-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Wed, 4 Jan 2006 11:18:45 +0100 Source: hylafax Binary: hylafax-doc hylafax-server hylafax-client Architecture: source all powerpc Version: 2:4.2.4-1 Distribution: unstable Urgency: high Maintainer: Giuseppe Sacco <eppesuig@debian.org> Changed-By: Giuseppe Sacco <eppesuig@debian.org> Description: hylafax-client - Flexible client/server fax software - client utilities hylafax-doc - Flexible client/server fax software - HTML Documentation hylafax-server - Flexible client/server fax software - server daemons Changes: hylafax (2:4.2.4-1) unstable; urgency=high . * New upstream release * HylaFAX hfaxd will allow any password when compiled with PAM support disabled. [CVE-2005-3538] * HylaFAX notify script passes unsanitised user-supplied data to eval, allowing remote attackers to execute arbitrary commands [CVE-2005-3539] Files: c518fd0fb7076ab161d89618a61e018d 734 comm extra hylafax_4.2.4-1.dsc 1cda04f9faf643095b918956bacf1cf2 1450465 comm extra hylafax_4.2.4.orig.tar.gz 99697c5ed8caf07ee7a922442827e374 51388 comm extra hylafax_4.2.4-1.diff.gz c4603021e11f429cf7b5c1bb5a2c1cb4 854668 comm extra hylafax-server_4.2.4-1_powerpc.deb 37d9e2f2cc5083d1146d75bb2af83973 369836 comm extra hylafax-client_4.2.4-1_powerpc.deb 219cecec49406c1054306f47ed9403bf 376368 doc extra hylafax-doc_4.2.4-1_all.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) iD8DBQFDvAn0IgfFlOyXCJ0RAkBhAJ0W8Pu6aMXCTgOGMQAiIUo4yfohIgCdEO7C VRJBjWF9NQ5CTCp5wmjnydU= =Q00Z -----END PGP SIGNATURE----- Accepted: hylafax-client_4.2.4-1_powerpc.deb to pool/main/h/hylafax/hylafax-client_4.2.4-1_powerpc.deb hylafax-doc_4.2.4-1_all.deb to pool/main/h/hylafax/hylafax-doc_4.2.4-1_all.deb hylafax-server_4.2.4-1_powerpc.deb to pool/main/h/hylafax/hylafax-server_4.2.4-1_powerpc.deb hylafax_4.2.4-1.diff.gz to pool/main/h/hylafax/hylafax_4.2.4-1.diff.gz hylafax_4.2.4-1.dsc to pool/main/h/hylafax/hylafax_4.2.4-1.dsc hylafax_4.2.4.orig.tar.gz to pool/main/h/hylafax/hylafax_4.2.4.orig.tar.gz