[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#516945: marked as done (cups: Serial backend permissions problem)



Your message dated Tue, 21 Apr 2009 19:53:53 +0000
with message-id <E1LwM2T-0004sW-Cy@ries.debian.org>
and subject line Bug#516945: fixed in cups 1.3.8-1lenny5
has caused the Debian Bug report #516945,
regarding cups: Serial backend permissions problem
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
516945: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=516945
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: cups
Version: 1.3.8-1lenny4.1
Severity: normal

*** Please type your report below this line ***
Fresh install of Lenny, serial printer added with

lpadmin -p DEC-LA100 -v serial:/dev/ttyS0?baud=9600+size=8+parity=none+flow=hard -D "DEC Letterprinter 100" -P textonly.ppd

Print fails with

E [24/Feb/2009:08:18:48 +0000] PID 4993 (/usr/lib/cups/backend/serial) stopped with status 22!

in log.

# ls -l /dev/ttyS?
crw-rw---- 1 root dialout 4, 64 2009-02-24 15:36 /dev/ttyS0
crw-rw---- 1 root dialout 4, 65 2009-02-24 16:09 /dev/ttyS1
crw-rw---- 1 root dialout 4, 66 2009-02-24 14:15 /dev/ttyS2
crw-rw---- 1 root dialout 4, 67 2009-02-24 14:15 /dev/ttyS3

Restarting cups after each change:

chown root.lp /dev/ttyS0
 -does not fix.

chmod 666 /dev/ttyS0
 -does not fix.

Return /dev/ttyS0 to original permissions/ownership.

# ls -l /usr/lib/cups/backend/serial
-rwxr--r-- 2 root root 14900 2009-01-13 16:53 /usr/lib/cups/backend/serial

(Received theory being serial should run as root with 744, or 700, permissions)

chmod 700 /usr/lib/cups/backend/serial

 -fixes problem.

Note permissions of serial in /usr/lib/cups/backend-available are 700.


-- System Information:
Debian Release: 5.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i586)

Kernel: Linux 2.6.26-1-486
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages cups depends on:
ii  adduser            3.110                 add and remove users and groups
ii cups-common 1.3.8-1lenny4.1 Common UNIX Printing System(tm) - ii debconf [debconf-2 1.5.24 Debian configuration management sy ii ghostscript 8.62.dfsg.1-3.2lenny0 The GPL Ghostscript PostScript/PDF ii libavahi-compat-li 0.6.23-3lenny1 Avahi Apple Bonjour compatibility
ii  libc6              2.7-18                GNU C Library: Shared libraries
ii libcups2 1.3.8-1lenny4.1 Common UNIX Printing System(tm) - ii libcupsimage2 1.3.8-1lenny4.1 Common UNIX Printing System(tm) - ii libdbus-1-3 1.2.1-5 simple interprocess messaging syst ii libgnutls26 2.4.2-6 the GNU TLS library - runtime libr
ii  libkrb53           1.6.dfsg.4~beta1-5    MIT Kerberos runtime libraries
ii  libldap-2.4-2      2.4.11-1              OpenLDAP libraries
ii libpam0g 1.0.1-5 Pluggable Authentication Modules l ii libpaper1 1.1.23+nmu1 library for handling paper charact
ii  libslp1            1.2.1-7.5             OpenSLP libraries
ii lsb-base 3.2-20 Linux Standard Base 3.2 init scrip
ii  perl-modules       5.10.0-19             Core Perl modules
ii poppler-utils [xpd 0.8.7-1 PDF utilitites (based on libpopple
ii  procps             1:3.2.7-11            /proc file system utilities
ii ssl-cert 1.0.23 simple debconf wrapper for OpenSSL

Versions of packages cups recommends:
ii avahi-utils 0.6.23-3lenny1 Avahi browsing, publishing and dis ii cups-client 1.3.8-1lenny4.1 Common UNIX Printing System(tm) - ii foomatic-filters 3.0.2-20080211-3.2 OpenPrinting printer support - fil ii smbclient 2:3.2.5-4 a LanManager-like simple client fo

Versions of packages cups suggests:
ii cups-bsd 1.3.8-1lenny4.1 Common UNIX Printing System(tm) -
pn  cups-driver-gutenprint  <none>           (no description available)
pn  cups-pdf                <none>           (no description available)
ii foomatic-db 20080211-2+nmu1 OpenPrinting printer support - dat ii foomatic-db-engine 3.0.2-20080211-1 OpenPrinting printer support - pro
pn  hplip                   <none>           (no description available)
pn  xpdf-korean | xpdf-japa <none>           (no description available)

-- debconf information:
  cupsys/raw-print: true
cupsys/backend: ipp, lpd, parallel, scsi, serial, socket, usb, snmp, dnssd



--- End Message ---
--- Begin Message ---
Source: cups
Source-Version: 1.3.8-1lenny5

We believe that the bug you reported is fixed in the latest version of
cups, which is due to be installed in the Debian FTP archive:

cups-bsd_1.3.8-1lenny5_i386.deb
  to pool/main/c/cups/cups-bsd_1.3.8-1lenny5_i386.deb
cups-client_1.3.8-1lenny5_i386.deb
  to pool/main/c/cups/cups-client_1.3.8-1lenny5_i386.deb
cups-common_1.3.8-1lenny5_all.deb
  to pool/main/c/cups/cups-common_1.3.8-1lenny5_all.deb
cups-dbg_1.3.8-1lenny5_i386.deb
  to pool/main/c/cups/cups-dbg_1.3.8-1lenny5_i386.deb
cups_1.3.8-1lenny5.diff.gz
  to pool/main/c/cups/cups_1.3.8-1lenny5.diff.gz
cups_1.3.8-1lenny5.dsc
  to pool/main/c/cups/cups_1.3.8-1lenny5.dsc
cups_1.3.8-1lenny5_i386.deb
  to pool/main/c/cups/cups_1.3.8-1lenny5_i386.deb
cupsys-bsd_1.3.8-1lenny5_all.deb
  to pool/main/c/cups/cupsys-bsd_1.3.8-1lenny5_all.deb
cupsys-client_1.3.8-1lenny5_all.deb
  to pool/main/c/cups/cupsys-client_1.3.8-1lenny5_all.deb
cupsys-common_1.3.8-1lenny5_all.deb
  to pool/main/c/cups/cupsys-common_1.3.8-1lenny5_all.deb
cupsys-dbg_1.3.8-1lenny5_all.deb
  to pool/main/c/cups/cupsys-dbg_1.3.8-1lenny5_all.deb
cupsys_1.3.8-1lenny5_all.deb
  to pool/main/c/cups/cupsys_1.3.8-1lenny5_all.deb
libcups2-dev_1.3.8-1lenny5_i386.deb
  to pool/main/c/cups/libcups2-dev_1.3.8-1lenny5_i386.deb
libcups2_1.3.8-1lenny5_i386.deb
  to pool/main/c/cups/libcups2_1.3.8-1lenny5_i386.deb
libcupsimage2-dev_1.3.8-1lenny5_i386.deb
  to pool/main/c/cups/libcupsimage2-dev_1.3.8-1lenny5_i386.deb
libcupsimage2_1.3.8-1lenny5_i386.deb
  to pool/main/c/cups/libcupsimage2_1.3.8-1lenny5_i386.deb
libcupsys2-dev_1.3.8-1lenny5_all.deb
  to pool/main/c/cups/libcupsys2-dev_1.3.8-1lenny5_all.deb
libcupsys2_1.3.8-1lenny5_all.deb
  to pool/main/c/cups/libcupsys2_1.3.8-1lenny5_all.deb



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 516945@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Martin Pitt <mpitt@debian.org> (supplier of updated cups package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Sat, 04 Apr 2009 05:59:15 -0700
Source: cups
Binary: libcups2 libcupsimage2 cups cups-client libcups2-dev libcupsimage2-dev cups-bsd cups-common cups-dbg cupsys cupsys-client cupsys-common cupsys-bsd cupsys-dbg libcupsys2 libcupsys2-dev
Architecture: source all i386
Version: 1.3.8-1lenny5
Distribution: stable-security
Urgency: low
Maintainer: Debian CUPS Maintainers <pkg-cups-devel@lists.alioth.debian.org>
Changed-By: Martin Pitt <mpitt@debian.org>
Description: 
 cups       - Common UNIX Printing System(tm) - server
 cups-bsd   - Common UNIX Printing System(tm) - BSD commands
 cups-client - Common UNIX Printing System(tm) - client programs (SysV)
 cups-common - Common UNIX Printing System(tm) - common files
 cups-dbg   - Common UNIX Printing System(tm) - debugging symbols
 cupsys     - Common UNIX Printing System (transitional package)
 cupsys-bsd - Common UNIX Printing System (transitional package)
 cupsys-client - Common UNIX Printing System (transitional package)
 cupsys-common - Common UNIX Printing System (transitional package)
 cupsys-dbg - Common UNIX Printing System (transitional package)
 libcups2   - Common UNIX Printing System(tm) - libs
 libcups2-dev - Common UNIX Printing System(tm) - development files
 libcupsimage2 - Common UNIX Printing System(tm) - image libs
 libcupsimage2-dev - Common UNIX Printing System(tm) - image development files
 libcupsys2 - Common UNIX Printing System (transitional package)
 libcupsys2-dev - Common UNIX Printing System (transitional package)
Closes: 516945
Changes: 
 cups (1.3.8-1lenny5) stable-security; urgency=low
 .
   * Add CVE-2009-0163_tiff_read_overflow.dpatch: Fix integer overflow induced
     heap buffer overflow in the _cupsImageReadTIFF() function. Discovered by
     iDefense. (CVE-2009-0163)
   * debian/rules: Remove group/other read permissions from the serial backend,
     so that it can run as root and thus is actually able to access /dev/ttyS*.
     In unstable this is fixed with a patch which relaxes the permissions
     checks, but that's too intrusive for a stable update. (Closes: #516945)
Checksums-Sha1: 
 db03331356eeefbb551622f921cc390327812469 1833 cups_1.3.8-1lenny5.dsc
 7e8b6b8814a890228a4878bb528fca9683e2e04b 4796827 cups_1.3.8.orig.tar.gz
 a93a1ffe93c477b11658c8ce97667faadddab57c 184239 cups_1.3.8-1lenny5.diff.gz
 8d698d015d8448fbd29c0c7e429e68ea45a19b05 1175160 cups-common_1.3.8-1lenny5_all.deb
 ef5a5e59c1ab7bb76f37d8f442c5e107f519c7de 52032 cupsys_1.3.8-1lenny5_all.deb
 3726e24a57256629da4b43515550a30c0cb59ea6 52056 cupsys-client_1.3.8-1lenny5_all.deb
 44f5bbc7a18a6fa2ec0a53394fd556d8b953e966 52058 cupsys-common_1.3.8-1lenny5_all.deb
 0c00575acc3d92c7684272e1b3066c64a89cc522 52054 cupsys-bsd_1.3.8-1lenny5_all.deb
 73c980ab92be9c7a0766bbdb397845bedaea1ecd 52046 cupsys-dbg_1.3.8-1lenny5_all.deb
 75e9b8254adf13c9000b2721024eae4d1c90a23b 52048 libcupsys2_1.3.8-1lenny5_all.deb
 3011f02b8adc049cec590971a61781a9ce98ae7d 52060 libcupsys2-dev_1.3.8-1lenny5_all.deb
 7d683148bf5f500ebff5ff9d6a442546ef3967e1 164434 libcups2_1.3.8-1lenny5_i386.deb
 4eb2f6731dc4b34b21536091626952caa092c827 99120 libcupsimage2_1.3.8-1lenny5_i386.deb
 2b461436352ecf5eb2cdfc1c45a6b9d926077664 2047160 cups_1.3.8-1lenny5_i386.deb
 4b8139e0a9383c22ecee066a20fc78352b9541a5 114848 cups-client_1.3.8-1lenny5_i386.deb
 7a4df19c8b9630803a6aa2b1277a4ef0d83a0929 394064 libcups2-dev_1.3.8-1lenny5_i386.deb
 b95cb541c6d1e9c81c648599d70589c9a4e7c487 60434 libcupsimage2-dev_1.3.8-1lenny5_i386.deb
 5debc084a19598d7f47acf802db034298f7e38b0 36484 cups-bsd_1.3.8-1lenny5_i386.deb
 efbc6faedc313657a9e302c28bb3e94b91e015d2 1085470 cups-dbg_1.3.8-1lenny5_i386.deb
Checksums-Sha256: 
 d4eda1df474ffec91064c977e65ac18c8a99f638ee70295a302a3786e7955ba7 1833 cups_1.3.8-1lenny5.dsc
 7ecf2d1bc70d118cd0feaa3f91a4c9f90d4ce8357b04ea16ee41163165549cab 4796827 cups_1.3.8.orig.tar.gz
 900a581a82d5ced5bbbcfffc2b1d5ff138165c1da912bbe235a6831317d81671 184239 cups_1.3.8-1lenny5.diff.gz
 6be60405ad8fe11487ac88a844298715e9e49a6e7bfc6e081975fb05ccbddc6e 1175160 cups-common_1.3.8-1lenny5_all.deb
 194ec86c79c3bc9706a187cb9df52820a2bd48164709af88adfee2a80c5dbe49 52032 cupsys_1.3.8-1lenny5_all.deb
 b6a2a07ad8ec9bedcd41b761d78fa506a7a2dd1b033f0d042ec401edf59517ca 52056 cupsys-client_1.3.8-1lenny5_all.deb
 7a8ebb78af0f88bbbc1587f0226a17e911592b3cf490243caa594db765609337 52058 cupsys-common_1.3.8-1lenny5_all.deb
 d9467008fed05ca34db2bdff152b4921a03163d6f1609dd805d84a87bd045c3f 52054 cupsys-bsd_1.3.8-1lenny5_all.deb
 26346879ad495fec7f7ef70d84981f99ff9cce0e35320a9ac3d986cd87aa189d 52046 cupsys-dbg_1.3.8-1lenny5_all.deb
 e00e7f5050d77f98d258b46dd15132552a0f1f28d209fcb526e0d993f7e4ab8c 52048 libcupsys2_1.3.8-1lenny5_all.deb
 b9bd4750e2029f840e049e0bd4c9bedf24767c943cd14b5d53114d0e17833b55 52060 libcupsys2-dev_1.3.8-1lenny5_all.deb
 9fb39a8123c5cb173f7da5ab5295a4e0c392b10747fff3296b0e076c7f366e9e 164434 libcups2_1.3.8-1lenny5_i386.deb
 b9cffa5b2c4ce0f9f5f76c67cf4ac858cf985500006466f29af77535ef9b2396 99120 libcupsimage2_1.3.8-1lenny5_i386.deb
 0f690e113775bdf401f072277e886a123babfdabf6dfb55a1f499747d685eb6d 2047160 cups_1.3.8-1lenny5_i386.deb
 bfc5a77a6f5451136f6f21411488fe85b60be804582e695b0b74657585f768fc 114848 cups-client_1.3.8-1lenny5_i386.deb
 8dbfaa94c329fc75857928d30f50efd0d48d70b2aa782a8c529eb4256e16f96f 394064 libcups2-dev_1.3.8-1lenny5_i386.deb
 a30f012d79f8da53b4afb07777dfe619759146b84b7be8ef34bdb5e669465c56 60434 libcupsimage2-dev_1.3.8-1lenny5_i386.deb
 43c3bdb04c15613bef6853c33688521a7a05ae3fa2f462c29856172b147bc08d 36484 cups-bsd_1.3.8-1lenny5_i386.deb
 4b0a4380499aacb4e315cb9a22c698cd5880eaeed60fa5a1fdb2fe3af56a26e0 1085470 cups-dbg_1.3.8-1lenny5_i386.deb
Files: 
 4c8778e239a30fb22d2f183c32c698f9 1833 net optional cups_1.3.8-1lenny5.dsc
 10efe9825c1a1dcd325be47a6cc21faf 4796827 net optional cups_1.3.8.orig.tar.gz
 dd404146b1e9f016cc820f7892ed17c7 184239 net optional cups_1.3.8-1lenny5.diff.gz
 462411771388eea81dcd9fe87fcadb76 1175160 net optional cups-common_1.3.8-1lenny5_all.deb
 57858f41f804dcef4a205c71c8fafeb9 52032 oldlibs extra cupsys_1.3.8-1lenny5_all.deb
 fad269c06612a3e92372fb572997a75a 52056 oldlibs extra cupsys-client_1.3.8-1lenny5_all.deb
 2b8c19ea46398861298325493814b2bc 52058 oldlibs extra cupsys-common_1.3.8-1lenny5_all.deb
 7b1cbcef31f0acef816e190274d4cd73 52054 oldlibs extra cupsys-bsd_1.3.8-1lenny5_all.deb
 19e750bfebc597b8936ae1d23a38b2ee 52046 oldlibs extra cupsys-dbg_1.3.8-1lenny5_all.deb
 da9cfa78d4fccba4d4587186e4e91583 52048 oldlibs extra libcupsys2_1.3.8-1lenny5_all.deb
 baf9cc46db611665cb4a36c043a809e4 52060 oldlibs extra libcupsys2-dev_1.3.8-1lenny5_all.deb
 8a9cc5328a01e96fb99a5c8dd7790626 164434 libs optional libcups2_1.3.8-1lenny5_i386.deb
 5ea77d549d9e0d8ca64a6bdce863b262 99120 libs optional libcupsimage2_1.3.8-1lenny5_i386.deb
 55f3b312558a1687931b74f55ef81dee 2047160 net optional cups_1.3.8-1lenny5_i386.deb
 a4aed79f9fd271ca06be97fdd0c9097b 114848 net optional cups-client_1.3.8-1lenny5_i386.deb
 07dcad9401a227e62ac1d4e2d15bba4e 394064 libdevel optional libcups2-dev_1.3.8-1lenny5_i386.deb
 8c4f67ff8e3163e1aa24053c4f746a37 60434 libdevel optional libcupsimage2-dev_1.3.8-1lenny5_i386.deb
 9dbfecd141e6674f8c4c12a7cc472e6e 36484 net extra cups-bsd_1.3.8-1lenny5_i386.deb
 6b05ce29e166358a0e33c440baf8a0eb 1085470 libdevel extra cups-dbg_1.3.8-1lenny5_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)

iEYEARECAAYFAknYIRYACgkQDecnbV4Fd/KUGQCdEhIyOhm1O+f0ZrCQfdkuPjXL
KVYAnjod7Bw7QtBeOF2dmeMI0F02BFnK
=bNJS
-----END PGP SIGNATURE-----



--- End Message ---

Reply to: