Format: 1.8 Date: Thu, 12 Jul 2018 18:48:48 +0200 Source: cups Binary: libcups2 libcupsimage2 libcupscgi1 libcupsmime1 libcupsppdc1 cups cups-core-drivers cups-daemon cups-client cups-ipp-utils libcups2-dev libcupsimage2-dev cups-bsd cups-common cups-server-common cups-ppdc Architecture: amd64 all amd64_translations Version: 2.2.8-5 Distribution: cosmic-proposed Urgency: high Maintainer: Launchpad Build Daemon Changed-By: Didier Raboud Description: cups - Common UNIX Printing System(tm) - PPD/driver support, web interfa cups-bsd - Common UNIX Printing System(tm) - BSD commands cups-client - Common UNIX Printing System(tm) - client programs (SysV) cups-common - Common UNIX Printing System(tm) - common files cups-core-drivers - Common UNIX Printing System(tm) - driverless printing cups-daemon - Common UNIX Printing System(tm) - daemon cups-ipp-utils - Common UNIX Printing System(tm) - IPP developer/admin utilities cups-ppdc - Common UNIX Printing System(tm) - PPD manipulation utilities cups-server-common - Common UNIX Printing System(tm) - server common files libcups2 - Common UNIX Printing System(tm) - Core library libcups2-dev - Common UNIX Printing System(tm) - Development files CUPS library libcupscgi1 - Common UNIX Printing System(tm) - CGI library libcupsimage2 - Common UNIX Printing System(tm) - Raster image library libcupsimage2-dev - Common UNIX Printing System(tm) - Development files CUPS image li libcupsmime1 - Common UNIX Printing System(tm) - MIME library libcupsppdc1 - Common UNIX Printing System(tm) - PPD manipulation library Closes: 903605 Changes: cups (2.2.8-5) unstable; urgency=high . * CVE-2018-6553: Fix AppArmor cupsd sandbox bypass due to use of hard links (Closes: #903605) * All these were fixed in 2.2.8: - CVE-2018-4180 Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN) - CVE-2018-4181 Limited Local File Reads as Root via cupsd.conf Include Directive - CVE-2018-4182 cups-exec Sandbox Bypass Due to Insecure Error Handling - CVE-2018-4183 cups-exec Sandbox Bypass Due to Profile Misconfiguration Checksums-Sha1: 2b4d157b4002d6d994cf8c350888eb712f8638c5 57956 cups-bsd-dbgsym_2.2.8-5_amd64.ddeb d8c90f323915e8be99cc942f5f542d94adef994c 38516 cups-bsd_2.2.8-5_amd64.deb fefaefdafcd7a26bf3ae587886e8924bfecaba1b 218480 cups-client-dbgsym_2.2.8-5_amd64.ddeb a5e35ad5b492e8338f2df981bcb4e28e1f7307a6 139372 cups-client_2.2.8-5_amd64.deb 68849e7e1c7c9ecb0acd9439295dba6820743216 205780 cups-common_2.2.8-5_all.deb 3a04f914b53d8a02fa563404cff9d8528bd9823c 62316 cups-core-drivers-dbgsym_2.2.8-5_amd64.ddeb 155511551cf8557a2c8bd0246df67b3498ba6041 27964 cups-core-drivers_2.2.8-5_amd64.deb 74704ef526281ca79049d06d9c76505856cfc6ac 668224 cups-daemon-dbgsym_2.2.8-5_amd64.ddeb 2bbb172bd7bc48a32e26033d1ce48c29029e70cb 307644 cups-daemon_2.2.8-5_amd64.deb c017e6415926cef5c0c9e3e1f341bf1b244346f3 509064 cups-dbgsym_2.2.8-5_amd64.ddeb c1c5ecd7f06968fc7f3cdd4c6e6f44dc2ddf5c3c 464260 cups-ipp-utils-dbgsym_2.2.8-5_amd64.ddeb 669b5e419d80e50f2e2cf51d5479bb014e652798 212628 cups-ipp-utils_2.2.8-5_amd64.deb a9d844a05c003fff069b5beb245d233e2add86a0 50048 cups-ppdc-dbgsym_2.2.8-5_amd64.ddeb 2c3aa08900943f7711649fb6ebf454da577f8a95 27096 cups-ppdc_2.2.8-5_amd64.deb c8614d0be14ec27fcc9fa0f9fd432d51d9e21561 415528 cups-server-common_2.2.8-5_all.deb 5554ec23315d7531b37f27dac61efe31244eb099 16458 cups_2.2.8-5_amd64.buildinfo bbc70776f517addc4b24e1d92bda2f31122d6b72 191860 cups_2.2.8-5_amd64.deb 72a5b3e2ffb0d81019a74f7191e7fc4f127dee5e 2786750 cups_2.2.8-5_amd64_translations.tar.gz 5fa7cc8351f03d38cba1cf2be68174a35ad392f0 633988 libcups2-dbgsym_2.2.8-5_amd64.ddeb 665b4bfe5513c824a58d61f184ebbbd6d1f025e6 253272 libcups2-dev_2.2.8-5_amd64.deb 91fc4b453cda0fd1ca897a53193595627fad05f9 210680 libcups2_2.2.8-5_amd64.deb 8d5504ad26f273d253d8f98cfe7da13ab36d5aba 66860 libcupscgi1-dbgsym_2.2.8-5_amd64.ddeb 80ba998fc63a6a41baf660dfea1dca1fac0e5883 27696 libcupscgi1_2.2.8-5_amd64.deb 9b1b0d09f4c52325642c7abf757d27e03c4fcf32 42688 libcupsimage2-dbgsym_2.2.8-5_amd64.ddeb 1f42ae1011ae0f5654913fd8f263ab596f30d102 20740 libcupsimage2-dev_2.2.8-5_amd64.deb 67271c643215d89bb10a60156efa29aa2e29d854 18516 libcupsimage2_2.2.8-5_amd64.deb 21a8bf31bee4139b39ba2cd1ed2b143cc0a1aae3 28056 libcupsmime1-dbgsym_2.2.8-5_amd64.ddeb 1593954333668b52aea96cda391a9c6d05be73b8 13316 libcupsmime1_2.2.8-5_amd64.deb b530b9b1a304bb6f79cc557f1e284fa9ba974d39 148816 libcupsppdc1-dbgsym_2.2.8-5_amd64.ddeb 6b5ce29d2168ee668264dab3ed14dd61b89f890e 46320 libcupsppdc1_2.2.8-5_amd64.deb Checksums-Sha256: 234b93ddd715ac871852ecc476de9963bf0a2d9ee787c4bea556c2d5f621e700 57956 cups-bsd-dbgsym_2.2.8-5_amd64.ddeb 5ea5961530848f363597b62e0da44cdaf66beef6e36806e17919fbcc85e34b65 38516 cups-bsd_2.2.8-5_amd64.deb 8438b3c7431eca3b34021a38e6eec0620303e07801d146cf2de6a6fb81229561 218480 cups-client-dbgsym_2.2.8-5_amd64.ddeb 2980e9144272fc33a91968b76ae743cca3d4cbee55a69bb603b293be8196db75 139372 cups-client_2.2.8-5_amd64.deb 7bf516d9b9002db4f469a25411513b51364de8b665ed078b6a5d2cb9d684d2f3 205780 cups-common_2.2.8-5_all.deb bc3feb26b3d6935bb3e4ea98836d96c72105653a63014ed0914a55c6a79e77e5 62316 cups-core-drivers-dbgsym_2.2.8-5_amd64.ddeb 22cd24cc4709295445b71dc969c79a078b44cf431ccf1337fcf50c634e317b8e 27964 cups-core-drivers_2.2.8-5_amd64.deb a672ab071b15f1af7e52b2fd080db3c12dc76160ac2b3c2e97f457cfe937c736 668224 cups-daemon-dbgsym_2.2.8-5_amd64.ddeb f1359ba69bd02a3b772cd64859eb9ed1d0c177b846507429b8f173f74b3fdee0 307644 cups-daemon_2.2.8-5_amd64.deb e143796a64a5885fea14c26388b1c420efd8525f77030983df1a65668e95a6ff 509064 cups-dbgsym_2.2.8-5_amd64.ddeb 452c875eec417ac0aabb5272124d5588199547c204cae492cbb80795e399c32f 464260 cups-ipp-utils-dbgsym_2.2.8-5_amd64.ddeb e2cab04eca5916d0390ed447a750deccaa7812c1fa2109cc70a4086d104c2e0d 212628 cups-ipp-utils_2.2.8-5_amd64.deb 1b2916e09f80490fc8857a84bb627ef7e5bb6b5abc36ae035a547d8a928d3f5e 50048 cups-ppdc-dbgsym_2.2.8-5_amd64.ddeb da049e3703f0a97206d9fcd390b955f7c7df1b516a33c56affa4aad7ebe70d87 27096 cups-ppdc_2.2.8-5_amd64.deb 6e9f6979b3d79507a21fd7ff1463a8e2fc843d6631933d09959f4247e6d19f12 415528 cups-server-common_2.2.8-5_all.deb 221527a41cacd2ff391c9075819b8d011e34e73fda5ac4cd8e1dfd3c6a53d7a6 16458 cups_2.2.8-5_amd64.buildinfo a8a5edbade17ba36a5ae42efb7a65d6b8a06bdc3155e3c6701fa6a11ba8aa280 191860 cups_2.2.8-5_amd64.deb 2184b5c2867298d6cd33fbc4c8f2304fa6e51fec3fe27b2426727a1cf9a2bb1e 2786750 cups_2.2.8-5_amd64_translations.tar.gz 9448a952c08d76d239ed920e0aec02500396747b4f6ec2b5e5aebd8861981856 633988 libcups2-dbgsym_2.2.8-5_amd64.ddeb 90376e8988731cbde337835dd7816c717e8a68039f6517d4a5d49dfa2d6581cd 253272 libcups2-dev_2.2.8-5_amd64.deb 530a8d1cbc21f64b8b1e087ddf19c154b15ec3cdbd84f838ed1b785117cf1069 210680 libcups2_2.2.8-5_amd64.deb e0c5691c35ddbaf610dae6a5564c66b75397cd95144d95b61f72fd282c19065f 66860 libcupscgi1-dbgsym_2.2.8-5_amd64.ddeb 1c3a440c3fd986b79b9cf6a450758d0528a8b51741499b43d40276b2339a891a 27696 libcupscgi1_2.2.8-5_amd64.deb 9588387d3dcc7fc91d66b192ebde2792e605b7b8a1923399a195924893fce14c 42688 libcupsimage2-dbgsym_2.2.8-5_amd64.ddeb 80472c74dbc212977de297c992d8d05d8144cc3b7b03a34bcb3a705fd9b81de0 20740 libcupsimage2-dev_2.2.8-5_amd64.deb c9f40787868abf6c18cc0dc513eeba53878261e5b43d902ca126f68151a2d9ad 18516 libcupsimage2_2.2.8-5_amd64.deb 4e4e7dfe53ddc33d76c195563c7a28371a98c5020137d2ac9ca5825ff9b5b3f6 28056 libcupsmime1-dbgsym_2.2.8-5_amd64.ddeb 7caed2287a7324801968073658e3232bdfcb3db987908c8344afc4ba7a7115b4 13316 libcupsmime1_2.2.8-5_amd64.deb 3856a81c2eb4c5081edcbb7120eee5a9b8a9f0d2485dba45e03f6f8b42f54740 148816 libcupsppdc1-dbgsym_2.2.8-5_amd64.ddeb f0d1ecea0d07e2ae53190e776f9fc36a6a9a534e21a94e13171e34ee7cd6f444 46320 libcupsppdc1_2.2.8-5_amd64.deb Files: b37fbe3686d344208139af9e98225c23 57956 debug optional cups-bsd-dbgsym_2.2.8-5_amd64.ddeb 14f6cc671519ab435622602741a643ba 38516 net optional cups-bsd_2.2.8-5_amd64.deb eb051c4089ad0cc796695bb7786f8e41 218480 debug optional cups-client-dbgsym_2.2.8-5_amd64.ddeb 84012310c9a7e93c0a9e679004ef87a9 139372 net optional cups-client_2.2.8-5_amd64.deb 8c60b4a022a336579a366e4b85019485 205780 net optional cups-common_2.2.8-5_all.deb 4ea0255e3c9418765799ca4040ab0a46 62316 debug optional cups-core-drivers-dbgsym_2.2.8-5_amd64.ddeb 59e62811ac9ac7e766819677aefc512c 27964 net optional cups-core-drivers_2.2.8-5_amd64.deb fdc7c013111f729fd1d03af92b80caf6 668224 debug optional cups-daemon-dbgsym_2.2.8-5_amd64.ddeb 2c08e697d449ac8e3af7c789e233d9d8 307644 net optional cups-daemon_2.2.8-5_amd64.deb 75036a01ac364a2b066a80cce791adc0 509064 debug optional cups-dbgsym_2.2.8-5_amd64.ddeb 3488f75048ea2ae551cd31cb6cc65802 464260 debug optional cups-ipp-utils-dbgsym_2.2.8-5_amd64.ddeb fc927e652a0ae3cb31bdb529d8f96217 212628 net optional cups-ipp-utils_2.2.8-5_amd64.deb 5a549e6ae69448862ec754d3bcbcb129 50048 debug optional cups-ppdc-dbgsym_2.2.8-5_amd64.ddeb c8583195378222a8bf6f5cd1204efddf 27096 utils optional cups-ppdc_2.2.8-5_amd64.deb 68fd4a88c8612378575a192c155f3488 415528 net optional cups-server-common_2.2.8-5_all.deb 885a995bf4f3cb204e52f8a062817a5f 16458 net optional cups_2.2.8-5_amd64.buildinfo 94a16d0058e4e09b6c1ced0fd85d2f9e 191860 net optional cups_2.2.8-5_amd64.deb 0c847b02fdcdb7195c557e9bfd8cdef0 2786750 raw-translations - cups_2.2.8-5_amd64_translations.tar.gz 8f86a061be94497168efc783b6fb4367 633988 debug optional libcups2-dbgsym_2.2.8-5_amd64.ddeb 73ff28f778684b76caa366775b870e8d 253272 libdevel optional libcups2-dev_2.2.8-5_amd64.deb ead0e526e9d9ca3af033e5d23893dc8e 210680 libs optional libcups2_2.2.8-5_amd64.deb f62bbc943243961e87b332662a49e119 66860 debug optional libcupscgi1-dbgsym_2.2.8-5_amd64.ddeb a571f1af242e5d988de4863f6935e836 27696 libs optional libcupscgi1_2.2.8-5_amd64.deb 4f13394618c022b9412a6bb6ee18f44c 42688 debug optional libcupsimage2-dbgsym_2.2.8-5_amd64.ddeb 6c5f1d51a46dcbeb253233fa3aa2a1f7 20740 libdevel optional libcupsimage2-dev_2.2.8-5_amd64.deb f7d8c921e5369f11179c3e432a7f3a4c 18516 libs optional libcupsimage2_2.2.8-5_amd64.deb 1de30c8488ccd98aeaebe414ccc03879 28056 debug optional libcupsmime1-dbgsym_2.2.8-5_amd64.ddeb 512f829b9be8decbe40040ea42635e38 13316 libs optional libcupsmime1_2.2.8-5_amd64.deb 124782cb57477bbe032553b01cb0ca64 148816 debug optional libcupsppdc1-dbgsym_2.2.8-5_amd64.ddeb 76871ce91444b306eb0974219633ffb1 46320 libs optional libcupsppdc1_2.2.8-5_amd64.deb