Changelog for mgetty-1.1.37-lp150.2.3.1.x86_64.rpm :

* Fri Sep 21 2018 Marketa Calabkova - Added patch mgetty-fax-block-code-injection.patch to fix bsc#1108752 (CVE-2018-16741): command injection in fax/faxq-helper.c
* Fri Sep 21 2018 Marketa Calabkova - Added patches:
* mgetty-fix-buffer-overflow.patch - upstream patch, sets maximum length of a string to prevent buffer overflow and thus possible command injection
* mgetty-delete-obsolete.patch - upstream-based patch, deletes obsolete file contrib/scrts.c, which could cause buffer overflow- Fixed bugs:
* bsc#1108756 (CVE-2018-16745): Stack-based buffer overflow in fax_notify_mail() in faxrec.c
* bsc#1108757 (CVE-2018-16744): Command injection in faxrec.c
* bsc#1108762 (CVE-2018-16742): Stack-based buffer overflow in contrib/scrts.c triggered via command line parameter
* bsc#1108761 (CVE-2018-16743): Stack-based buffer overflow with long username in contrib/next-login/login.c
* Wed Jun 07 2017 sbrabecAATTsuse.com- Update to version 1.1.37:
* faxspool: implement \"-t hh:mm-hh:mm\" time-range syntax, add AATTDATE +AATT to faxheader processing
* faxq: properly display queued jobs with time-range field
* faxrunqd: correctly handle jobs running out of the end of their sent-time window. INCOMPATIBLE CHANGE: Changes handling of \"-t hh:mm\" to \"from hh:mm to midnight\"
* microcom: improve read-from-device exception handling
* sendfax: send NSF frame on reception, new option reset-after-fail
* faxrunqd: enhance and clarify per-modem statistics- New build fixes (mgetty-noroot.patch, mgetty-mkdir-p.patch).- Update patches (mgetty-1.1.36-callback.patch -> mgetty-1.1.37-callback.patch, mgetty-1.1.36-makefile.patch -> mgetty-1.1.37-makefile.patch).
* Mon Jun 05 2017 tchvatalAATTsuse.com- Cleanup a bit with spec-cleaner- Remove few rpmlint warnings and reduce the deps to contain only what is needed- Add patch to build with gcc7 0001-Fix-build-failure-with-gcc-7.patch bsc#1041290
* Wed Oct 26 2016 kukukAATTsuse.de- Add PreReq for group uucp to sendfax package
* Sat Feb 27 2016 mpluskalAATTsuse.com- Use correct permissions for unit files (boo#968571)
* Wed Jan 28 2015 mpluskalAATTsuse.com- Require systemd-rpm-macros instead of systemd for building
* Sat Jan 24 2015 mpluskalAATTsuse.com- Add mgettyAATT.service and vgettyAATT.service (boo#914661)
* Thu Nov 27 2014 Led - fix bashisms in faxback.sh script- add patches:
* mgetty-1.1.36-fix-bashisms.patch
* Tue Mar 05 2013 schwabAATTsuse.de- lp64.patch: Add support for future LP64 platforms
* Thu Jan 10 2013 dmuellerAATTsuse.com- replace run_permissions call with set_permissions (bnc#764113)
* Tue Sep 11 2012 cooloAATTsuse.com- add makeinfo as explicit buildrequire
* Fri Mar 09 2012 mweckbeckerAATTsuse.com- fixpie.patch: Use LDFLAGS instead of CFLAGS to make building with PIE work properly
* Tue Jan 24 2012 prusnakAATTopensuse.org- build with PIE [bnc#743151]
* Mon Dec 26 2011 cooloAATTsuse.com- don\'t package files twice
* Fri Sep 30 2011 uliAATTsuse.com- cross-build fix: use %__cc macro
* Fri May 13 2011 gjheAATTnovell.com- fix bug [bnc#646280],adjust faxspool to process pdf file using gs directly, do not use acroreader.
* Sun Aug 29 2010 cristian.rodriguezAATTopensuse.org- Do not include build date in binaries