proftpd-dfsg - SQL injection vulnerabilites

The security update for proftpd-dfsg in DSA-1727-1 caused a regression
with the postgresql backend. This update corrects the flaw. Also it was
discovered that the oldstable distribution (etch) is not affected by the
security issues. For reference the original advisory follows.

Two SQL injection vulnerabilities have been found in proftpd, a
virtual-hosting FTP daemon. The Common Vulnerabilities and Exposures
project identifies the following problems:

• CVE-2009-0542
  Shino discovered that proftpd is prone to an SQL injection vulnerability
  via the use of certain characters in the username.
• CVE-2009-0543
  TJ Saunders discovered that proftpd is prone to an SQL injection
  vulnerability due to insufficient escaping mechanisms, when multybite
  character encodings are used.

The oldstable distribution (etch) is not affected by these problems.

For the stable distribution (lenny), these problems have been fixed in
version 1.3.1-17lenny2.

For the testing distribution (squeeze), these problems will be fixed
soon.

For the unstable distribution (sid), these problems have been fixed in
version 1.3.2-1.