Alerts This Week
Warning Icon 1 916
Alerts This Week
Warning Icon 1 916

Debian: DLA-2338-2 Moderate: ProFTPD Segmentation Fault Issue

debian lts
Calendar Grey August 25, 2020
Dist Debian Esm H88
Debian LTS Advisory DLA-2340-3 resolves a critical vulnerability in openssl impacting secure communications.
The update of proftpd-dfsg released as DLA-2338-1 incorrectly destroyed the memory pool in function sftp_kex_handle in contrib/mod_sftp/kex.c which may cause a segmentation fault a...
Topics%20covered

Topics Covered

security advisory debian memory issue segmentation fault sftp proftpd-dfsg regression update

Summary

For Debian 9 stretch, this problem has been fixed in version
1.3.5e+r1.3.5b-4+deb9u2.

We recommend that you upgrade your proftpd-dfsg packages.

For the detailed security status of proftpd-dfsg please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/source-package/proftpd-dfsg

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
important
Lowest
Low
Medium
High
Critical

Package: proftpd-dfsg
Version: 1.3.5e+r1.3.5b-4+deb9u2
Debian Bug: 968967

Topics%20covered

Topics Covered

security advisory debian memory issue segmentation fault sftp proftpd-dfsg regression update

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here