Thank you for your contribution to Debian.
Accepted:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 26 Sep 2024 23:45:05 +0200
Source: cups
Architecture: source
Version: 2.4.10-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Printing Team <debian-printing@lists.debian.org>
Changed-By: Thorsten Alteholz <deb...@alteholz.de>
Changes:
cups (2.4.10-2) unstable; urgency=medium
.
[ Helge Kreutzmann ]
* Update German man page (2219t)
.
[ Thorsten Alteholz ]
* CVE-2024-47175
Fix CVE and upstream also added some extra hardening to patch
- validate URIs, attribute names, and capabilities
in cups/ppd-cache.c, scheduler/ipp.c
- sanitize make and model in cups/ppd-cache.c
- PPDize preset and template names in cups/ppd-cache.c
- quote PPD localized strings in cups/ppd-cache.c
- fix warnings in cups/ppd-cache.c
Checksums-Sha1:
ecc65a0c42fac283a8be0c6818792074a38175d4 3209 cups_2.4.10-2.dsc
ef3faa90a189666a0fe272cf7d7ad68221a42380 388792 cups_2.4.10-2.debian.tar.xz
5259f8758d88ce3166afb59298c0671ae5c7e6c5 13764 cups_2.4.10-2_amd64.buildinfo
Checksums-Sha256:
e3eddc260b7f3ddf1fecbc93c16beb27f79577c0bf2cbd18e858405049a46c39 3209
cups_2.4.10-2.dsc
630895f87d63da5af226d2737178ebcaa3b6c48163c6899138093bedff2e7ec6 388792
cups_2.4.10-2.debian.tar.xz
81a37c110b83ecc321996a007d56f65fc7cf2fea6588be6c545b2b42a9a6f3db 13764
cups_2.4.10-2_amd64.buildinfo
Files:
577a8edb7982b413c0802a27a892c024 3209 net optional cups_2.4.10-2.dsc
7532b1abd417be8fe3ec9bdd8c03c37f 388792 net optional
cups_2.4.10-2.debian.tar.xz
4e1b3956b0cfbf845010c6cb0cee51a1 13764 net optional
cups_2.4.10-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
iQKnBAEBCgCRFiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAmb26LRfFIAAAAAALgAo
aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy
MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcTHGRlYmlhbkBh
bHRlaG9sei5kZQAKCRCW/KwNOHtYR+vWEAC9ynnAMan1Z8Q4se2EV9w4bfunFIab
MNkpXIGvS8rdo+pqGMNiBUq1bwQEjmPVQwxdvlxS6Hikyf58xamYHWjkCDMRM7l8
ybhBmG0nNnlUUZiu/l5hGaroa49czojrShYJOc0Xiju5d+pLa/OBWrWWmZNOjg8d
gNWH0tvMoFLiqo7teBluUHizKloOlSPBAv2Khtt2LNC0Vy2ngqhOEcPCsw6lfHkB
E/XbbMSrWBfUIXw8V3qwZ/QiIoeLcXvwv7JTW9Ky+zt81rPH7HvXEgz6EBM89574
rRUHyB7ixhRFSkxBDfVjIs2cauFkl/XsEIuP8FphQfQsWIb3WKh7XwL9SaFONVaI
L85iI+pJ4mqxR68EuTILrwHOL9Iq0NsdeW0HB2XVUnmDDleeMpvojF5mYTXLJxCs
J6UvHeo6qtHyU+/kslneNzXkgOnmjMoriBwDAFSLI+d4cQVrgYr9PceY2i8gbwo/
Lb2SZSRhIR4dUMrJkkM7370A8zhi6y8po6yGmILuur7j4vFB2KmlGfTaIwnXT0+9
GdsYr1mygwc20O4+BWVU/c+40ae9Uj2Se+TaBnKBq/6s2it1Dxsg/6RfzfhNaCog
UhAyY5Y4lGK2oJvL5Te/rnhxto4H7DRPxoVOfm7Qi3MSIeI/YOBYhuJQIqk+cvsP
B69zFStJqcgw1A==
=90Se
-----END PGP SIGNATURE-----
pgp41VnK4jeYG.pgp
Description: PGP signature
