Control: tags -1 + moreinfo Hi,
On Sun, Nov 08, 2026 at 11:19:58AM -0500, Sumit Verma wrote: > Source: vsftpd > Version: 3.0.5-1 > Severity: normal > Tags: security upstream patch > > Hi, > > CVE-2026-119567 is listed as undetermined and has no Debian bug. It does > affect Debian, and a small patch is attached. [...] AFAICS this is not a upstream blessed patch. Can you please contact upstream from https://security.appspot.com/vsftpd.html and report the issue there and loop back here please the replies. Thanks already. Regards, Salvatore

