------------------------------------------------------------------------- Debian LTS Advisory DLA-4360-1 [email protected] https://www.debian.org/lts/security/ Santiago Ruano Rincón November 03, 2025 https://wiki.debian.org/LTS -------------------------------------------------------------------------
Package : pure-ftpd Version : 1.0.49-4.1+deb11u1 CVE ID : CVE-2021-40524 Debian Bug : 993810 It was discovered that pure-ftpd, a secure and efficient FTP server, incorrectly verified the maximum file size in the quota mechanism, allowing adversaries to upload files of unbounded size. This may lead to denial of service or a server hang. For Debian 11 bullseye, this problem has been fixed in version 1.0.49-4.1+deb11u1. We recommend that you upgrade your pure-ftpd packages. For the detailed security status of pure-ftpd please refer to its security tracker page at: https://security-tracker.debian.org/tracker/pure-ftpd Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS
signature.asc
Description: PGP signature
