-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 08 Apr 2019 21:30:59 +0200 Source: proftpd-dfsg Binary: proftpd-basic proftpd-dev proftpd-doc proftpd-mod-mysql proftpd-mod-pgsql proftpd-mod-ldap proftpd-mod-odbc proftpd-mod-sqlite proftpd-mod-geoip Architecture: source amd64 all Version: 1.3.5e-0+deb8u1 Distribution: jessie-security Urgency: high Maintainer: ProFTPD Maintainance Team <pkg-proftpd-maintain...@lists.alioth.debian.org> Changed-By: Markus Koschany <a...@debian.org> Description: proftpd-basic - Versatile, virtual-hosting FTP daemon - binaries proftpd-dev - Versatile, virtual-hosting FTP daemon - development files proftpd-doc - Versatile, virtual-hosting FTP daemon - documentation proftpd-mod-geoip - Versatile, virtual-hosting FTP daemon - GeoIP module proftpd-mod-ldap - Versatile, virtual-hosting FTP daemon - LDAP module proftpd-mod-mysql - Versatile, virtual-hosting FTP daemon - MySQL module proftpd-mod-odbc - Versatile, virtual-hosting FTP daemon - ODBC module proftpd-mod-pgsql - Versatile, virtual-hosting FTP daemon - PostgreSQL module proftpd-mod-sqlite - Versatile, virtual-hosting FTP daemon - SQLite3 module Closes: 923926 Changes: proftpd-dfsg (1.3.5e-0+deb8u1) jessie-security; urgency=high . * New upstream version 1.3.5e. This upstream release fixes several memory leaks when mod_facl or mod_sftp is used which could lead to memory exhaustion and a denial-of-service. (Closes: #923926). * Rebase odbc patch for new release. * Remove CVE security patches. They were applied by upstream. Checksums-Sha1: 5c1029cfbe36158b39de200c771c79c0b60ee753 2939 proftpd-dfsg_1.3.5e-0+deb8u1.dsc 44f940007798a7c1b3693cd282ad63841e3f30ef 29823478 proftpd-dfsg_1.3.5e.orig.tar.gz a796e98968d80c59732629f1afd9198dde7bb584 82660 proftpd-dfsg_1.3.5e-0+deb8u1.debian.tar.xz 8bb561aeb3f98ff0aef9ebb869b2299d7c960759 2432872 proftpd-basic_1.3.5e-0+deb8u1_amd64.deb 28766eaa0d00087017c61d6d34f89ec94196ab2f 931634 proftpd-dev_1.3.5e-0+deb8u1_amd64.deb 66639d6549cfd15b1f0c8d96fba8c236d9a6a80a 447438 proftpd-mod-mysql_1.3.5e-0+deb8u1_amd64.deb 62f0f8fafb12577b38ce0b83c82402eda336b233 447004 proftpd-mod-pgsql_1.3.5e-0+deb8u1_amd64.deb dacfb19c38ac88507ed05de78c34a159cf991b68 455186 proftpd-mod-ldap_1.3.5e-0+deb8u1_amd64.deb 92878d529517afc42751ece79f3d68b3efe19010 448342 proftpd-mod-odbc_1.3.5e-0+deb8u1_amd64.deb 182a3a97c7cf94623f2a367e45c789549fe590f4 446716 proftpd-mod-sqlite_1.3.5e-0+deb8u1_amd64.deb 2e1259ce67fb5af67e737de3450fd830c003ac15 448182 proftpd-mod-geoip_1.3.5e-0+deb8u1_amd64.deb 497467afd76e627d03142bb1e175f1a0ada9df01 1595052 proftpd-doc_1.3.5e-0+deb8u1_all.deb Checksums-Sha256: 765c75f38cb350e179b6c8846ed1f88a8c1c36309143c054c3ea8ff24bac5f3c 2939 proftpd-dfsg_1.3.5e-0+deb8u1.dsc e826b81213d7b1b86182169c46616cf6036f5edb5732331a6a3d3444a7e58f50 29823478 proftpd-dfsg_1.3.5e.orig.tar.gz f89bccffe228d89120e4d29155489519842445cd92c27afb76dcee548881e7ed 82660 proftpd-dfsg_1.3.5e-0+deb8u1.debian.tar.xz 5b08f0684d96bef58bf19c08b5b13f00291cedbee067d6a0ba9da91942af13ee 2432872 proftpd-basic_1.3.5e-0+deb8u1_amd64.deb 7556fc1bf3307d42d18d6ce009070d0c31b8f5c13f429751d0b7d90f74f6baeb 931634 proftpd-dev_1.3.5e-0+deb8u1_amd64.deb dc7ec86b179ebe6e8cc0a9f77a18e01a53773238753d38811611d539d8e04e97 447438 proftpd-mod-mysql_1.3.5e-0+deb8u1_amd64.deb 420cc3df09503cdbb5d6c2fa47a8da14850e916392b441df7f333ee018fde094 447004 proftpd-mod-pgsql_1.3.5e-0+deb8u1_amd64.deb 26a509e7546739151eb36f58adec6b883e6dc41bd7d236dccfe38244c2b585c6 455186 proftpd-mod-ldap_1.3.5e-0+deb8u1_amd64.deb 390d11f9dd56819a299119af2f35927f69da3f4c2a7e314d142594265c694b82 448342 proftpd-mod-odbc_1.3.5e-0+deb8u1_amd64.deb 10bb9023957fb5fc62cd55f0d1a3b95c0195b7f4f19c6863ff57d8061ea2097e 446716 proftpd-mod-sqlite_1.3.5e-0+deb8u1_amd64.deb d940b2cc78161cfafe4bc603b39f813a6ea8b57ec793010c86120304d1d94ec3 448182 proftpd-mod-geoip_1.3.5e-0+deb8u1_amd64.deb 6be0440e37d136758732057d225e87651aae207a13a9f039a587f2909240ef39 1595052 proftpd-doc_1.3.5e-0+deb8u1_all.deb Files: 65201f22fb639b4fefd48e95e6314f0b 2939 net optional proftpd-dfsg_1.3.5e-0+deb8u1.dsc f5ef490395432802b1bdb0a782da7854 29823478 net optional proftpd-dfsg_1.3.5e.orig.tar.gz 1e65e268d308beeef087f43df2bda564 82660 net optional proftpd-dfsg_1.3.5e-0+deb8u1.debian.tar.xz 9f2bb6454b3173332de2339fc664efdb 2432872 net optional proftpd-basic_1.3.5e-0+deb8u1_amd64.deb d37b49876b2659709ba1c66652b3ffa3 931634 net optional proftpd-dev_1.3.5e-0+deb8u1_amd64.deb b732b0c1987347f23719db6f86a2f94f 447438 net optional proftpd-mod-mysql_1.3.5e-0+deb8u1_amd64.deb e954c7ab8a515bda62c2509adc8206e2 447004 net optional proftpd-mod-pgsql_1.3.5e-0+deb8u1_amd64.deb 09b863a04da398b24bd1ee1cce84dcd4 455186 net optional proftpd-mod-ldap_1.3.5e-0+deb8u1_amd64.deb 0eb38268abda1ba21a5d979c8384fdbd 448342 net optional proftpd-mod-odbc_1.3.5e-0+deb8u1_amd64.deb bfe71c70a2a6c7c5bd89122f39febe5c 446716 net optional proftpd-mod-sqlite_1.3.5e-0+deb8u1_amd64.deb 0f2353beb39be6193fb7a8f55f14ab5a 448182 net optional proftpd-mod-geoip_1.3.5e-0+deb8u1_amd64.deb d77a0159a4a272b5909a6797de25b601 1595052 doc optional proftpd-doc_1.3.5e-0+deb8u1_all.deb
-----BEGIN PGP SIGNATURE----- iQKjBAEBCgCNFiEErPPQiO8y7e9qGoNf2a0UuVE7UeQFAlyr2R1fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEFD RjNEMDg4RUYzMkVERUY2QTFBODM1RkQ5QUQxNEI5NTEzQjUxRTQPHGFwb0BkZWJp YW4ub3JnAAoJENmtFLlRO1Hk+5gP/3sNT79x1ms8RdnMTdiApHusMqkpibuEnw7x nSX0CMy7VBQC0OHn83Z5i0Nga0ra0/y53FD5dAZOBWDdf9gZ3+c6mh8hBFq4etcA srYXMia27nOI9W6vjflCVdJkISrOb+HN4eSiFhaOZ7Q44Q4FolmImGfMMwSbK4K6 ZhA4HbNDuj1ucvRsT3MMQGevwvDpnnUI8G0lfJNxMjlawPsd2ejJQb4weloBMauw svh6DOGBz1wxGw9gkeHiF42wYMisLK/X/kfy0hi/RGO5Wskeau0h8hP50imgSDpy 8qIaUBNG5abEPOFXf/UkKg2p0dqDcbrWj7PCszYPZd5PBrZ4Y4E1eO2BexNa3YNO FGik5opTYIUorsBD1nHpTv4flxHNYPsNEcyCGwGLphzl8jCauB0UQEzrNmpuG0vP 39BKUWUtFSv3kdbSwIYB+DITrJJtGjMxST0jRz9frGA+H7TVgzpDJXhAQbr9io7o JKMBqJAfeejqTPunShNk8Eqq6jS3B79nZKWMnPGBNZzK94wwL5HIDgx+/p0QSGm0 WyE5WgcHpq7mSJGvntSaFBLSAmMKoBJz79gl8+H0S9N3vaxRiVh4XkRloTd53JrM CxUDn06VKe/UvH7vX9yujQqYv4R1qVgmTiseXdq+EOaYPO1OiJVmE/vBk2N2ZQ/c oxGRN9nI =vXhS -----END PGP SIGNATURE-----