Bug#629373: Remote DoS with vsftpd on Linux 2.6.32

2011-09-06 Thread Jon Dowland
On Mon, Sep 05, 2011 at 11:51:06PM +0200, Daniel Baumann wrote: > ...and guess what? you people keep complaining. ^^ Do not make the mistake of considering everyone in Debian as being the same. You've obviously had some bad experiences with some people in the past, re

Bug#629373: Remote DoS with vsftpd on Linux 2.6.32

2011-09-05 Thread Daniel Baumann
On 09/05/2011 10:42 PM, Jon Dowland wrote: i never used git.debian.org in the first place. So you didn't. So instead I should have written: You forgot (or haven't got around to) pushing back to git.debian-maintainers.org… However, http://git.debian-maintainers.org/?p=daniel/vsftpd.git is no

Bug#629373: Remote DoS with vsftpd on Linux 2.6.32

2011-09-05 Thread Jon Dowland
On Mon, Sep 05, 2011 at 02:58:27PM +0200, Daniel Baumann wrote: > On 09/05/2011 02:29 PM, Jon Dowland wrote: > >You forgot (or haven't got around to) pushing back to git.debian.org… > > i never used git.debian.org in the first place. So you didn't. So instead I should have written: You forgot (

Bug#629373: Remote DoS with vsftpd on Linux 2.6.32

2011-09-05 Thread Daniel Baumann
On 09/05/2011 02:29 PM, Jon Dowland wrote: You forgot (or haven't got around to) pushing back to git.debian.org… i never used git.debian.org in the first place. -- Address:Daniel Baumann, Donnerbuehlweg 3, CH-3012 Bern Email: daniel.baum...@progress-technologies.net Internet:

Bug#629373: Remote DoS with vsftpd on Linux 2.6.32

2011-09-05 Thread Jon Dowland
On Mon, Sep 05, 2011 at 01:51:39PM +0200, Daniel Baumann wrote: > tag 629373 pending > thanks > > fixed in git. You forgot (or haven't got around to) pushing back to git.debian.org… -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble?

Bug#629373: Remote DoS with vsftpd on Linux 2.6.32

2011-09-05 Thread Daniel Baumann
tag 629373 pending thanks fixed in git. -- Address:Daniel Baumann, Donnerbuehlweg 3, CH-3012 Bern Email: daniel.baum...@progress-technologies.net Internet: http://people.progress-technologies.net/~daniel.baumann/ -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@list

Bug#629373: Remote DoS with vsftpd on Linux 2.6.32

2011-09-05 Thread Steve McIntyre
severity 629373 serious thanks On Tue, Jul 19, 2011 at 01:15:24PM +0100, Steve McIntyre wrote: > >This simple patch seems to work just fine for me, and has stopped a >severe DOS here. > >Daniel: any chance of a stable-security update for this please? Ping? Raising severity to serious as this is

Bug#629373: Remote DoS with vsftpd on Linux 2.6.32

2011-07-19 Thread Steve McIntyre
On Mon, Jun 06, 2011 at 06:15:08AM +0100, Ben Hutchings wrote: >This patch should provide the necessary kernel version check, but I >haven't tested it. > >Ben. > >--- vsftpd-2.3.2.orig/sysdeputil.c >+++ vsftpd-2.3.2/sysdeputil.c >@@ -25,6 +25,11 @@ > #define _LARGEFILE64_SOURCE 1 > #endif > >+#i

Bug#629373: Remote DoS with vsftpd on Linux 2.6.32

2011-06-05 Thread Ben Hutchings
This patch should provide the necessary kernel version check, but I haven't tested it. Ben. --- vsftpd-2.3.2.orig/sysdeputil.c +++ vsftpd-2.3.2/sysdeputil.c @@ -25,6 +25,11 @@ #define _LARGEFILE64_SOURCE 1 #endif +#ifdef __linux__ + #include + #include +#endif + /* For INT_MAX */ #inc

Bug#629373: Remote DoS with vsftpd on Linux 2.6.32

2011-06-05 Thread Ben Hutchings
Package: vsftpd Version: 2.3.2-3 Tags: security Severity: important X-Debbugs-Cc: debian-ker...@lists.debian.org The bug is described by Serge Hallyn below, and in Ubuntu bug #720095 . In short, I agree with Serge that the network names