[ubuntu/precise-updates] proftpd-dfsg 1.3.4a-1ubuntu0.1 (Accepted)

Thu Dec 8 03:58:33 UTC 2016

proftpd-dfsg (1.3.4a-1ubuntu0.1) precise-security; urgency=low

  * SECURITY UPDATE: The mod_copy module in ProFTPD 1.3.4a allows remote
    attackers to read and write to arbitrary files via the site cpfr and
    site cpto commands. (LP: #1462311)
    - debian/patches/CVE-2015-3306.patch: adjust contrib/mod_copy.c to
      check authentication status. Based on upstream patch.
    - CVE-2015-3306

Date: 2016-12-08 01:17:29.548160+00:00
Signed-By: Ubuntu Archive Robot <cjwatson+ubuntu-archive-robot at chiark.greenend.org.uk>
https://launchpad.net/ubuntu/+source/proftpd-dfsg/1.3.4a-1ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.