[SCM] proftpd-dfsg branch, master, updated. upstream/1.3.5_rc3-108-gf504c29

Francesco Paolo Lovergine frankie at debian.org
Thu Jan 30 12:35:47 UTC 2014


The following commit has been merged in the master branch:
commit d86829ed64eadb68165fb34ea3069dcd1d00f8d2
Author: Francesco Paolo Lovergine <frankie at debian.org>
Date:   Thu Jan 30 13:32:44 2014 +0100

    Updated for new upstream pre-release and included NMU changelogs.

diff --git a/debian/changelog b/debian/changelog
index ee94e00..092075d 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,13 +1,40 @@
-proftpd-dfsg (1.3.5~rc3-3) UNRELEASED; urgency=medium
+proftpd-dfsg (1.3.5~rc4-1) unstable; urgency=low
 
+  * New upstream pre-release, with fix for CVE-2013-4359.
+    (closes: #723179)
   * Included fix by Andreas Beckmann:
     - Cleanup Breaks+Replaces.
     - Add proftpd-mod-geoip.preinst script to delete the old buggy postrm script
       on upgrades from wheezy. Otherwise the buggy postrm script would delete
-      some files from the newly unpacked package. (Closes: #699647)
+      some files from the newly unpacked package. 
+    (closes: #699647)
 
  -- Francesco Paolo Lovergine <frankie at debian.org>  Thu, 30 Jan 2014 13:20:53 +0100
 
+proftpd-dfsg (1.3.5~rc3-2.2) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Cleanup Breaks+Replaces.
+  * Add proftpd-mod-geoip.preinst script to delete the old buggy postrm script
+    on upgrades from wheezy. Otherwise the buggy postrm script would delete
+    some files from the newly unpacked package.  (Closes: #699647)
+
+ -- Andreas Beckmann <anbe at debian.org>  Sun, 26 Jan 2014 04:05:47 +0100
+
+proftpd-dfsg (1.3.5~rc3-2.1) unstable; urgency=low
+
+  * Non-maintainer upload.
+  * Add CVE-2013-4359.patch patch.
+    CVE-2013-4359: Fix invalid pool authentication in mod_sftp/mod_sftp_pam
+    during kbdint authentication leading to DoS conditions. (Closes: #723179)
+  * Correct Breaks and Replaces on proftpd-mod-geoip package.
+    The old proftpd-mod-geoip addon module is now obsoleted by core proftpd.
+    Adjusted the Breaks/Replaces to 1.3.5~rc1-1 which introduced the geoip
+    module in proftpd core.
+    Thanks to Andreas Beckmann <anbe at debian.org> (Closes: #699647)
+
+ -- Salvatore Bonaccorso <carnil at debian.org>  Sat, 05 Oct 2013 14:51:36 +0200
+
 proftpd-dfsg (1.3.5~rc3-2) unstable; urgency=low
 
   * Added version for dependency on memcached, for completeness.
diff --git a/debian/proftpd-substvars b/debian/proftpd-substvars
index c8e044f..5ad9124 100644
--- a/debian/proftpd-substvars
+++ b/debian/proftpd-substvars
@@ -1 +1 @@
-proftpd:Depends=proftpd-abi-1.3.5rc3 
+proftpd:Depends=proftpd-abi-1.3.5rc4 

-- 
ProFTPD core package



More information about the Pkg-proftpd-maintainers mailing list