Andreas Radke pushed to branch main at Arch Linux / Packaging / Packages / cups-browsed
Commits: 7111ed9c by Andreas Radke at 2024-10-18T19:29:15+02:00 upgpkg: 2.1.0-1 - - - - - 3 changed files: - .SRCINFO - − CVE-2024-47176.patch - PKGBUILD Changes: ===================================== .SRCINFO ===================================== @@ -1,7 +1,7 @@ pkgbase = cups-browsed pkgdesc = a helper daemon to browse the network for remote CUPS queues and IPP network printers - pkgver = 2.0.1 - pkgrel = 2 + pkgver = 2.1.0 + pkgrel = 1 url = https://wiki.linuxfoundation.org/openprinting/cups-filters arch = x86_64 license = Apache-2.0 WITH LLVM-exception @@ -12,11 +12,8 @@ pkgbase = cups-browsed depends = avahi depends = glib2 depends = glibc - depends = libldap backup = etc/cups/cups-browsed.conf - source = https://github.com/OpenPrinting/cups-browsed/releases/download/2.0.1/cups-browsed-2.0.1.tar.xz - source = CVE-2024-47176.patch - sha256sums = ebed1b49dea593912b15fe55f88b691c1a0ac7d6c42178e9526ea949d00ef01a - sha256sums = cef22036f4512dc813e6ea2536558c2111919134b93b23b6d3f239d3fad1fa4a + source = https://github.com/OpenPrinting/cups-browsed/releases/download/2.1.0/cups-browsed-2.1.0.tar.xz + sha256sums = 2a1c0b3185d33e03e29bd13cbee07e2c511a7c4744048b094bb78895f1b00129 pkgname = cups-browsed ===================================== CVE-2024-47176.patch deleted ===================================== @@ -1,28 +0,0 @@ -From 1debe6b140c37e0aa928559add4abcc95ce54aa2 Mon Sep 17 00:00:00 2001 -From: Zdenek Dohnal <zdoh...@redhat.com> -Date: Thu, 26 Sep 2024 23:03:32 +0200 -Subject: [PATCH] Default BrowseRemoteProtocols should not include "cups" - protocol - -Works around CVE-2024-47176, the fix will be complete removal of CUPS -Browsing functionality ---- - configure.ac | 4 ++-- - 1 file changed, 2 insertions(+), 2 deletions(-) - -diff --git a/configure.ac b/configure.ac -index d07b184c..84de9129 100644 ---- a/configure.ac -+++ b/configure.ac -@@ -183,9 +183,9 @@ else - fi - - AC_ARG_WITH([browseremoteprotocols], -- [AS_HELP_STRING([--with-browseremoteprotocols=value], [Set which protocols to listen for in cups-browsed (default: dnssd cups)])], -+ [AS_HELP_STRING([--with-browseremoteprotocols=value], [Set which protocols to listen for in cups-browsed (default: dnssd)])], - [with_browseremoteprotocols="$withval"], -- [with_browseremoteprotocols="dnssd cups"] -+ [with_browseremoteprotocols="dnssd"] - ) - BROWSEREMOTEPROTOCOLS="$with_browseremoteprotocols" - AC_SUBST(BROWSEREMOTEPROTOCOLS) ===================================== PKGBUILD ===================================== @@ -1,27 +1,18 @@ # Maintainer: Andreas Radke <andy...@archlinux.org> pkgname=cups-browsed -pkgver=2.0.1 -pkgrel=2 +pkgver=2.1.0 +pkgrel=1 pkgdesc="a helper daemon to browse the network for remote CUPS queues and IPP network printers" arch=('x86_64') url="https://wiki.linuxfoundation.org/openprinting/cups-filters" license=('Apache-2.0 WITH LLVM-exception') depends=('libcups' 'libcupsfilters' 'libppd' - 'avahi' 'glib2' 'glibc' 'libldap') + 'avahi' 'glib2' 'glibc') makedepends=('glib2-devel') backup=(etc/cups/cups-browsed.conf) -source=(https://github.com/OpenPrinting/$pkgname/releases/download/$pkgver/$pkgname-$pkgver.tar.xz - CVE-2024-47176.patch) -sha256sums=('ebed1b49dea593912b15fe55f88b691c1a0ac7d6c42178e9526ea949d00ef01a' - 'cef22036f4512dc813e6ea2536558c2111919134b93b23b6d3f239d3fad1fa4a') - -prepare() { - cd "$pkgname"-$pkgver - # default to dnssd only browsing - patch -Np1 -i ../CVE-2024-47176.patch - autoreconf -vfi -} +source=(https://github.com/OpenPrinting/$pkgname/releases/download/$pkgver/$pkgname-$pkgver.tar.xz) +sha256sums=('2a1c0b3185d33e03e29bd13cbee07e2c511a7c4744048b094bb78895f1b00129') build() { cd "$pkgname"-$pkgver View it on GitLab: https://gitlab.archlinux.org/archlinux/packaging/packages/cups-browsed/-/commit/7111ed9cc9673ac71dd9bd7da64f0f8f5f25c000 -- View it on GitLab: https://gitlab.archlinux.org/archlinux/packaging/packages/cups-browsed/-/commit/7111ed9cc9673ac71dd9bd7da64f0f8f5f25c000 You're receiving this email because of your account on gitlab.archlinux.org.