Update Info

openSUSE-2025-315


Security update for proftpd


Type: security
Severity: important
Issued: 2025-08-25
Description:
This update for proftpd fixes the following issues:

- CVE-2024-57392: Null pointer dereference vulnerability by sending a maliciously crafted message (boo#1236889).
- CVE-2024-48651: Supplemental group inheritance grants unintended access to GID 0 (boo#1233997).


              

Packages


  • proftpd-1.3.8d-bp157.2.3.1