-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 25 Feb 2020 22:43:05 +0100 Source: proftpd-dfsg Architecture: source Version: 1.3.5b-4+deb9u4 Distribution: stretch-security Urgency: high Maintainer: ProFTPD Maintainance Team <pkg-proftpd-maintainers@lists.alioth.debian.org> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 951800 Changes: proftpd-dfsg (1.3.5b-4+deb9u4) stretch-security; urgency=high . * Non-maintainer upload by the Security Team. * Ensure that we do not reuse already-destroyed memory pools during data transfers (CVE-2020-9273) (Closes: #951800) * Clear the data-transfer instigating command pool but keep a memory pool. Fixes regression in the %{transfer-status} LogFormat functionality. Checksums-Sha1: 78edf94eb6b9ee900e18ea778e6b00dc4191589a 2938 proftpd-dfsg_1.3.5b-4+deb9u4.dsc 72d3fb2e8459b335c1fc7005e0f966ecaf579a14 78204 proftpd-dfsg_1.3.5b-4+deb9u4.debian.tar.xz Checksums-Sha256: 205d92dc6b77cc1163c42001ec44332c37e31205ddfb25a5bbf178304f640d21 2938 proftpd-dfsg_1.3.5b-4+deb9u4.dsc 0d40800831bfd3a5d7181c9902005c1e44b1b4ec657ffaa941ab80a8d7ac7296 78204 proftpd-dfsg_1.3.5b-4+deb9u4.debian.tar.xz Files: 6f634fea2d0c41d2fadf67a187345a95 2938 net optional proftpd-dfsg_1.3.5b-4+deb9u4.dsc 195e060d26c952422667706d1c3eb91f 78204 net optional proftpd-dfsg_1.3.5b-4+deb9u4.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKmBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl5WtsVfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89EzXcP/20fl+ArjGLQuEa2RGGSS16C7avxKHaL Y3bNqsPK3iCjKAetr4kV/LrV4kkHVP++EZswiUA9Rd8M0pGx9EdSejAjrf/0erdi Ck9cWEERwos/SSDNwOhLPZFdoUTtFwGBAeYAkDCIlyTa4Ncf4oqOgePSpH7Hx1qV wEyH9RMjCjKd040mSZtZAxbYkDeHCqWpz5Ls2Yh0XxzNmYP1sdLXuZkuYzvR3W9a 5ViNhnwf03MOZwMt4cbdD+lmCSyU/X1RKLK/6MoKQlgQ9MYTU0u+gzUb78C/GibU I1SidijNydynxGD9SAgXimcyz5W3GFQKZv4GWXbwSucEZP7QWlhQozxRzfu3AmAL s93u2T+t7GetXIGzWvSu/FrvdCB0XknWWEXy3auNDpEsEq+8HpIHVkOT9S5l6PBq fbxMg3TqtPsg44EZCH6LY7+11NDEJiBBgORqKz3mUTW+C+atGPk1FW+0XXvksGIT UivwGRHgM/V1hBM/S5NcYMjgU6CshQpeZ5Z8NhvJWLcmyQTeVsb0b6FuLcdXh85I anoNhosDAsV8dmF7F6UULz9SGrqo9e4NgqJUdpARLjHa/Z4soEDFJ41driHcq9Hi 6qKsIYNuXtqMIyezhx/AQq7Pf8gJlji7y6th6O/0OWQWK8/PQtP9yKuwOfmeEKG3 cEJPg1yQVhTh =5kf3 -----END PGP SIGNATURE-----