Change log for hylafax package in Ubuntu

hylafax (3:6.0.7-7) unstable; urgency=medium

  * Replace dependency on transitional dummy gsfonts with fonts-urw-base35
    (Closes: #1020349)
  * Changed main() signature in configure script in order to be accepted
    by stricter compilers (Closes: #688560)
  * Added temporary fix for making hylafax compile again in SID, see #1067362.
    This removes -Werror=implicit-function-declaration from CFLAGS that should
    be used while compiling hylafax sources, but it is begin used also while
    "configure" tests for gettext() availability.

 -- Giuseppe Sacco <email address hidden>  Mon, 01 Apr 2024 14:34:59 +0200

Available diffs

• diff from 3:6.0.7-5build1 (in Ubuntu) to 3:6.0.7-7 (2.3 KiB)

hylafax (3:6.0.7-5build1) lunar; urgency=medium

  * Rebuild against latest tiff

 -- Jeremy Bicha <email address hidden>  Sat, 04 Feb 2023 21:38:52 -0500

Available diffs

• diff from 3:6.0.7-5 (in Debian) to 3:6.0.7-5build1 (338 bytes)

hylafax (3:6.0.7-5) unstable; urgency=medium

  * Include patches for a lot of typos in source code and documentation,
    thanks to Friedhelm Mehnert.
  * Fixed a syntax error in /usr/lib/hylafax/bin/faxaddmodem.
  * Added a dependency for default-mta, as suggested by lintian.
  * Reworked hylafax-server postinst in order to use deb-systemd-helper.
  * Raised debhelper compat version from 9 to 11.
  * Raised debian policy compliance to 4.6.2 without any change required.

 -- Giuseppe Sacco <email address hidden>  Wed, 18 Jan 2023 00:30:51 +0100

Available diffs

• diff from 3:6.0.7-4 to 3:6.0.7-5 (7.8 KiB)

hylafax (3:6.0.7-4) unstable; urgency=medium

  * Bug fix: "FTBFS with TIFF 4.5+", thanks to László Böszörményi
    (Closes: #1027681)

 -- Giuseppe Sacco <email address hidden>  Sun, 08 Jan 2023 16:05:41 +0100

Available diffs

• diff from 3:6.0.7-3.1 to 3:6.0.7-4 (7.3 KiB)

hylafax (3:6.0.7-3.1) unstable; urgency=medium

  * NMU
  * Bug fix: "FTBFS: Incompatible TIFF Library.", thanks to Lucas Nussbaum
    (Closes: #978220).
  * Bug fix: "CVE-2020-15397 CVE-2020-15396", thanks to Moritz Muehlenhoff
    (Closes: #964198):
    - The faxsetup utility 
      calls chown on files in user-owned directories.
      By winning a race, a local attacker could use
      this to escalate his privileges to root.
    - Scripts that execute binaries from directories 
      writable by unprivileged users (e.g., locations under
      /var/spool/hylafax that are 
      writable by the uucp account). This allows these users to
      execute code in the context of the user calling these binaries
      (often root).

 -- Bastien Roucariès <email address hidden>  Wed, 13 Jan 2021 13:00:13 +0000

Available diffs

• diff from 3:6.0.7-3 to 3:6.0.7-3.1 (2.1 KiB)

hylafax (3:6.0.7-3) unstable; urgency=medium

  * Added logrotate configuration for /var/spool/hylafax/log/xferfaxlog

 -- Giuseppe Sacco <email address hidden>  Sat, 28 Mar 2020 10:26:49 +0100

Available diffs

• diff from 3:6.0.6-8.1build1 (in Ubuntu) to 3:6.0.7-3 (20.0 KiB)
• diff from 3:6.0.6-8.1build2 (in Ubuntu) to 3:6.0.7-3 (20.0 KiB)

hylafax (3:6.0.6-8.1build2) focal; urgency=medium

  * No-change rebuild for libgcc-s1 package name change.

 -- Matthias Klose <email address hidden>  Sun, 22 Mar 2020 16:43:58 +0100

Available diffs

• diff from 3:6.0.6-8.1build1 to 3:6.0.6-8.1build2 (354 bytes)

hylafax (3:6.0.6-8.1build1) eoan; urgency=medium

  * No-change upload with strops.h and sys/strops.h removed in glibc.

 -- Matthias Klose <email address hidden>  Thu, 05 Sep 2019 10:54:00 +0000

Available diffs

• diff from 3:6.0.6-8.1 (in Debian) to 3:6.0.6-8.1build1 (333 bytes)

hylafax (3:6.0.6-8.1~ubuntu0.18.04.1) bionic-security; urgency=medium

  * fake sync from Debian

Available diffs

• diff from 3:6.0.6-8 (in Debian) to 3:6.0.6-8.1~ubuntu0.18.04.1 (3.0 KiB)

hylafax (3:6.0.6-8.1~ubuntu0.18.10.1) cosmic-security; urgency=medium

  * fake sync from Debian

Available diffs

• diff from 3:6.0.6-8 (in Debian) to 3:6.0.6-8.1~ubuntu0.18.10.1 (3.0 KiB)

hylafax (3:6.0.6-6+deb8u1build0.16.04.1) xenial-security; urgency=medium

  * fake sync from Debian

Available diffs

• diff from 3:6.0.6-6 (in Debian) to 3:6.0.6-6+deb8u1build0.16.04.1 (2.6 KiB)

hylafax (3:6.0.6-8.1) unstable; urgency=high

  * Non-maintainer upload.
  * A remote attacker can write to an unitialized pointer during a FAX
    reception session in Hylafax (CVE-2018-17141) (Closes: #909161)

 -- Salvatore Bonaccorso <email address hidden>  Sun, 23 Sep 2018 08:11:23 +0200

Available diffs

• diff from 3:6.0.6-8 to 3:6.0.6-8.1 (2.7 KiB)

hylafax (3:6.0.6-8) unstable; urgency=medium

  * Fix errors from new g++ 7 compiler.

 -- Giuseppe Sacco <email address hidden>  Mon, 28 Aug 2017 21:09:47 +0200

Available diffs

• diff from 3:6.0.6-7 to 3:6.0.6-8 (948 bytes)

hylafax (3:6.0.6-7) unstable; urgency=medium

  * debian/control:
    - Use newer version of substvar: ${binary:Version}. Closes: #833207
    - Add misc depends to debug packages.
    - Set section of debug packages to 'debug'.
    - Bump to Standards Version 3.9.8 (no changes).
    - Set dependency to debhelper version 9.
    - Remove Vcs entries (they were no Debian Vcs).
    - Update my own email address.
  * Add some upstream patches:
    - 821: Check faxanswer "how" parameter length.
    - 822: Last line of configuration file may not be terminated by '\n'.
    - 823: Set fax status on glare errors.
    - 824: serverconfig fixup: JobRetryOther + JobRequeueOther.
    - 825: Fix memory corruption when using libtiff v4.0 or newer.
  * Add some more patches:
    - 826: Do not send pnmtops dpi value as float value. Closes: #727608
    - 827: Make Debian build reproducible. Closes: #790355
  * Remove obsolete debian/NEWS file.

 -- Joachim Wiedorn <email address hidden>  Fri, 11 Nov 2016 16:27:24 +0100

Available diffs

• diff from 3:6.0.6-6 to 3:6.0.6-7 (7.5 KiB)

hylafax (3:6.0.6-6) unstable; urgency=medium


  * Don't remove files managed by dpkg when purging package.

 -- Giuseppe Sacco <email address hidden>  Thu, 04 Dec 2014 22:47:58 +0100

Available diffs

• diff from 3:6.0.6-5 to 3:6.0.6-6 (635 bytes)

hylafax (3:6.0.6-5) unstable; urgency=medium


  * Remove all changes since 6.0.6-1.
  * Added restricted deletion flag on tmp directory. (See: #682824)
  * Fix postrm scripts to be successful. (See: #661482)
  * Fix client scripts to register/deregister to ucf. (See: #661482)
  * debian/control: Add myself again as uploader.

 -- Joachim Wiedorn <email address hidden>  Sun, 10 Mar 2013 18:36:00 +0100

Available diffs

• diff from 3:6.0.6-4 to 3:6.0.6-5 (3.5 KiB)

hylafax (3:6.0.6-4) unstable; urgency=medium


  * Added restricted deletion flag on tmp directory (See: #682824)
  * Moved all directories from debian/rules to debian/*dirs files.

 -- Giuseppe Sacco <email address hidden>  Tue, 31 Jul 2012 23:52:41 +0200

Available diffs

• diff from 2:6.0.5-5ubuntu3 (in Ubuntu) to 3:6.0.6-4 (42.3 KiB)

hylafax (2:6.0.5-5ubuntu3) precise; urgency=low

  * Backport from Debian:
    - Correctly check for bind-mounting of /var/spool/hylafax/etc before
      copying files there (LP: #783654).
    - Fix unmounting of /var/spool/hylafax/etc in init script (LP: #707347).
 -- Colin Watson <email address hidden>   Mon, 26 Mar 2012 09:22:34 +0100

Available diffs

• diff from 2:6.0.5-5 (in Debian) to 2:6.0.5-5ubuntu3 (3.7 KiB)
• diff from 2:6.0.5-5ubuntu2 to 2:6.0.5-5ubuntu3 (2.0 KiB)

hylafax (2:6.0.5-5ubuntu2) oneiric; urgency=low

  * Fix LP: #749061 - fix FTBFS caused by a bug in the configure script,
    exposed when being called from make
    - add debian/patches/902_fix_configure_with_recursive_make.patch
    - update debian/patches/series
 -- Michael van der Kolff <email address hidden>   Tue, 13 Sep 2011 14:02:21 +0100

Available diffs

• diff from 2:6.0.5-5ubuntu1 to 2:6.0.5-5ubuntu2 (1.1 KiB)

hylafax (2:6.0.5-5ubuntu1) natty; urgency=low

  * Merge from debian unstable.  Remaining changes:
    - debian/patches/901_fchmod-prototype.patch: glibc now includes
      a fchmod prototype which doesn't match hylafax's. (Closes: #565001)
  * Upload should fixes: (LP: #372605, #476098, 595610)

Available diffs

• diff from 2:6.0.5-4ubuntu1 to 2:6.0.5-5ubuntu1 (3.2 KiB)

hylafax (2:6.0.5-4ubuntu1) natty; urgency=low

  * Merge from debian unstable.  Remaining changes:
    - debian/patches/901_fchmod-prototype.patch: glibc now
      includes an fchmod prototype which doesn't match hylafax's.
      (Closes: #565001)
 -- Artur Rona <email address hidden>   Thu, 04 Nov 2010 20:53:51 +0100

Available diffs

• diff from 2:6.0.5-3ubuntu1 to 2:6.0.5-4ubuntu1 (1.4 KiB)

hylafax (2:6.0.5-3ubuntu1) natty; urgency=low

  * Merge from debian unstable.  Remaining changes:
    - debian/patches/901_fchmod-prototype.patch: glibc now
      includes an fchmod prototype which doesn't match hylafax's.
 -- Artur Rona <email address hidden>   Thu, 21 Oct 2010 20:26:56 +0200

Available diffs

• diff from 2:6.0.4-10ubuntu1 to 2:6.0.5-3ubuntu1 (22.3 KiB)

hylafax (2:6.0.4-10ubuntu1) maverick; urgency=low

  * Sync from Debian unstable (LP: #580568)
  * Add 901_fchmod-prototype.patch: glibc now includes an fchmod prototype
    which doesn't match hylafax's.

Available diffs

• diff from 2:6.0.4-8 to 2:6.0.4-10ubuntu1 (4.0 KiB)

hylafax (2:6.0.4-8) unstable; urgency=low

  * Fixed a build problem with makeshlibs on the wrong package.

Available diffs

• diff from 2:6.0.3-5.1ubuntu1 to 2:6.0.4-8 (65.3 KiB)

hylafax (2:6.0.3-5.1ubuntu1) lucid; urgency=low

  * Merge from debian testing.  Remaining changes: LP: #503434
    - debian/hyla.conf:
      + Updated description of fontmap to include lucid
    - debian/hylafax-server.hylafax.default:
      - look for faxgetty in both /etc/inittab and /etc/event.d/*
 -- Bhavani Shankar <email address hidden>   Tue, 05 Jan 2010 19:54:26 +0530

Available diffs

• diff from 2:6.0.3-2ubuntu1 to 2:6.0.3-5.1ubuntu1 (1.9 KiB)

hylafax (2:6.0.3-2ubuntu1) karmic; urgency=low

  * Merge from debian unstable, remaining changes: LP: #412009
    - debian/hyla.conf:
      + Updated description of fontmap to include karmic
    - debian/hylafax-server.hylafax.default:
      - look for faxgetty in both /etc/inittab and /etc/event.d/*

Available diffs

• diff from 2:4.4.4-10.1ubuntu2 to 2:6.0.3-2ubuntu1 (551.0 KiB)

hylafax (2:4.4.4-10.1ubuntu2) jaunty; urgency=low

  * debian/control:
    - Add XSBC-Original-Maintainer and change Maintainer field

 -- Ante Karamatic <email address hidden>   Tue, 27 Jan 2009 09:05:00 +0100

Available diffs

• diff from 2:4.4.4-10.1ubuntu1 to 2:4.4.4-10.1ubuntu2 (437 bytes)

hylafax (2:4.4.4-10.1ubuntu1) jaunty; urgency=low

  * debian/hyla.conf:
    - added /usr/share/ghostscript/8.64/lib to FontMap
  * debian/hylafax-server.hylafax.default:
    - look for faxgetty in both /etc/inittab and /etc/event.d/*
    - Closes LP: #270916

 -- Ante Karamatic <email address hidden>   Tue, 27 Jan 2009 08:38:09 +0100

Available diffs

• diff from 2:4.4.4-10.1 to 2:4.4.4-10.1ubuntu1 (742 bytes)

hylafax (2:4.4.4-10.1) unstable; urgency=medium

  * Non-maintainer upload
  * Urgency medium for RC bug fix
  * Don't redirect /dev/tty to ucf any more. Closes: #502754.

Available diffs

• diff from 2:4.4.4-7 to 2:4.4.4-10.1 (3.1 KiB)

hylafax (2:4.4.4-7) unstable; urgency=low

  * Corrected support for hfaxd run via inetd adding a new
    parameter HFAXD_FROM_INET in /etc/default/hylafax (Closes: #470910)

hylafax (2:4.4.3-1) unstable; urgency=low

  * New upstream release
  * Removed patches already included upstream (700_trap-in-shell-scripts.dpatch)
  * Added patch 400 for building with parallel make (-j option) on some buildd

 -- Ubuntu Archive Auto-Sync <email address hidden>   Sun,  09 Dec 2007 19:09:57 +0000

hylafax (2:4.4.2-3) unstable; urgency=low

  * Applied patch from hylafax+ in order to better control the access rights
    on received fax queue.
  * Change dependency from 'gs' to 'ghostscript' because of package rename

 -- Ubuntu Archive Auto-Sync <email address hidden>   Sun,  28 Oct 2007 17:09:06 +0000

hylafax (2:4.4.2-2) unstable; urgency=low

  * Remove temporary files when leaving shell scripts (Closes: #443070)

hylafax (2:4.4.0-2) unstable; urgency=low

  * Added pt translation (Closes: #435734)
  * Fixed a lot of typos in manual pages (Closes: #437970, #437971, #437972, #437973, #437974, #437975, #437976, #437985, #437986, #437987, #437988, #437989, #437990, #437991, #437992, #437993, #437994, #437995, #437996)
  * Used ispell on all manual pages.

 -- Lionel Porcheron <email address hidden>   Thu,  16 Aug 2007 14:32:43 +0100

hylafax (2:4.4.0-1) unstable; urgency=low

  * New upstream release
  * Shipped /usr/sbin/lockname that was missing from previous debian packages
  * Remove unnecessary patches already included upstream

hylafax (2:4.3.4-1) unstable; urgency=low

  * New upstream release
  * Added psrip in suggested packages for hylafax-server

 -- Ubuntu Archive Auto-Sync <email address hidden>   Sat,  16 Jun 2007 12:35:10 +0100

hylafax (2:4.3.3-1) unstable; urgency=low

  * New upstream release
  * Removed from debian/rules the way notify-reject was renamed to notify-rejected
    since new upstream version correctly named the files.

hylafax (2:4.3.1-3) unstable; urgency=low

  * Added patch for DesiredDF (Closes: #402171)
  * Added a text in README.Debian on how to send non ASCII text
    files (Closes: #387748, #363464)
  * Corrected patch for faxadduser (Closes: #402018)

 -- Ubuntu Archive Auto-Sync <email address hidden>   Tue,  12 Dec 2006 10:56:23 +0000

hylafax (2:4.3.1-2) unstable; urgency=low

  * Added templates directory that was erroneously removed

 -- Ubuntu Archive Auto-Sync <email address hidden>   Thu,  07 Dec 2006 09:42:43 +0000

hylafax (2:4.3.1-1) unstable; urgency=low

  * New upstream release (Closes: #369756)
  * Check that package build correctly in unstable, testing/etch,
    stable/sarge, oldstable/woody+backport.

hylafax (2:4.3.0-9) unstable; urgency=low

  * Fixed awk command in notify-4.1 (Closes: #386036)
  * Changed From addredd in e-mail from "fax" to "faxmaster" since
    fax user does not always exists (Closes: #386071)
  * Changed init script to be lsb compliant
  * Added debtags

hylafax (2:4.3.0-5) unstable; urgency=low

  * Removed manpage for sgi2fax, that is not included in debian package.
  * Add support for GIF89 and PNG convertion to fax (Closes: #373287)
  * 4.3.0 is out (Closes: #369145)

 -- Ubuntu Archive Auto-Sync <email address hidden>   Tue,  20 Jun 2006 07:48:26 +0100

hylafax (2:4.3.0-4) unstable; urgency=low

  * Corrected permissions for hosts.hfaxd
  * Added a small delay between stop and start when restarting (Closes: #372253)
  * USE_FAXGETTY is now more documented (Closes: #372249)
  * Better PAM support description (Closes: #372248)
  * Removed obsolete QuickStart documentation; improved README.Debian
  * Check for faxmodem as well as faxgetty in /etc/inittab
  * Check and update owner/access rights when copying from /etc/hylafax to
    $SPOOL/etc (Closes: #372254)
  * Add patch for hylafax-server: scheduler died killing a job (Closes: #372827)

 -- Ubuntu Archive Auto-Sync <email address hidden>   Mon,  19 Jun 2006 10:28:14 +0100

hylafax (2:4.3.0-3) unstable; urgency=low

  * Added i18n, as implemented in 4.3.0 (Closes: #370726)

hylafax (2:4.2.5-1) unstable; urgency=low


  * New upstream release
  * Correctly remove broken link "bin" in $SPOOL/etc/ (Closes: #338765)
  * Pre-Depends on libpaper-utils. (Closes: #344921)

 -- Giuseppe Sacco <email address hidden>  Sun, 15 Jan 2006 15:06:05 +0100

hylafax (2:4.2.4-2) unstable; urgency=high


  * Corrected patch for CVE-2005-3539 (Closes: #346254)
  * Urgency high because of the security fix

 -- Giuseppe Sacco <email address hidden>  Sat,  7 Jan 2006 11:53:08 +0100

hylafax (2:4.2.4-1) unstable; urgency=high


  * New upstream release
  * HylaFAX hfaxd will allow any password when compiled with PAM support
    disabled. [CVE-2005-3538]
  * HylaFAX notify script passes unsanitised user-supplied data to eval,
    allowing remote attackers to execute arbitrary commands [CVE-2005-3539]

 -- Giuseppe Sacco <email address hidden>  Wed,  4 Jan 2006 11:18:45 +0100

hylafax (2:4.2.2-1) unstable; urgency=low


  * New upstream release
  * Changed epoch because of trailing +rc1 in last version number
  * Corrected watch file
  * Updated de, nl and fr translations (Closes: #326741, #326798, #330518)
  * Removed link to binaries on purge
  * Removed broken link /var/spool/hylafax/bin/bin
  * Added dependancy on debconf-2.0 to permit use of cdebconf
  * Update to Standards-Version 3.6.2 (no diff required)
  * Removed variable not used on linux from config.cache (Closes: #320496)

 -- Giuseppe Sacco <email address hidden>  Wed, 28 Sep 2005 12:34:51 +0200

hylafax (2:4.2.3-1) unstable; urgency=low


  * New upstream release.
  * Adde sv debconf translation (Closes: #342867)
  * Rewritten patch 500 for handling twin directories as the previous
    one did not apply anymore.
  * Removed patch 700 since the bug hes now been fixed upstream.
  * CAN-2005-3070 Unix domain socket ownership.
  * CAN-2005-3069 symlink attack on temporary file.
  * Updated bg translation (Closes: #330957)

 -- Giuseppe Sacco <email address hidden>  Mon, 12 Dec 2005 10:36:11 +0100

hylafax (1:4.2.1-7) unstable; urgency=low


  * Added patch for hylafax bug 633 and debian bug #309683

 -- Giuseppe Sacco <email address hidden>  Sat,  4 Jun 2005 00:55:13 +0200

hylafax (1:4.2.0-16ubuntu0.1) hoary-security; urgency=low


  * SECURITY UPDATE: unauthorised access vulnerability
  * hfaxd/User.c++, hfaxd/InetFaxServer.c++:
    - Applied patch by Debian Team to fix the vulnerability.
  * References:
    - CAN-2004-1182

 -- Gerardo Di Giacomo <email address hidden>  Wed, 11 May 2005 17:20:16 +0000

hylafax (1:4.2.0-16) unstable; urgency=medium


  * Removed dependency on c++compiler since compiler is provided
    by build-essential (Thanks to Francesco P. Lovergine)
  * Added an example script for archiving cover pages, as described
    in http://bugs.hylafax.org/bugzilla/show_bug.cgi?id=603
  * Urgency medium in onder to enter sarge

 -- Giuseppe Sacco <email address hidden>  Tue, 14 Dec 2004 16:53:10 +0100

hylafax (1:4.1.8-13ubuntu1) warty; urgency=low


  * Build-depend: libtiff4-dev

 -- LaMont Jones <email address hidden>  Tue, 24 Aug 2004 13:31:20 -0600