-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 26 Sep 2024 23:45:05 +0200 Source: cups Binary: cups cups-bsd cups-bsd-dbgsym cups-client cups-client-dbgsym cups-core-drivers cups-core-drivers-dbgsym cups-daemon cups-daemon-dbgsym cups-dbgsym cups-ipp-utils cups-ipp-utils-dbgsym cups-ppdc cups-ppdc-dbgsym libcups2 libcups2-dbgsym libcups2-dev libcupsimage2 libcupsimage2-dbgsym libcupsimage2-dev Architecture: amd64 Version: 2.4.2-3+deb12u8 Distribution: bookworm-security Urgency: high Maintainer: amd64 / i386 Build Daemon (x86-ubc-01) Changed-By: Thorsten Alteholz Description: cups - Common UNIX Printing System(tm) - PPD/driver support, web interfa cups-bsd - Common UNIX Printing System(tm) - BSD commands cups-client - Common UNIX Printing System(tm) - client programs (SysV) cups-core-drivers - Common UNIX Printing System(tm) - driverless printing cups-daemon - Common UNIX Printing System(tm) - daemon cups-ipp-utils - Common UNIX Printing System(tm) - IPP developer/admin utilities cups-ppdc - Common UNIX Printing System(tm) - PPD manipulation utilities libcups2 - Common UNIX Printing System(tm) - Core library libcups2-dev - Common UNIX Printing System(tm) - Development files CUPS library libcupsimage2 - Common UNIX Printing System(tm) - Raster image library libcupsimage2-dev - Common UNIX Printing System(tm) - Development files CUPS image li Changes: cups (2.4.2-3+deb12u8) bookworm-security; urgency=high . * CVE-2024-47175 Fix CVE and upstream also added some extra hardening to patch - validate URIs, attribute names, and capabilities in cups/ppd-cache.c, scheduler/ipp.c - sanitize make and model in cups/ppd-cache.c - PPDize preset and template names in cups/ppd-cache.c - quote PPD localized strings in cups/ppd-cache.c - fix warnings in cups/ppd-cache.c Checksums-Sha1: bfcdd0cdafff8f2ebfd1a3583d4dc854d93deef9 45048 cups-bsd-dbgsym_2.4.2-3+deb12u8_amd64.deb 9e946bfbecddfc95efb5c9371eea508d9aef8384 40864 cups-bsd_2.4.2-3+deb12u8_amd64.deb b5aa2db30ca3a9d8ed94e2bc2877754d27e2b602 157336 cups-client-dbgsym_2.4.2-3+deb12u8_amd64.deb 4ffc90965f849cbf47ae2a4f193315b938bbb39b 160792 cups-client_2.4.2-3+deb12u8_amd64.deb 236579c28ead0ce3fdc81cca707fbdb1b2de6ecb 56648 cups-core-drivers-dbgsym_2.4.2-3+deb12u8_amd64.deb 01019a2ff45e8aee943ed8ee1f165ec2cf0dd48d 39508 cups-core-drivers_2.4.2-3+deb12u8_amd64.deb b0f10d2ed3419b48db95bb7b5791ab64444d02cb 496132 cups-daemon-dbgsym_2.4.2-3+deb12u8_amd64.deb 09f2f3b8e4d379c3e9ad6d175a298e3b72f78f7a 353104 cups-daemon_2.4.2-3+deb12u8_amd64.deb 81c41efcb1e35fa5f747edc8483fdd4e63ca9260 722192 cups-dbgsym_2.4.2-3+deb12u8_amd64.deb 23942f6c395d8019d324d2fcc68a578a6c8e9cb8 241696 cups-ipp-utils-dbgsym_2.4.2-3+deb12u8_amd64.deb cc3a105f805ed420c1bc266f0bf45c4411b2f9b6 235460 cups-ipp-utils_2.4.2-3+deb12u8_amd64.deb 9f61cbcfe06df4cf0e5cd3382709d6565bb5afe9 400448 cups-ppdc-dbgsym_2.4.2-3+deb12u8_amd64.deb 9df6d57d72b1bac4ac490919deab7b5b8e2426c7 124940 cups-ppdc_2.4.2-3+deb12u8_amd64.deb cbd66585de296140522b86f9ca7f81442d383b42 13232 cups_2.4.2-3+deb12u8_amd64-buildd.buildinfo 20310e332b3c9bef4d7bf6ce435374e6a5d991df 291308 cups_2.4.2-3+deb12u8_amd64.deb bdea0a3cc8ceccbe4ce466708ab96c62e916b323 537700 libcups2-dbgsym_2.4.2-3+deb12u8_amd64.deb 278acc2f11c10ffdc237fac1907e48f6945f932f 296856 libcups2-dev_2.4.2-3+deb12u8_amd64.deb a4164b11d77d8ec0247e6877fbc836ba40ddb881 245772 libcups2_2.4.2-3+deb12u8_amd64.deb 8e560b0623189dea3b5afea08a7ef5ece09585c7 12532 libcupsimage2-dbgsym_2.4.2-3+deb12u8_amd64.deb 240dd8249e1cc326b4046f8a06738af27daba25d 6476 libcupsimage2-dev_2.4.2-3+deb12u8_amd64.deb 8b8fa84893167e9250b4f7ec52e89b6744c8c778 17044 libcupsimage2_2.4.2-3+deb12u8_amd64.deb Checksums-Sha256: a57c585d9f6a86630eae2ab6fe353537049a1799d4458562b8eceedf0b4a5aa5 45048 cups-bsd-dbgsym_2.4.2-3+deb12u8_amd64.deb 82a7f7239636e7a7715e29dfda8827f2fc00dedb330f78b89124440bf127130f 40864 cups-bsd_2.4.2-3+deb12u8_amd64.deb b7d3563d2d2a8193ad68df8efb72e7c8886e2d5ea59e341a455ecdcba1eae164 157336 cups-client-dbgsym_2.4.2-3+deb12u8_amd64.deb 401c8ab19082c2347456f954894eead2a7b0af4a663dd50028fba2e174b5bab1 160792 cups-client_2.4.2-3+deb12u8_amd64.deb d4e8d9a046fc0a1066026e80460841029eb4786402399f76961569afa7c00b72 56648 cups-core-drivers-dbgsym_2.4.2-3+deb12u8_amd64.deb fa95b75840a1859cb2ff1502c973d0e74aba11afd484c7041a20ea9b0862ff9d 39508 cups-core-drivers_2.4.2-3+deb12u8_amd64.deb f424dae8a47732d7035f885838f806264afac926f553f84d018ae153722a7918 496132 cups-daemon-dbgsym_2.4.2-3+deb12u8_amd64.deb f255ee02f00a1d21b8f240867aa8df58bb4e721674a78b445707dc5c9d510380 353104 cups-daemon_2.4.2-3+deb12u8_amd64.deb ea92bf4dcfcb6c26dc7a8bac451c67fc0c18345a4ae9167070eddcd0dd7c3684 722192 cups-dbgsym_2.4.2-3+deb12u8_amd64.deb 6d8c3277c52be057144ea31a4b174aee5f65e35c68c22a274fb7fe3a5239d4b4 241696 cups-ipp-utils-dbgsym_2.4.2-3+deb12u8_amd64.deb 32b92f4c238e7d64c34d779b36a8d0ddd50eb968eef23004bc5a5db524f9c6ad 235460 cups-ipp-utils_2.4.2-3+deb12u8_amd64.deb 03541b7986c723aa75458f17b9f911d0e4e0d6faaa43c5dc643f3acdeeab9920 400448 cups-ppdc-dbgsym_2.4.2-3+deb12u8_amd64.deb 738dffd516d699157a1cfc7ce1d20a4198bd61b705be05bfec95dc7603d2cc9b 124940 cups-ppdc_2.4.2-3+deb12u8_amd64.deb 4160b2334f0adb2ab89cef57f77196091b2d587838f85790cc2e893313926ce7 13232 cups_2.4.2-3+deb12u8_amd64-buildd.buildinfo 790199d08055d9ec7b3883ed5bfe205b71d341ad53461a2f1309686e94a66f15 291308 cups_2.4.2-3+deb12u8_amd64.deb 2f57d1b83e7b167dd3e7248c18f5b0d5b7eb8a0df10c4efdd59f9e70fff92733 537700 libcups2-dbgsym_2.4.2-3+deb12u8_amd64.deb 6223376fa916f90ba27963c1f9284e9ecc8036ea43f51264256b0e5d654e7bb4 296856 libcups2-dev_2.4.2-3+deb12u8_amd64.deb 47b81d3eb34c2546cce70aeed61742c6e4c379e7fb0d3358aa80ea7b3ff8acf0 245772 libcups2_2.4.2-3+deb12u8_amd64.deb 11a5a8e3f981be6d1542a875e915555f48a7c1b60b84268845dace7566f19b62 12532 libcupsimage2-dbgsym_2.4.2-3+deb12u8_amd64.deb 47a9f666dbd4293fb7a9142b91da066c519b882ded7f5226981d947a5a4231ba 6476 libcupsimage2-dev_2.4.2-3+deb12u8_amd64.deb a6ba175773c7d4c6c7799789ee6001debe6e30b8ba2d484e1c5331d922dab58c 17044 libcupsimage2_2.4.2-3+deb12u8_amd64.deb Files: 9dc9a178d11f84640125a07c4bc90bbb 45048 debug optional cups-bsd-dbgsym_2.4.2-3+deb12u8_amd64.deb 54273f5391b9ad43d4c21fc2c21a0dba 40864 net optional cups-bsd_2.4.2-3+deb12u8_amd64.deb c3d8e1bec4a880f5a760fdccf6a869db 157336 debug optional cups-client-dbgsym_2.4.2-3+deb12u8_amd64.deb 134e613d1ce66129b9d017699adb52e0 160792 net optional cups-client_2.4.2-3+deb12u8_amd64.deb c29cf35dfe88f93054a10a85c512a996 56648 debug optional cups-core-drivers-dbgsym_2.4.2-3+deb12u8_amd64.deb 19f06fea1f3eee73ab505ed8dae5c280 39508 net optional cups-core-drivers_2.4.2-3+deb12u8_amd64.deb a743e9800bc6a045b720306586f36973 496132 debug optional cups-daemon-dbgsym_2.4.2-3+deb12u8_amd64.deb 87a850dfec4d14b5745dbbc9b201f0de 353104 net optional cups-daemon_2.4.2-3+deb12u8_amd64.deb 5770f522258e8c2351a7f3793d52d9e8 722192 debug optional cups-dbgsym_2.4.2-3+deb12u8_amd64.deb 1974c02b8d4e4b5bd222dd1c927098ac 241696 debug optional cups-ipp-utils-dbgsym_2.4.2-3+deb12u8_amd64.deb 0eb4e60ccf2153c93e728d1e9e428243 235460 net optional cups-ipp-utils_2.4.2-3+deb12u8_amd64.deb f117f02bf7fe6459fb72af3acd9edd59 400448 debug optional cups-ppdc-dbgsym_2.4.2-3+deb12u8_amd64.deb c88b1e33c393b7d8a3b820705f40f7d9 124940 utils optional cups-ppdc_2.4.2-3+deb12u8_amd64.deb ffee10ae727bebfdd14e3723a6062586 13232 net optional cups_2.4.2-3+deb12u8_amd64-buildd.buildinfo f5ad55fd08ce6c7ecd83ec13cd22ebba 291308 net optional cups_2.4.2-3+deb12u8_amd64.deb 8b652f5cbebdb304118b46e2396d106a 537700 debug optional libcups2-dbgsym_2.4.2-3+deb12u8_amd64.deb 43b06e168984555a6e8914883d285c0f 296856 libdevel optional libcups2-dev_2.4.2-3+deb12u8_amd64.deb 809db4ee9e1df346a19b2dd84d4d7c74 245772 libs optional libcups2_2.4.2-3+deb12u8_amd64.deb ab23e2da70cc71f3c18496d49ea39116 12532 debug optional libcupsimage2-dbgsym_2.4.2-3+deb12u8_amd64.deb 9fd01fec85ae45ac85d7a4c101bdc81f 6476 libdevel optional libcupsimage2-dev_2.4.2-3+deb12u8_amd64.deb c6b011eb235575753554767b1ada320f 17044 libs optional libcupsimage2_2.4.2-3+deb12u8_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE4Unr4QHS5Yi4rr9Q3KGKEAtjIVgFAmb4He4ACgkQ3KGKEAtj IViWfw/+I7m3y9uMY3FSR2CDG2Eop1quny3v4iOY8dGJqNs957mQ/os3MudYAAfj y6RnS2nSjU2wGsvX4zhb12CcRpkGk890p1zJeVeLh0ZTEvSgpKdEej5T+mLLO0nd G1tRYKa/672d5/JY1deqMZ+cA0AGyTgWpzDzQPjRDB/AW3KX09eU/cL6NNtJg0bB seio97R3c2WtUcxaKYgGlZ/FMlyO9s77lve+mHoxDKD9RVfX/wcWh1UfMzPXDLk0 nsTEiCvaQJbhFnpVZiN+LJqtSoJD/NmbWJUDE4+4mMrlXY/rgXBtAfKubmGXNWKK oEtJ66HyM+lCzrNLYKvuCO6S/NqYj8Law477PWYLde+1y8+R9KfebvlIbOb9CTpA Le68zqmvqW4+tRJH9PDIFw1tE81L+svYWWMqNtpOvo7bimIE91Bxf9HzEEIe8q9h ohIqTE4yej/GvEijqrEzN8AVDFyXhsZMyj9rfnGo9e4rNFUbHHh4+AaSLyzHR3V8 45TlrOql9aGcglx6ZwqU+w3DtnTLAkBtsLeFIpSy/zO+hMQpgoSWeGSDOgNcP8KU LVM9YthTnTg8Dhxuaibc859w6e5AqcdgvpeG94vAt7PJD4As+m3fg2GtSUnLdExw TwoDzyzM4iWkcfX57QXrhOnK9yLvY5nSACv+8afKBY2F7qsTCRo= =poQ5 -----END PGP SIGNATURE-----