Bug#1053857: cups: CVE-2023-32360 instructions in NEWS have a typo and are unclear
Package: cups Version: 2.4.7-1 Severity: important Dear Maintainer, The NEWS entry for CVE-2023-32360 says /etc/cups/cupds.conf when ite should say /etc/cups/cupsd.conf. In addition, after reading the NEWS entry and reviewing the contents of my cupsd.conf file, I'm left completely clueless about whether I actually need to change anything, or if doing so will break cups. Two reasons for this: * I don't have any "" stanzas in my cupsd.conf. all of the stanzas that reference CUPS-Get-Document reference many other commands at the same time. For example: I don't know whether changing one of these stanzas will break something because it will affect things other than CUPS-Get-Document. * There are three different blocks in my cupsd.conf that reference CUPS-Get-Document, under , , and . The first has no "AuthType Default" line, the second says "AuthType Default", and the third says "AuthType Negotiate". I don't know whether I need to add "AuthType Default" to the first one or if the fact that the second one already has "AuthType Default" means I'm protected. This isn't great. jik
Bug#1062554: cups-browsed is not detecting any network printers
Package: cups-browsed Version: 1.28.17-3+b1 Severity: normal Dear Maintainer, cups-browsed on this laptop is not detecting either of the printers on my home network. I have another Debian laptop upstairs, on the same wifi network, installed and configured pretty much exactly the same way as this laptop, and it IS detecting printers on my home network. I can't figure out why this laptop isn't detecting remote printers and the other one is. I tried rebooting, didn't help. I compared cupsd.conf and cups-browsed.conf on the two laptops, and the only difference is the DebugLogging line I uncommented on this laptop while trying to figure out this issue. I have been able to print from this printer before without this trouble, so this is a new problem. -- System Information: Debian Release: trixie/sid APT prefers testing-proposed-updates APT policy: (500, 'testing-proposed-updates'), (500, 'stable-updates'), (500, 'stable-security'), (500, 'testing'), (500, 'stable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 6.5.0-5-amd64 (SMP w/8 CPU threads; PREEMPT) Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /usr/bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages cups-browsed depends on: ii cups-daemon2.4.7-1+b1 ii init-system-helpers1.66 ii libavahi-client3 0.8-13+b1 ii libavahi-common3 0.8-13+b1 ii libavahi-glib1 0.8-13+b1 ii libc6 2.37-15~deb13u1 ii libcups2 2.4.7-1+b1 ii libcupsfilters11.28.17-3+b1 ii libglib2.0-0 2.78.3-2 ii libldap-2.5-0 2.5.13+dfsg-5+b3 ii sysvinit-utils [lsb-base] 3.08-6 Versions of packages cups-browsed recommends: ii avahi-daemon 0.8-13+b1 cups-browsed suggests no packages. -- Configuration Files: /etc/cups/cups-browsed.conf changed: DebugLogging stderr BrowseRemoteProtocols dnssd cups -- no debconf information
Bug#1062554: Acknowledgement (cups-browsed is not detecting any network printers)
I also can't print to a printer I add explicitly to the system rather than relying on auto-discovered printers. Basically printing through CUPS appears to be completely borked, at least for me, across two diffferent laptops running Debian testing.
Bug#1062554: Acknowledgement (cups-browsed is not detecting any network printers)
It turns out things aren't working right on my second laptop either. It is correctly detecting network printers and making them visible to the OS as driverless printers, but I can't print to them. When I try, the print job gets paused and lpstat -t prints "No suitable destination host found by cups-browsed." This happens even after I reboot.
Bug#1062554: Acknowledgement (cups-browsed is not detecting any network printers)
*sigh* Ignore everything I said about my second laptop. The cups-browsed problem I originally reported persists, but I believe everything else was a PEBKAC issue. Sorry.
Bug#1062554: Acknowledgement (cups-browsed is not detecting any network printers)
I've debugged this further and I think it's probably a kernel network driver issuer but I don't know how to categorize that appropriately in the bug-tracking system so some help in that regard would be appreciated. `avahi-browse --all --terminate --ignore-local` returns no results on the laptop that's not seeing any printers. It DOES return results on the laptop that's seeing printers. When I run wireshark and watch port 5353 on the laptop that doesn't see printers, I see a query going out on port 5353 when I run the avahi-browse command, but no responses coming back. When I do that on the laptop that is seeing printers, I see both the query going out and the responses coming back. Furthermore, when I run wireshark on the laptop that is seeing printers, and I run avahi-browse from the laptop that isn't, I see both the query come into the working laptop from the non-working one and the broadcast query responses sent by other machines on the network. It's just the non-working laptop that's not seeing them for some reason. I've tried disabling my firewall (I use ufw) to no effect. All this is happening with both kernel 6.6.13 and 6.5.0-5. As noted before, I know this wasn't always broken; I was definitely able to see printers and print to them in the past from the laptop where I can't now. As noted previously the two laptops involved here are configured essentially identically. However, they DO have different wifi controllers. The working laptop has: [ 18.173347] iwlwifi :a6:00.0: Detected Intel(R) Wi-Fi 6 AX210 160MHz, REV=0x420 The non-working laptop has: [ 19.429101] iwlwifi :02:00.0: Detected Intel(R) Dual Band Wireless AC 8265, REV=0x230
Bug#1062554: Acknowledgement (cups-browsed is not detecting any network printers)
One more data point: on the laptop that is not seeing mDNS query response broadcasts, if I disable wifi and plug into ethernet it works just fine. If I then unplug from ethernet and reenable wifi, it stops working again.
Bug#1062554: Acknowledgement (cups-browsed is not detecting any network printers)
close 1062554 thanks *sigh* I can't believe it. Rebooted my wifi router, and the problem went away. Apparently the wifi router was preventing the responses from getting back to the laptop. Sorry to bother you.
