[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1057487: marked as done (lprint: Please do not listen on 0.0.0.0:8000 by default)

Your message dated Sat, 6 Jul 2024 10:20:40 +0000 (UTC)
with message-id <alpine.DEB.2.21.2407061019490.16398@postfach.intern.alteholz.me>
and subject line Re: lprint: Please do not listen on 0.0.0.0:8000 by default
has caused the Debian Bug report #1057487,
regarding lprint: Please do not listen on 0.0.0.0:8000 by default
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
1057487: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1057487
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: lprint
Version: 1.1.0-3
Severity: normal
X-Debbugs-Cc: witold.baryluk@gmail.com

lprint often is used on a local computer only with USB printers.

It would be better if lprint only listened on ::1, 127.0.0.1, not 0.0.0.0

Or maybe even not listened on TCP at all by default, unless enabled in
the config somewhere.

Otherwise there is a risk of security exposure.

Regards,
Witold

--- End Message ---
--- Begin Message --- 
Package: lprint

Hi Witold,
according to the homepage of LPrint[1] one feature of this software is to "implement an IPP Everywhere print service". So I am afraid your concern is not a bug but merely a feature of this software. 

In order to avoid your mentioned security exposure, please configure lprint locally.

Therefore I am closing this bug now.

Best regards,
Thorsten

[1] https://www.msweet.org/lprint/

--- End Message ---
Reply to: