ChangeLog for: 2018-03-29 21:48:28

a/bash-4.4.019-x86_64-2.txz: Rebuilt. Fixed builtins.1 and rbash.1 manpages to work properly with strict implementations (such as mandoc). Thanks to orbea. ap/cups-2.2.7-x86_64-1.txz: Upgraded. ap/mariadb-10.2.14-x86_64-1.txz: Upgraded. ap/nano-2.9.5-x86_64-1.txz: Upgraded. d/cmake-3.11.0-x86_64-1.txz: Upgraded. d/flex-2.6.4-x86_64-2.txz: Rebuilt. Fix flex compiled with recent glibc. Thanks to nobodino. d/python-pip-9.0.3-x86_64-1.txz: Upgraded. d/python3-3.6.5-x86_64-1.txz: Upgraded. Refactored difflib and poplib to fix potential DoS vectors. Thanks to Jamie Davis for the patch. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1060 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1061 (* Security fix *) d/ruby-2.5.1-x86_64-1.txz: Upgraded. This release includes some bug fixes and some security fixes: HTTP response splitting in WEBrick. Unintentional file and directory creation with directory traversal in tempfile and tmpdir. DoS by large request in WEBrick. Buffer under-read in String#unpack. Unintentional socket creation by poisoned NUL byte in UNIXServer and UNIXSocket. Unintentional directory traversal by poisoned NUL byte in Dir. Multiple vulnerabilities in RubyGems. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-17742 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-6914 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8777 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8778 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8779 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8780 (* Security fix *) d/subversion-1.9.7-x86_64-3.txz: Rebuilt. Recompiled for ruby-2.5.1. kde/korundum-4.14.3-x86_64-5.txz: Rebuilt. Recompiled for ruby-2.5.1. kde/qtruby-4.14.3-x86_64-7.txz: Rebuilt. Recompiled for ruby-2.5.1. l/apr-util-1.6.1-x86_64-4.txz: Rebuilt. Merged upstream patch to fix httpd build. n/dhcpcd-7.0.2-x86_64-1.txz: Upgraded. n/dovecot-2.3.1-x86_64-1.txz: Upgraded. n/epic5-2.0.1-x86_64-3.txz: Rebuilt. Recompiled for ruby-2.5.1. x/mesa-18.0.0-x86_64-1.txz: Upgraded. xfce/xfce4-terminal-0.8.7.3-x86_64-1.txz: Upgraded.