[Technik] [SECURITY] [DSA 1222-2] New proftpd packages fix several vulnerabilities

[Noèl Köthe]

Am Freitag, den 01.12.2006, 19:11 +0100 schrieb Moritz Muehlenhoff:

> Debian Security Advisory DSA 1222-2                    security at debian.org
> http://www.debian.org/security/                         Moritz Muehlenhoff
> December 1st, 2006                     http://www.debian.org/security/faq
> 
> Package        : proftpd
> Vulnerability  : several
> Problem-Type   : remote
> Debian-specific: no
> CVE ID         : CVE-2006-5815 CVE-2006-6170 CVE-2006-6171
> Debian Bug     : 399070
> 
> Due to technical problems yesterday's proftpd update lacked a build for
> the amd64 architecture, which is now available.

proftpd auf pima, pomo, h01, h02, h03 und h04 aktualisiert.

> For the stable distribution (sarge) these problem has been fixed in version
> 1.2.10-15sarge3.

changelog:
proftpd (1.2.10-15sarge3) stable-security; urgency=high

  Revised and updated security patches backported from 1.3.0a to manage

  http://secunia.com/advisories/23141/
  http://secunia.com/advisories/22803/
  http://secunia.com/advisories/22821/

  Patches:

  32.CVE_2006_5815.diff
  33.SA22803
  34.SA23141

 -- Francesco Paolo Lovergine <frankie at debian.org>  Mon, 29 Nov 2006 10:57:57 +0100

-- 
Noèl Köthe <noel debian.org>
Debian GNU/Linux, www.debian.org
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Dies ist ein digital signierter Nachrichtenteil
Url : /archiv/technik/attachments/20061202/2140d1d7/attachment.pgp