Bug#741318: cups-filters: CVE-2013-6476 CVE-2013-6475 CVE-2013-6474 CVE-2013-6473

["Didier 'OdyX' Raboud" <odyx@debian.org>]

Control: found -1 cups/1.4.4-7+squeeze3
Control: found -1 cups-filters/1.0.25-1
Control: notfound -1 cups-filters/1.0.18-2.1

Hi Moritz, and thanks for the heads-up,

Le mardi, 11 mars 2014, 09.14:30 Moritz Muehlenhoff a écrit :
> Fixed upstream in 1.0.47:
> 
> CVE-2013-6473:
> http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/re
> vision/7175

This doesn't affect stable's cups-filters (urftopdf was introduced in 
cups-filters 1.0.25 and has never been in cups itself).

> CVE-2013-6474:
> CVE-2013-6475:
> CVE-2013-6476:
> http://bzr.linuxfoundation.org/loggerhead/openprinting/cups-filters/re
> vision/7176
> 
> I haven't checked the filters from src:cups in oldstable yet.

This affects cups-filters in stable too, I'll prepare an updated 
package.

It also affects the cups-filters as released in src:cups as 
debian/local/filters/ in oldstable, I'll prepare an update too.

Cheers,

OdyX