[debian-devel:12574] Re: (draft) [SECURITY] New version of canna released

[ISHIKAWA Mutsumi <ishikawa@xxxxxxxxxxx>]

むつみです。

>>>>> In [debian-devel : No.12573] 
>>>>>	ISHIKAWA Mutsumi <ishikawa@xxxxxxxxxxx> wrote:
>> むつみです。
>>

>>  えーと それから /etc/hosts.canna は追加することにしました。
>> ディフォルトでは localhost からのアクセスしか許可しません。
>>
>> ＃作業的には potato/woody 用はできたので、あとは slink 用。

 つーことで たった今 ftp-master.debian.org に dupload しました。

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.6
Date: Fri, 30 Jun 2000 21:25:15 +0900
Source: canna
Binary: canna-utils libcanna1g canna libcanna1g-dev
Architecture: source i386
Version: 3.5b2-25
Distribution: frozen unstable
Urgency: high
Maintainer: ISHIKAWA Mutsumi <ishikawa@xxxxxxxxxxx>
Description: 
 canna      - A japanese input system (server and dictionary).
 canna-utils - A japanese input system (utility).
 libcanna1g - Canna Runtime Library (Libc6).
 libcanna1g-dev - Canna Static Library and Headers (Libc6).
Closes: 63402
Changes: 
 canna (3.5b2-25) frozen unstable; urgency=high
 .
   * [SECURITY FIX] buffer overflow. If send IR_INIT command to cannaserver
     with very logn username and/or groupname, remote user can get root
     facility.
   * add /etc/hosts.canna file as conffile for security reason. Default
     setting is `clients can connect cannaserver only from localhost.'
     closes: Bug#63402
Files: 
 137882b4c5d627079f21f3dc87f0f013 620 utils optional canna_3.5b2-25.dsc
 2f4faf1c942bc5cadff0743cf8fefca4 130923 utils optional canna_3.5b2-25.diff.gz
 81206266f5988c22c491b55cc592deb1 842910 utils optional canna_3.5b2-25_i386.deb
 001eb07b65412c42b2b05beb3cb1e7eb 106394 utils optional canna-utils_3.5b2-25_i386.deb
 b22628fbadca57c96ba26a3197d76251 417260 libs optional libcanna1g_3.5b2-25_i386.deb
 a7b1b722f39faade496e79e85552b5e5 568134 devel extra libcanna1g-dev_3.5b2-25_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.1 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAjld7W0ACgkQfi8w7uypT6jpkgCdHA69nn5unczYxucnGJXttN9r
WcgAnRk/l7t+DX06FXAGdYEAY1FIqSt5
=83+X
-----END PGP SIGNATURE-----


-----BEGIN PGP SIGNED MESSAGE-----

Format: 1.5
Date: Sat,  1 Jul 2000 21:10:00 +0900
Source: canna
Binary: canna-utils libcanna1g canna libcanna1g-dev
Architecture: source i386
Version: 3.5b2-24slink1
Distribution: stable
Urgency: high
Maintainer: ISHIKAWA Mutsumi <ishikawa@xxxxxxxxxxx>
Description: 
 canna      - A japanese input system (server and dictionary).
 canna-utils - A japanese input system (utility).
 libcanna1g - Canna Runtime Library (Libc6).
 libcanna1g-dev - Canna Static Library and Headers (Libc6).
Changes: 
 canna (3.5b2-24slink1) stable; urgency=high
 .
   * for stable release security fix based on canna_3.5b2-25
   * readopt to fsstnd for slink
   * [SECURITY FIX] buffer overflow. If send IR_INIT command to cannaserver
     with very logn username and/or groupname, remote user can get root
     facility.
   * add /etc/hosts.canna file as conffile for security reason. Default
     setting is `clients can connect cannaserver only from localhost.'
Files: 
 b62f0558dc852ed61930157236622e3d 677 utils optional canna_3.5b2-24slink1.dsc
 7220bdad24aa3be2fdfc4f1bfd978235 117605 utils optional canna_3.5b2-24slink1.diff.gz
 c15a54507be2fc745d55718efbae4f74 832910 utils optional canna_3.5b2-24slink1_i386.deb
 45705fd8a8d230d3dd0094707eb2fac3 104062 utils optional canna-utils_3.5b2-24slink1_i386.deb
 546f7db3b425b90522628cd6e4bebd39 376828 libs optional libcanna1g_3.5b2-24slink1_i386.deb
 c783e25125d3ec404307a48861125202 522912 devel extra libcanna1g-dev_3.5b2-24slink1_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQCVAwUBOV3l7gXPO91GHPmtAQEwDgP/Y7SWLWjo90ZzZMa+xPMPToRQsdhzDLIR
88Ls7/wPV5A+B1yLthTCwTDAgf4pixBtTB5VScxKAnioJj0FnMaZIp1JmVYZfbyq
1tNQDcnYk5B7RFT1NUc2qT6Dd9Pn3rwKcGW7ibxkqIOwpPHqFrx4bPgCQn/mqoB2
iPyKM9Xcsvk=
=66XL
-----END PGP SIGNATURE-----

-- 
いしかわ むつみ <ishikawa@xxxxxxxxxxx>