diff options
Diffstat (limited to 'ChangeLog.txt')
| -rw-r--r-- | ChangeLog.txt | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/ChangeLog.txt b/ChangeLog.txt index a4cec5a56..d261e18e7 100644 --- a/ChangeLog.txt +++ b/ChangeLog.txt @@ -1,3 +1,16 @@ +Tue Nov 7 19:57:12 UTC 2023 +patches/packages/sudo-1.9.15-x86_64-1_slack15.0.txz: Upgraded. + The sudoers plugin has been modified to make it more resilient to ROWHAMMER + attacks on authentication and policy matching. + The sudoers plugin now constructs the user time stamp file path name using + the user-ID instead of the user name. This avoids a potential problem with + user names that contain a path separator ('/') being interpreted as part of + the path name. + For more information, see: + https://www.cve.org/CVERecord?id=CVE-2023-42465 + https://www.cve.org/CVERecord?id=CVE-2023-42456 + (* Security fix *) ++--------------------------+ Tue Oct 31 18:49:18 UTC 2023 extra/php81/php81-8.1.25-x86_64-1_slack15.0.txz: Upgraded. This is a bugfix release. |