[ubuntu/trusty-updates] proftpd-dfsg 1.3.5~rc3-2.1ubuntu2.1 (Accepted)

Thu Dec 8 03:58:34 UTC 2016

proftpd-dfsg (1.3.5~rc3-2.1ubuntu2.1) trusty-security; urgency=low

  * SECURITY UPDATE: The mod_copy module in ProFTPD 1.3.5 allows remote
    attackers to read and write to arbitrary files via the site cpfr and
    site cpto commands. (LP: #1462311)
    - debian/patches/CVE-2015-3306.patch: adjust contrib/mod_copy.c to
      check authentication status. Based on upstream patch.
    - CVE-2015-3306

Date: 2016-12-08 01:15:35.166425+00:00
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/proftpd-dfsg/1.3.5~rc3-2.1ubuntu2.1
-------------- next part --------------
Sorry, changesfile not available.