[Git][debian-proftpd-team/proftpd][master] Add CVE numbers for last d/changelog entry.

Hilmar Preuße (@hilmar) gitlab at salsa.debian.org
Mon Jul 20 16:24:42 BST 2026



Hilmar Preuße pushed to branch master at Debian ProFTPD Team / proftpd


Commits:
d67d2631 by Hilmar Preuße at 2026-07-20T17:24:33+02:00
Add CVE numbers for last d/changelog entry.

- - - - -


1 changed file:

- debian/changelog


Changes:

=====================================
debian/changelog
=====================================
@@ -3,8 +3,8 @@ proftpd-dfsg (1.3.9c~dfsg-1) unstable; urgency=medium
   * New upstream version.
     - can be built using "make --shuffle=reverse" (Closes: #1105645).
     - Fixes two security issues:
-      * SFTP packet reassembly heap overflow
-      * SCP signed-size integer overflow → heap over-read
+      * SFTP packet reassembly heap overflow: CVE-2026-63090
+      * SCP signed-size integer overflow → heap over-read: CVE-2026-63091
   * Simplify d/patches/autotools a little bit.
   * Remove "Rules-Requires-Root: binary-targets" from the control file
     to make build reproducible (Closes: #1140676).



View it on GitLab: https://salsa.debian.org/debian-proftpd-team/proftpd/-/commit/d67d2631bc5d334ad41bf694251459fca4d0a4de

-- 
View it on GitLab: https://salsa.debian.org/debian-proftpd-team/proftpd/-/commit/d67d2631bc5d334ad41bf694251459fca4d0a4de
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help




More information about the Pkg-proftpd-maintainers mailing list