Updated NEWS, release notes for backport of fix for Issue proftpd#903.

Sashan · Feb 18, 2020 · a9749ca · a9749ca
1 parent e845abc
commit a9749ca
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/NEWS b/NEWS
@@ -33,6 +33,7 @@
 - Issue 890 - SFTP publickey authentication fails unexpectedly when user has
   no shadow password info.
 - Issue 898 - ftpasswd fails to restore password file permissions in some cases.
+- Issue 903 - Use-after-free vulnerability in memory pools during data transfer.
 
 1.3.6b - Released 19-Oct-2019
 --------------------------------

diff --git a/RELEASE_NOTES b/RELEASE_NOTES
@@ -11,6 +11,7 @@ ChangeLog files.
   + Fixed regression in directory listing latency (Issue #863).
   + Detect OpenSSH-specific formatted SFTPHostKeys, and log hint for
     converting them to supported format.
+  + Fixed use-after-free vulnerability during data transfers (Issue #903).
 
 1.3.6b
 ---------