Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.dist > #1069398
| From | Chris Hofstaedtler <chris@hofstaedtler.name> |
|---|---|
| Newsgroups | linux.debian.bugs.dist |
| Subject | Bug#993173: proftpd-basic: mod_radius leaks memory contents to radius server |
| Date | 2021-09-02 10:20 +0200 |
| Message-ID | <CSQ6Z-4Pk-1@gated-at.bofh.it> (permalink) |
| References | <CR4QO-2gw-5@gated-at.bofh.it> <CSrBE-62Y-1@gated-at.bofh.it> <CR4QO-2gw-5@gated-at.bofh.it> <CSrBE-62Y-1@gated-at.bofh.it> |
| Organization | linux.* mail to news gateway |
Hello, * Hilmar Preuße <hille42@web.de> [210901 08:28]: > Am 28.08.2021 um 13:31 teilte Chris Hofstaedtler mit: > > it has been found that proftpd's mod_radius leaks uninitialised memory > > to the RADIUS server, as part of the encrypted User-Password. > > > > Upstream report: https://github.com/proftpd/proftpd/issues/1284 > > Patch: https://github.com/proftpd/proftpd/pull/1285/files > > > > Upstream fixed this in HEAD and version 1.3.7c. > > > > Please consider applying the patch to buster and bullseye. If need be I > > can also look into supplying updated (source) packages. > > > I've pushed the patch to stable and oldstable branch. Further I've packaged > the 1.3.7c for unstable and would upload soon. Thanks a lot! > - Do we need to have the fix in all 3 distributions? > - Are you willing to test the fix before I upload? I can easily test on oldstable (=buster), but not on bullseye. Chris (Also, I'll be away most of the remaining September weeks, so I could only do that relatively soon.)
Back to linux.debian.bugs.dist | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
Bug#993173: proftpd-basic: mod_radius leaks memory contents to radius server Chris Hofstaedtler <zeha@debian.org> - 2021-08-28 13:40 +0200
Bug#993173: proftpd-basic: mod_radius leaks memory contents to radius server Hilmar Preuße <hille42@web.de> - 2021-09-01 08:10 +0200
Bug#993173: proftpd-basic: mod_radius leaks memory contents to radius server Chris Hofstaedtler <chris@hofstaedtler.name> - 2021-09-02 10:20 +0200
Bug#993173: proftpd-basic: mod_radius leaks memory contents to radius server Hilmar Preuße <hille42@web.de> - 2021-09-03 10:50 +0200
Bug#993173: proftpd-basic: mod_radius leaks memory contents to radius server Chris Hofstaedtler <zeha@debian.org> - 2021-09-04 13:40 +0200
Bug#993173: proftpd-basic: mod_radius leaks memory contents to radius server Hilmar Preuße <hille42@web.de> - 2021-09-03 11:30 +0200
csiph-web