Summary: | <net-ftp/pure-ftpd-1.0.49-r5: unbounded file size in file upload (CVE-2021-40524) | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | John Helmert III <ajak> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | IN_PROGRESS --- | ||
Severity: | minor | CC: | polynomial-c |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://github.com/jedisct1/pure-ftpd/pull/158 | ||
Whiteboard: | B3 [glsa?] | ||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | 818196 | ||
Bug Blocks: |
Description
John Helmert III
2021-09-05 20:20:44 UTC
The bug has been referenced in the following commit(s): https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d2c8b17c138cb0e2361c433e88a2fa32d3e28d1c commit d2c8b17c138cb0e2361c433e88a2fa32d3e28d1c Author: Lars Wendler <polynomial-c@gentoo.org> AuthorDate: 2021-09-06 07:15:18 +0000 Commit: Lars Wendler <polynomial-c@gentoo.org> CommitDate: 2021-09-06 07:15:45 +0000 net-ftp/pure-ftpd: Revbump to fix quota check Bug: https://bugs.gentoo.org/811786 Signed-off-by: Lars Wendler <polynomial-c@gentoo.org> ...pure-ftpd-1.0.49-quota_maxfile_size_check.patch | 25 ++++ net-ftp/pure-ftpd/pure-ftpd-1.0.49-r5.ebuild | 160 +++++++++++++++++++++ 2 files changed, 185 insertions(+) Please file a stable request and block this bug when ready. Please cleanup. Cleanup has been done already. |