Public bug reported:
Binary package hint: sshguard
Please upgrade sshguard package to version 1.3 or 1.4. Version 1.3
contains significant bugfixes and lots of new features from the
currently packaged version in Ubuntu (1.0) including support for
protects from brute force attacks against new services, like:
- dovecot imapd
- UWimap imapd and pop
- FreeBSD's ftpd
- Proftpd
- pure-ftpd
- Cyrus imapd
whereas the current version only supports sshd.
Cumulative changelog from 1.0 through all the 1.1beta*, 1.1rc*, 1.2 and 1.3:
- support suspension
- support debug mode at runtime (-d) for helping users in problem solving
- support for metalog logging format
- fix parser bug when recognizing certain IPv6 addresses
- fix segfault when the pipe to sshguard is closed unexpectedly
- support for ipfilter as blocking backend (thanks Hellmuth Michaelis for
feedback)
- support for log messages authentication
- support for AIX genfilt firewall (thanks Gabor Szittner)
- fix "hosts" backend bug not discarding temporary files
- add monitoring support for new services:
@ dovecot imapd
@ UWimap imapd and pop
@ FreeBSD's ftpd
@ Proftpd
@ pure-ftpd
@ Cyrus imapd
- support for SSH "possible break-in attempt" messages;
- updated support for dovecot to include logging format of new versions;
- fix of IPF backend causing sshguard not to update /etc/ipf.rules (disallow
IPv6);
- fix detection of password when sshd doesn't log anything more than PAM;
- automatically detect when ipfw supports IPv6 (thanks David Horn);
- be sensitive to proftpd messages to auth facility, not daemon (thanks Andy
Berkvam);
- add sshd pattern for "Bad protocol" and "Did not receive identif string".
** Affects: sshguard (Ubuntu)
Importance: Undecided
Status: New
** Affects: sshguard (Debian)
Importance: Unknown
Status: Unknown
** Bug watch added: Debian Bug tracker #509029
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=509029
** Also affects: sshguard (Debian) via
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=509029
Importance: Unknown
Status: Unknown
--
New major upstream versions of sshguard (1.1, 1,2, 1.3 and 1.4) were released
on 2008-08 - 2008-12, please update debs
https://bugs.launchpad.net/bugs/323050
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
