Skip to Content.
Sympa Menu

sm-security - Re: [SM-Security] Security update: proftpd

sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Chronological Thread  
  • From: Seth Woolley <seth AT tautology.org>
  • To: Justin Rocha <jrocha AT sourcemage.org>
  • Cc: SM-Security <sm-security AT lists.ibiblio.org>
  • Subject: Re: [SM-Security] Security update: proftpd
  • Date: Tue, 23 Sep 2003 18:36:12 -0700 (PDT)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

It's in stable. Don't you have approve access to the news site?

On Tue, 23 Sep 2003, Justin Rocha wrote:

> There has been a remote root exploit discovered in proftpd.
>
> The spell has been updated in test and devel. sandalle, feel free to
> pull the update into stable.
>
> Someone else feel free to write the news article once it gets into
> stable. :)
>
> Here are the changes:
>
> SPELL=proftpd
> VERSION=1.2.9rc2p
> SOURCE=$SPELL-$VERSION.tar.bz2
> SOURCE_DIRECTORY=$BUILD_DIRECTORY/${SPELL}-1.2.9rc2
> SOURCE_URL[0]=ftp://ftp.proftpd.org/distrib/source/$SOURCE
> MD5[0]='4be3c1f723fb7abca875304166cf4acd'
>
> The SOURCE_DIRECTORY needs to be changed because it doesn't unpack with
> a 'p' at the end, and I went ahead and switched to the tar.bz2 over the
> tar.gz. The md5 should be correct, but feel free to verify it.
>
> Additionally, I've just noticed that the init script will fail on stop.
> I don't have time to look at it right now, but I will later if someone
> else doesn't get to it first.
> --
> Justin Rocha
> -Xenith || jrocha AT sourcemage.org || http://xenith.org/
> JabberID: xenith AT dhbit.ca || AIM: JustinR98
> Grimoire Guru and Web Guy
> Source Mage GNU/Linux -> http://www.sourcemage.org/
>
>

- --
Seth Alan Woolley <seth at tautology.org>, SPAM/UCE is unauthorized
Key id 7BEACC7D = 2978 0BD1 BA48 B671 C1EB 93F7 EDF4 3CDF 7BEA CC7D
Full Key at seth.tautology.org and pgp.mit.edu. info: www.gnupg.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.2 (FreeBSD)

iD8DBQE/cPUS7fQ833vqzH0RAjHnAJ0YrdfIpPz1xgWiyapnI6VvVQjX5ACgu/BE
wqW7xzivbiWc7Ubfo/re2k4=
=YuEU
-----END PGP SIGNATURE-----





Archive powered by MHonArc 2.6.24.

Top of Page