[Bug 323050] [NEW] New major upstream versions of sshguard (1.1, 1, 2, 1.3 and 1.4) were released on 2008-08 - 2008-12, please update debs

[Mantas Kriaučiūnas]

Public bug reported:

Binary package hint: sshguard

Please upgrade sshguard package to version 1.3 or 1.4. Version 1.3
contains significant bugfixes and lots of new features from the
currently packaged version in Ubuntu (1.0) including support for
protects from brute force attacks against new services, like:

 - dovecot imapd
 - UWimap imapd and pop
 - FreeBSD's ftpd
 - Proftpd
 - pure-ftpd
 - Cyrus imapd

whereas the current version only supports sshd.

Cumulative changelog from 1.0 through all the 1.1beta*, 1.1rc*, 1.2 and 1.3:
    - support suspension
    - support debug mode at runtime (-d) for helping users in problem solving
    - support for metalog logging format
    - fix parser bug when recognizing certain IPv6 addresses
    - fix segfault when the pipe to sshguard is closed unexpectedly
    - support for ipfilter as blocking backend (thanks Hellmuth Michaelis for feedback)
    - support for log messages authentication
    - support for AIX genfilt firewall (thanks Gabor Szittner)
    - fix "hosts" backend bug not discarding temporary files
    - add monitoring support for new services:
        @ dovecot imapd
        @ UWimap imapd and pop
        @ FreeBSD's ftpd
        @ Proftpd
        @ pure-ftpd
        @ Cyrus imapd
   - support for SSH "possible break-in attempt" messages;
   - updated support for dovecot to include logging format of new versions; 
   - fix of IPF backend causing sshguard not to update /etc/ipf.rules (disallow IPv6);
   - fix detection of password when sshd doesn't log anything more than PAM;
   - automatically detect when ipfw supports IPv6 (thanks David Horn);
   - be sensitive to proftpd messages to auth facility, not daemon (thanks Andy Berkvam);
   - add sshd pattern for "Bad protocol" and "Did not receive identif string".

** Affects: sshguard (Ubuntu)
     Importance: Undecided
         Status: New

** Affects: sshguard (Debian)
     Importance: Unknown
         Status: Unknown

** Bug watch added: Debian Bug tracker #509029
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=509029

** Also affects: sshguard (Debian) via
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=509029
   Importance: Unknown
       Status: Unknown

-- 
New major upstream versions of sshguard (1.1, 1,2, 1.3 and 1.4) were released on 2008-08 - 2008-12, please update debs
https://bugs.launchpad.net/bugs/323050
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs at lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs