We believe that the bug you reported is fixed in the latest version of
proftpd-dfsg, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1105645@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Hilmar Preuße <hille42@debian.org> (supplier of updated proftpd-dfsg package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sat, 11 Jul 2026 00:07:11 +0200
Source: proftpd-dfsg
Architecture: source
Version: 1.3.9c~dfsg-1
Distribution: unstable
Urgency: medium
Maintainer: ProFTPD Maintainance Team <pkg-proftpd-maintainers@alioth-lists.debian.net>
Changed-By: Hilmar Preuße <hille42@debian.org>
Closes: 1105645 1140676
Changes:
proftpd-dfsg (1.3.9c~dfsg-1) unstable; urgency=medium
.
* New upstream version.
- can be built using "make --shuffle=reverse" (Closes: #1105645).
- Fixes two security issues:
* SFTP packet reassembly heap overflow
* SCP signed-size integer overflow → heap over-read
* Simplify d/patches/autotools a little bit.
* Remove "Rules-Requires-Root: binary-targets" from the control file
to make build reproducible (Closes: #1140676).
* Comment 04_disable_base_netaddr_get_addr_test.diff patch.
* Enable autopkgtest in Salsa CI.
Checksums-Sha1:
2d72a0bef15da6217334e95668341fcd127f989c 2850 proftpd-dfsg_1.3.9c~dfsg-1.dsc
a2e1c939dd6ddfc1ee865d14d6defb0898455a21 19556617 proftpd-dfsg_1.3.9c~dfsg.orig.tar.gz
384739c208b84328a73d53409fac5a3944ef0c64 87432 proftpd-dfsg_1.3.9c~dfsg-1.debian.tar.xz
8f9ef59ac25deedb138198dbbaa41221803ac741 4970 proftpd-dfsg_1.3.9c~dfsg-1_source.buildinfo
Checksums-Sha256:
72afef13ddbce85b8461e5d66869f14a2994358b755e776b36da09b13498adbd 2850 proftpd-dfsg_1.3.9c~dfsg-1.dsc
1c106aecf91d11d93d900d330fddfc4bab4de8f08ac50998ef47f9b262f038e5 19556617 proftpd-dfsg_1.3.9c~dfsg.orig.tar.gz
8df450459add6b6e460e7f9d734bca08ebed3c97441209c12aff10b66532f3ab 87432 proftpd-dfsg_1.3.9c~dfsg-1.debian.tar.xz
1352ac97ed7dc9355b23acd1a81bca5f76f35a437aee64a21b62f8e42c4a5192 4970 proftpd-dfsg_1.3.9c~dfsg-1_source.buildinfo
Files:
b5c8d862a12c35963f76512c9116203e 2850 net optional proftpd-dfsg_1.3.9c~dfsg-1.dsc
f771497601735b3bbc5129300582ffda 19556617 net optional proftpd-dfsg_1.3.9c~dfsg.orig.tar.gz
cf88cb7d440af6c72efd9897bcf1093a 87432 net optional proftpd-dfsg_1.3.9c~dfsg-1.debian.tar.xz
89b69fd4c220209d05ed48b88bc95643 4970 net optional proftpd-dfsg_1.3.9c~dfsg-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iNUEARYKAH0WIQRKnq6Z0VRDf4bMmAn98EQ6ARgcNAUCalFuz18UgAAAAAAuAChp
c3N1ZXItZnByQG5vdGF0aW9ucy5vcGVucGdwLmZpZnRoaG9yc2VtYW4ubmV0NEE5
RUFFOTlEMTU0NDM3Rjg2Q0M5ODA5RkRGMDQ0M0EwMTE4MUMzNAAKCRD98EQ6ARgc
NOgCAP9NOWKYA7eaXFempRWvKlDpYh4aZIdBkr/z8w1hOL6NtwD9EKrCXNRbjXw6
hwTldh79QRM6sdtgiltxjR/7qFN54w0=
=YYbx
-----END PGP SIGNATURE-----