Bastien Roucariès pushed to branch master at Debian Security Tracker /
security-tracker
Commits:
bf43b043 by Bastien Roucariès at 2024-11-29T18:08:37+00:00
Reserve DLA-3975-1 for proftpd-dfsg
- - - - -
3 changed files:
- data/CVE/list
- data/DLA/list
- data/dla-needed.txt
Changes:
=====================================
data/CVE/list
=====================================
@@ -92794,7 +92794,6 @@ CVE-2023-6690 (A race condition in GitHub Enterprise
Server allowed an existing
CVE-2023-51713 (make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte
out-of- ...)
- proftpd-dfsg 1.3.8.a+dfsg-1
[bookworm] - proftpd-dfsg 1.3.8+dfsg-4+deb12u3
- [bullseye] - proftpd-dfsg <no-dsa> (Minor issue)
[buster] - proftpd-dfsg <no-dsa> (Minor issue)
NOTE: https://github.com/proftpd/proftpd/issues/1683
NOTE:
https://github.com/proftpd/proftpd/commit/1376d8ccc0966d1ce9a1c76b32c6a9ca61bbe67f
(v1.3.9rc1)
@@ -93881,7 +93880,6 @@ CVE-2023-48795 (The SSH transport protocol with certain
OpenSSH extensions, foun
- php-phpseclib3 3.0.35-1
- proftpd-dfsg 1.3.8.b+dfsg-1 (bug #1059144)
[bookworm] - proftpd-dfsg 1.3.8+dfsg-4+deb12u3
- [bullseye] - proftpd-dfsg <ignored> (Minor issue)
[buster] - proftpd-dfsg <no-dsa> (Minor issue)
- proftpd-mod-proxy 0.9.3-1 (bug #1059290)
[bookworm] - proftpd-mod-proxy 0.9.2-1+deb12u1
=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[29 Nov 2024] DLA-3975-1 proftpd-dfsg - security update
+ {CVE-2023-48795 CVE-2023-51713 CVE-2024-48651}
+ [bullseye] - proftpd-dfsg 1.3.7a+dfsg-12+deb11u3
[29 Nov 2024] DLA-3974-1 dnsmasq - security update
{CVE-2022-0934 CVE-2023-28450 CVE-2023-50387 CVE-2023-50868}
[bullseye] - dnsmasq 2.85-1+deb11u1
=====================================
data/dla-needed.txt
=====================================
@@ -137,10 +137,6 @@ pgpool2 (abhijith)
NOTE: 20241123: Backported patches for all open issues (abhijith)
NOTE: 20241123: https://people.debian.org/~abhijith/upload/pg2/ (abhijith)
--
-proftpd-dfsg (rouca)
- NOTE: 20240815: Added by Front-Desk (Beuc)
- NOTE: 20240815: Follow fixes from bookworm 12.5 (2 CVEs) (Beuc/front-desk)
---
python-aiohttp
NOTE: 20240523: Added by oldstable Security Team (jmm)
NOTE: 20240815: A bookworm DSA is planned (Beuc/front-desk)
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bf43b043a7670167cb5ca7b4ab4ea7a94bb61754
--
View it on GitLab:
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bf43b043a7670167cb5ca7b4ab4ea7a94bb61754
You're receiving this email because of your account on salsa.debian.org.
_______________________________________________
debian-security-tracker-commits mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/debian-security-tracker-commits
