Fedora 27 Update: mozilla-noscript-10.1.8.8-1.fc27
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-410adc77bf
2018-07-31 17:09:33.504634
--------------------------------------------------------------------------------
Name : mozilla-noscript
Product : Fedora 27
Version : 10.1.8.8
Release : 1.fc27
URL : http://noscript.net/
Summary : JavaScript white list extension for Mozilla Firefox
Description :
The NoScript Firefox extension provides extra protection for Firefox.
It allows JavaScript, Java, Flash and other plug-ins to be executed only by
trusted web sites of your choice (e.g. your online bank) and additionally
provides Anti-XSS protection.
--------------------------------------------------------------------------------
Update Information:
**NOTE:** All packaged Firefox add-ons are affected by Firefox bug
fedora#1508827 . A workaround is provided in the bug report. Please do not give
negative karma just because of that bug. # Changes since 10.1.8.2: ##10.1.8.8
* Prevent script injection from messing with content-disposition=attachment
responses. ##10.1.8.7 * Fixed regression breaking meta refresh with relative
URLs ##10.1.8.5 * Completed fix for quoted URLs in meta refresh (thanks Juozas
for reporting) ##10.1.8.4 * [L10n] Fixed es translation (thanks Deckan) *
Cosmetic bug fixes * Updated TLDs ##10.1.8.3 * [XSS] Fixed InjectionChecker
choking at some big JSON payloads sents as POST form data * Fixed meta-refresh
emulation confused by quoted URLs * Autosize preset buttons to accomodater
bigger localized labels * [L10n] Shortened de labels (thanks musonius) * More
graceful handling of internal and restricted URLs (thanks skriptimaahinen for
report) * [L10n] Added de, es, fr, it, nl, pt_BR and zh_CN locales (courtesy of
Mozilla's localization campaign) * Switch to inline elements as "NOSCRIPT" HTML
replacements * Fixed subframe content changes producing ambiguous NoScript icon
feedback * More meaningful/useful popup on (semi)privileged documents * Included
license files in the XPI * [XSS] In-depth protection against native ES6 modules
abuse * Fixed dynamic script injection issues (thanks skriptimaahinen for help)
* MSE media reporting and blocking (e.g. on Youtube) #Changes since 5.1.8.5:
##5.1.8.6 * [Surrogate] Fixed 2mdn surrogate compatibility issues (thanks
barbaz)
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 20 2018 Dominik Mierzejewski <rpm(a)greysector.net> - 10.1.8.8-1
- update to 10.1.8.8 (#1601456)
- update classic version to 5.1.8.6
- extract only the licenses and cfg file
* Fri Jun 29 2018 Dominik Mierzejewski <rpm(a)greysector.net> - 10.1.8.2-3
- update to 10.1.8.2 (#1583884)
* Wed May 23 2018 Dominik Mierzejewski <rpm(a)greysector.net> - 10.1.8.1-2
- update to 10.1.8.1 (#1572820)
* Thu Apr 12 2018 Dominik Mierzejewski <rpm(a)greysector.net> - 10.1.7.5-1
- update to 10.1.7.5 (#1557592)
- update classic version to 5.1.8.5
* Fri Mar 16 2018 Dominik Mierzejewski <rpm(a)greysector.net> - 10.1.7.2-2
- update to 10.1.7.2 (#1557318)
- update bundled components Provides:
* Mon Feb 19 2018 Dominik Mierzejewski <rpm(a)greysector.net> - 10.1.6.5-1
- update to 10.1.6.5 (#1543851)
- update classic version to 5.1.8.4
* Thu Feb 1 2018 Dominik Mierzejewski <rpm(a)greysector.net> - 10.1.6.4-1
- update to 10.1.6.4 (#1539464)
- switch URL to upstream instead of AMO, they're identical
- split FF and SM extensions to separate subpackages
* Sat Jan 20 2018 Dominik Mierzejewski <rpm(a)greysector.net> - 10.1.6.3-1
- update to 10.1.6.3 (#1532905)
- install metainfo file in the new standard location
* Mon Jan 1 2018 Dominik Mierzejewski <rpm(a)greysector.net> - 10.1.6.2-1
- update to 10.1.6.2 (#1528835)
* Tue Dec 19 2017 Dominik Mierzejewski <rpm(a)greysector.net> - 10.1.6-1
- update to 10.1.6 (#1527501)
* Sat Dec 16 2017 Dominik Mierzejewski <rpm(a)greysector.net> - 10.1.5.8-1
- update to 10.1.5.8 (#1524389)
- bring back the classic version (still developed until June 2018)
for SeaMonkey (#1526199)
* Sat Nov 25 2017 Dominik Mierzejewski <rpm(a)greysector.net> - 10.1.2-1
- update to 10.1.2
* Mon Nov 20 2017 Dominik Mierzejewski <rpm(a)greysector.net> - 10.1.1-1
- update to 10.1.1 (pure WebExtension version, Firefox 57+ only)
* Thu Nov 2 2017 Dominik Mierzejewski <rpm(a)greysector.net> - 5.1.4-1
- update to 5.1.4 (#1504408)
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1601456 - mozilla-noscript-10.1.8.8 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1601456
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-410adc77bf' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months
Fedora 27 Update: gromacs-2018.2-1.fc27
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-529f5de489
2018-07-31 17:09:33.504622
--------------------------------------------------------------------------------
Name : gromacs
Product : Fedora 27
Version : 2018.2
Release : 1.fc27
URL : http://www.gromacs.org
Summary : Fast, Free and Flexible Molecular Dynamics
Description :
GROMACS is a versatile and extremely well optimized package to perform
molecular dynamics computer simulations and subsequent trajectory analysis.
It is developed for bio-molecules like proteins, but the extremely high
performance means it is used also in several other field like polymer chemistry
and solid state physics.
This package provides single and double precision binaries.
The documentation is in the package gromacs-common.
mdrun has been compiled with thread parallellization, so it runs in parallel
on shared memory systems. If you want to run on a cluster, you probably want
to install one of the MPI parallellized packages.
N.B. All binaries have names starting with g_, for example mdrun has been
renamed to g_mdrun.
--------------------------------------------------------------------------------
Update Information:
Version bump to 2018.2
--------------------------------------------------------------------------------
ChangeLog:
* Wed Jul 18 2018 Christoph Junghans <junghans(a)votca.org> - 2018.2-1
- Version bump to 2018.2 (bug #1591052)
- Add support for lmfit-7 (patch will be part of v2019)
- Switch to OpenBlas (bug #1602822)
- Disable brittle regressiontests
* Fri Jul 13 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2018.1-1.1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Tue Mar 27 2018 Christoph Junghans <junghans(a)votca.org> - 2018.1-1
- Bump to version 2018.1 (bug #1559202)
* Sat Feb 24 2018 Christoph Junghans <junghans(a)votca.org> - 2018-1.2
- add gcc-c++ as BuildRequires
- use bundled tinyml2 to build tests, system one is too new
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 2018-1.1
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Fri Jan 19 2018 Christoph Junghans <junghans(a)votca.org> - 2018-1
- Update to 2018
- Drop 43a0002.diff, merged upstream
* Sat Dec 30 2017 Christoph Junghans <junghans(a)votca.org> - 2018-0.2rc1
- Update to 2018-rc1 for testing
- Update b7713bf.diff to 43a0002.diff
* Mon Dec 25 2017 Christoph Junghans <junghans(a)votca.org> - 2018-0.1beta3
- Update to 2018-beta3 for testing
- Disable HardwareTopologyTest.NumaCacheSelfconsistency test on aarch64
- Run regressiontests for serial build (don't work for mpi build)
- Clean up
- Drop execstack as everything is intristic now
- No la .files anymore, so drop find -delete
- OpenMPI was ported to s390, so enable it everywhere
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1591052 - gromacs-2018.2 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1591052
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-529f5de489' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months
Fedora 27 Update: libmodulemd-1.6.1-1.fc27
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-7d821ac9ae
2018-07-31 17:09:33.504610
--------------------------------------------------------------------------------
Name : libmodulemd
Product : Fedora 27
Version : 1.6.1
Release : 1.fc27
URL : https://github.com/fedora-modularity/libmodulemd
Summary : Module metadata manipulation library
Description :
C Library for manipulating module metadata files.
See https://github.com/fedora-modularity/libmodulemd/blob/master/README.md for
more details.
--------------------------------------------------------------------------------
Update Information:
* Fixes a bug with the -devel headers. * Suppresses empty sections in YAML
output. ---- - Adds Modulemd.ModuleStream object, deprecating Modulemd.Module
- Adds Modulemd.Translation and Modulemd.TranslationEntry objects - Adds
Modulemd.ImprovedModule object that collects streams, defaults and translations
together - Adds new Modulemd.index_from_*() funtions to get a hash table of
Modulemd.ImprovedModule objects for easier searching - Moves function
documentation to the public headers - Corrects the license headers to MIT (they
were incorrectly listed as MITNFA in previous releases) - Makes the "eol" field
optional for Modulemd.ServiceLevel - Clean up HTML documentation - Fixes a type
error on 32-bit systems ---- Fix uninitialized value crash when parsing
modulemd that includes an empty dictionary or list in the XMD section. This was
most visible on ppc64le systems, but could occur on any architecture. ----
Fixes an issue where the new Buildopts object isn't allocated alongside the
Module object. ---- # Major Changes in 1.5.x * Adds support for "intents" in
Modulemd.Defaults * Adds Modulemd.get_version() * Adds support for RPM
whitelists in the buildopts * Adds a new object: Modulemd.Buildopts * Deprecates
Modulemd.Module.get_rpm_buildopts() * Deprecates
Modulemd.Module.set_rpm_buildopts() * Fixes some missing license blurbs
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-7d821ac9ae' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months
Fedora 27 Update: ctstream-28-1.fc27
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-9859fc090d
2018-07-31 17:09:33.504598
--------------------------------------------------------------------------------
Name : ctstream
Product : Fedora 27
Version : 28
Release : 1.fc27
URL : http://xpisar.wz.cz/ctstream/
Summary : Get URLs of Czech Television video streams
Description :
Get locators of Czech Television video streams for given web page.
--------------------------------------------------------------------------------
Update Information:
This release adapts to server changes effective since 2018-07-17.
--------------------------------------------------------------------------------
ChangeLog:
* Fri Jul 20 2018 Petr Pisar <ppisar(a)redhat.com> - 28-1
- Version 28 bump
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1604727 - ctstream-28 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1604727
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-9859fc090d' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months
Fedora 27 Update: python-certbot-dns-sakuracloud-0.26.1-1.fc27
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-d6969f25b7
2018-07-31 17:09:33.504585
--------------------------------------------------------------------------------
Name : python-certbot-dns-sakuracloud
Product : Fedora 27
Version : 0.26.1
Release : 1.fc27
URL : https://github.com/certbot/certbot
Summary : Sakura Cloud DNS Authenticator plugin for Certbot
Description :
Sakura Cloud DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1602111 - Review Request: python-certbot-dns-sakuracloud - Sakura Cloud DNS Authenticator plugin for Certbot
https://bugzilla.redhat.com/show_bug.cgi?id=1602111
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-d6969f25b7' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months
Fedora 27 Update: python-certbot-dns-ovh-0.26.1-1.fc27
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-174fcb7ebc
2018-07-31 17:09:33.504573
--------------------------------------------------------------------------------
Name : python-certbot-dns-ovh
Product : Fedora 27
Version : 0.26.1
Release : 1.fc27
URL : https://github.com/certbot/certbot
Summary : OVH DNS Authenticator plugin for Certbot
Description :
OVH DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1602109 - Review Request: python-certbot-dns-ovh - OVH DNS Authenticator plugin for Certbot
https://bugzilla.redhat.com/show_bug.cgi?id=1602109
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-174fcb7ebc' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months
Fedora 27 Update: python-certbot-dns-linode-0.26.1-1.fc27
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-55e36f9f43
2018-07-31 17:09:33.504561
--------------------------------------------------------------------------------
Name : python-certbot-dns-linode
Product : Fedora 27
Version : 0.26.1
Release : 1.fc27
URL : https://github.com/certbot/certbot
Summary : Linode DNS Authenticator plugin for Certbot
Description :
Linode DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1602091 - Review Request: python-certbot-dns-linode - Linode DNS Authenticator plugin for Certbot
https://bugzilla.redhat.com/show_bug.cgi?id=1602091
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-55e36f9f43' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months
Fedora 27 Update: python-certbot-dns-gehirn-0.26.1-1.fc27
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-c3e5ae73cb
2018-07-31 17:09:33.504549
--------------------------------------------------------------------------------
Name : python-certbot-dns-gehirn
Product : Fedora 27
Version : 0.26.1
Release : 1.fc27
URL : https://github.com/certbot/certbot
Summary : Gehirn Infrastructure Service DNS Authenticator plugin for Certbot
Description :
Gehirn Infrastructure Service DNS Authenticator plugin for Certbot
--------------------------------------------------------------------------------
Update Information:
Initial package
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1602080 - Review Request: python-certbot-dns-gehirn - Gehirn Infrastructure Service DNS Authenticator plugin for Certbot
https://bugzilla.redhat.com/show_bug.cgi?id=1602080
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-c3e5ae73cb' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months
Fedora 27 Update: LibRaw-0.18.13-1.fc27
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-9e52388bf7
2018-07-31 17:09:33.504536
--------------------------------------------------------------------------------
Name : LibRaw
Product : Fedora 27
Version : 0.18.13
Release : 1.fc27
URL : http://www.libraw.org
Summary : Library for reading RAW files obtained from digital photo cameras
Description :
LibRaw is a library for reading RAW files obtained from digital photo
cameras (CRW/CR2, NEF, RAF, DNG, and others).
LibRaw is based on the source codes of the dcraw utility, where part of
drawbacks have already been eliminated and part will be fixed in future.
--------------------------------------------------------------------------------
Update Information:
* changed wrong fix for Canon D30 white balance * fixed possible stack overrun
while reading zero-sized strings * fixed possible integer overflow
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 19 2018 Debarshi Ray <rishi(a)fedoraproject.org> - 0.18.13-1
- 0.18.13.
* Mon Jun 11 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 0.18.12-1
- 0.18.12.
* Thu May 10 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 0.18.11-1
- 0.18.11.
* Thu May 3 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 0.18.10-1
- 0.18.10.
* Wed Apr 25 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 0.18.9-1
- 0.18.9.
* Sat Feb 24 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 0.18.8-1
- 0.18.8.
* Wed Feb 7 2018 Fedora Release Engineering <releng(a)fedoraproject.org> - 0.18.7-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Fri Feb 2 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 0.18.7-2
- Patch for updated glibc.
* Fri Jan 19 2018 Gwyn Ciesla <limburgher(a)gmail.com> - 0.18.7-1
- 0.18.7
- Patch for ambiguous function call.
* Wed Dec 6 2017 Gwyn Ciesla <limburgher(a)gmail.com> - 0.18.6-1
- 0.18.6
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-9e52388bf7' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months
[SECURITY] Fedora 27 Update: mutt-1.9.2-2.fc27
by updates@fedoraproject.org
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2018-502e31a658
2018-07-31 17:09:33.504524
--------------------------------------------------------------------------------
Name : mutt
Product : Fedora 27
Version : 1.9.2
Release : 2.fc27
URL : http://www.mutt.org
Summary : A text mode mail user agent
Description :
Mutt is a small but very powerful text-based MIME mail client. Mutt
is highly configurable, and is well suited to the mail power user with
advanced features like key bindings, keyboard macros, mail threading,
regular expression searches and a powerful pattern matching language
for selecting groups of messages.
--------------------------------------------------------------------------------
Update Information:
Security fix for CVE-2018-14358, CVE-2018-14352, CVE-2018-14353, CVE-2018-14356,
CVE-2018-14359, CVE-2018-14354, CVE-2018-14355, CVE-2018-14362, CVE-2018-14357,
CVE-2018-14350, CVE-2018-14349, CVE-2018-14351
--------------------------------------------------------------------------------
ChangeLog:
* Thu Jul 19 2018 Matej Mu��ila <mmuzila(a)redhat.com> - 5:1.9.2-2
- Backport security patches from mutt-1.10.1
- Resolves: #1602082 (CVE-2018-14354, CVE-2018-14355, CVE-2018-14362)
- Resolves: #1602916 (CVE-2018-14357)
- Resolves: #1602923 (CVE-2018-14350)
- Resolves: #1602935 (CVE-2018-14349)
- Resolves: #1602954 (CVE-2018-14351)
- Resolves: CVE-2018-14358, CVE-2018-14352, CVE-2018-14353, CVE-2018-14356,
CVE-2018-14359
* Wed Dec 20 2017 Matej Mu��ila <mmuzila(a)redhat.com> - 5:1.9.2-1
- Upgrade to 1.9.2
--------------------------------------------------------------------------------
References:
[ 1 ] Bug #1602915 - CVE-2018-14357 mutt: Remote Code Execution via backquote characters
https://bugzilla.redhat.com/show_bug.cgi?id=1602915
[ 2 ] Bug #1604084 - CVE-2018-14359 mutt: buffer overflow via base64 data
https://bugzilla.redhat.com/show_bug.cgi?id=1604084
[ 3 ] Bug #1604064 - CVE-2018-14358 mutt: stack-based buffer overflow in imap/message.c
https://bugzilla.redhat.com/show_bug.cgi?id=1604064
[ 4 ] Bug #1604047 - CVE-2018-14356 mutt: mishandles a zero-length UID in pop.c
https://bugzilla.redhat.com/show_bug.cgi?id=1604047
[ 5 ] Bug #1604040 - CVE-2018-14353 mutt: integer underflow in imap/util.c
https://bugzilla.redhat.com/show_bug.cgi?id=1604040
[ 6 ] Bug #1604034 - CVE-2018-14352 mutt: stack-based buffer overflow in imap/util.c
https://bugzilla.redhat.com/show_bug.cgi?id=1604034
[ 7 ] Bug #1602953 - CVE-2018-14351 mutt: IMAP status mailbox literal mishandled in imap/command.c
https://bugzilla.redhat.com/show_bug.cgi?id=1602953
[ 8 ] Bug #1602934 - CVE-2018-14349 mutt: Heap Overflow in imap/command.c
https://bugzilla.redhat.com/show_bug.cgi?id=1602934
[ 9 ] Bug #1602922 - CVE-2018-14350 mutt: stack-based buffer overflow in imap/message.c
https://bugzilla.redhat.com/show_bug.cgi?id=1602922
[ 10 ] Bug #1602081 - CVE-2018-14355 mutt: IMAP header caching path traversal vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=1602081
[ 11 ] Bug #1602079 - CVE-2018-14362 mutt: POP body caching path traversal vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=1602079
[ 12 ] Bug #1602069 - CVE-2018-14354 mutt: Remote code injection vulnerability to an IMAP mailbox
https://bugzilla.redhat.com/show_bug.cgi?id=1602069
--------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2018-502e31a658' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
5 years, 8 months