[Git][security-tracker-team/security-tracker][master] new proftpd-dfsg issues

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
0f33178f by Moritz Muehlenhoff at 2026-10-30T21:35:35+01:00
new proftpd-dfsg issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -523,7 +523,9 @@ CVE-2026-119367 (Missing Authorization vulnerability in Liquid Web / StellarWP T
 CVE-2026-119365 (Improper Neutralization of Input During Web Page Generation ('Cross-si ...)
 	NOT-FOR-US: WordPress plugin or theme
 CVE-2026-119364 (ProFTPD through 1.3.9e and 1.3.10rc1 through 1.3.10rc4 contains a link ...)
-	TODO: check
+	- proftpd-dfsg <unfixed>
+	NOTE: https://github.com/proftpd/proftpd/issues/2374
+	NOTE: https://github.com/proftpd/proftpd/commit/c41691f8981f98081fcb8a535c3c21b06a3f04af (v1.3.10rc5)
 CVE-2026-119300 (Wekan is open source kanban built with Meteor. Prior to 11.11, the use ...)
 	TODO: check
 CVE-2026-119299 (gopacket provides packet processing capabilities for Go. Prior to 1.7. ...)
@@ -545,9 +547,11 @@ CVE-2026-119176 (The CP Multi View Events Calendar plugin for WordPress is vulne
 CVE-2026-119148 (Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0. ...)
 	NOT-FOR-US: Amazon
 CVE-2026-119147 (ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass i ...)
-	TODO: check
+	- proftpd-dfsg <unfixed>
+	NOTE: https://github.com/proftpd/proftpd/commit/b7d3de4565ae448a510feecd17b41923e44bfe16 (v1.3.10rc5)
 CVE-2026-119146 (ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnera ...)
-	TODO: check
+	- proftpd-dfsg <unfixed>
+	NOTE: https://github.com/proftpd/proftpd/commit/502d280b8d0ef72e44c6dd0a35a9405af0a1e301 (v1.3.10rc5)
 CVE-2026-119117 (Insertion of sensitive information into a log file in Amazon Kinesis P ...)
 	NOT-FOR-US: Amazon
 CVE-2026-119116 (A use-after-free and double-free issue in the SetClient command handle ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f33178faec0242db7134b2809bd35d4b9adef89

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/0f33178faec0242db7134b2809bd35d4b9adef89
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261030/5896520a/attachment.htm>