*** This bug is a security vulnerability ***
You have been subscribed to a public security bug by Eduardo Barretto
(ebarretto):
Hi,
I found plenty of old spool files in /var/spool/cups on two machines,
both 22.04 and formerly upgraded from 20.04, where files contained the
original print files, some even two years old, containing confidential
data that should have been delete long time ago.
Thus, cups keeps confidential data forever at a location the user can
neither see or delete.
Severe security gap, since attackers, investigators, attorneys, whoever, will
find data in /var/spool/cups, which the user believes to have deleted,
encrypted, or whatever.
** Affects: cups (Ubuntu)
Importance: Undecided
Status: New
--
cups keeps spool files forever and thus reveals confidential data
https://bugs.launchpad.net/bugs/1995402
You received this bug notification because you are a member of Ubuntu Bugs,
which is subscribed to the bug report.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
