Format: 1.8 Date: Fri, 22 Jun 2018 13:41:03 -0400 Source: cups Binary: libcups2 libcupsimage2 libcupscgi1 libcupsmime1 libcupsppdc1 cups cups-core-drivers cups-daemon cups-client cups-ipp-utils libcups2-dev libcupsimage2-dev cups-bsd cups-common cups-server-common cups-ppdc Architecture: amd64 all amd64_translations Version: 2.2.4-7ubuntu3.1 Distribution: artful Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: cups - Common UNIX Printing System(tm) - PPD/driver support, web interfa cups-bsd - Common UNIX Printing System(tm) - BSD commands cups-client - Common UNIX Printing System(tm) - client programs (SysV) cups-common - Common UNIX Printing System(tm) - common files cups-core-drivers - Common UNIX Printing System(tm) - driverless printing cups-daemon - Common UNIX Printing System(tm) - daemon cups-ipp-utils - Common UNIX Printing System(tm) - IPP developer/admin utilities cups-ppdc - Common UNIX Printing System(tm) - PPD manipulation utilities cups-server-common - Common UNIX Printing System(tm) - server common files libcups2 - Common UNIX Printing System(tm) - Core library libcups2-dev - Common UNIX Printing System(tm) - Development files CUPS library libcupscgi1 - Common UNIX Printing System(tm) - CGI library libcupsimage2 - Common UNIX Printing System(tm) - Raster image library libcupsimage2-dev - Common UNIX Printing System(tm) - Development files CUPS image li libcupsmime1 - Common UNIX Printing System(tm) - MIME library libcupsppdc1 - Common UNIX Printing System(tm) - PPD manipulation library Changes: cups (2.2.4-7ubuntu3.1) artful-security; urgency=medium . * SECURITY UPDATE: scheduler crash via DBUS notifications - debian/patches/CVE-2017-18248.patch: validate requesting-user-name in scheduler/ipp.c. - CVE-2017-18248 * SECURITY UPDATE: privilege escalation in dnssd backend - debian/patches/CVE-2018-418x.patch: don't allow PassEnv and SetEnv to override standard variables in man/cups-files.conf.man.in, man/cupsd.conf.man.in, scheduler/conf.c, test/run-stp-tests.sh. - CVE-2018-4180 * SECURITY UPDATE: local file read via Include directive - debian/patches/CVE-2018-418x.patch: remove Include directive handling in scheduler/conf.c. - CVE-2018-4181 * SECURITY UPDATE: AppArmor sandbox bypass - debian/local/apparmor-profile: also confine /usr/lib/cups/backend/mdns. - CVE-2018-6553 Checksums-Sha1: 6b4615e481c905633ff136fd4cd8bef7cc66fa94 54632 cups-bsd-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 01739269f4af80da435af05cbef24002882367bc 39236 cups-bsd_2.2.4-7ubuntu3.1_amd64.deb 51521ed0cee6cc52d5f80f7654851899f712f42f 198812 cups-client-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 130360d6622f580e0f62baff920666baf3b9f61f 138252 cups-client_2.2.4-7ubuntu3.1_amd64.deb 656ba539967c6d12f20f4932f4862f1413484dc2 180816 cups-common_2.2.4-7ubuntu3.1_all.deb 3f2cb978a55a30f92b6a3fee2d0e62f893debd62 54116 cups-core-drivers-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 11b26787413343437a1d4d9f731a37e6ebcec9e1 27640 cups-core-drivers_2.2.4-7ubuntu3.1_amd64.deb ba919aabc3f56beb590e47380aa8c96cb33ef81f 577058 cups-daemon-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 4eb6516bee7b9b14f5ec576d4113296733276993 298412 cups-daemon_2.2.4-7ubuntu3.1_amd64.deb 48228f505db20e38630edd41086ea4d3773e7103 446532 cups-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 1ae0a4425c0e0d976d8a6ea267f19a3733708070 390944 cups-ipp-utils-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 6ee5ce094f01143ccb9b32e84b4cbf92fb446406 207888 cups-ipp-utils_2.2.4-7ubuntu3.1_amd64.deb b02938cb8518e003a81970a2f9161232906f3c2f 44482 cups-ppdc-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 7f1b8e45a7681bfffc318ac35991ccf83f437cf3 26822 cups-ppdc_2.2.4-7ubuntu3.1_amd64.deb 19560b06f952a36275e023b15eed222143620ff3 410868 cups-server-common_2.2.4-7ubuntu3.1_all.deb 3be49a41448702c109db0b39477b80d55cc9e3a8 17086 cups_2.2.4-7ubuntu3.1_amd64.buildinfo ac3f0335b631e64f7dd6d99d355bb33ced7fe003 192810 cups_2.2.4-7ubuntu3.1_amd64.deb 9431e7aa651e52a85d3e9e5c57406740648efd9a 1453091 cups_2.2.4-7ubuntu3.1_amd64_translations.tar.gz 60aeed12de5fdf0899bb733f52f6f7a2d6add154 538438 libcups2-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb c608634d04ec0c799f7633d586357da0d387c0bf 251166 libcups2-dev_2.2.4-7ubuntu3.1_amd64.deb 9f70460a63e001760ae7af3662a361c3684103a3 209404 libcups2_2.2.4-7ubuntu3.1_amd64.deb bdf1bb659338d4bd419defdc685b1a6524310c34 57240 libcupscgi1-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 82a9fc9a06b1ce5986fdf129b96c7e9a44cd3646 27468 libcupscgi1_2.2.4-7ubuntu3.1_amd64.deb 39abf4adeb82fe788ee4e168acf36b125921e059 34618 libcupsimage2-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 4f0e66e890ad8e70f936d3f171f476f6096a0a94 20804 libcupsimage2-dev_2.2.4-7ubuntu3.1_amd64.deb 6f0739bed2d83739dc45a0a00ca2d676da7f0cf6 18500 libcupsimage2_2.2.4-7ubuntu3.1_amd64.deb 7639aa9ecd6af596a848a8ebc14d896bf1f4fd2c 23678 libcupsmime1-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb c5287dcfe19f124922c66bd6167f5c3a5ddfad84 13026 libcupsmime1_2.2.4-7ubuntu3.1_amd64.deb c055b16d5d855a77133e9d161c11a22991363538 124020 libcupsppdc1-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 484b3b09ab9712366db59217ff2ac08bb7183aa1 45098 libcupsppdc1_2.2.4-7ubuntu3.1_amd64.deb Checksums-Sha256: 6c4d4f05eb2a29b4b1ded6221cc095d7021f2b8971ba216833c402bfe1e5ef48 54632 cups-bsd-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb a9e3d3d605e589c5c31009d4826a0166ceaf0afa6c3b7fffe6500cf1b43f6602 39236 cups-bsd_2.2.4-7ubuntu3.1_amd64.deb 9d7420a2e767ccabefbeece1226596e0b03a8b9020b27fdd36d5590447c2e2f3 198812 cups-client-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 334e25e5204f27eaaa0f9846286c2947b608b5ddadcbdddfe6610e67d4c050d6 138252 cups-client_2.2.4-7ubuntu3.1_amd64.deb 86b242d016cff40f8fdde8c1b326f51c2864653042b16defd15acb78568f0782 180816 cups-common_2.2.4-7ubuntu3.1_all.deb b9748581662a5fbc4d04f62a2aab52c864fc7fd98437f3a72f8d6ba87b47dce6 54116 cups-core-drivers-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 2abea393c476cd684031bf3431e9487b93674bddb16349995d14d22f69cb5d0e 27640 cups-core-drivers_2.2.4-7ubuntu3.1_amd64.deb 8d83dc694ec7c3e1b017eaa0c8b183700010f4b87587607b31b4220709f115ca 577058 cups-daemon-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 4e67d91fd299b2093d8ee7dff6287658ba4f33d0099c0f9bfbe204c8da0794d2 298412 cups-daemon_2.2.4-7ubuntu3.1_amd64.deb 0f76ce21427efd88166e2ed65735a317d8032a61efadc704c3bd51f0b89283be 446532 cups-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 29a89576deab9a93032e5188579b923e25326607e8fe4cbfaecac506db0a7dd3 390944 cups-ipp-utils-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 1329352c6ee7cc5f2f0cd2b927b7733374e9b4b52ac6c73755b037b16e48628e 207888 cups-ipp-utils_2.2.4-7ubuntu3.1_amd64.deb cb6b4b41d36f6abb76f0b85c558583e5e7fa6cf7be28a3baa9f8f731ff99d36f 44482 cups-ppdc-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb ce6453b24415e1b0e157dc69baee139d0dcddedf8cbc588ae95b59fe6b4d0682 26822 cups-ppdc_2.2.4-7ubuntu3.1_amd64.deb cd9a630642e8540b8857fb49cb95b6c6300fe02970efbbfcb060ed5f3cf5856c 410868 cups-server-common_2.2.4-7ubuntu3.1_all.deb 1c230a931a7626d593660a7433d7e196711aea1d6be8aa50626f7580b02b64b2 17086 cups_2.2.4-7ubuntu3.1_amd64.buildinfo d1f6d144e5dfdfb3a69ece657b4c3251dfbd2126053c5811bfeda91603a5ab0f 192810 cups_2.2.4-7ubuntu3.1_amd64.deb 403e9c34af743bde2ed014bc0d3bea6f6b28504b2eb44c6aad08912616b1255e 1453091 cups_2.2.4-7ubuntu3.1_amd64_translations.tar.gz 28370ebd8f0244e1742988f03778427a667f49a40053099e3a34a8d615626b67 538438 libcups2-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb bd443ae5f9db7d4cd356538d4ce174598f5dc6e985479aebe0abec414b0fbffc 251166 libcups2-dev_2.2.4-7ubuntu3.1_amd64.deb 509289ea376cffa9a90ad72b19bb74ede3691694752ca6f1e29ca6cb3634b25c 209404 libcups2_2.2.4-7ubuntu3.1_amd64.deb 9d237748952c6611708abaaff4359fbc4830e39f5738573144da2842aa0a9e99 57240 libcupscgi1-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 50c80df3b4ea0b4b299a363b80c71ffeb048da462d525e91d50da25dd1c816cc 27468 libcupscgi1_2.2.4-7ubuntu3.1_amd64.deb 9473b1e5d98527a78fc4a20d30d8ca3745b106bb54073b3bccee7d063d29f199 34618 libcupsimage2-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 13c224fbe31c6c86dd2732829e8db80379a7b7e7656900d40d59bb7cab47662b 20804 libcupsimage2-dev_2.2.4-7ubuntu3.1_amd64.deb af0c8bcd938083cc100868ad36548e595f2bfe60ffa842fd5e048a3522e7e9b0 18500 libcupsimage2_2.2.4-7ubuntu3.1_amd64.deb 17e22b0963d5584fc447b389f36552282303eb4cc722af9b2d1b2dc9f22adce9 23678 libcupsmime1-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb a1ce51b926a5898d4327d81e9edf957183df328da4c6cad54ab5fa53bf736b3b 13026 libcupsmime1_2.2.4-7ubuntu3.1_amd64.deb 9921603fef5026980069954ae123c7c0584d324662d9fa59eb5233d28df4af01 124020 libcupsppdc1-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 309eaf74a0580da0d69fd553584c485b2092f848b00f3eae2f7d45867fb7be3b 45098 libcupsppdc1_2.2.4-7ubuntu3.1_amd64.deb Files: 97e26798998b4215b883a6aff806c389 54632 debug extra cups-bsd-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 92584138c92e4d62582ed146eaa2e2b8 39236 net extra cups-bsd_2.2.4-7ubuntu3.1_amd64.deb 8e6d82a3a41220099fbab1a3fabcccc9 198812 debug extra cups-client-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 755c4b6ad890278d96f068639eab4a32 138252 net optional cups-client_2.2.4-7ubuntu3.1_amd64.deb 7d20352a741007a13b058d397c434f76 180816 net optional cups-common_2.2.4-7ubuntu3.1_all.deb df6f0e5d4b37a4ebd9fbd5f0ca6d564a 54116 debug extra cups-core-drivers-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb d5ffbee91495f37a3382de95efde3f06 27640 net optional cups-core-drivers_2.2.4-7ubuntu3.1_amd64.deb 8c4ac1de0ba40acd6dfd0e907ceae279 577058 debug extra cups-daemon-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb fb71737acfa886dfbdcab5f389c5dee4 298412 net optional cups-daemon_2.2.4-7ubuntu3.1_amd64.deb 363edd813137aa8d300aa3f877ffdaf2 446532 debug extra cups-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 16fa3a80fdb1639e12bcbeb1bc0a06d7 390944 debug extra cups-ipp-utils-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 16e9f7c4d6772e7c9aab0864bbd82b14 207888 net optional cups-ipp-utils_2.2.4-7ubuntu3.1_amd64.deb ca53f04fe9f726e2bc695ad4cb97a248 44482 debug extra cups-ppdc-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 19644c6f1e2d6e3d3c13df2096d0388b 26822 utils optional cups-ppdc_2.2.4-7ubuntu3.1_amd64.deb 96b67400191cf824636f258762da3237 410868 net optional cups-server-common_2.2.4-7ubuntu3.1_all.deb 2e69ae9336801d9988b8033c5522f10a 17086 net optional cups_2.2.4-7ubuntu3.1_amd64.buildinfo 61cd2d3a38bd358823ad9434289a97ad 192810 net optional cups_2.2.4-7ubuntu3.1_amd64.deb cc92f59fc07878cb573d8c112dcfa571 1453091 raw-translations - cups_2.2.4-7ubuntu3.1_amd64_translations.tar.gz 0325b69e65307b46b7b77f013fbdc5a3 538438 debug extra libcups2-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 3fbf51a5c7b6b9406d67318ea30220b4 251166 libdevel optional libcups2-dev_2.2.4-7ubuntu3.1_amd64.deb ae0a2117c7260faf40728eea5ce55763 209404 libs optional libcups2_2.2.4-7ubuntu3.1_amd64.deb affb647ab6e7b92628de433bc2fe1b3e 57240 debug extra libcupscgi1-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb e6e3240c8af9ba3512a927dd39510454 27468 libs optional libcupscgi1_2.2.4-7ubuntu3.1_amd64.deb 9286a36aad1a749f69342ef8ccc83c89 34618 debug extra libcupsimage2-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb 84f3829774346a4e48837f2075966d3a 20804 libdevel optional libcupsimage2-dev_2.2.4-7ubuntu3.1_amd64.deb 932168d9c6d652f3c0c0478264a72769 18500 libs optional libcupsimage2_2.2.4-7ubuntu3.1_amd64.deb fa219899bff892d3bcc02ee704e3e0a8 23678 debug extra libcupsmime1-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb b3dcbda6914c913e9c80b3347cba8b29 13026 libs optional libcupsmime1_2.2.4-7ubuntu3.1_amd64.deb bbb201acda52ad071863d83aac5a15e3 124020 debug extra libcupsppdc1-dbgsym_2.2.4-7ubuntu3.1_amd64.ddeb c851aa6ea0222ec286ddd33d8a65a010 45098 libs optional libcupsppdc1_2.2.4-7ubuntu3.1_amd64.deb Original-Maintainer: Debian Printing Team