Accepted cups 2.2.1-8+deb9u2 (source amd64 all) into proposed-updates->stable-new, proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 11 Jul 2018 11:29:27 +0200
Source: cups
Binary: libcups2 libcupsimage2 libcupscgi1 libcupsmime1 libcupsppdc1 cups cups-core-drivers cups-daemon cups-client cups-ipp-utils libcups2-dev libcupsimage2-dev cups-bsd cups-common cups-server-common cups-ppdc
Architecture: source amd64 all
Version: 2.2.1-8+deb9u2
Distribution: stretch-security
Urgency: low
Maintainer: Debian Printing Team <debian-printing@lists.debian.org>
Changed-By: Didier Raboud <odyx@debian.org>
Description:
cups - Common UNIX Printing System(tm) - PPD/driver support, web interfa
cups-bsd - Common UNIX Printing System(tm) - BSD commands
cups-client - Common UNIX Printing System(tm) - client programs (SysV)
cups-common - Common UNIX Printing System(tm) - common files
cups-core-drivers - Common UNIX Printing System(tm) - PPD-less printing
cups-daemon - Common UNIX Printing System(tm) - daemon
cups-ipp-utils - Common UNIX Printing System(tm) - IPP developer/admin utilities
cups-ppdc - Common UNIX Printing System(tm) - PPD manipulation utilities
cups-server-common - Common UNIX Printing System(tm) - server common files
libcups2 - Common UNIX Printing System(tm) - Core library
libcups2-dev - Common UNIX Printing System(tm) - Development files CUPS library
libcupscgi1 - Common UNIX Printing System(tm) - CGI library
libcupsimage2 - Common UNIX Printing System(tm) - Raster image library
libcupsimage2-dev - Common UNIX Printing System(tm) - Development files CUPS image li
libcupsmime1 - Common UNIX Printing System(tm) - MIME library
libcupsppdc1 - Common UNIX Printing System(tm) - PPD manipulation library
Changes:
cups (2.2.1-8+deb9u2) stretch-security; urgency=low
.
* CVE-2018-6553: Fix AppArmor cupsd sandbox bypass due to use of hard links
* Backport upstream fixes for:
- CVE-2018-4180 Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
- CVE-2018-4181 Limited Local File Reads as Root via cupsd.conf Include Directive
- CVE-2018-4182 cups-exec Sandbox Bypass Due to Insecure Error Handling
- CVE-2018-4183 cups-exec Sandbox Bypass Due to Profile Misconfiguration
- CVE-2017-15400: Restrict IPP Everywhere filters to only list supported PDLs
to fix CRLF and Code Injection in Printer Zeroconfig
Checksums-Sha1:
319007e7e416cd61ef062a07e0ecac9531233c85 3424 cups_2.2.1-8+deb9u2.dsc
80d00096ace2da2c0cbc0f8c160f8f84adece9b0 9486635 cups_2.2.1.orig.tar.gz
89c399b8d37ee5307a6ffec767fa1f0540962c17 797 cups_2.2.1.orig.tar.gz.asc
eaf11bf03da61f1ffa28b7e81b25f02c09748cf9 364804 cups_2.2.1-8+deb9u2.debian.tar.xz
713754bc157a9a24b69b2c14a985c79abc4cc16c 56006 cups-bsd-dbgsym_2.2.1-8+deb9u2_amd64.deb
40da9dc66e34f63f1676cae24f8ad42624e2ceb0 37972 cups-bsd_2.2.1-8+deb9u2_amd64.deb
12889a7a85ca26d56108008b3310edc4d28401ac 205910 cups-client-dbgsym_2.2.1-8+deb9u2_amd64.deb
5619812d1d8541b9798918a468fc826a6c8b54bf 238302 cups-client_2.2.1-8+deb9u2_amd64.deb
0866c15c1b0fe49c5f74db26b3b74465e097ff95 261360 cups-common_2.2.1-8+deb9u2_all.deb
494e0ea8dcaedf81f2e0ae396e6b5127d18158f6 54676 cups-core-drivers-dbgsym_2.2.1-8+deb9u2_amd64.deb
a2d4850ce35c119c48daddb84ad07e2b07a34bf1 130748 cups-core-drivers_2.2.1-8+deb9u2_amd64.deb
e2040d7f8fa12d50999770015ae2904c933af4b4 647426 cups-daemon-dbgsym_2.2.1-8+deb9u2_amd64.deb
f136f8f6b781672bc6b15455e4e6fbae857d5880 404848 cups-daemon_2.2.1-8+deb9u2_amd64.deb
c38cc9a1ef07db657041d889e7647e2d265f8e2a 452700 cups-dbgsym_2.2.1-8+deb9u2_amd64.deb
da8a0f1422a7dee4a52f3056e883fd3004487f96 405676 cups-ipp-utils-dbgsym_2.2.1-8+deb9u2_amd64.deb
5bd8c2f8ab661ff972e3fd2b8c72f009072a446c 308722 cups-ipp-utils_2.2.1-8+deb9u2_amd64.deb
1c29fcc7cbdc843617f19bf3e04abe5ed76dc751 45254 cups-ppdc-dbgsym_2.2.1-8+deb9u2_amd64.deb
ba6026bb5dfa013f74fa1fbab05e8fe200c0c6b4 130576 cups-ppdc_2.2.1-8+deb9u2_amd64.deb
e32a0a68fcc23d126453049fb1e391955fddc65d 578828 cups-server-common_2.2.1-8+deb9u2_all.deb
e6b513a41bae767ec8a16d2b34ffb6bbd006bbfc 16753 cups_2.2.1-8+deb9u2_amd64.buildinfo
2299e5513f80d3e482be81bb4c2113416e2dd00e 292384 cups_2.2.1-8+deb9u2_amd64.deb
189fbd98056f1bd41121daad8443899da6366bd6 547112 libcups2-dbgsym_2.2.1-8+deb9u2_amd64.deb
83f2eeed91ef1527efe7dd619730afedfb758c5a 347898 libcups2-dev_2.2.1-8+deb9u2_amd64.deb
546ee608f3a55b4550d72ceb381b323a1a171242 306024 libcups2_2.2.1-8+deb9u2_amd64.deb
f2563e7bb0f46f3899434e52bbd460c7a80b7162 59814 libcupscgi1-dbgsym_2.2.1-8+deb9u2_amd64.deb
5fa498d85029ce55a7900e7c3aa9951fce0d79c9 130868 libcupscgi1_2.2.1-8+deb9u2_amd64.deb
ca769ec40927e40a8e63772647f5b32b354f2f6b 36380 libcupsimage2-dbgsym_2.2.1-8+deb9u2_amd64.deb
35a6600799f3ca94be2d21c972584ded5215cbb2 19434 libcupsimage2-dev_2.2.1-8+deb9u2_amd64.deb
8c1a9ef148525a09062e21e28e3013f4a9cded1f 121510 libcupsimage2_2.2.1-8+deb9u2_amd64.deb
3a27ed7e2d8592e98b3f563e481784f5d88bbef7 24706 libcupsmime1-dbgsym_2.2.1-8+deb9u2_amd64.deb
421983d29589c6f9f69f3420fcc0e52e02db7d88 117358 libcupsmime1_2.2.1-8+deb9u2_amd64.deb
1283c1e0d477b54768348accbc5aa94d292cb861 122400 libcupsppdc1-dbgsym_2.2.1-8+deb9u2_amd64.deb
a0e85a539d77de26b7cbf73f01b40bb3fcdbb64b 148746 libcupsppdc1_2.2.1-8+deb9u2_amd64.deb
Checksums-Sha256:
eacce26ac37e8f93ffb68172b9aaa26fbc981385853bf88124adb4137d9043e5 3424 cups_2.2.1-8+deb9u2.dsc
83b8730aa977cc055e7410df6a3a682548994c113994ca630a16513017e419d5 9486635 cups_2.2.1.orig.tar.gz
37c2e6215b2794c33864e543bc0caf6aefa724844e41b4c9659c87f28d125c2a 797 cups_2.2.1.orig.tar.gz.asc
c039e75c981d56bfb5ae5778fc821ae6fe5a54391d8491f00654072c87a35dfb 364804 cups_2.2.1-8+deb9u2.debian.tar.xz
2a9a3f3d7352d66b71370761c2e3c6b7a6ea2e648f05fcb9c5918ef6b8da4ea6 56006 cups-bsd-dbgsym_2.2.1-8+deb9u2_amd64.deb
7d01560fe5131a7d4248e82dcfefb62e4924204ccaabfd1c04fba7d78aa14c15 37972 cups-bsd_2.2.1-8+deb9u2_amd64.deb
4d536e30cfd953d0223c773d4f8756b3d8ee051213bd94bcf80dd119d4e6d533 205910 cups-client-dbgsym_2.2.1-8+deb9u2_amd64.deb
786faf412bbbb5f348bd96a8f2c5881a95134a1f27298297423cefabee8cf1c6 238302 cups-client_2.2.1-8+deb9u2_amd64.deb
6bb829d16aaaa3bddfe77d19b3ba0d568292d7ce7836d8c06962a30c2ba6f562 261360 cups-common_2.2.1-8+deb9u2_all.deb
706c385e33e927ebdbe11a19d428e292869c7e902a049781c0739b2cdaedbeca 54676 cups-core-drivers-dbgsym_2.2.1-8+deb9u2_amd64.deb
b16ab89eba58d89283ccdf8b54e54b51ee095f7613f2569d554250b30c06e218 130748 cups-core-drivers_2.2.1-8+deb9u2_amd64.deb
b8e032a448e37ada872c9d1492cfb14cb83fd7943dacc4dbe9bec86d0eeec575 647426 cups-daemon-dbgsym_2.2.1-8+deb9u2_amd64.deb
7a5578a8586ea346bc4fe85cb1d51bbc815ea31a260a39d209caab0ee64f939b 404848 cups-daemon_2.2.1-8+deb9u2_amd64.deb
49c47b08992134637dd6029b870b19868c4e9730ac19062068ddcb625eb75fa7 452700 cups-dbgsym_2.2.1-8+deb9u2_amd64.deb
0d6983b02399c94c68cffa5e37978d12c9c59db692c24c2e05373236b219c130 405676 cups-ipp-utils-dbgsym_2.2.1-8+deb9u2_amd64.deb
dfe6da98e4084ec69fd7393ceb861ccca7f0bdf2620fd4d2f34698925833e293 308722 cups-ipp-utils_2.2.1-8+deb9u2_amd64.deb
db601308d06aec734c5cac99a0c6ace1ae141100ab597cceefb275a42a877700 45254 cups-ppdc-dbgsym_2.2.1-8+deb9u2_amd64.deb
25ea5dc345d580a2eabb059876e722a02ff29a3864da0781eefdae66a04fc67e 130576 cups-ppdc_2.2.1-8+deb9u2_amd64.deb
96024131f47e7a6d96250b444d4d7a31ee8240e5d2ee49028db6cd39000a8451 578828 cups-server-common_2.2.1-8+deb9u2_all.deb
bdd1e80796d4a91c874d3674e70e2c2246222a3e30dbf52f7d61ccfe28ba3262 16753 cups_2.2.1-8+deb9u2_amd64.buildinfo
ce4ffd3ccbb0107eecfb1a3a01577eb5e3053de3efbe6063e8dcf00a1d4d7d46 292384 cups_2.2.1-8+deb9u2_amd64.deb
8e44d68af335339399e73fe7391949403eb4ac2c93cf286dddb495fddb583b21 547112 libcups2-dbgsym_2.2.1-8+deb9u2_amd64.deb
9385f100a140c0e575b325bf15d2402c5434d38b8a314b284493597f188124b4 347898 libcups2-dev_2.2.1-8+deb9u2_amd64.deb
9f4edf3ad20a40c4f9eba426e2b45c88701b5344ded5588e3b2d05634a6716f8 306024 libcups2_2.2.1-8+deb9u2_amd64.deb
4b508791fee50636cc78d4ee1949b43f1fa99021e8639d027ebae8615cdb314c 59814 libcupscgi1-dbgsym_2.2.1-8+deb9u2_amd64.deb
89af6da49917a5a9c1cc2e94898fe440fbd444b7abec6a550d968eda6daf22e8 130868 libcupscgi1_2.2.1-8+deb9u2_amd64.deb
2a9a59a8d5592e99b80db3c272e7ba93ed219862cdfc29a4792347792cc91bec 36380 libcupsimage2-dbgsym_2.2.1-8+deb9u2_amd64.deb
a55907a76255808f87a5b024b50cee1329f698f092aa7ffab3616dbc9ce5de13 19434 libcupsimage2-dev_2.2.1-8+deb9u2_amd64.deb
3e0b705dcda04421fc71600918aca3f00016afff89fa7ab686f8f7c73031189a 121510 libcupsimage2_2.2.1-8+deb9u2_amd64.deb
f9fc3d854f54ffc920ae9b28724405b65fef04e975a4198f6e80d9ffd6c8517d 24706 libcupsmime1-dbgsym_2.2.1-8+deb9u2_amd64.deb
51bf19ff6c53727a6b6e59276f926897adf6070234501cd759c7fa3125e349b0 117358 libcupsmime1_2.2.1-8+deb9u2_amd64.deb
523355d056ac9421ad257a838fd4bb3d286b694e666b979de81e4e222d4a5c19 122400 libcupsppdc1-dbgsym_2.2.1-8+deb9u2_amd64.deb
ec92549102c0b9c54a5bd48af99ad4b191a8b505ab0dcd1ae9ebeba612e8a238 148746 libcupsppdc1_2.2.1-8+deb9u2_amd64.deb
Files:
a649e328a937dcb79d66057eeb9d5319 3424 net optional cups_2.2.1-8+deb9u2.dsc
a94da2a1e9dbdccb4f3836a38a431931 9486635 net optional cups_2.2.1.orig.tar.gz
499e3666442fdeda4d9caf3e483b8a46 797 net optional cups_2.2.1.orig.tar.gz.asc
5ef2b14bfebdddc34252c7d5be57ecee 364804 net optional cups_2.2.1-8+deb9u2.debian.tar.xz
8f6d551b8b7527973359b630d2de3cd6 56006 debug extra cups-bsd-dbgsym_2.2.1-8+deb9u2_amd64.deb
ea0077cd6ae451987c078ff7aa897220 37972 net extra cups-bsd_2.2.1-8+deb9u2_amd64.deb
9e22665a59d92df3e082406e034415d8 205910 debug extra cups-client-dbgsym_2.2.1-8+deb9u2_amd64.deb
193dc4a2741406ffdc757129a03cea27 238302 net optional cups-client_2.2.1-8+deb9u2_amd64.deb
aa5983d8b33bccc788fae2c289e6455d 261360 net optional cups-common_2.2.1-8+deb9u2_all.deb
92c13d76c7e04514950444c604b6bd67 54676 debug extra cups-core-drivers-dbgsym_2.2.1-8+deb9u2_amd64.deb
9393670df2845bd62227d62bf42697ab 130748 net optional cups-core-drivers_2.2.1-8+deb9u2_amd64.deb
8174363751c1c0805930522b866a526d 647426 debug extra cups-daemon-dbgsym_2.2.1-8+deb9u2_amd64.deb
99bcbb182b184af037254023c8e29167 404848 net optional cups-daemon_2.2.1-8+deb9u2_amd64.deb
429af351217120dd644235b227e64055 452700 debug extra cups-dbgsym_2.2.1-8+deb9u2_amd64.deb
dec9898ef4d10f4105fa02dd09207d0e 405676 debug extra cups-ipp-utils-dbgsym_2.2.1-8+deb9u2_amd64.deb
f762d1b2ab306eed57aa2b3f991ec34e 308722 net optional cups-ipp-utils_2.2.1-8+deb9u2_amd64.deb
55a5251a92071d2bc990e23d3134d777 45254 debug extra cups-ppdc-dbgsym_2.2.1-8+deb9u2_amd64.deb
48510a3c478a133de09d865064a7afdc 130576 utils optional cups-ppdc_2.2.1-8+deb9u2_amd64.deb
badad781c0146dbda9748b01769ae69d 578828 net optional cups-server-common_2.2.1-8+deb9u2_all.deb
d52987fabf570c820279035fd89fd83b 16753 net optional cups_2.2.1-8+deb9u2_amd64.buildinfo
7738b0d1e737b9fc476bbcc297627cff 292384 net optional cups_2.2.1-8+deb9u2_amd64.deb
d0d9472dc63255c59e8b4a5a62c89fc4 547112 debug extra libcups2-dbgsym_2.2.1-8+deb9u2_amd64.deb
94c632656e8adf0a656f9e97f04bc560 347898 libdevel optional libcups2-dev_2.2.1-8+deb9u2_amd64.deb
f91d0e3102a869c13ca9f2b32411df75 306024 libs optional libcups2_2.2.1-8+deb9u2_amd64.deb
fa2345f947e47c66e040c9ee5bdf8044 59814 debug extra libcupscgi1-dbgsym_2.2.1-8+deb9u2_amd64.deb
08640f6b8e8dc2ff1ab57d4eef1ba3af 130868 libs optional libcupscgi1_2.2.1-8+deb9u2_amd64.deb
bf429ac114cbe4dfbe077f84c2ead3ba 36380 debug extra libcupsimage2-dbgsym_2.2.1-8+deb9u2_amd64.deb
9039d0436d35c81fa7951cc29ca0a868 19434 libdevel optional libcupsimage2-dev_2.2.1-8+deb9u2_amd64.deb
aea1c3889fec5fbf1e10d1deee3ae182 121510 libs optional libcupsimage2_2.2.1-8+deb9u2_amd64.deb
c618a8dfe4e86a45e16731fb10f8d087 24706 debug extra libcupsmime1-dbgsym_2.2.1-8+deb9u2_amd64.deb
c13ad38939e90d7881134bd2413c8820 117358 libs optional libcupsmime1_2.2.1-8+deb9u2_amd64.deb
608e19a7ad915cf8accfee4fa18e9874 122400 debug extra libcupsppdc1-dbgsym_2.2.1-8+deb9u2_amd64.deb
5a7b9c601bd8e7b8a29a59e6c6368542 148746 libs optional libcupsppdc1_2.2.1-8+deb9u2_amd64.deb
-----BEGIN PGP SIGNATURE-----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=Intc
-----END PGP SIGNATURE-----