ChangeLog for: 2017-11-03 04:31:56

a/sysvinit-scripts-2.0-noarch-38.txz:  Rebuilt.
  Check that rc.mysqld is executable before attempting to shut down the
  database server. Checking for the mysql.pid is not enough, as /var/run/mysql
  might be bind mounted into a container. Thanks to Jakub Jankowski.
ap/cups-2.2.6-x86_64-1.txz:  Upgraded.
ap/mariadb-10.2.10-x86_64-1.txz:  Upgraded.
  This update fixes bugs and security issues.
  For more information, see:
    https://jira.mariadb.org/browse/MDEV-13819
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10268
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-10378
  (* Security fix *)
l/expat-2.2.5-x86_64-1.txz:  Upgraded.
l/gegl-0.2.0-x86_64-6.txz:  Rebuilt.
  Replaced deprecated functions in ff-load module. Thanks to Theodore Kilgore.
n/openssl-1.0.2m-x86_64-1.txz:  Upgraded.
  This update fixes a security issue:
  There is a carry propagating bug in the x64 Montgomery squaring procedure.
  No EC algorithms are affected. Analysis suggests that attacks against RSA
  and DSA as a result of this defect would be very difficult to perform and
  are not believed likely. Attacks against DH are considered just feasible
  (although very difficult) because most of the work necessary to deduce
  information about a private key may be performed offline. The amount of
  resources required for such an attack would be very significant and likely
  only accessible to a limited number of attackers. An attacker would
  additionally need online access to an unpatched system using the target
  private key in a scenario with persistent DH parameters and a private
  key that is shared between multiple clients.
  This only affects processors that support the BMI1, BMI2 and ADX extensions
  like Intel Broadwell (5th generation) and later or AMD Ryzen.
  For more information, see:
    https://www.openssl.org/news/secadv/20171102.txt
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3736
  (* Security fix *)