to address the security issues.
proftp_1.3.8.c+dfsg-4+deb13u4_5.diff.xz
Description: application/xz
signature.asc
Description: PGP signature
