Format: 1.8 Date: Thu, 12 Jul 2018 18:48:48 +0200 Source: cups Binary: libcups2 libcupsimage2 libcupscgi1 libcupsmime1 libcupsppdc1 cups cups-core-drivers cups-daemon cups-client cups-ipp-utils libcups2-dev libcupsimage2-dev cups-bsd cups-common cups-server-common cups-ppdc Architecture: armhf armhf_translations Version: 2.2.8-5 Distribution: cosmic-proposed Urgency: high Maintainer: Launchpad Build Daemon Changed-By: Didier Raboud Description: cups - Common UNIX Printing System(tm) - PPD/driver support, web interfa cups-bsd - Common UNIX Printing System(tm) - BSD commands cups-client - Common UNIX Printing System(tm) - client programs (SysV) cups-common - Common UNIX Printing System(tm) - common files cups-core-drivers - Common UNIX Printing System(tm) - driverless printing cups-daemon - Common UNIX Printing System(tm) - daemon cups-ipp-utils - Common UNIX Printing System(tm) - IPP developer/admin utilities cups-ppdc - Common UNIX Printing System(tm) - PPD manipulation utilities cups-server-common - Common UNIX Printing System(tm) - server common files libcups2 - Common UNIX Printing System(tm) - Core library libcups2-dev - Common UNIX Printing System(tm) - Development files CUPS library libcupscgi1 - Common UNIX Printing System(tm) - CGI library libcupsimage2 - Common UNIX Printing System(tm) - Raster image library libcupsimage2-dev - Common UNIX Printing System(tm) - Development files CUPS image li libcupsmime1 - Common UNIX Printing System(tm) - MIME library libcupsppdc1 - Common UNIX Printing System(tm) - PPD manipulation library Closes: 903605 Changes: cups (2.2.8-5) unstable; urgency=high . * CVE-2018-6553: Fix AppArmor cupsd sandbox bypass due to use of hard links (Closes: #903605) * All these were fixed in 2.2.8: - CVE-2018-4180 Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN) - CVE-2018-4181 Limited Local File Reads as Root via cupsd.conf Include Directive - CVE-2018-4182 cups-exec Sandbox Bypass Due to Insecure Error Handling - CVE-2018-4183 cups-exec Sandbox Bypass Due to Profile Misconfiguration Checksums-Sha1: 59db22b0666efea65332f00a4676115e16ee12d7 58236 cups-bsd-dbgsym_2.2.8-5_armhf.ddeb 57d4da272b8be93637bbf85310a27d8cf2f6f1ad 37008 cups-bsd_2.2.8-5_armhf.deb 1ac659c7c6afcf55811b2978fed1f5a032806ef5 217276 cups-client-dbgsym_2.2.8-5_armhf.ddeb ecedf81885ac6d296c782b92d2c25e0d6edb6c04 133788 cups-client_2.2.8-5_armhf.deb 608432889b9ba56d2cad1566ba210a65cb7ac239 61172 cups-core-drivers-dbgsym_2.2.8-5_armhf.ddeb 115c170b1a44dd0def946b0d3a7b13079a3e059a 26124 cups-core-drivers_2.2.8-5_armhf.deb 2ec863ac6be3e1e3d62cf36a01fb1ac405ddccf5 655076 cups-daemon-dbgsym_2.2.8-5_armhf.ddeb 0fd1212f31726461e7eb418c01d5e2c103916fbd 291212 cups-daemon_2.2.8-5_armhf.deb b4d7f9557e03cd76bb58ef7d41877c3661b6636b 496748 cups-dbgsym_2.2.8-5_armhf.ddeb 6eb6d13c60d13dd9d51b02c325b8ff579f641694 454948 cups-ipp-utils-dbgsym_2.2.8-5_armhf.ddeb ac3c159f992177763c049472dcb0dcecba246225 190140 cups-ipp-utils_2.2.8-5_armhf.deb 647acb1f1468ad48688fd628a740a1636ab7e6b8 49396 cups-ppdc-dbgsym_2.2.8-5_armhf.ddeb 152a3efb5d79d6f194cafd8511eb135d8992ef08 25512 cups-ppdc_2.2.8-5_armhf.deb e7ffea8a416d0e935333d739e88f28cb21dd9425 15790 cups_2.2.8-5_armhf.buildinfo 92c3fb65e5ac9ba2695d5fb679dfef3d33a851d1 181768 cups_2.2.8-5_armhf.deb 70210bebc479795c45957e2cc70dcee1588eaf35 2201242 cups_2.2.8-5_armhf_translations.tar.gz fe5db05f4285f953885daf0f110d09c454820e1e 628176 libcups2-dbgsym_2.2.8-5_armhf.ddeb 05fbe447f6a8b88621bae594ed32a7523534b67b 229148 libcups2-dev_2.2.8-5_armhf.deb e9d15f7ebc7fe788b81308bbe6d19c2ec622d789 181396 libcups2_2.2.8-5_armhf.deb 4a6945683397805fc218c2c53069106fb5f7d84a 65100 libcupscgi1-dbgsym_2.2.8-5_armhf.ddeb 2f718ec3ebae97d388a9e43b70c6ef1a7fa108f9 24036 libcupscgi1_2.2.8-5_armhf.deb 83972ab08f99cf985068e470dbce8eddff4d8eee 41628 libcupsimage2-dbgsym_2.2.8-5_armhf.ddeb ed9f9170ef9f2af05950b319a0f75cb2464dc4c3 18012 libcupsimage2-dev_2.2.8-5_armhf.deb 2b29fd44722efdf332bc7030f7f5444136be9967 16164 libcupsimage2_2.2.8-5_armhf.deb 0edd8ad1dafca27a8b75d17f8bc83a627ec7dd8a 28032 libcupsmime1-dbgsym_2.2.8-5_armhf.ddeb bea639e92e256d57cd9a736c189c192f40ed9641 11276 libcupsmime1_2.2.8-5_armhf.deb f50ad8da490eba1c3021d53ffd063e60a82b3b02 138208 libcupsppdc1-dbgsym_2.2.8-5_armhf.ddeb 0a32faebe8610a4cfc8cd0891c5106f6ce2deb8f 41092 libcupsppdc1_2.2.8-5_armhf.deb Checksums-Sha256: c8f8f68c75efa532fa77a347c0e848d258ed979166f570054989c7f9ece2aa1c 58236 cups-bsd-dbgsym_2.2.8-5_armhf.ddeb c9a7031b9ed1a2e46e96cdbf09a546e61972b7a6816453a4bc740a38827f49fa 37008 cups-bsd_2.2.8-5_armhf.deb 2108fdcba081e43b7a55150ad73344b6b479fa1c3cac45257662d4771d223788 217276 cups-client-dbgsym_2.2.8-5_armhf.ddeb 3d6f5a2d3152561887c8eeab17ff5875d5735e00173c6bc7f47446415427e11e 133788 cups-client_2.2.8-5_armhf.deb 00ddfd38876003c467dce329beef8564213e7d95ffae1dd04c30ae4d77728d67 61172 cups-core-drivers-dbgsym_2.2.8-5_armhf.ddeb 55e2fdbcef0dd31ec3f286d820fce8c128fc2190cc7b4c039340a747f0a1e202 26124 cups-core-drivers_2.2.8-5_armhf.deb 2b4a42dc8ff53537836e4fdda38758eb3596c91ff5faeda88b44757dff6fa331 655076 cups-daemon-dbgsym_2.2.8-5_armhf.ddeb 468656ec3d61dffa562dd6d4272a8bac145a6bf652d5e8f2b67680e070b3d161 291212 cups-daemon_2.2.8-5_armhf.deb f1a2dbdebd9d002a1a6fadadbf5a785032e091e840ef2b6ebd555255dc12e793 496748 cups-dbgsym_2.2.8-5_armhf.ddeb 82b98b971ae8dc9f18474b692a812039806483fcc17a5a586ab4c5755bd9dcd4 454948 cups-ipp-utils-dbgsym_2.2.8-5_armhf.ddeb 5d611f33ada6f84cdc975c55f932f6111f06c53bc64745bafc86a3928166b3b6 190140 cups-ipp-utils_2.2.8-5_armhf.deb 4341f2227c0078a93edde5475bf69f8704d4fac8151023758dc799d03b89093f 49396 cups-ppdc-dbgsym_2.2.8-5_armhf.ddeb ca26f9734bfe83ebea55fe87a0c8667bda559c67575f358b7ee96e2459e065a9 25512 cups-ppdc_2.2.8-5_armhf.deb 86463d18c6a6e9cf6ad323ae450498e137bf92f3e17475c39d8a9e7dc6d45adb 15790 cups_2.2.8-5_armhf.buildinfo c6b26219d580f5eea92a884779e0dcc1aeb1d44314de70dc5c2f61abecd62468 181768 cups_2.2.8-5_armhf.deb a7cdd6bc057eaaa1d48bb6a2aceceb9a4786e7f09f0b5b2a356cc89939fc9c2b 2201242 cups_2.2.8-5_armhf_translations.tar.gz 7ad571162d5a03c7639d739c0715895bd57a38011908acbf0f465272e1fd41c7 628176 libcups2-dbgsym_2.2.8-5_armhf.ddeb b072248588680a6c28212da89591b654b0fb454ace8023e07a1f1b5987fcc3e1 229148 libcups2-dev_2.2.8-5_armhf.deb 2896bd5efa991327f91c7e142a4f46253cefb157b1881507658d14d4e6656fd4 181396 libcups2_2.2.8-5_armhf.deb 1b67ab47416f92d0684de1ebf4397debb2cf81e0ccd06dd1b98f5ac873785df5 65100 libcupscgi1-dbgsym_2.2.8-5_armhf.ddeb 6c490b27edee2374ffa69fdb92ea07ffb590a611ed611b1d5c8c838db6b0529d 24036 libcupscgi1_2.2.8-5_armhf.deb 7898be1ee949f7dfe108e8df821529c249a8e9c680ac799d6d51a296a2e0e5af 41628 libcupsimage2-dbgsym_2.2.8-5_armhf.ddeb 679e82bd2a13c1cdd82f790c9d0f5275473c79a0a6ed6f2e96803411a8a83f73 18012 libcupsimage2-dev_2.2.8-5_armhf.deb 4b2ca4ed90940165672f74cc23661da243f371ed8ca362770bc9532d06accdac 16164 libcupsimage2_2.2.8-5_armhf.deb d1a42d1acc92d5affc7cdab7150d7fe1feac7d05e5b644c38724ff6466eb18cc 28032 libcupsmime1-dbgsym_2.2.8-5_armhf.ddeb 716589d026587a08205282f290a9dea6ce5ae997fa6518f1fe08c163ad4ad4d2 11276 libcupsmime1_2.2.8-5_armhf.deb 60850c64a9d00dd8b8d1a9fd8f8a6401c55168ab70a2df3b3b56691a3b37ba32 138208 libcupsppdc1-dbgsym_2.2.8-5_armhf.ddeb 5d07a75e4150de1b073e36f6b08a8c9a5fe88864b227ce1f6781a5d1f4e5a786 41092 libcupsppdc1_2.2.8-5_armhf.deb Files: d3be234605689414c3100b60a717baf7 58236 debug optional cups-bsd-dbgsym_2.2.8-5_armhf.ddeb da0f522c90dc06e0ea4f5e1323c8f90d 37008 net optional cups-bsd_2.2.8-5_armhf.deb b1a0ca445f7649483a58e1056a54cf2b 217276 debug optional cups-client-dbgsym_2.2.8-5_armhf.ddeb 558a259fe2389f9947e8517031cccb1a 133788 net optional cups-client_2.2.8-5_armhf.deb 06e46a585c0cd737352be6c8aec5913d 61172 debug optional cups-core-drivers-dbgsym_2.2.8-5_armhf.ddeb 079e6015bfb10c40b8bb349984e625e6 26124 net optional cups-core-drivers_2.2.8-5_armhf.deb 2a2bb56f2f515e371d2dfe1172a0cfda 655076 debug optional cups-daemon-dbgsym_2.2.8-5_armhf.ddeb 5f7f713c38a2e3dd2fb33808e23e16f9 291212 net optional cups-daemon_2.2.8-5_armhf.deb 712bc36216364b81c783298f8aa27833 496748 debug optional cups-dbgsym_2.2.8-5_armhf.ddeb 85a30c59906fdbbdf4462b8796ef9eb9 454948 debug optional cups-ipp-utils-dbgsym_2.2.8-5_armhf.ddeb 744e375343696736427e8e18e29b1463 190140 net optional cups-ipp-utils_2.2.8-5_armhf.deb 211ef50f77c932d085c3a719722e3ac8 49396 debug optional cups-ppdc-dbgsym_2.2.8-5_armhf.ddeb 6b77ba882a123a7ec3ff2c971c80afac 25512 utils optional cups-ppdc_2.2.8-5_armhf.deb 29decf9604f610fd2ec1b9de1d40dfde 15790 net optional cups_2.2.8-5_armhf.buildinfo 0b047cbeaaf8c933bafeadd1d4d5c5c8 181768 net optional cups_2.2.8-5_armhf.deb 24b55c9857b0823b47e19a8f8f654313 2201242 raw-translations - cups_2.2.8-5_armhf_translations.tar.gz da438356a46d2ad07ca617377b5772ff 628176 debug optional libcups2-dbgsym_2.2.8-5_armhf.ddeb 19907d0aafa95b282f2dc00734ef4956 229148 libdevel optional libcups2-dev_2.2.8-5_armhf.deb 47bdea03f3f197264998fb66a607c9b8 181396 libs optional libcups2_2.2.8-5_armhf.deb eded1c92220ce4339238ee74612e3715 65100 debug optional libcupscgi1-dbgsym_2.2.8-5_armhf.ddeb db31e6ed30d694cecb9533c9d2e9fac5 24036 libs optional libcupscgi1_2.2.8-5_armhf.deb 9c89cd38ea6205017a9d4e0df00079d1 41628 debug optional libcupsimage2-dbgsym_2.2.8-5_armhf.ddeb 6563ea6d6e0761ecd361f2048e70be83 18012 libdevel optional libcupsimage2-dev_2.2.8-5_armhf.deb 67a409c6c9b32ccf56db03c670e74cea 16164 libs optional libcupsimage2_2.2.8-5_armhf.deb 18c1ae640905e48c02a07dbb4292fb7e 28032 debug optional libcupsmime1-dbgsym_2.2.8-5_armhf.ddeb b85b0807e276f6a1b9c0fc02bc0c25ea 11276 libs optional libcupsmime1_2.2.8-5_armhf.deb 1369b6fd02ccaa32ade361a73c466373 138208 debug optional libcupsppdc1-dbgsym_2.2.8-5_armhf.ddeb 0af60737a8fb1f7acab74199c906647c 41092 libs optional libcupsppdc1_2.2.8-5_armhf.deb