Changelog for sane-backends-1.0.14-3.i586.rpm :
Sat Jul 31 14:00:00 2004 PLD Team
All persons listed below can be reached at AATTpld.org.pl

$Log: sane-backends.spec,v $
Revision 1.92 2004/07/31 11:15:47 kloczek
- reelase 3: rebuild on gcc 3.4.1.

Revision 1.91 2004/06/24 23:23:06 kloczek
- release 2: rebuild against libexif 0.6.9.

Revision 1.90 2004/05/03 18:26:45 kloczek
- updated to 1.0.14,
- removed outdated link patch.

Revision 1.89 2004/02/16 03:50:28 kloczek
- s#%{version}#${version}-%{release)# - use more strict Requires rules
between subpackages generated from one source package.

Revision 1.88 2004/02/10 12:58:51 kloczek
- updated to 1.0.13,
- removed outdated autoload patch,
- added badcode patchfrom RH: disable bad stdarg code in scanimage,
- enable ipv6 support: added --enable-ipv6 to configure parameters.

Revision 1.87 2004/01/28 13:45:32 kloczek
- use common format for commented TODO entries.

Revision 1.86 2003/10/16 20:57:04 kloczek
- version 1.0.11 contains official security fixes so ..
- SECURITY FIX: CAN-2003-0773, CAN-2003-0774, CAN-2003-0775, CAN-2003-0776
CAN-2003-0777, CAN-2003-0778:
- Saned checks the identity (IP address) of the remote host only after the
first communication took place (SANE_NET_INIT). So everyone can send
that RPC, even if the remote host is not allowed to scan (not listed in
saned.conf),
- Saned lacks error checking nearly everywhere in the code. So connection
drops are detected very late. If the drop of the connection isn\'t
detected, the access to the internal wire buffer leaves the limits of
the allocated memory. So random memory \"after\" the wire buffer is read
which will be followed by a segmentation fault.
- If saned expects strings, it mallocs the memory necessary to store the
complete string after it receives the size of the string. If the
connection was dropped before transmitting the size, malloc will reserve
an arbitrary size of memory. Depending on that size and the amount of
memory available either malloc fails (->saned quits nicely) or a huge
amount of memory is allocated. Swapping and OOM measures may occur
depending on the kernel.
- Saned doesn\'t check the validity of the RPC numbers it gets before
getting the parameters.
- If debug messages are enabled and a connection is dropped,
non-null-terminated strings may be printed and segamentation faults may
occur.
- It\'s possible to allocate an arbitrary amount of memory on the server
running saned even if the connection isn\'t dropped. At the moment this
can not easily be fixed according to the author. Better limit the total
amount of memory saned may use (ulimit).

Revision 1.85 2003/10/16 18:17:15 kloczek
- release 3,
- typo in patch name s/spatc/sparc/,
- added more fixes in sparc patch,
- now on build sane-backends do not require textex,
- added no_docs patch for not install doc files on %install stage,
- added libjpeg patch for fix linking with libjpeg,
- updated URL,
- added no_libtool.m4 patch for remove from aclocal.m4 private copy
libtool.m4,
- merge autoload patch from RH,
- build libusb depending stuff also on sparc.

Revision 1.84 2003/10/14 07:25:46 kloczek
- start upgrade to final 1.0.12.

Revision 1.83 2003/09/24 18:51:37 kloczek
- remove static subpackage.

Revision 1.82 2003/08/29 18:02:30 kloczek
- cleanups (use tabs instead spaces in some places, remove trailing spaces,
remove not neccessary LICENSE, COPYING, INSTALL files and other minor changes).

Revision 1.81 2003/07/30 13:57:21 kloczek
- unifications in %post/%postun.

Revision 1.80 2003/06/27 17:27:29 kloczek
- unifications and cleanups.

Revision 1.79 2003/05/12 20:34:12 qboosh
- updated to 1.0.12-pre1, added hp5400 backend
- updated link patch, replaced acinclude patch by head(1), added DESTDIR patch
- fixed avision,fujitsu,ma1509 backends linking

Revision 1.78 2003/05/11 21:17:26 qboosh
- added bconds for libgphoto2,libieee1284,libusb
- added .m4 file with AM_PATH_SANE stolen sane-frontends/acinclude.m4
- release 2

Revision 1.77 2003/03/03 19:25:13 juandon
- added pmake.patch

Revision 1.76 2003/02/19 13:09:00 qboosh
- autoconf >= 2.54 required

Revision 1.75 2003/02/12 12:39:54 qboosh
- cleanup after moving driver to kernel-plustek-sane.spec

Revision 1.74 2003/02/10 17:41:17 wiget
- updated to 1.0.11 (fix DoS in saned)

Revision 1.73 2003/02/02 13:21:03 kloczek
- corrected Source url.

Revision 1.72 2003/02/02 01:39:55 qboosh
- final 1.0.10
- updated link patch, separated hpsj5s driver (requires libieee1284)
- enabled gphoto2 (we have proper libgphoto2 version now)
- made -plustek real driver package (containing not only manual)
- removed static modules and their
*.la

Revision 1.71 2003/01/27 15:03:39 wiget
- updated to pre3

Revision 1.70 2003/01/20 11:57:24 wiget
- upgraded to 1.0.10-pre2
- removed plustek support modules (must be moved to separated spec)

Revision 1.69 2003/01/02 18:05:53 kloczek
- merge translations from MIZI.