-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 26 Sep 2024 23:45:05 +0200
Source: cups
Architecture: source
Version: 2.3.3op2-3+deb11u9
Distribution: bullseye-security
Urgency: medium
Maintainer: Debian Printing Team <debian-printing@lists.debian.org>
Changed-By: Thorsten Alteholz <debian@alteholz.de>
Changes:
cups (2.3.3op2-3+deb11u9) bullseye-security; urgency=medium
.
* CVE-2024-47175
Fix CVE and upstream also added some extra hardening to patch
- validate URIs, attribute names, and capabilities
in cups/ppd-cache.c, scheduler/ipp.c
- sanitize make and model in cups/ppd-cache.c
- PPDize preset and template names in cups/ppd-cache.c
- quote PPD localized strings in cups/ppd-cache.c
- fix warnings in cups/ppd-cache.c
Checksums-Sha1:
e2348d676d0ef2b4707030331ea52c54ab2e4f70 3412 cups_2.3.3op2-3+deb11u9.dsc
4718df2bb5537e800a50d19a033e25e8a76f085a 353784 cups_2.3.3op2-3+deb11u9.debian.tar.xz
0878c53e1c530f4d1d244da0c6f3a3605d8c7079 14386 cups_2.3.3op2-3+deb11u9_amd64.buildinfo
Checksums-Sha256:
09a8f0ccbb4892a8d0b06d7c92b8f94461e4c8cad8edbd86f30924c082dacd97 3412 cups_2.3.3op2-3+deb11u9.dsc
98653afef9f252a8c7eea1764f4d29f789866d1aedc14abefc155b544b4fce00 353784 cups_2.3.3op2-3+deb11u9.debian.tar.xz
11d7e19605b61a33426d447f4f9ce4f4d29bf669e8e883e8587e91491f41cd2c 14386 cups_2.3.3op2-3+deb11u9_amd64.buildinfo
Files:
08da62ab30738baac99598c1cae8acdd 3412 net optional cups_2.3.3op2-3+deb11u9.dsc
65150d745f11f504273497355aec81f4 353784 net optional cups_2.3.3op2-3+deb11u9.debian.tar.xz
44d8a1e8030fedd1ea08fb50adbd7b2f 14386 net optional cups_2.3.3op2-3+deb11u9_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=VJEd
-----END PGP SIGNATURE-----
Attachment:
pgpRJMDa9Uigp.pgp
Description: PGP signature