Differences

This shows you the differences between two versions of the page.

--- changelog_14.2 [2020/02/14 17:37] – [2020-01-31] connie
+++ changelog_14.2 [2020/03/04 19:48] – [2020-02-20] connie
@@ Line 2: / Line 2: @@
 Slackware upstream ChangeLog entries are courtesy of Patrick Volkerding.
+==== 2020-03-04 ====
+**ppp-2.4.8**:  Upgraded.
+This update fixes a security issue:
+By sending an unsolicited EAP packet to a vulnerable ppp client or server,
+an unauthenticated remote attacker could cause memory corruption in the
+pppd process, which may allow for arbitrary code execution.
+For more information, see:
+  * https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8597
+(**Security fix**)
+==== 2020-02-20 ====
+**proftpd-1.3.6c**:  Upgraded.
+No CVEs assigned, but this sure looks like a security issue:
+Use-after-free vulnerability in memory pools during data transfer.
+(**Security fix**)
 ==== 2020-02-14 ====