Bug#942831: CVE-2019-18217

[Salvatore Bonaccorso]

Control: fixed -1 1.3.6-4+deb10u2
Control: fixed -1 1.3.5b-4+deb9u2

Hi Hilmar,

On Wed, Nov 06, 2019 at 12:15:04PM +0100, Hilmar Preuße wrote:
> Control: notfound -1 1.3.5b-4+deb9u2
> Control: notfound -1 1.3.6-4+deb10u2
> 
> Am 22.10.2019 um 10:07 teilte Moritz Muehlenhoff mit:
> 
> > This was assigned CVE-2019-18217:
> > https://github.com/proftpd/proftpd/commit/13fe9462787b9a551152162f46f1641d65fe4df4
> > https://github.com/proftpd/proftpd/issues/846
> > 
> Marking notfound.

You want to use 'fixed'. But if you had bug closers in changelog these
will automatically be then tracked once stable release managers have
accepted the packages for the point release. Until it is only in the
security-archive the BTS does not know that version for tracking the
fixed version.

Regards,
Salvatore