CVSROOT: /cvs
Module name: ports
Changes by: [email protected] 2026/04/17 23:38:50
Modified files:
print/cups : Tag: OPENBSD_7_8 Makefile distinfo
print/cups/patches: Tag: OPENBSD_7_8 patch-backend_ipp_c
patch-scheduler_ipp_c
Log message:
SECURITY update to cups-2.4.17.
- CVE-2026-27447: The scheduler treated local user and group names as
case-insensitive.
- CVE-2026-34978: The RSS notifier could write outside the scheduler's RSS
directory.
- CVE-2026-34980: The scheduler did not filter control characters from option
values.
- CVE-2026-34979: The scheduler did not always allocate enough memory for a
job's options string.
- CVE-2026-34990: The scheduler incorrectly allowed local certificates over the
loopback interface.
- CVE-2026-39314: Fixed the range check for job password strings.
- CVE-2026-39316: Fixed a printer subscription bug in the scheduler.
- CVE-2026-NNNNN: Fixed a SNMP string conversion bug in the backends.
