Bug#807930: TEMP-0000000-166C73 code execution via improper escaping of ; in foomatic-rip

To: Didier 'OdyX' Raboud <odyx@debian.org>, 807930@bugs.debian.org, Yann Soubeyrand <yann-externe.soubeyrand@edf.fr>, Debian Security Team <team@security.debian.org>
Subject: Bug#807930: TEMP-0000000-166C73 code execution via improper escaping of ; in foomatic-rip
From: Till Kamppeter <till.kamppeter@gmail.com>
Date: Mon, 14 Dec 2015 21:55:48 -0200
Message-id: <[🔎] 566F5704.807@gmail.com>
Reply-to: Till Kamppeter <till.kamppeter@gmail.com>, 807930@bugs.debian.org
In-reply-to: <[🔎] 5314717.zafZMDpR2G@odyx.org>
References: <[🔎] 20151214144531.26578.99043.reportbug@dsp0688145.postes.calibre.edf.fr> <[🔎] 5314717.zafZMDpR2G@odyx.org>

On 12/14/2015 01:30 PM, Didier 'OdyX' Raboud wrote:

I'm likely to wait for 1.4.0 upstream release for an upload to unstable,
and will then prepare the package for jessie (if the Security Team
agrees).

I have 1.4.0 released upstream now, including the fix. I have alsoupdated the Debian packaging on the Debian GIT repository now, so thatthe package is ready for upload.


   Till

Reply to:

References:
- Bug#807930: TEMP-0000000-166C73 code execution via improper escaping of ; in foomatic-rip
  - From: Yann Soubeyrand <yann-externe.soubeyrand@edf.fr>
- Bug#807930: TEMP-0000000-166C73 code execution via improper escaping of ; in foomatic-rip
  - From: Didier 'OdyX' Raboud <odyx@debian.org>

Prev by Date: cups-filters 1.4.0 released!
Next by Date: Re: CVE Request: Cups Filters/Foomatic Filters: Does not consider semicolon as an illegal shell escape character
Previous by thread: Bug#807930: TEMP-0000000-166C73 code execution via improper escaping of ; in foomatic-rip
Next by thread: Processed: Re: Bug#807930: TEMP-0000000-166C73 code execution via improper escaping of ; in foomatic-rip
Index(es):
- Date
- Thread