wzdftpd (0.8.3-1ubuntu1) hardy; urgency=low
* Merge from Debian unstable. Remaining Ubuntu changes:
- wzdftp-back-pgsql depends on postgresql-client instead of
postgresql
- Update maintainer field in debian/control.
* debian/init.d: create /var/run/wzdftpd with correct permissions (LP:
#154769)
* drop patches:
- 90_CVE-2007-5300_off_by_one_fix.dpatch: fixed upstream
wzdftpd (0.8.3-1) unstable; urgency=high
* New upstream release
* Ack NMU for security fix (Closes: #446192)
* Drop 10_new_pam_header and 20_config_typos, included in upstream
wzdftpd (0.8.2-2.1) unstable; urgency=high
* Non-maintainer upload by testing security team.
* Fix off-by-one in wzd_login.c which leads to a remote
denial of service vulnerability (CVE-2007-5300) (Closes: #446192).
-- Lionel Porcheron <[EMAIL PROTECTED]> Thu, 08 Nov 2007
09:57:31 +0100
** Changed in: wzdftpd (Ubuntu)
Status: Confirmed => Fix Released
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2007-5300
--
wzdftpd
https://bugs.launchpad.net/bugs/154769
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
