-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 01 May 2026 22:02:15 +0200
Source: proftpd-dfsg
Architecture: source
Version: 1.3.8+dfsg-4+deb12u5
Distribution: bookworm
Urgency: medium
Maintainer: ProFTPD Maintainance Team <pkg-proftpd-maintainers@alioth-lists.debian.net>
Changed-By: Hilmar Preuße <hille42@debian.org>
Closes: 1133677 1135119
Changes:
 proftpd-dfsg (1.3.8+dfsg-4+deb12u5) bookworm; urgency=medium
 .
   * Add patch from upstream to address CVE-2024-57392.
   * Add patch from upstream to address issues #1840 (Closes: #1133677).
   * Add patch for CVE-2026-42167 (Closes: #1135119).
Checksums-Sha1:
 9cf8da095761ef3a6bd2498ea6dec62091a504c8 3437 proftpd-dfsg_1.3.8+dfsg-4+deb12u5.dsc
 d9b209bfea4082d8de1d37ad061aa858545c41db 90776 proftpd-dfsg_1.3.8+dfsg-4+deb12u5.debian.tar.xz
 73301eeae7a833003ff634cc47a3c7cdd03f1fe8 5588 proftpd-dfsg_1.3.8+dfsg-4+deb12u5_source.buildinfo
Checksums-Sha256:
 54def882c4f2eb3d5a1c78d7c9013625914ac5acc4a3ed951dd13c5f4d8ae1b8 3437 proftpd-dfsg_1.3.8+dfsg-4+deb12u5.dsc
 156c1271c538c0118dfb2057ab1f47ced7b64c677a2829e3d7f8e8281217fb12 90776 proftpd-dfsg_1.3.8+dfsg-4+deb12u5.debian.tar.xz
 685db173e1390afe0467adb77242e65f532afdc0eccc11d6bf64b59499f68a2e 5588 proftpd-dfsg_1.3.8+dfsg-4+deb12u5_source.buildinfo
Files:
 cd3386e099d604c19155ad9f0698f629 3437 net optional proftpd-dfsg_1.3.8+dfsg-4+deb12u5.dsc
 fa6a7fbac56053bfadfb24c8c0f83b39 90776 net optional proftpd-dfsg_1.3.8+dfsg-4+deb12u5.debian.tar.xz
 df640939be0391ba93e9368321e199b7 5588 net optional proftpd-dfsg_1.3.8+dfsg-4+deb12u5_source.buildinfo

-----BEGIN PGP SIGNATURE-----

iQKTBAEBCgB9FiEEaXGmC/nkbIhxf16kxiZYRqvgLIsFAmn1B29fFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDY5
NzFBNjBCRjlFNDZDODg3MTdGNUVBNEM2MjY1ODQ2QUJFMDJDOEIACgkQxiZYRqvg
LIuezhAAsRypo5971pp/Ubpz68rGUkhLB/B7fBaJ60lJDVABFa1RtMApRzPtY3gd
pKPXCFB1UH5BzZOkLTFhAnUErZ7i+vK9eRfRQI58IrI9hqAVZfTDH/BEe6HvG0KT
Ek6q/CU6nSWClFb7UDbAubEumLakkX56ak1IGA7kXiYs26AS6YpqNUiTMXn1DSTq
rr8mnPEeAKIVUN4jLl5sINRH3tJcogdzj65Et1DBoye0/tkEr0kk3ziMErJlfguE
69uiRtTGVyHo9TxiYshNLWP8oUt3TPMIsvFzw+XKWqWGgExrUYP3mzqJrSBXzb5Y
kMg0BI8zj6yjz9IXuUOkgRdukUHbOgDTJ/TdM7KGH0U8qEkuGnTT7tY4DU3CGCtK
yONwtoKdVPRTrV8gMdwo5aOBIrRGTB1na+1ya2fiPlGZmLhDBRlSTMwtX9sk2em0
G0EnTR03C1mJgPxLiPaR/Hl7R+be2KEm86JpQfNOT0K6Wg9Yc0uTtGMgzFCQJ9d4
Os/5B8cgEylwnXqsFDR3Ss6nkA5JuYvVIvWC4YOiENrLBJ42cdqFQUbGPaTw83gZ
BHXm968u9FkVjJg7b3zPw3JCJ7wQcWxEIqf57BI/TROw063qAT6CiOYvzSR8eh/S
yI937Z+zYWL1SNHlTRXM2se5u2703tJW772deLHjd+6PtkmYsb4=
=I6xu
-----END PGP SIGNATURE-----