Thank you for your contribution to Debian. Mapping stable-security to proposed-updates.
Accepted:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 26 Sep 2024 23:45:05 +0200
Source: cups
Architecture: source
Version: 2.4.2-3+deb12u8
Distribution: bookworm-security
Urgency: high
Maintainer: Debian Printing Team <debian-printing@lists.debian.org>
Changed-By: Thorsten Alteholz <deb...@alteholz.de>
Changes:
cups (2.4.2-3+deb12u8) bookworm-security; urgency=high
.
* CVE-2024-47175
Fix CVE and upstream also added some extra hardening to patch
- validate URIs, attribute names, and capabilities
in cups/ppd-cache.c, scheduler/ipp.c
- sanitize make and model in cups/ppd-cache.c
- PPDize preset and template names in cups/ppd-cache.c
- quote PPD localized strings in cups/ppd-cache.c
- fix warnings in cups/ppd-cache.c
Checksums-Sha1:
265107cf3c5fad19d808354c83aca432d8163651 3389 cups_2.4.2-3+deb12u8.dsc
45055a7acb8da7cf743b6c572a601418a89f994f 8128785 cups_2.4.2.orig.tar.gz
96713b90c9bb51b3f69ccc4e49913a7781d3ffe5 228 cups_2.4.2.orig.tar.gz.asc
271859b22498c16b0245a7c7bd2b3c6f71210ca1 390072
cups_2.4.2-3+deb12u8.debian.tar.xz
587b4ddb7710e8febcf15c02b3a54f3a7055947d 7714
cups_2.4.2-3+deb12u8_source.buildinfo
Checksums-Sha256:
526c48402f1410ae55dccc0dd6e6ebe654d15e877829ea0e2b8aece7a20c56b7 3389
cups_2.4.2-3+deb12u8.dsc
f03ccb40b087d1e30940a40e0141dcbba263f39974c20eb9f2521066c9c6c908 8128785
cups_2.4.2.orig.tar.gz
1c116a5fb52e013f4569c3e4cb09a9934ea5e498b9e9d3b823bc2ae09066555b 228
cups_2.4.2.orig.tar.gz.asc
e66c4a352a0b89665a8506019f37bfe36a9d032c95c6dad41206ae908404ff9e 390072
cups_2.4.2-3+deb12u8.debian.tar.xz
23c4a1d7d62e18745a769267a96e190b481b2130dd18366b6d962e0797ddf143 7714
cups_2.4.2-3+deb12u8_source.buildinfo
Files:
181be255a81e9bca368b1b623e30deeb 3389 net optional cups_2.4.2-3+deb12u8.dsc
be5241e2c165eeb83b58aa32de26fb16 8128785 net optional cups_2.4.2.orig.tar.gz
eb60d5853f5988a4a91e3db1203fe508 228 net optional cups_2.4.2.orig.tar.gz.asc
2d99e2c9dea93c3978c78b2762909463 390072 net optional
cups_2.4.2-3+deb12u8.debian.tar.xz
bef18ae5ae399beadec972931c5436a5 7714 net optional
cups_2.4.2-3+deb12u8_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=WzPq
-----END PGP SIGNATURE-----
pgp4MzGJFh_iq.pgp
Description: PGP signature
