Request for proftpd 1.3.3g

[AlexeyB]

Hello,
are you planning to release MU with update of proftpd?
Current version of proftpd included in Plesk 8.6 and 9.5 is vulnerable for remote exploit attack:
http://bugs.proftpd.org/show_bug.cgi?id=3711
http://secunia.com/advisories/46811/
Proftpd 1.3.3g was released Nov 9, but Plesk installations are still vulnerable.

 

[horst rupp]

well, see my question about the same issue from nov, 12th, they don't care.

 

[IgorG]

It is known problem and developers are working on it. I hope it will be included to nearest MU soon.

 

[onsightdata]

If you subscribe to Atomic Turtle Repo then the update to proftpd (ProFTPD 1.3.4a) is in the repo already.

Configuration & Installation
To enable access to both the atomic yum repository use the following automated installer:

wget -q -O - http://www.atomicorp.com/installers/atomic | sh

 

[Amin Taheri]

Plesk does not fix anything quickly unless it directly costs them money. You are better off getting updates from a third party. The Atomic repo is free and they will fix this stuff very fast.