-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Thu, 13 Dec 2007 10:15:28 +0000 Source: wzdftpd Binary: wzdftpd-mod-perl wzdftpd-back-mysql wzdftpd-dev wzdftpd-mod-avahi wzdftpd-back-pgsql wzdftpd wzdftpd-mod-tcl Architecture: source i386 Version: 0.8.1-2etch1 Distribution: stable-security Urgency: high Maintainer: Pierre Chifflier <chifflier@inl.fr> Changed-By: Steffen Joeris <white@debian.org> Description: wzdftpd - A portable, modular, small and efficient ftp server wzdftpd-back-mysql - MySQL backend for wzdftpd wzdftpd-back-pgsql - PostgreSQL backend for wzdftpd wzdftpd-dev - Development files for wzdftpd wzdftpd-mod-avahi - Zeroconf module for wzdftpd wzdftpd-mod-perl - Perl module for wzdftpd wzdftpd-mod-tcl - TCL module for wzdftpd Changes: wzdftpd (0.8.1-2etch1) stable-security; urgency=high . * Non-maintainer upload by the security team * Fix off-by-one in wzd_login.c which leads to a remote denial of service vulnerability Fixes: CVE-2007-5300 Files: 68399e61898a27e00c5b79eb77c5eada 863 net optional wzdftpd_0.8.1-2etch1.dsc adc0b6ec5b373d0ae9bcb79947dcdc34 916176 net optional wzdftpd_0.8.1.orig.tar.gz 32c647651b80a26a3bb933c1abeb0c3b 12393 net optional wzdftpd_0.8.1-2etch1.diff.gz 4a9e2a8bb840497e49e067247beff4a6 258984 net optional wzdftpd_0.8.1-2etch1_i386.deb 1bf0337e5d353f7395c2e908ee66df43 39382 net optional wzdftpd-back-mysql_0.8.1-2etch1_i386.deb f4674503b34fc02517e3291718c25d78 39746 net optional wzdftpd-back-pgsql_0.8.1-2etch1_i386.deb 0a1c9f4eeee4aac5a6a319edc5ff5d41 31010 net optional wzdftpd-mod-avahi_0.8.1-2etch1_i386.deb 6d7b3d899bbae284744de1aba20dca40 35228 net optional wzdftpd-mod-tcl_0.8.1-2etch1_i386.deb cfe147b51da8533a652593ac7095f906 51974 net optional wzdftpd-mod-perl_0.8.1-2etch1_i386.deb 461bfb0f5ea1d4395662d759d6fc8e01 255404 libdevel optional wzdftpd-dev_0.8.1-2etch1_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) iD8DBQFHanbB62zWxYk/rQcRApvAAKCbLnzRZ6Pep4JD8Iut3HSbXFdPjgCePwUs +3ivZEznHk4Pu4uq+USchOQ= =cGS4 -----END PGP SIGNATURE----- Accepted: wzdftpd-back-mysql_0.8.1-2etch1_i386.deb to pool/main/w/wzdftpd/wzdftpd-back-mysql_0.8.1-2etch1_i386.deb wzdftpd-back-pgsql_0.8.1-2etch1_i386.deb to pool/main/w/wzdftpd/wzdftpd-back-pgsql_0.8.1-2etch1_i386.deb wzdftpd-dev_0.8.1-2etch1_i386.deb to pool/main/w/wzdftpd/wzdftpd-dev_0.8.1-2etch1_i386.deb wzdftpd-mod-avahi_0.8.1-2etch1_i386.deb to pool/main/w/wzdftpd/wzdftpd-mod-avahi_0.8.1-2etch1_i386.deb wzdftpd-mod-perl_0.8.1-2etch1_i386.deb to pool/main/w/wzdftpd/wzdftpd-mod-perl_0.8.1-2etch1_i386.deb wzdftpd-mod-tcl_0.8.1-2etch1_i386.deb to pool/main/w/wzdftpd/wzdftpd-mod-tcl_0.8.1-2etch1_i386.deb wzdftpd_0.8.1-2etch1.diff.gz to pool/main/w/wzdftpd/wzdftpd_0.8.1-2etch1.diff.gz wzdftpd_0.8.1-2etch1.dsc to pool/main/w/wzdftpd/wzdftpd_0.8.1-2etch1.dsc wzdftpd_0.8.1-2etch1_i386.deb to pool/main/w/wzdftpd/wzdftpd_0.8.1-2etch1_i386.deb