GIT update to branch: 6.0, updated. HYLAFAX-6_0_6-8-gf2b48fd

[email protected] Tue, 18 Sep 2018 15:45:12 -0400
Newsgroups gmane.comp.telephony.fax.hylafax.devel
Message-ID <[email protected]>
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "HylaFAX".

The branch, 6.0 has been updated
       via  f2b48fda294ec3d3f68ba9fcb5330a8842654af1 (commit)
       via  82fa7bdbffc253de4d3e80a87d47fdbf68eabe36 (commit)
       via  5b95b384dd1b44b9d2c5c15cc10e50def7c1555d (commit)
      from  05d5d9c0412aad9fe5cc716cae0c58ba9c50bb1b (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit f2b48fda294ec3d3f68ba9fcb5330a8842654af1
Author: Patrice Fournier <[email protected]>
Date:   Tue Sep 18 09:00:50 2018 -0400

    HylaFAX 6.0.7

commit 82fa7bdbffc253de4d3e80a87d47fdbf68eabe36
Author: Patrice Fournier <[email protected]>
Date:   Mon Sep 17 23:00:53 2018 -0400

    Address CVE-2018-17141 and fixes a few vulnerabilities in code supporting JPEG
    
    These changes are adapted from Lee's fix for this vulnerability.
    
    Luis Merino, Markus Vervier, and Eric Sesterhenn of X41 D-SEC GmbH
    (Security Advisory: X41-2018-008) discovered an uninitialized pointer write
    and also an out-of-bounds write in FaxModem::writeECMData() that could lead
    to remote code execution with a specially-crafted fax sender.
    
    These changes fix the coding errors and deliberately prevent malicious and
    malfunctioning senders from inadvertently or deliberately setting JPEG and
    MH/MR/MMR/JBIG formats in the same DCS signal.

commit 5b95b384dd1b44b9d2c5c15cc10e50def7c1555d
Author: Patrice Fournier <[email protected]>
Date:   Mon Oct 9 16:06:36 2017 -0400

    Fix GCC-7 compiler error

-----------------------------------------------------------------------

Summary of changes:
 VERSION                     |    2 +-
 distrules                   |    1 +
 doc/RELEASENOTES-6.0.txt    |   10 ++++++++++
 faxd/Class2.c++             |    9 +++++++++
 faxd/CopyQuality.c++        |   35 +++++++++++++++++++++++------------
 libhylafax/Class2Params.c++ |    9 +++++++++
 libhylafax/FaxRecvInfo.c++  |    2 +-
 rpm/hylafax.spec            |   31 +++++++++++++++++++------------
 8 files changed, 73 insertions(+), 26 deletions(-)


hooks/post-receive
-- 
HylaFAX


____________________ HylaFAX(tm) Developers Mailing List ____________________
  To subscribe/unsubscribe, click http://lists.hylafax.org/cgi-bin/lsg2.cgi
On UNIX: mail -s unsubscribe [email protected] < /dev/null