[Git][security-tracker-team/security-tracker][master] Reserve DLA-3975-1 for proftpd-dfsg

[Bastien Roucariès (@rouca)]

Bastien Roucariès pushed to branch master at Debian Security Tracker / security-tracker


Commits:
bf43b043 by Bastien Roucariès at 2024-11-29T18:08:37+00:00
Reserve DLA-3975-1 for proftpd-dfsg

- - - - -


3 changed files:

- data/CVE/list
- data/DLA/list
- data/dla-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -92794,7 +92794,6 @@ CVE-2023-6690 (A race condition in GitHub Enterprise Server allowed an existing
 CVE-2023-51713 (make_ftp_cmd in main.c in ProFTPD before 1.3.8a has a one-byte out-of- ...)
 	- proftpd-dfsg 1.3.8.a+dfsg-1
 	[bookworm] - proftpd-dfsg 1.3.8+dfsg-4+deb12u3
-	[bullseye] - proftpd-dfsg <no-dsa> (Minor issue)
 	[buster] - proftpd-dfsg <no-dsa> (Minor issue)
 	NOTE: https://github.com/proftpd/proftpd/issues/1683
 	NOTE: https://github.com/proftpd/proftpd/commit/1376d8ccc0966d1ce9a1c76b32c6a9ca61bbe67f (v1.3.9rc1)
@@ -93881,7 +93880,6 @@ CVE-2023-48795 (The SSH transport protocol with certain OpenSSH extensions, foun
 	- php-phpseclib3 3.0.35-1
 	- proftpd-dfsg 1.3.8.b+dfsg-1 (bug #1059144)
 	[bookworm] - proftpd-dfsg 1.3.8+dfsg-4+deb12u3
-	[bullseye] - proftpd-dfsg <ignored> (Minor issue)
 	[buster] - proftpd-dfsg <no-dsa> (Minor issue)
 	- proftpd-mod-proxy 0.9.3-1 (bug #1059290)
 	[bookworm] - proftpd-mod-proxy 0.9.2-1+deb12u1


=====================================
data/DLA/list
=====================================
@@ -1,3 +1,6 @@
+[29 Nov 2024] DLA-3975-1 proftpd-dfsg - security update
+	{CVE-2023-48795 CVE-2023-51713 CVE-2024-48651}
+	[bullseye] - proftpd-dfsg 1.3.7a+dfsg-12+deb11u3
 [29 Nov 2024] DLA-3974-1 dnsmasq - security update
 	{CVE-2022-0934 CVE-2023-28450 CVE-2023-50387 CVE-2023-50868}
 	[bullseye] - dnsmasq 2.85-1+deb11u1


=====================================
data/dla-needed.txt
=====================================
@@ -137,10 +137,6 @@ pgpool2 (abhijith)
   NOTE: 20241123: Backported patches for all open issues (abhijith)
   NOTE: 20241123: https://people.debian.org/~abhijith/upload/pg2/ (abhijith)
 --
-proftpd-dfsg (rouca)
-  NOTE: 20240815: Added by Front-Desk (Beuc)
-  NOTE: 20240815: Follow fixes from bookworm 12.5 (2 CVEs) (Beuc/front-desk)
---
 python-aiohttp
   NOTE: 20240523: Added by oldstable Security Team (jmm)
   NOTE: 20240815: A bookworm DSA is planned (Beuc/front-desk)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bf43b043a7670167cb5ca7b4ab4ea7a94bb61754

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/bf43b043a7670167cb5ca7b4ab4ea7a94bb61754
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20241129/0db59505/attachment-0001.htm>