Tuesday 18th March 2025
Fedora Project
Updated proftpd to 1.3.8d in F-40, F-41, F-42, Rawhide and EPEL-9:
Use of HideNoAccess for SFTP sessions can lead to segfault and/or unexpected behaviour (GH#1855)
SFTP channel allocations can lead to high memory utilization over time (GH#1876)
Avoid NULL pointer dereferences in mod_ls (GH#1866, CVE-2024-57392)
Local Packages
Updated curl (rc) to new upstream release candidate 8.13.0-rc2
Updated proftpd to 1.3.8d as per the Fedora version