Bug#777214: proftpd-basic: HTTPS/FTPS protocol confusion leads to XSS

2016-08-25 Thread Hilmar Preusse
On 06.02.15 Jörg Ludwig (joerg.lud...@iserv.eu) wrote: Hi, > there is a security problem in every Debian package of proftpd which was > fixed upstream on 2014-12-15: > http://bugs.proftpd.org/show_bug.cgi?id=4143 > This problem has been solved in 1.3.5a currently in unstable. Is that sufficient

Bug#777214: proftpd-basic: HTTPS/FTPS protocol confusion leads to XSS

2015-02-06 Thread Jörg Ludwig
Package: proftpd-basic Version: 1.3.4a-5+iserv1 Severity: important Dear Maintainer, there is a security problem in every Debian package of proftpd which was fixed upstream on 2014-12-15: http://bugs.proftpd.org/show_bug.cgi?id=4143 -- System Information: Debian Release: 7.8 APT prefers st