Bug#795162: marked as done (ippusbxd: allows access to a connected USB printer via all configured network addresses)
Your message dated Thu, 13 Aug 2015 07:49:35 +0000
with message-id <E1ZPnGZ-0004gi-Lp@franck.debian.org>
and subject line Bug#795162: fixed in ippusbxd 1.22-1
has caused the Debian Bug report #795162,
regarding ippusbxd: allows access to a connected USB printer via all configured network addresses
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)
--
795162: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=795162
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Source: ippusbxd
Version: 1.21.2-1
Severity: important
Tags: security upstream
Hi
While reviewing ippusbxd in Ubuntu it was found that ippusbxd allows
access to a connected USB printer via all configured network
addresses, see
https://bugs.launchpad.net/ubuntu/+source/ippusbxd/+bug/1455644 and
for the CVE request
http://www.openwall.com/lists/oss-security/2015/08/11/1 .
Regards,
Salvatore
--- End Message ---
--- Begin Message ---
Source: ippusbxd
Source-Version: 1.22-1
We believe that the bug you reported is fixed in the latest version of
ippusbxd, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 795162@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Didier Raboud <odyx@debian.org> (supplier of updated ippusbxd package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 13 Aug 2015 09:07:51 +0200
Source: ippusbxd
Binary: ippusbxd
Architecture: source
Version: 1.22-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Printing Team <debian-printing@lists.debian.org>
Changed-By: Didier Raboud <odyx@debian.org>
Description:
ippusbxd - Daemon for IPP USB printer support
Closes: 795162
Changes:
ippusbxd (1.22-1) unstable; urgency=medium
.
* New 1.22 upstream release
- SECURITY FIX: Actually restrict the access to the printer to localhost
(Closes: #795162, LP: #1455644)
.
* Drop the aquire→acquire typo patch, merged upstream
* Add gbp.conf
* Update Vcs-Browser to use the https variant
Checksums-Sha1:
ce434b0ad065984910d1e24865f6ac7b29c65fb5 1761 ippusbxd_1.22-1.dsc
a040389726e82dbeaf8cc7440f42ad6e43fa655e 72958 ippusbxd_1.22.orig.tar.gz
a11801bacea5e76526d2b0f4dff069740f05ef64 2500 ippusbxd_1.22-1.debian.tar.xz
Checksums-Sha256:
faf21e6446697d25ac8cc07b4e989ad72b466719d25ff8e8656b4dd2b24dfaec 1761 ippusbxd_1.22-1.dsc
4940cb8b7b70e092b54b7833afd92b474f17ef868a10e2ff4e41e1525c3f1d31 72958 ippusbxd_1.22.orig.tar.gz
17547432fb64a31a1a98538ea9beffb6acc8bad48cdd79f2da62152dbacf717e 2500 ippusbxd_1.22-1.debian.tar.xz
Files:
e4d9eef20a51296c738b573dcd90c412 1761 comm extra ippusbxd_1.22-1.dsc
38b628e80bdb3c6f039e1554bea37328 72958 comm extra ippusbxd_1.22.orig.tar.gz
34194b10b3af8126cf3514ede9eadf2b 2500 comm extra ippusbxd_1.22-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iQGcBAEBCAAGBQJVzEilAAoJEIvPpx7KFjRV5AoMAIGBFSIaFFBS9Ojf+ef/gm0v
mlXGBohbMS7e495wEUOUyafQ2JcMPtia/HUuN9GuZlo+1dAE8mp+cFAK0lbs+L55
4g3IKaD7VMxU9lI1Vx8SmPvgM3FwQEJ/XlwWr+c1Kjep2kLVo1SouKCa8rjy2cZ3
NFGwTgrrVMPgBQ1YqZzEHlk5yg0qFpjONdAii1WevcaN1x/qYkG/lVA0ZlVoUG/H
aJSV3sheRBt0d1SGqLnXfbcZDgJDy1Sfb4oTL81tjLabm5MhX5rWCxlYCnb9YQpe
u4LwbWGeo5ZIcIjcDci6JVi1UBQ9kzOgQeV5Zx4oNdvkvkUnHQRCXXk1tUCQEvn3
vgZJMFJjiz+eCQLlCS2O014CdKCFNp6csk23yzPUAwJ5eGYx8T0ubVpq4uVLCkc6
iBM9EhZuO0pbMGSThBhZu+kYQYWM9qhepVuowBKoLVDAfLE30/zovu2tCgSt9U3S
uIN67DiP5/F6HNNXuY1G/QOr/pfRCpTGgL58b3UGpw==
=h8Cp
-----END PGP SIGNATURE-----
--- End Message ---
Reply to: