Changelog for
mgetty-1.1.37-3.8.1.x86_64.rpm :
* Mon Jan 27 2020 meissnerAATTsuse.com- Fixed permission handling of faxq-helper. (bsc#1168170) - It is fax:trusted 4750 in \"secure\" mode. - Also is being checked and set correctly now.
* Tue Jul 30 2019 sbrabecAATTsuse.com- Prevent crash on invalid PBM with negative dimensions (bsc#1142770, CVE-2019-1010190, mgetty-CVE-2019-1010190.patch).
* Fri Sep 21 2018 mcalabkovaAATTsuse.com- Added patch mgetty-fax-block-code-injection.patch to fix bsc#1108752 (CVE-2018-16741): command injection in fax/faxq-helper.c
* Fri Sep 21 2018 mcalabkovaAATTsuse.com- Added patches:
* mgetty-fix-buffer-overflow.patch - upstream patch, sets maximum length of a string to prevent buffer overflow and thus possible command injection
* mgetty-delete-obsolete.patch - upstream-based patch, deletes obsolete file contrib/scrts.c, which could cause buffer overflow- Fixed bugs:
* bsc#1108756 (CVE-2018-16745): Stack-based buffer overflow in fax_notify_mail() in faxrec.c
* bsc#1108757 (CVE-2018-16744): Command injection in faxrec.c
* bsc#1108762 (CVE-2018-16742): Stack-based buffer overflow in contrib/scrts.c triggered via command line parameter
* bsc#1108761 (CVE-2018-16743): Stack-based buffer overflow with long username in contrib/next-login/login.c
* Wed Jun 07 2017 sbrabecAATTsuse.com- Update to version 1.1.37:
* faxspool: implement \"-t hh:mm-hh:mm\" time-range syntax, add AATTDATE +
AATT to faxheader processing
* faxq: properly display queued jobs with time-range field
* faxrunqd: correctly handle jobs running out of the end of their sent-time window. INCOMPATIBLE CHANGE: Changes handling of \"-t hh:mm\" to \"from hh:mm to midnight\"
* microcom: improve read-from-device exception handling
* sendfax: send NSF frame on reception, new option reset-after-fail
* faxrunqd: enhance and clarify per-modem statistics- New build fixes (mgetty-noroot.patch, mgetty-mkdir-p.patch).- Update patches (mgetty-1.1.36-callback.patch -> mgetty-1.1.37-callback.patch, mgetty-1.1.36-makefile.patch -> mgetty-1.1.37-makefile.patch).
* Mon Jun 05 2017 tchvatalAATTsuse.com- Cleanup a bit with spec-cleaner- Remove few rpmlint warnings and reduce the deps to contain only what is needed- Add patch to build with gcc7 0001-Fix-build-failure-with-gcc-7.patch bsc#1041290
* Wed Oct 26 2016 kukukAATTsuse.de- Add PreReq for group uucp to sendfax package
* Sat Feb 27 2016 mpluskalAATTsuse.com- Use correct permissions for unit files (boo#968571)
* Wed Jan 28 2015 mpluskalAATTsuse.com- Require systemd-rpm-macros instead of systemd for building
* Sat Jan 24 2015 mpluskalAATTsuse.com- Add mgettyAATT.service and vgettyAATT.service (boo#914661)
* Thu Nov 27 2014 ledestAATTgmail.com- fix bashisms in faxback.sh script- add patches:
* mgetty-1.1.36-fix-bashisms.patch
