User Tools

Site Tools


start

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision
Previous revision
start [2026/08/24 02:49] – porta_release_botstart [2026/08/24 08:04] (current) – psftpteam
Line 4: Line 4:
  
 ===== Changes / Release ===== ===== Changes / Release =====
-==== Version 5.6.4 (08/22/2026) ====+==== Version 5.6.4 (08/24/2026) ====
   * Added FTP / FTPS (FTP over TLS) support to the built-in file transfer service   * Added FTP / FTPS (FTP over TLS) support to the built-in file transfer service
   * Upgrade to Apache Mina 2.2.9 fixing five published vulnerabilities:   * Upgrade to Apache Mina 2.2.9 fixing five published vulnerabilities:
Line 10: Line 10:
     * CVE-2026-41409 - Incomplete fix for CVE-2024-52046: the deserialization allowlist could still be bypassed when a static initializer ran during class resolution     * CVE-2026-41409 - Incomplete fix for CVE-2024-52046: the deserialization allowlist could still be bypassed when a static initializer ran during class resolution
     * CVE-2026-41635 - A code path in resolveClass() did not enforce the class name allowlist at all, allowing arbitrary code execution via crafted input     * CVE-2026-41635 - A code path in resolveClass() did not enforce the class name allowlist at all, allowing arbitrary code execution via crafted input
-    * CVE-2026-42778 - The fix for CVE-2026-41409 was not applied to the 2.1.x / 2.2.x maintenance branches; it is included in version 2.2.9 +    * CVE-2026-42778 / CVE-2026-42779 - The fixes for CVE-2026-41409 and CVE-2026-41635 were not backported to the 2.1.x / 2.2.x maintenance branches; they are included in version 2.2.9
-    * CVE-2026-42779 - The fix for CVE-2026-41635 was not applied to the 2.1.x / 2.2.x maintenance branches; it is included in version 2.2.9+
  
  
start.1787539768.txt.gz · Last modified: by porta_release_bot

Donate Powered by PHP Valid HTML5 Valid CSS Driven by DokuWiki