Differences

This shows you the differences between two versions of the page.

--- changelog_14.2 [2023/12/13 23:08] – [2023-11-08] connie
+++ changelog_14.2 [2023/12/23 13:40] (current) – [2023-12-20] connie
@@ Line 2: / Line 2: @@
 Slackware upstream ChangeLog entries are courtesy of Patrick Volkerding.
+==== 2023-12-23 ====
+**proftpd-1.3.8b**:  Upgraded.
+This update fixes a security issue:
+mod_sftp: implemented mitigations for "Terrapin" SSH attack.
+For more information, see:
+  * https://www.cve.org/CVERecord?id=CVE-2023-48795
+(**Security fix**)
+==== 2023-12-20 ====
+**libssh-0.10.6**:  Upgraded.
+This update fixes security issues:
+Command injection using proxycommand.
+Potential downgrade attack using strict kex.
+Missing checks for return values of MD functions.
+For more information, see:
+  * https://www.cve.org/CVERecord?id=CVE-2023-6004
+  * https://www.cve.org/CVERecord?id=CVE-2023-48795
+  * https://www.cve.org/CVERecord?id=CVE-2023-6918
+(**Security fix**)
+**sudo-1.9.15p4**:  Upgraded.
+This is a bugfix release.
+**libxml2-2.11.6**:  Upgraded.
+We're going to drop back to the 2.11 branch here on the stable releases
+since it has all of the relevant security fixes and better compatibility.
+**sudo-1.9.15p3**:  Upgraded.
+This is a bugfix release.
 ==== 2023-12-13 ====