Comment 2 for bug 154769

wzdftpd (0.8.3-1ubuntu1) hardy; urgency=low

  * Merge from Debian unstable. Remaining Ubuntu changes:
    - wzdftp-back-pgsql depends on postgresql-client instead of
      postgresql
    - Update maintainer field in debian/control.
  * debian/init.d: create /var/run/wzdftpd with correct permissions (LP: #154769)
  * drop patches:
     - 90_CVE-2007-5300_off_by_one_fix.dpatch: fixed upstream

wzdftpd (0.8.3-1) unstable; urgency=high

  * New upstream release
  * Ack NMU for security fix (Closes: #446192)
  * Drop 10_new_pam_header and 20_config_typos, included in upstream

wzdftpd (0.8.2-2.1) unstable; urgency=high

  * Non-maintainer upload by testing security team.
  * Fix off-by-one in wzd_login.c which leads to a remote
    denial of service vulnerability (CVE-2007-5300) (Closes: #446192).

 -- Lionel Porcheron <email address hidden> Thu, 08 Nov 2007 09:57:31 +0100