ChangeLog for: 2023-11-07 20:57:12

ap/sudo-1.9.15-x86_64-1.txz:  Upgraded.
  The sudoers plugin has been modified to make it more resilient to ROWHAMMER
  attacks on authentication and policy matching.
  The sudoers plugin now constructs the user time stamp file path name using
  the user-ID instead of the user name. This avoids a potential problem with
  user names that contain a path separator ('/') being interpreted as part of
  the path name.
  For more information, see:
    https://www.cve.org/CVERecord?id=CVE-2023-42465
    https://www.cve.org/CVERecord?id=CVE-2023-42456
  (* Security fix *)
ap/vim-9.0.2092-x86_64-1.txz:  Upgraded.
l/libuv-1.47.0-x86_64-1.txz:  Upgraded.
l/xapian-core-1.4.24-x86_64-1.txz:  Upgraded.
n/bind-9.18.19-x86_64-2.txz:  Rebuilt.
  Don't go automatically chowning files in /var/named, since some users may
  have special requirements. But in case anyone finds that behavior useful,
  you may set NAMED_CHOWN=YES in /etc/default/named to turn it back on.
  Unless anyone has a good objection to it, this change is considered pending
  for the next BIND upgrades in -stable.
  Thanks to Mig21.
xap/vim-gvim-9.0.2092-x86_64-1.txz:  Upgraded.