-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160
Format: 1.7
Date: Wed, 23 Aug 2006 23:15:32 +0200
Source: capi4hylafax
Binary: capi4hylafax
Architecture: source sparc
Version: 1:01.03.00.99.svn.300-1
Distribution: unstable
Urgency: high
Maintainer: Lionel Elie Mamane <[EMAIL PROTECTED]>
Changed-By: Lionel Elie Mamane <[EMAIL PROTECTED]>
Description:
capi4hylafax - Faxing over CAPI 2.0 device
Closes: 382474
Changes:
capi4hylafax (1:01.03.00.99.svn.300-1) unstable; urgency=low
.
* New upstream release:
- Fix for #358567 taken upstream
- Fix for long (> 200 chars) lines in config files
- Higher debbugging level
* Bumped up Standards-Version
.
capi4hylafax (1:01.03.00.99.svn.297-4) UNRELEASED; urgency=high
.
* Don't let null characters from cidnumber prematurely terminate C
string preparing command line for faxrcvd in c2faxrecv
(closes: #382474).
Also remove shell metacharacters while I'm at it. This probably fixes
a security vulnerability (arbitrary remote command execution under
uucp identity): the said command line contains untrusted
sender-controlled data, the sender's identification (the TSI
string). (The ITU T.30 specification restricts this string to a prefix
'+' and digits only, but rumour has it an attacker can transmit
arbitrary ASCII data, including null characters.)
Files:
dc7276e8c3b28efb084af14225565144 708 comm extra
capi4hylafax_01.03.00.99.svn.300-1.dsc
af2610c5219e89ef9dc47eead30276b4 533410 comm extra
capi4hylafax_01.03.00.99.svn.300.orig.tar.gz
964e9a7c78dea6b6e681bddf18b6cc99 153873 comm extra
capi4hylafax_01.03.00.99.svn.300-1.diff.gz
da0d046449d1772bd9dc14316a60bf51 227218 comm extra
capi4hylafax_01.03.00.99.svn.300-1_sparc.deb
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
iEYEAREDAAYFAkTtQ4EACgkQscRzFz57S3OrHQCdF8mCckblBv6dMSos6cij6GV4
DIgAoJizTNXTwhiLeUQcpXL9YOHFpWLx
=0HKh
-----END PGP SIGNATURE-----
Accepted:
capi4hylafax_01.03.00.99.svn.300-1.diff.gz
to pool/main/c/capi4hylafax/capi4hylafax_01.03.00.99.svn.300-1.diff.gz
capi4hylafax_01.03.00.99.svn.300-1.dsc
to pool/main/c/capi4hylafax/capi4hylafax_01.03.00.99.svn.300-1.dsc
capi4hylafax_01.03.00.99.svn.300-1_sparc.deb
to pool/main/c/capi4hylafax/capi4hylafax_01.03.00.99.svn.300-1_sparc.deb
capi4hylafax_01.03.00.99.svn.300.orig.tar.gz
to pool/main/c/capi4hylafax/capi4hylafax_01.03.00.99.svn.300.orig.tar.gz
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
