[ubuntu/precise-security] proftpd-dfsg 1.3.4a-1ubuntu0.1 (Accepted)

[Tyler Hicks]

proftpd-dfsg (1.3.4a-1ubuntu0.1) precise-security; urgency=low

  * SECURITY UPDATE: The mod_copy module in ProFTPD 1.3.4a allows remote
    attackers to read and write to arbitrary files via the site cpfr and
    site cpto commands. (LP: #1462311)
    - debian/patches/CVE-2015-3306.patch: adjust contrib/mod_copy.c to
      check authentication status. Based on upstream patch.
    - CVE-2015-3306

Date: 2016-12-08 01:17:29.548160+00:00
Signed-By: Tyler Hicks <tyhicks at canonical.com>
https://launchpad.net/ubuntu/+source/proftpd-dfsg/1.3.4a-1ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.