Security bugs are reported here via bugzilla

[Seth Woolley <seth AT tautology.org>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

It's in stable.  Don't you have approve access to the news site?

On Tue, 23 Sep 2003, Justin Rocha wrote:

> There has been a remote root exploit discovered in proftpd.
>
> The spell has been updated in test and devel. sandalle, feel free to
> pull the update into stable.
>
> Someone else feel free to write the news article once it gets into
> stable. :)
>
> Here are the changes:
>
>      SPELL=proftpd
>          VERSION=1.2.9rc2p
>           SOURCE=$SPELL-$VERSION.tar.bz2
> SOURCE_DIRECTORY=$BUILD_DIRECTORY/${SPELL}-1.2.9rc2
>    SOURCE_URL[0]=ftp://ftp.proftpd.org/distrib/source/$SOURCE
>           MD5[0]='4be3c1f723fb7abca875304166cf4acd'
>
> The SOURCE_DIRECTORY needs to be changed because it doesn't unpack with
> a 'p' at the end, and I went ahead and switched to the tar.bz2 over the
> tar.gz. The md5 should be correct, but feel free to verify it.
>
> Additionally, I've just noticed that the init script will fail on stop.
> I don't have time to look at it right now, but I will later if someone
> else doesn't get to it first.
> --
> Justin Rocha
> -Xenith || jrocha AT sourcemage.org || http://xenith.org/
> JabberID:  xenith AT dhbit.ca   || AIM:  JustinR98
> Grimoire Guru and Web Guy
> Source Mage GNU/Linux -> http://www.sourcemage.org/
>
>

- --
Seth Alan Woolley <seth at tautology.org>, SPAM/UCE is unauthorized
Key id 7BEACC7D = 2978 0BD1 BA48 B671 C1EB 93F7 EDF4 3CDF 7BEA CC7D
Full Key at seth.tautology.org and pgp.mit.edu. info: www.gnupg.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (FreeBSD)

iD8DBQE/cPUS7fQ833vqzH0RAjHnAJ0YrdfIpPz1xgWiyapnI6VvVQjX5ACgu/BE
wqW7xzivbiWc7Ubfo/re2k4=
=YuEU
-----END PGP SIGNATURE-----