Bug#934957: cups: multiple security issues (including CVEified CVE-2019-8675 and CVE-2019-8696)

To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: Bug#934957: cups: multiple security issues (including CVEified CVE-2019-8675 and CVE-2019-8696)
From: Salvatore Bonaccorso <carnil@debian.org>
Date: Sat, 17 Aug 2019 11:34:01 +0200
Message-id: <[🔎] 156603444191.24224.13571315068334315667.reportbug@eldamar.local>
Reply-to: Salvatore Bonaccorso <carnil@debian.org>, 934957@bugs.debian.org

Source: cups
Version: 2.2.10-6
Severity: grave
Tags: security upstream
Justification: user security hole

Hi

Filling for tracking. The recent 2.2.12[1] release includes fixes for
several security issues, two of those got CVEs and are related to SNMP
buffer overflows. [2] includes all those.

Regards,
Salvatore

 [1] https://github.com/apple/cups/releases/tag/v2.2.12
 [2] https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109

Reply to:

Follow-Ups:
- Bug#934957: marked as done (cups: multiple security issues (including CVEified CVE-2019-8675 and CVE-2019-8696))
  - From: "Debian Bug Tracking System" <owner@bugs.debian.org>
- Bug#934957: cups: multiple security issues (including CVEified CVE-2019-8675 and CVE-2019-8696)
  - From: Didier 'OdyX' Raboud <odyx@debian.org>
- Processed: Re: Bug#934957: cups: multiple security issues (including CVEified CVE-2019-8675 and CVE-2019-8696)
  - From: "Debian Bug Tracking System" <owner@bugs.debian.org>
- Bug#934957: cups: multiple security issues (including CVEified CVE-2019-8675 and CVE-2019-8696)
  - From: Didier 'OdyX' Raboud <odyx@debian.org>
- Bug#934957: marked as done (cups: multiple security issues (including CVEified CVE-2019-8675 and CVE-2019-8696))
  - From: "Debian Bug Tracking System" <owner@bugs.debian.org>
- Bug#934957: marked as done (cups: multiple security issues (including CVEified CVE-2019-8675 and CVE-2019-8696))
  - From: "Debian Bug Tracking System" <owner@bugs.debian.org>

Prev by Date: ghostscript_9.26a~dfsg-0+deb9u4_sourceonly.changes ACCEPTED into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
Next by Date: Processing of cups_2.2.12-1_source.changes
Previous by thread: ghostscript_9.26a~dfsg-0+deb9u4_sourceonly.changes ACCEPTED into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
Next by thread: Bug#934957: marked as done (cups: multiple security issues (including CVEified CVE-2019-8675 and CVE-2019-8696))
Index(es):
- Date
- Thread