Merge lp:~ari-tczew/ubuntu-cve-tracker/merge into lp:~ubuntu-security/ubuntu-cve-tracker/master

[Artur Rona]

[Jamie Strandboge (jdstrand)]

Looks good, thanks!

review: Approve

[lp:~ari-tczew/ubuntu-cve-tracker/merge]

8071. By Jamie Strandboge on 2014-05-19

Artur Rona 2014-05-18 Triaged CVE-2013-4359

=== modified file 'active/CVE-2013-4359'
--- active/CVE-2013-4359	2014-05-16 12:18:14 +0000
+++ active/CVE-2013-4359	2014-05-18 08:52:01 +0000
@@ -2,6 +2,7 @@
 PublicDate: 2013-09-30
 References:
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4359
+ http://bugs.proftpd.org/show_bug.cgi?id=3973
 Description:
  Integer overflow in kbdint.c in mod_sftp in ProFTPD 1.3.4d and 1.3.5r3
  allows remote attackers to cause a denial of service (memory consumption)
@@ -16,11 +17,12 @@
 Assigned-to:
 
 Patches_proftpd-dfsg:
-upstream_proftpd-dfsg: needs-triage
+ upstream: bugs.proftpd.org/attachment.cgi?id=4075
+upstream_proftpd-dfsg: released (1.3.5~rc4)
 lucid_proftpd-dfsg: ignored (reached end-of-life)
-precise_proftpd-dfsg: needs-triage
+precise_proftpd-dfsg: needed
 quantal_proftpd-dfsg: ignored (reached end-of-life)
 raring_proftpd-dfsg: ignored (reached end-of-life)
-saucy_proftpd-dfsg: needs-triage
-trusty_proftpd-dfsg: needs-triage
-devel_proftpd-dfsg: needs-triage
+saucy_proftpd-dfsg: needed
+trusty_proftpd-dfsg: needed
+devel_proftpd-dfsg: not-affected (1.3.5~rc4-3ubuntu1)