[Bug 1647094] Re: segfault in xenial proftpd-dfsg 1.3.5a mod_sftp

[Ubuntu Foundations Team Bug Bot]

The attachment
"https://github.com/proftpd/proftpd/commit/b5c407771e8aaa41811199e595116bfe0f36afb9"
seems to be a patch.  If it isn't, please remove the "patch" flag from
the attachment, remove the "patch" tag, and if you are a member of the
~ubuntu-reviewers, unsubscribe the team.

[This is an automated message performed by a Launchpad user owned by
~brian-murray, for any issues please contact him.]

** Tags added: patch

-- 
You received this bug notification because you are a member of ProFTPD
Maintainance Team, which is subscribed to proftpd-dfsg in Ubuntu.
https://bugs.launchpad.net/bugs/1647094

Title:
  segfault in xenial proftpd-dfsg 1.3.5a mod_sftp

Status in proftpd-dfsg package in Ubuntu:
  New

Bug description:
  We have observed segfaults in mod_sftp that appear to be triggered by
  behavior in Ruby/Net::SSH as used by a software deployment service
  "deploybot.com".

  Per https://github.com/proftpd/proftpd/issues/305, and based on our
  testing, the segfault is mitigated by this patch:
  https://github.com/proftpd/proftpd/commit/b5c407771e8aaa41811199e595116bfe0f36afb9

  Our rebuilt proftpd-basic package has been running without segfaults
  during connections from this client.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/proftpd-dfsg/+bug/1647094/+subscriptions