Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 436
Alerts This Week
Warning Icon 1 436

Debian 5.0 DSA-1925-1 Critical Proftpd-dfsg Input Handling Issue

debian
Calendar Grey November 1, 2009
Debian Logo
Upgrading proftpd-dfsg packages essential to address TLS-related concerns on Debian systems. Enhance input verification protocols.
It has been discovered that proftpd-dfsg, a virtual-hosting FTP daemon, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509...
Topics%20covered

Topics Covered

security advisory critical debian remote input validation proftpd

Summary


For the stable distribution (lenny), this problem has been fixed in
version 1.3.1-17lenny4.

For the oldstable distribution (etch), this problem has been fixed in
version 1.3.0-19etch3.

Binaries for the amd64 architecture will be released once they are
available.

For the testing distribution (squeeze) and the unstable distribution
(sid), this problem has been fixed in version 1.3.2a-2.


We recommend that you upgrade your proftpd-dfsg packages.


Upgrade instructions
- --------------------

wget url
will fetch the file for you
dpkg -i file.deb
will install the referenced file.

If you are using the apt-get package manager, use the line for
sources.list as given below:

apt-get update
will update the internal database
apt-get upgrade
will install corrected packages

You may use an automated update by adding the resources from the
footer to the proper configuration.


Debian GNU/Linux 4.0 alias etch

Debian GNU/Linux 5.0 alias lenny

Debian (oldstable)
- ------------------

Oldstable updates a...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory critical debian remote input validation proftpd

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.