Bug#923926: Acknowledgement (proftpd-basic: proftpd 1.3.5b has memory leaks, allows Denial-Of-Service attack)

esbeeb at tuta.io esbeeb at tuta.io
Thu Mar 7 21:32:10 GMT 2019


Great, OpenMediaVault has the "unattended-upgrades" package installed by default, so your security update should apply itself automatically, once it's published.
I'll try my OpenMediaVault proftpd upload again once the security fix arrives, and watch the RAM usage, with htop.  I'll let you know if any memory leak remains.  If any memory leak remains (albeit a slower leak), then this DOS still exisits...

-- 
Cheers,
Subharo Bhikkhu
https://bhikkhu.ca



Mar 7, 2019, 6:30 PM by owner at bugs.debian.org:

> Thank you for filing a new Bug report with Debian.
>
> You can follow progress on this Bug here: 923926: > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=923926 <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=923926>> .
>
> This is an automatically generated reply to let you know your message
> has been received.
>
> Your message is being forwarded to the package maintainers and other
> interested parties for their attention; they will reply in due course.
>
> As you requested using X-Debbugs-CC, your message was also forwarded to
>  > esbeeb at tuta.io <mailto:esbeeb at tuta.io>> , Debian Security Team <> team at security.debian.org <mailto:team at security.debian.org>> >
> (after having been given a Bug report number, if it did not have one).
>
> Your message has been sent to the package maintainer(s):
>  ProFTPD Maintainance Team <> pkg-proftpd-maintainers at alioth-lists.debian.net <mailto:pkg-proftpd-maintainers at alioth-lists.debian.net>> >
>
> If you wish to submit further information on this problem, please
> send it to > 923926 at bugs.debian.org <mailto:923926 at bugs.debian.org>> .
>
> Please do not send mail to > owner at bugs.debian.org <mailto:owner at bugs.debian.org>>  unless you wish
> to report a problem with the Bug-tracking system.
>
> -- 
> 923926: > https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=923926 <https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=923926>
> Debian Bug Tracking System
> Contact > owner at bugs.debian.org <mailto:owner at bugs.debian.org>>  with problems
>


More information about the Pkg-proftpd-maintainers mailing list