[Git][security-tracker-team/security-tracker][master] Update status for proftpd-dfsg issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
2eddae13 by Salvatore Bonaccorso at 2026-10-31T17:13:29+01:00
Update status for proftpd-dfsg issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -922,7 +922,7 @@ CVE-2026-119365 (Improper Neutralization of Input During Web Page Generation ('C
 CVE-2026-119364 (ProFTPD through 1.3.9e and 1.3.10rc1 through 1.3.10rc4 contains a link ...)
 	- proftpd-dfsg <unfixed>
 	NOTE: https://github.com/proftpd/proftpd/issues/2374
-	NOTE: https://github.com/proftpd/proftpd/commit/c41691f8981f98081fcb8a535c3c21b06a3f04af (v1.3.10rc5)
+	NOTE: Fixed by: https://github.com/proftpd/proftpd/commit/c41691f8981f98081fcb8a535c3c21b06a3f04af (v1.3.10rc5)
 CVE-2026-119300 (Wekan is open source kanban built with Meteor. Prior to 11.11, the use ...)
 	TODO: check
 CVE-2026-119299 (gopacket provides packet processing capabilities for Go. Prior to 1.7. ...)
@@ -944,11 +944,13 @@ CVE-2026-119176 (The CP Multi View Events Calendar plugin for WordPress is vulne
 CVE-2026-119148 (Incomplete string validation in AWS aws-nitro-enclaves-sdk-c before 0. ...)
 	NOT-FOR-US: Amazon
 CVE-2026-119147 (ProFTPD before 1.3.9e and 1.3.10rc5 contains an authorization bypass i ...)
-	- proftpd-dfsg <unfixed>
-	NOTE: https://github.com/proftpd/proftpd/commit/b7d3de4565ae448a510feecd17b41923e44bfe16 (v1.3.10rc5)
+	- proftpd-dfsg 1.3.9e~dfsg-1
+	NOTE: Fixed by: https://github.com/proftpd/proftpd/commit/b7d3de4565ae448a510feecd17b41923e44bfe16 (v1.3.10rc5)
+	NOTE: Fixed by: https://github.com/proftpd/proftpd/commit/1570fd3b7a70b447bd59b175ed7fb01fb3d8242b (v1.3.9e)
 CVE-2026-119146 (ProFTPD before 1.3.9e and 1.3.10rc5 contains a buffer overflow vulnera ...)
-	- proftpd-dfsg <unfixed>
-	NOTE: https://github.com/proftpd/proftpd/commit/502d280b8d0ef72e44c6dd0a35a9405af0a1e301 (v1.3.10rc5)
+	- proftpd-dfsg 1.3.9e~dfsg-1
+	NOTE: Fixed by: https://github.com/proftpd/proftpd/commit/502d280b8d0ef72e44c6dd0a35a9405af0a1e301 (v1.3.10rc5)
+	NOTE: Fixed by: https://github.com/proftpd/proftpd/commit/4bafd1e9861506e77b9ea3ed277b58e60eacfe4d (v1.3.9e)
 CVE-2026-119117 (Insertion of sensitive information into a log file in Amazon Kinesis P ...)
 	NOT-FOR-US: Amazon
 CVE-2026-119116 (A use-after-free and double-free issue in the SetClient command handle ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2eddae13163ab2bb0a4b8c8ff908503210ca7b64

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/2eddae13163ab2bb0a4b8c8ff908503210ca7b64
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261031/fd448fd5/attachment-0001.htm>