Bug#767171: Command execution

2014-10-28 Thread Salvatore Bonaccorso
Control: retitle -1 tnftp: CVE-2014-8517: ftp(1) can be made execute arbitrary commands by malicious webserver Hi, On Tue, Oct 28, 2014 at 11:15:44PM +0100, Moritz Muehlenhoff wrote: > Package: tnftp > Severity: grave > Tags: security > > Please see http://www.openwall.com/lists/oss-security/20

Processed: Re: Bug#767171: Command execution

2014-10-28 Thread Debian Bug Tracking System
Processing control commands: > retitle -1 tnftp: CVE-2014-8517: ftp(1) can be made execute arbitrary > commands by malicious webserver Bug #767171 [tnftp] Command execution Changed Bug title to 'tnftp: CVE-2014-8517: ftp(1) can be made execute arbitrary commands by malicious webserver' from 'Com

Bug#767171: Command execution

2014-10-28 Thread Moritz Muehlenhoff
Package: tnftp Severity: grave Tags: security Please see http://www.openwall.com/lists/oss-security/2014/10/28/4 No CVE ID has been assigned yet. This doesn't warrant a DSA, but you could fix it up in a point release. Cheers, Moritz -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@li