Debian Security Advisory: New version of proftpd fixes remote exploits. Debian security homepage here.