Bug 811495 – <net-ftp/proftpd-1.3.7c: memory disclosure to RADIUS servers

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description John Helmert III 2021-09-03 18:37:20 UTC]

1.3.7c changelog:

  + Fix memory disclosure to RADIUS servers by mod_radius (Issue #1284).


Please bump.

[Comment 1 Larry the Git Cow 2021-10-18 17:51:36 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=0431fec0fb98015025f8d95f21fdc8a28d100922

commit 0431fec0fb98015025f8d95f21fdc8a28d100922
Author:     Piotr Karbowski <[e-mail]>
AuthorDate: 2021-10-18 17:49:22 +0000
Commit:     Piotr Karbowski <[e-mail]>
CommitDate: 2021-10-18 17:49:22 +0000

    net-ftp/proftpd: 1.3.7c version bump
    
    Bug: https://bugs.gentoo.org/811495
    Signed-off-by: Piotr Karbowski <[e-mail]>

 net-ftp/proftpd/Manifest              |   1 +
 net-ftp/proftpd/proftpd-1.3.7c.ebuild | 275 ++++++++++++++++++++++++++++++++++
 2 files changed, 276 insertions(+)

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d5ec9fab9f4157eb6d70de7ee004c67c8452a529

commit d5ec9fab9f4157eb6d70de7ee004c67c8452a529
Author:     Piotr Karbowski <[e-mail]>
AuthorDate: 2021-10-18 17:48:05 +0000
Commit:     Piotr Karbowski <[e-mail]>
CommitDate: 2021-10-18 17:48:05 +0000

    net-ftp/proftpd: 1.3.8 rc2 version bump.
    
    Bug: https://bugs.gentoo.org/811495
    Signed-off-by: Piotr Karbowski <[e-mail]>

 net-ftp/proftpd/Manifest                 |   1 +
 net-ftp/proftpd/proftpd-1.3.8_rc2.ebuild | 274 +++++++++++++++++++++++++++++++
 2 files changed, 275 insertions(+)

[Comment 2 John Helmert III 2021-10-18 19:03:10 UTC]

Thanks! Please file a stablereq and block this bug when ready.

[Comment 3 John Helmert III 2021-10-27 12:59:20 UTC]

Please cleanup

[Comment 4 Larry the Git Cow 2022-11-19 15:48:11 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=9c76e439f2bd106d14a0914360f7f7a3f6301235

commit 9c76e439f2bd106d14a0914360f7f7a3f6301235
Author:     Piotr Karbowski <[e-mail]>
AuthorDate: 2022-11-19 15:47:30 +0000
Commit:     Piotr Karbowski <[e-mail]>
CommitDate: 2022-11-19 15:47:30 +0000

    net-ftp/proftpd: drop old
    
    Bug: https://bugs.gentoo.org/811495
    Signed-off-by: Piotr Karbowski <[e-mail]>

 net-ftp/proftpd/Manifest                    |   4 -
 net-ftp/proftpd/proftpd-1.3.7a-r3.ebuild    | 277 ----------------------------
 net-ftp/proftpd/proftpd-1.3.7b-r2.ebuild    | 275 ---------------------------
 net-ftp/proftpd/proftpd-1.3.7c-r1.ebuild    | 275 ---------------------------
 net-ftp/proftpd/proftpd-1.3.8_rc1-r3.ebuild | 274 ---------------------------
 5 files changed, 1105 deletions(-)

[Comment 5 John Helmert III 2022-11-22 16:11:21 UTC]

GLSA request filed, CVE requested

[Comment 6 Larry the Git Cow 2023-05-03 09:32:03 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=1743ea7ecb249c8ccfe12fe2bb189ce40c33d078

commit 1743ea7ecb249c8ccfe12fe2bb189ce40c33d078
Author:     GLSAMaker <[e-mail]>
AuthorDate: 2023-05-03 09:13:03 +0000
Commit:     Sam James <[e-mail]>
CommitDate: 2023-05-03 09:31:45 +0000

    [ GLSA 202305-03 ] ProFTPd: Memory Disclosure
    
    Bug: https://bugs.gentoo.org/811495
    Signed-off-by: GLSAMaker <[e-mail]>
    Signed-off-by: Sam James <[e-mail]>

 glsa-202305-03.xml | 42 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 42 insertions(+)