-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Tue, 25 Feb 2020 22:23:14 +0100 Source: proftpd-dfsg Architecture: source Version: 1.3.6-4+deb10u4 Distribution: buster-security Urgency: high Maintainer: ProFTPD Maintainance Team <pkg-proftpd-maintainers@alioth-lists.debian.net> Changed-By: Salvatore Bonaccorso <carnil@debian.org> Closes: 951800 Changes: proftpd-dfsg (1.3.6-4+deb10u4) buster-security; urgency=high . * Non-maintainer upload by the Security Team. * Ensure that we do not reuse already-destroyed memory pools during data transfers (CVE-2020-9273) (Closes: #951800) * Clear the data-transfer instigating command pool but keep a memory pool. Fixes regression in the %{transfer-status} LogFormat functionality. Checksums-Sha1: 5061c2133acc7ff776d9fc3ffbd774ad8beb518c 2994 proftpd-dfsg_1.3.6-4+deb10u4.dsc f80d38c1ed410cc1a6a7ba8df4c31f93e4e365fd 80960 proftpd-dfsg_1.3.6-4+deb10u4.debian.tar.xz Checksums-Sha256: 2a5908768fffeb40aca0561892b726d5851f443bdcde3cd5dfbd06805c201d18 2994 proftpd-dfsg_1.3.6-4+deb10u4.dsc 61639fd8a2e4d7e99fd4c480fc4f5cdd59fbf6cd893bf99fafc0f02d2b3f84a7 80960 proftpd-dfsg_1.3.6-4+deb10u4.debian.tar.xz Files: fa453c45706e469e122754cdf5a748dd 2994 net optional proftpd-dfsg_1.3.6-4+deb10u4.dsc 980ba89829e1a41320323c5550b939cc 80960 net optional proftpd-dfsg_1.3.6-4+deb10u4.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQKlBAEBCgCQFiEERkRAmAjBceBVMd3uBUy48xNDz0QFAl5WsppfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDQ2 NDQ0MDk4MDhDMTcxRTA1NTMxRERFRTA1NENCOEYzMTM0M0NGNDQSHGNhcm5pbEBk ZWJpYW4ub3JnAAoJEAVMuPMTQ89E1J0P+ImxZelL658DCo10+zIcj75N/85VUGaW AxX+p7Bojg6/QDaEcE0CYpedi03d03xLjzho9e2uIGGuYuK9ZVuvMWoZpt475Vfh a+G6pUfD+IAPxVWjtk10qjb5hLww6Zx5oKaNRTLzbIi43gXoCYhhF3pIDzfdg4PL C3XWyciix+auhWDbEim66idO4ghwLsHQGJXf3OMoyosztc4rkqcrzjNk2yAoxZiG 14zWKXkSe4FNs7e1hFejcIpcPqBn0Fxy+wqVQvNVsVMzNguYA+KqPj5xF8RKW6Z+ XlwCWMq08cKCmzqInFjyZM3z+hilIEAEFRlhOZviPQKDipvaMjYPB+i8KCK/Nu5Z GT/feNdPWCtyqyIcsxyi6sbrFOl2utoiNzWqhPNNs9rw7Kc7VfK8X2Y56w48kSZ2 zTamJg3fhrHPj7V5++Yqk6NPcl30h6qbMP0KLzon7b5NHaLwKP2QnKuIzGkFARie xF4/E68Hxwm+zKs6AE8tyyWdxvgpqQEBO9AuYe/NbL76Azv2Jz18T1zE1OFCuW+l VTBhWB4tZzO6bOq1VERPE5CmyTGuP47/nOq5Aw/aYhtEc73Wo1UBlVdJEFz83dS8 QcXfu+lLv8Xa6PuEKIS3ArXX3dDVe1dzwiv4jrK8k5WPWkM/+F2j+4GBUikaf0Kj /nb0Mrg8pX0= =95E3 -----END PGP SIGNATURE-----