I made a security update for proftpd, which fixes several vulnerabilities. The fix was a verified and corrected version of the patch that was given in bug #85259. The version for stable has version 1.2.0pre10-2.0potato1 and is currently in incoming on auric. Ivo -- Software isn't released, it's allowed to escape.