[Proftpd-devel] ProFTPD 1.3.5a released!

[TJ Saunders]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello, ProFTPD community. The ProFTPD Project team is pleased to announce
that the first maintenance release for ProFTPD 1.3.5 is now available for
public consumption.

You can download 1.3.5a, including PGP signatures and MD5 sums, from
the alternate download site, hosted by GitHub:

https://github.com/proftpd/proftpd/archive/v1.3.5a.tar.gz

Alternatively, you can download proftpd from the main site:

ftp://ftp.proftpd.org/distrib/source

RPMs, once available, will be placed here:

ftp://ftp.proftpd.org/distrib/packages/RPMS

The 1.3.5a release is a maintenance release, containing various fixes
backported from the 1.3.6 development cycle.

Please read the included NEWS and ChangeLog files for the full details.

The MD5 sum for the source tarball is:

b9d3092411478415b31d435f8e26d173 proftpd-1.3.5a.tar.gz

The PGP signature for the source tarball is:

proftpd-1.3.5a.tar.gz:

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEABECAAYFAlVmZ+4ACgkQt46JP6URl2pTLwCeMiXrNoRkvmHGEUFDwFwHdYIM
io8AoIxqqi320QUG1sSePFQ6Fy041WSl
=Vapu
-----END PGP SIGNATURE-----

My PGP key has been used to sign the source tarballs as well as this
announcement; it is available via MIT's public keyserver.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAlVmarsACgkQt46JP6URl2pinwCeKoAAfTOyR4+HTALLFtjbMe4f
X3gAniZZogqOFs0t4p0yRnbolEqls5rv
=UaLM
-----END PGP SIGNATURE-----


------------------------------------------------------------------------------

[Christian]

Hi,

will this fix CVE-2015-3306 ?
and is there a patch for 1.3.4e ?
or should/must I upgrade to 1.3.5a at least ?

Thanks in advance

Cheers
Chris

Post by TJ Saunders
Hello, ProFTPD community. The ProFTPD Project team is pleased to announce
that the first maintenance release for ProFTPD 1.3.5 is now available for
public consumption.
You can download 1.3.5a, including PGP signatures and MD5 sums, from
https://github.com/proftpd/proftpd/archive/v1.3.5a.tar.gz
ftp://ftp.proftpd.org/distrib/source
ftp://ftp.proftpd.org/distrib/packages/RPMS
The 1.3.5a release is a maintenance release, containing various fixes
backported from the 1.3.6 development cycle.
Please read the included NEWS and ChangeLog files for the full details.
b9d3092411478415b31d435f8e26d173 proftpd-1.3.5a.tar.gz
------------------------------------------------------------------------------
_______________________________________________
ProFTPD Developers List
https://lists.sourceforge.net/lists/listinfo/proftp-devel

--
Christian
----------------------------------------------------
- Please do not 'CC' me on list mails.
Just reply to the list :)
----------------------------------------------------
Der ultimative shop für Sportbekleidung und Zubehör

http://www.sc24.de
----------------------------------------------------

------------------------------------------------------------------------------

[TJ Saunders]

Post by Christian
will this fix CVE-2015-3306 ?

This does fix CVE-2015-3306, yes.

Post by Christian
and is there a patch for 1.3.4e ?
or should/must I upgrade to 1.3.5a at least ?

You will need to upgrade to 1.3.5a, or 1.3.6rc1.

Cheers,
TJ

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

The fibers of all things have their tension and are strained
like the strings of an instrument.

-Henry David Thoreau

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

------------------------------------------------------------------------------