You are here
Home > Preporuke > Sigurnosni nedostatak programskog paketa cups

Sigurnosni nedostatak programskog paketa cups

  • Detalji os-a: WN7
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2014-5759
2014-04-29 03:23:17
——————————————————————————–

Name : cups-filters
Product : Fedora 19
Version : 1.0.53
Release : 2.fc19
URL : http://www.linuxfoundation.org/collaborate/workgroups/openprinting/cups-filters
Summary : OpenPrinting CUPS filters and backends
Description :
Contains backends, filters, and other software that was
once part of the core CUPS distribution but is no longer maintained by
Apple Inc. In addition it contains additional filters developed
independently of Apple, especially filters for the PDF-centric printing
workflow introduced by OpenPrinting.

——————————————————————————–
Update Information:

This update fixes two flaws and various bugs.

——————————————————————————–
ChangeLog:

* Fri May 9 2014 Jiri Popelka <jpopelka@redhat.com> – 1.0.53-2
– Return Tim’s work-around patch for bug #768811.
* Mon Apr 28 2014 Jiri Popelka <jpopelka@redhat.com> – 1.0.53-1
– 1.0.53
* Wed Apr 2 2014 Jiri Popelka <jpopelka@redhat.com> – 1.0.41-6
– Remote command injection in cups-browsed (bug #1083327).
* Tue Mar 11 2014 Jiri Popelka <jpopelka@redhat.com> – 1.0.41-5
– Don’t ship pdftoopvp (#1027557) and urftopdf (#1002947).
* Tue Nov 19 2013 Tim Waugh <twaugh@redhat.com> – 1.0.41-4
– Adjust filter costs so application/vnd.adobe-read-postscript input
doesn’t go via pstotiff (bug #1008166).
* Thu Nov 14 2013 Jaromír Končický <jkoncick@redhat.com> – 1.0.41-3
– Fix memory leaks in cups-browsed (bug #1027317).
* Wed Nov 6 2013 Tim Waugh <twaugh@redhat.com> – 1.0.41-2
– Include dbus so that colord support works (bug #1026928).
* Wed Oct 30 2013 Jiri Popelka <jpopelka@redhat.com> – 1.0.41-1
– 1.0.41 – PPD-less printing support
* Mon Oct 21 2013 Tim Waugh <twaugh@redhat.com> – 1.0.40-4
– Fix socket leaks in the BrowsePoll code (bug #1021512).
* Wed Oct 16 2013 Tim Waugh <twaugh@redhat.com> – 1.0.40-3
– Ship the gstoraster MIME conversion rule now we provide that filter
(bug #1019261).
* Fri Oct 11 2013 Tim Waugh <twaugh@redhat.com> – 1.0.40-2
– Fix PDF landscape printing (bug #768811).
* Fri Oct 11 2013 Jiri Popelka <jpopelka@redhat.com> – 1.0.40-1
– 1.0.40
– Use new “hybrid” pdftops renderer.
* Thu Oct 3 2013 Jaromír Končický <jkoncick@redhat.com> – 1.0.39-1
– 1.0.39
– Removed obsolete patches “pdf-landscape” and “browsepoll-notifications”
* Tue Oct 1 2013 Tim Waugh <twaugh@redhat.com> – 1.0.38-4
– Use IPP notifications for BrowsePoll when possible (bug #975241).
* Tue Oct 1 2013 Tim Waugh <twaugh@redhat.com> – 1.0.38-3
– Fixes for some printf-type format mismatches (bug #1014093).
* Tue Sep 17 2013 Tim Waugh <twaugh@redhat.com> – 1.0.38-2
– Fix landscape printing for PDFs (bug #768811).
* Wed Sep 4 2013 Jiri Popelka <jpopelka@redhat.com> – 1.0.38-1
– 1.0.38
* Thu Aug 29 2013 Jaromír Končický <jkoncick@redhat.com> – 1.0.37-1
– 1.0.37.
* Tue Aug 27 2013 Jaromír Končický <jkoncick@redhat.com> – 1.0.36-5
– Added build dependency – font required for running tests
* Tue Aug 27 2013 Jaromír Končický <jkoncick@redhat.com> – 1.0.36-4
– Added checking phase (make check)
* Wed Aug 21 2013 Tim Waugh <twaugh@redhat.com> – 1.0.36-3
– Upstream patch to re-work filter costs (bug #998977). No longer need
text filter costs patch as paps gets used by default now if
installed.
* Mon Aug 19 2013 Marek Kasik <mkasik@redhat.com> – 1.0.36-2
– Rebuild (poppler-0.24.0)
* Tue Aug 13 2013 Tim Waugh <twaugh@redhat.com> – 1.0.36-1
– 1.0.36.
* Tue Aug 13 2013 Tim Waugh <twaugh@redhat.com> – 1.0.35-7
– Upstream patch to move in filters from ghostscript.
* Tue Jul 30 2013 Tim Waugh <twaugh@redhat.com> – 1.0.35-6
– Set cost for text filters to 200 so that the paps filter gets
preference for the time being (bug #988909).
* Wed Jul 24 2013 Tim Waugh <twaugh@redhat.com> – 1.0.35-5
– Handle page-label when printing n-up as well.
* Tue Jul 23 2013 Tim Waugh <twaugh@redhat.com> – 1.0.35-4
– Added support for page-label (bug #987515).
* Thu Jul 11 2013 Jiri Popelka <jpopelka@redhat.com> – 1.0.35-3
– Rebuild (qpdf-5.0.0)
* Mon Jul 1 2013 Jiri Popelka <jpopelka@redhat.com> – 1.0.35-2
– add cups-browsed(8) and cups-browsed.conf(5)
– don’t reverse lookup IP address in URI (#975822)
* Wed Jun 26 2013 Jiri Popelka <jpopelka@redhat.com> – 1.0.35-1
– 1.0.35
* Mon Jun 24 2013 Marek Kasik <mkasik@redhat.com> – 1.0.34-9
– Rebuild (poppler-0.22.5)
* Wed Jun 19 2013 Jiri Popelka <jpopelka@redhat.com> – 1.0.34-8
– fix the note we add in cups-browsed.conf
——————————————————————————–
References:

[ 1 ] Bug #1091565 – cups-filters: inadequate fix for CVE-2014-2707
https://bugzilla.redhat.com/show_bug.cgi?id=1091565
[ 2 ] Bug #1091568 – cups-filters: unsupported BrowseAllow value lets cups-browsed accept from all hosts
https://bugzilla.redhat.com/show_bug.cgi?id=1091568
[ 3 ] Bug #1083326 – CVE-2014-2707 cups-filters: remote command injection in cups-browsed
https://bugzilla.redhat.com/show_bug.cgi?id=1083326
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update cups-filters’ at the command line.
For more information, refer to “Managing Software with yum”,
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

AutorMarko Stanec
Cert idNCERT-REF-2014-06-0060-ADV
CveCERT-CVE-DUMMY
ID izvornikaCERT-ORIGID-DUMMY
ProizvodCERT-DUMMY-PRODUCT
Izvorhttp://www.adobe.com/
Top
More in Preporuke
Sigurnosni nedostatak programskog paketa libpng

Otkriven je sigurnosni nedostatak u programskom paketu libpng za operacijski sustav Fedora. Otkriveni nedostatak potencijalnim napadačima omogućuje izvođenje napada uskraćivanja...

Close