* Francesco P. Lovergine:

>> A use-after-free issue has been discovered in ProFTPd:
>> 
>> <http://bugs.proftpd.org/show_bug.cgi?id=3711>
>> 
>> It seems that squeeze is vulnerable, too.  I haven't checked the code
>> in lenny yet.

> I have 1.3.3a-6squeeze3 ready for squeeze with the required fix. 
> Waiting for a secteam go signal, just in case.

Thanks.  I trust that the call is at the right place, I find the code
somewhat confusing.

Please upload with the usual caveats (1.3.3a-6squeeze2 as version
number, squeeze-security suite, host security-master).



-- 
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to