Simon Hill wrote:

> Summary: WU-FTP is vulnerable to a buffer overflow exploit.
> An update either is or will be available from updates.redhat.com

 
Just would like to add that (as the article mentions) the popular
ProFTPd is also affected.  Updated packages for both wu-ftp and proftpd
are availible in Debian frozen (what will become 2.1)  but maybe haven't
propogated to all the mirrors yet.  I highly recommend that anyone
running an ftp daemon regardless of the distribution make sure you have
the latest version, or turn it off it it's not absolutely neccesary.  

An unrelated question: has anyone any experience using Debian apt-get
dist-upgrade to move from 2.0 to 2.1?  I'm thinking about doing it this
weekend.  I'm currently running a mixture of 2.0 and 2.1 packages and
I'd just like to know if there are any caveats I should be aware of.  

thanks,
Preston
---------------------------------------------------------------------------
Send administrative requests to [EMAIL PROTECTED]

Reply via email to