-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 25 Nov 2024 21:20:02 +0000 Source: proftpd-dfsg Architecture: source Version: 1.3.7a+dfsg-12+deb11u3 Distribution: bullseye-security Urgency: medium Maintainer: ProFTPD Maintainance Team <pkg-proftpd-maintainers@alioth-lists.debian.net> Changed-By: Bastien Roucariès <rouca@debian.org> Closes: 1082326 Changes: proftpd-dfsg (1.3.7a+dfsg-12+deb11u3) bullseye-security; urgency=medium . * LTS Team upload * Fix CVE-2023-48795: Add patch for Terrapin attack. * Fix CVE-2023-51713: make_ftp_cmd in main.c in ProFTPD has a one-byte out-of-bounds read, and daemon crash, because of mishandling of quote/backslash semantics. * Fix CVE-2024-48651: Supplemental Group Inheritance Grants Unintended Access to GID 0 (Closes: #1082326) Checksums-Sha1: cb8e847561ff72075d6875546b5e5f6a7d4f2d59 3148 proftpd-dfsg_1.3.7a+dfsg-12+deb11u3.dsc e6a02a44166bd36548a5132c41f3fb4270b33c95 20276614 proftpd-dfsg_1.3.7a+dfsg.orig.tar.gz 43c39b4dec78ac8369f1e963bfd595429b014f80 93512 proftpd-dfsg_1.3.7a+dfsg-12+deb11u3.debian.tar.xz 893ce8fc6f8019c9f0ec36dc31f429398b562265 15633 proftpd-dfsg_1.3.7a+dfsg-12+deb11u3_amd64.buildinfo Checksums-Sha256: 64fb92f5cf58b32d6e601450fb61ca75572c16f39f6faa9b87e34694ac0878c1 3148 proftpd-dfsg_1.3.7a+dfsg-12+deb11u3.dsc 572ad47ba7a5b6f39bb3ef293b6361c01daa0d25ed463dace15a7d5a9649c15f 20276614 proftpd-dfsg_1.3.7a+dfsg.orig.tar.gz 3a9c7b9a6e224e7a0f375bc4db713aca383befac0a158a3a585d0bb0cff030e2 93512 proftpd-dfsg_1.3.7a+dfsg-12+deb11u3.debian.tar.xz 13650a4e68362b31ee4984000c5b0800b4e31cb72f8944303d2efa25257e2a47 15633 proftpd-dfsg_1.3.7a+dfsg-12+deb11u3_amd64.buildinfo Files: 338580b1d7bb1dc2f096c2b86fc2c8ae 3148 net optional proftpd-dfsg_1.3.7a+dfsg-12+deb11u3.dsc 91ccc20e0ca76218699a5b256358e945 20276614 net optional proftpd-dfsg_1.3.7a+dfsg.orig.tar.gz c85339adeafba3ddf40a9f994ec79428 93512 net optional proftpd-dfsg_1.3.7a+dfsg-12+deb11u3.debian.tar.xz 11624dee3d865b3dad2f266aee3852f7 15633 net optional proftpd-dfsg_1.3.7a+dfsg-12+deb11u3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJFBAEBCgAvFiEEXQGHuUCiRbrXsPVqADoaLapBCF8FAmdKE/IRHHJvdWNhQGRl Ymlhbi5vcmcACgkQADoaLapBCF+aSxAAoREIKhqr74ZygCs6AcUWmNNxs588zRdE 4CKbPuXZi/OTYZ9dj4J9novPlhVSQIfp2be1Vr0+oAFH0P6FtnsJJ+1v3J/UDji+ krvVIK4N4Kz8MrfjDVM5ZMwtnU2UFtBOeZqq2m04i+61FOrKtWpNwZAhxc5D3VH9 N8QR1zFm9RbQW0dJ1Tj7GZO1p/8Y0b8j5bXQ2lH1y8aazki9T2iBnLlOG1mPdx3d R4lzVV9ubKot2TU8Qh4sMX9habmEVs7YcRpKTAz/IJt/0stvfMHLJ6MuVaCM0xHm QHWICDufg1spXyxCqhdoccuS7kV5DaSB9aJNU2VQvelGuRL3okjDl0a7naays80u IXetEqHW+5gzlDg17qsJbvHjxsHl2DdcLhEcpG8mEBr/6v/ePHNOgh53vweS6+gT 9IaPArmK/1RFx8PlNt2sC+F/xqIbq/jr45w1yiopj1kbnnTO3Ui5yj/5f47emCyC LnFjeOc4cJb19HVzM1rmq1l8EwOhNb4saU3TphRy8pFJF1CAl50icKQxGGbaV/p8 7CiZTu7h65BU6j3L0a21idfJYeagXHU0dqvpmvIxDQOLpAwBhiGWe84KZ2MzwoQg 1iP6i4kLY9Pd7TgQmKhKuOJqhf9rJEDK3wg3CzjddVECnuF5+CbXFY7wpmCHM75L F3KXyWo1isw= =g0ry -----END PGP SIGNATURE-----
