Re: [Proftpd-user] Vulnerability
"TJ Saunders" <[email protected]>
| Newsgroups | gmane.network.proftpd.user |
|---|---|
| Message-ID | <[email protected]> |
> Are there any plans to address this issue?
>
> https://www.cvedetails.com/cve/CVE-2019-12815/
See:
http://bugs.proftpd.org/show_bug.cgi?id=4372
I have not yet had enough time to prepare releases with this fix incorporated.
In the mean time, if you don't use/need mod_copy, then adding:
<IfModule mod_copy.c>
CopyEngine off
</IfModule>
to your proftpd.conf should suffice. Otherwise, you can apply the patch (see above ticket and its associated PR) until the releases are available.
Cheers,
TJ
_______________________________________________
ProFTPD Users List <[email protected]>
Unsubscribe problems?
http://www.proftpd.org/list-unsub.html