Markus Koschany pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
a8f4cc1e by Markus Koschany at 2019-04-08T23:51:22Z
Mark open proftpd-issues as fixed in 1.3.5e-0+deb8u1
- - - - -
1 changed file:
- data/CVE/list
Changes:
=====================================
data/CVE/list
=====================================
@@ -4035,6 +4035,7 @@ CVE-2019-9625 (JBMC DirectAdmin 1.55 allows CSRF via the
/CMD_ACCOUNT_ADMIN URI
CVE-2019-XXXX [high memory usage with some long running sessions]
- proftpd-dfsg 1.3.5d-1 (bug #923926)
[stretch] - proftpd-dfsg <no-dsa> (Minor issue)
+ [jessie] - proftpd-dfsg 1.3.5e-0+deb8u1
NOTE:
https://github.com/proftpd/proftpd/issues/330#issuecomment-276891713
NOTE:
https://forum.armbian.com/topic/9692-nanopi-neo-2-memory-leak-in-proftpd-even-worse-if-ssl-encrypted/?do=findComment&comment=73069
CVE-2019-9624 (Webmin 1.900 allows remote attackers to execute arbitrary code
by leve ...)
@@ -165553,7 +165554,7 @@ CVE-2015-8377 (SQL injection vulnerability in the
host_new_graphs_save function
NOTE:
http://seclists.org/fulldisclosure/2015/Dec/att-57/cacti_sqli%281%29.txt
CVE-2015-XXXX [Avoid unbounded SFTP extended attribute key/values]
- proftpd-dfsg 1.3.5b-1
- [jessie] - proftpd-dfsg <no-dsa> (Minor issue; can be fixed in point
release)
+ [jessie] - proftpd-dfsg 1.3.5e-0+deb8u1
[wheezy] - proftpd-dfsg <no-dsa> (Minor issue; can be fixed in point
release)
[squeeze] - proftpd-dfsg <not-affected> (Vulnerable code not present)
NOTE: http://bugs.proftpd.org/show_bug.cgi?id=4210
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/a8f4cc1eb14efa3f0ec48e3f6bdbc75c6ac408ca
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/commit/a8f4cc1eb14efa3f0ec48e3f6bdbc75c6ac408ca
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
debian-security-tracker-commits@alioth-lists.debian.net
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
