{"id":"CVE-2020-15397","aliases":["ALPINE-CVE-2020-15397","EUVD-2020-7391","GHSA-2fqh-mw2q-wr69","MGASA-2020-0356","UBUNTU-CVE-2020-15397","openSUSE-SU-2020:1209-1","openSUSE-SU-2020:1210-1","openSUSE-SU-2020:1231-1","openSUSE-SU-2020:1438-1","openSUSE-SU-2024:10852-1"],"status":"published","title":"HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories...","description":"HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).","severity":{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.00538,"percentile":0.4556,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-269","CWE-732"],"published":"2020-06-30T11:17:37Z","modified":"2026-11-03T06:32:36Z","fixes":[{"ecosystem":"Alpine:v3.10","package":"hylafaxplus","fixed_in":["7.0.0-r4"],"sources":["osv"]},{"ecosystem":"Alpine:v3.11","package":"hylafaxplus","fixed_in":["7.0.1-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.12","package":"hylafaxplus","fixed_in":["7.0.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"hylafaxplus","fixed_in":["7.0.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"hylafaxplus","fixed_in":["7.0.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"hylafaxplus","fixed_in":["7.0.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"hylafaxplus","fixed_in":["7.0.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"hylafaxplus","fixed_in":["7.0.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"hylafaxplus","fixed_in":["7.0.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"hylafaxplus","fixed_in":["7.0.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"hylafaxplus","fixed_in":["7.0.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"hylafaxplus","fixed_in":["7.0.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"hylafaxplus","fixed_in":["7.0.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"hylafaxplus","fixed_in":["7.0.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"hylafaxplus","fixed_in":["7.0.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.9","package":"hylafaxplus","fixed_in":["7.0.0-r1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.10","package":"hylafaxplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-r4"}]}]},{"source":"osv","ecosystem":"Alpine:v3.11","package":"hylafaxplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.1-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.12","package":"hylafaxplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"hylafaxplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"hylafaxplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"hylafaxplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"hylafaxplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"hylafaxplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"hylafaxplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"hylafaxplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"hylafaxplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"hylafaxplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"hylafaxplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"hylafaxplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"hylafaxplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.9","package":"hylafaxplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.0-r1"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"hylafax+","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"+-7.0.3-1.mga7"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"hylafax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:6.0.6-6","3:6.0.6-6+deb8u1build0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"hylafax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:6.0.6-8","3:6.0.6-8.1~ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"hylafax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:6.0.6-8.1build1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"hylafax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:6.0.7-3.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"hylafax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:6.0.7-5build1","3:6.0.7-7"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"hylafax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:6.0.7-11.1","3:6.0.7-13"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"hylafax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:6.0.7-13build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"hylafax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3:6.0.7-13","3:6.0.7-13build1"]},{"source":"osv","ecosystem":"openSUSE:Leap 15.2","package":"hylafax+","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.3-lp152.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.1","package":"hylafax+","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.3-lp151.4.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP1","package":"hylafax+","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.3-bp151.6.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP2","package":"hylafax+","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.3-bp152.3.4.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"hylafax+","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.0.3-5.1"}]}],"bundled":4}],"products":[{"vendor":"hylafax\\+_project","product":"hylafax\\+"},{"vendor":"ifax","product":"hylafax_enterprise"}],"references":[{"url":"https://sourceforge.net/p/hylafax/HylaFAX+/2534/","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1173519","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report"]},{"url":"https://security.gentoo.org/glsa/202007-06","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/Y46FOVJUS5SO44A2VEKR7DXEHTI4WK5L/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/J52QFVREJWJ35YSEEDDRMZQ2LM2H2WE6/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00039.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00040.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00046.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00054.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-15397"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/J52QFVREJWJ35YSEEDDRMZQ2LM2H2WE6/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y46FOVJUS5SO44A2VEKR7DXEHTI4WK5L/"},{"url":"https://github.com/advisories/GHSA-2fqh-mw2q-wr69"},{"url":"https://security.alpinelinux.org/vuln/CVE-2020-15397","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2020-0356.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=27170","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/J52QFVREJWJ35YSEEDDRMZQ2LM2H2WE6/","tags":["web"]},{"url":"https://hylafax.sourceforge.io/news/7.0.3.php","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-15397","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-15397","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/X6XT7KUJG3ZNIXOR2ITCKSIPAFF3NF6A/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1173519","tags":["report"]},{"url":"https://bugzilla.suse.com/1173521","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15396","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-15397","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/O2R3IEUFA5QVGZ3Z4DHFPJS73HGA5WVD/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HJKN7C7YKS7FQT246ZIBZJPFX4F4XTGN/","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/ZL5N5CITWMKL2NLJLVYYNKXTJ2XNUKN4/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2018-17141","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8024","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2020-15397","description":"HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).","status":"published","published":"2020-06-30T11:17:37Z","modified":"2024-08-04T13:15:20.494Z","updated_at":"2026-11-02T14:35:50.228781Z"}],"euvd":[{"id":"EUVD-2020-7391","description":"HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).","status":"published","published":"2020-06-30T11:17:37Z","modified":"2024-08-04T13:15:20Z","updated_at":"2026-11-03T03:07:31.508652Z"}],"ghsa":[{"id":"GHSA-2fqh-mw2q-wr69","title":"HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories...","description":"HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).","status":"published","published":"2022-05-24T17:22:06Z","modified":"2023-01-27T05:02:29Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-269"],"updated_at":"2026-11-02T14:42:03.588739Z"}],"nvd":[{"id":"CVE-2020-15397","description":"HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).","status":"published","published":"2020-06-30T12:15:12.507Z","modified":"2026-06-17T02:56:37.51Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:06:08.145904Z"}],"osv":[{"id":"ALPINE-CVE-2020-15397","description":"HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).","status":"published","published":"2020-06-30T12:15:12.507Z","modified":"2026-11-03T06:32:36.318454215Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:17:20.312441Z"},{"id":"CVE-2020-15397","description":"HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).","status":"published","published":"2020-06-30T12:15:12.507Z","modified":"2026-04-16T04:35:48.670450088Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:14.828228Z"},{"id":"UBUNTU-CVE-2020-15397","description":"HylaFAX+ through 7.0.2 and HylaFAX Enterprise have scripts that execute binaries from directories writable by unprivileged users (e.g., locations under /var/spool/hylafax that are writable by the uucp account). This allows these users to execute code in the context of the user calling these binaries (often root).","status":"published","published":"2020-06-30T12:15:00Z","modified":"2026-10-17T12:56:11.618046617Z","cvss":[{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:23.344108Z"},{"id":"MGASA-2020-0356","title":"Updated hylafax+ packages fix security vulnerabilities","description":"In HylaFAX+ through 7.0.2, the faxsetup utility calls chown on files in\nuser-owned directories. By winning a race, a local attacker could use this to\nescalate his privileges to root (CVE-2020-15396).\n\nHylaFAX+ through 7.0.2 has scripts that execute binaries from directories\nwritable by unprivileged users (e.g., locations under /var/spool/hylafax that\nare writable by the uucp account). This allows these users to execute code in\nthe context of the user calling these binaries (often root) (CVE-2020-15397).\n\nThe hylafax+ package has been updated to version 7.0.3, fixing thesee issues\nand several other bugs.\n","status":"published","published":"2020-08-31T23:58:35Z","modified":"2026-04-16T04:43:54.033672811Z","updated_at":"2026-11-02T15:49:41.151324Z"},{"id":"openSUSE-SU-2020:1209-1","title":"Security update for hylafax+","description":"This update for hylafax+ fixes the following issues:\n\nHylafax was updated to upstream version 7.0.3.\n\nSecurity issues fixed:\n\n- CVE-2020-15396: Secure temporary directory creation for faxsetup, faxaddmodem, and probemodem (boo#1173521).\n- CVE-2020-15397: Sourcing of files into binaries from user writeable directories (boo#1173519).\n\nNon-security issues fixed:\n\n* add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl\n  (31 Jul 2020)\n* be more resilient in listening for the Phase C carrier (30 Jul 2020)\n* make sure to return to command mode if HDLC receive times out (29 Jul 2020)\n* make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)\n* don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)\n* don't ever respond to CRP with CRP (28 Jul 2020)\n* reset frame counter when a sender retransmits PPS for a previously confirmed\n  ECM block (26 Jul 2020)\n* scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)\n* fix modem recovery after SSL Fax failure (22, 26 Jul 2020)\n* ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)\n* attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)\n* run scripts directly rather than invoking them via a shell for security\n  hardening (3-5 Jul 2020)\n* add senderFumblesECM feature (3 Jul 2020)\n* add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN\n  feature, and utilize PIN for rare conditions where it may be helpful\n  (2, 6, 13-14 Jul 2020)\n* add senderConfusesRTN feature (25-26 Jun 2020)\n* add MissedPageHandling feature (24 Jun 2020)\n* use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)\n* cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)\n* fix listening for retransmission of MPS/EOP/EOM if it was received\n  corrupt on the first attempt (15 Jun 2020)\n* don't use CRP when receiving PPS/PPM as some senders think\n  we are sending MCF (12 Jun 2020)\n* add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)\n* have faxinfo put units on non-standard page dimensions (28 May 2020)\n* improve error messages for JobHost connection errors (22 May 2020)\n* fix perpetual blocking of jobs when a job preparation fails,\n  attempt to fix similar blocking problems for bad jobs in\n  batches, and add 'unblock' faxconfig feature (21 May 2020)\n* ignore TCF if we're receiving an SSL Fax (31 Jan 2020)\n* fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)\n","status":"published","published":"2020-08-14T18:18:53Z","modified":"2026-02-04T03:23:12.918088Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1210-1","title":"Security update for hylafax+","description":"This update for hylafax+ fixes the following issues:\n\nHylafax was updated to upstream version 7.0.3.\n\nSecurity issues fixed:\n\n- CVE-2020-15396: Secure temporary directory creation for faxsetup, faxaddmodem, and probemodem (boo#1173521).\n- CVE-2020-15397: Sourcing of files into binaries from user writeable directories (boo#1173519).\n\nNon-security issues fixed:\n\n* add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl\n  (31 Jul 2020)\n* be more resilient in listening for the Phase C carrier (30 Jul 2020)\n* make sure to return to command mode if HDLC receive times out (29 Jul 2020)\n* make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)\n* don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)\n* don't ever respond to CRP with CRP (28 Jul 2020)\n* reset frame counter when a sender retransmits PPS for a previously confirmed\n  ECM block (26 Jul 2020)\n* scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)\n* fix modem recovery after SSL Fax failure (22, 26 Jul 2020)\n* ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)\n* attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)\n* run scripts directly rather than invoking them via a shell for security\n  hardening (3-5 Jul 2020)\n* add senderFumblesECM feature (3 Jul 2020)\n* add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN\n  feature, and utilize PIN for rare conditions where it may be helpful\n  (2, 6, 13-14 Jul 2020)\n* add senderConfusesRTN feature (25-26 Jun 2020)\n* add MissedPageHandling feature (24 Jun 2020)\n* use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)\n* cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)\n* fix listening for retransmission of MPS/EOP/EOM if it was received\n  corrupt on the first attempt (15 Jun 2020)\n* don't use CRP when receiving PPS/PPM as some senders think\n  we are sending MCF (12 Jun 2020)\n* add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)\n* have faxinfo put units on non-standard page dimensions (28 May 2020)\n* improve error messages for JobHost connection errors (22 May 2020)\n* fix perpetual blocking of jobs when a job preparation fails,\n  attempt to fix similar blocking problems for bad jobs in\n  batches, and add 'unblock' faxconfig feature (21 May 2020)\n* ignore TCF if we're receiving an SSL Fax (31 Jan 2020)\n* fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)\n","status":"published","published":"2020-08-14T18:19:00Z","modified":"2026-02-04T03:08:20.035259Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1231-1","title":"Security update for hylafax+","description":"This update for hylafax+ fixes the following issues:\n\nHylafax was updated to upstream version 7.0.3.\n\nSecurity issues fixed:\n\n- CVE-2020-15396: Secure temporary directory creation for faxsetup, faxaddmodem, and probemodem (boo#1173521).\n- CVE-2020-15397: Sourcing of files into binaries from user writeable directories (boo#1173519).\n\nNon-security issues fixed:\n\n* add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl\n  (31 Jul 2020)\n* be more resilient in listening for the Phase C carrier (30 Jul 2020)\n* make sure to return to command mode if HDLC receive times out (29 Jul 2020)\n* make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)\n* don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)\n* don't ever respond to CRP with CRP (28 Jul 2020)\n* reset frame counter when a sender retransmits PPS for a previously confirmed\n  ECM block (26 Jul 2020)\n* scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)\n* fix modem recovery after SSL Fax failure (22, 26 Jul 2020)\n* ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)\n* attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)\n* run scripts directly rather than invoking them via a shell for security\n  hardening (3-5 Jul 2020)\n* add senderFumblesECM feature (3 Jul 2020)\n* add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN\n  feature, and utilize PIN for rare conditions where it may be helpful\n  (2, 6, 13-14 Jul 2020)\n* add senderConfusesRTN feature (25-26 Jun 2020)\n* add MissedPageHandling feature (24 Jun 2020)\n* use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)\n* cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)\n* fix listening for retransmission of MPS/EOP/EOM if it was received\n  corrupt on the first attempt (15 Jun 2020)\n* don't use CRP when receiving PPS/PPM as some senders think\n  we are sending MCF (12 Jun 2020)\n* add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)\n* have faxinfo put units on non-standard page dimensions (28 May 2020)\n* improve error messages for JobHost connection errors (22 May 2020)\n* fix perpetual blocking of jobs when a job preparation fails,\n  attempt to fix similar blocking problems for bad jobs in\n  batches, and add 'unblock' faxconfig feature (21 May 2020)\n* ignore TCF if we're receiving an SSL Fax (31 Jan 2020)\n* fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)\n\nThis update was imported from the openSUSE:Leap:15.1:Update update project.","status":"published","published":"2020-08-18T08:18:28Z","modified":"2025-05-07T18:11:37.46625Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2020:1438-1","title":"Security update for hylafax+","description":"This update for hylafax+ fixes the following issues:\n\nHylafax was updated to upstream version 7.0.3.\n\nSecurity issues fixed:\n\n- CVE-2020-15396: Secure temporary directory creation for faxsetup, faxaddmodem, and probemodem (boo#1173521).\n- CVE-2020-15397: Sourcing of files into binaries from user writeable directories (boo#1173519).\n\nNon-security issues fixed:\n\n* add UseSSLFax feature in sendfax, sendfax.conf, hyla.conf, and JobControl\n  (31 Jul 2020)\n* be more resilient in listening for the Phase C carrier (30 Jul 2020)\n* make sure to return to command mode if HDLC receive times out (29 Jul 2020)\n* make faxmail ignore boundaries on parts other than multiparts (29 Jul 2020)\n* don't attempt to write zero bytes of data to a TIFF (29 Jul 2020)\n* don't ever respond to CRP with CRP (28 Jul 2020)\n* reset frame counter when a sender retransmits PPS for a previously confirmed\n  ECM block (26 Jul 2020)\n* scrutinize PPM before concluding that the sender missed our MCF (23 Jul 2020)\n* fix modem recovery after SSL Fax failure (22, 26 Jul 2020)\n* ignore echo of PPR, RTN, CRP (10, 13, 21 Jul 2020)\n* attempt to handle NSF/CSI/DIS in Class 1 sending Phase D (6 Jul 2020)\n* run scripts directly rather than invoking them via a shell for security\n  hardening (3-5 Jul 2020)\n* add senderFumblesECM feature (3 Jul 2020)\n* add support for PIN/PIP/PRI-Q/PPS-PRI-Q signals, add senderConfusesPIN\n  feature, and utilize PIN for rare conditions where it may be helpful\n  (2, 6, 13-14 Jul 2020)\n* add senderConfusesRTN feature (25-26 Jun 2020)\n* add MissedPageHandling feature (24 Jun 2020)\n* use and handle CFR in Phase D to retransmit Phase C (16, 23 Jun 2020)\n* cope with hearing echo of RR, CTC during Class 1 sending (15-17 Jun 2020)\n* fix listening for retransmission of MPS/EOP/EOM if it was received\n  corrupt on the first attempt (15 Jun 2020)\n* don't use CRP when receiving PPS/PPM as some senders think\n  we are sending MCF (12 Jun 2020)\n* add BR_SSLFAX to show SSL Fax in notify and faxinfo output (1 Jun 2020)\n* have faxinfo put units on non-standard page dimensions (28 May 2020)\n* improve error messages for JobHost connection errors (22 May 2020)\n* fix perpetual blocking of jobs when a job preparation fails,\n  attempt to fix similar blocking problems for bad jobs in\n  batches, and add 'unblock' faxconfig feature (21 May 2020)\n* ignore TCF if we're receiving an SSL Fax (31 Jan 2020)\n* fixes for build on FreeBSD 12.1 (31 Jan - 3 Feb 2020)\n\nThis update was imported from the openSUSE:Leap:15.2:Update update project.","status":"published","published":"2020-09-15T18:23:20Z","modified":"2026-02-04T04:12:34.26451Z","updated_at":"2026-11-02T16:58:31.517538Z"},{"id":"openSUSE-SU-2024:10852-1","title":"hylafax+-7.0.3-5.1 on GA media","description":"These are all security issues fixed in the hylafax+-7.0.3-5.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:21:30.248616Z","updated_at":"2026-11-02T16:58:34.894275Z"}]}}