[ubuntu/hardy-security] cupsys_1.3.7-1ubuntu3.8_ia64_translations.tar.gz, cupsys_1.3.7-1ubuntu3.8_sparc_translations.tar.gz (delayed), cupsys_1.3.7-1ubuntu3.8_powerpc_translations.tar.gz, cupsys_1.3.7-1ubuntu3.8_amd64_translations.tar.gz, cupsys_1.3.7-1ubuntu3.8_hppa_translations.tar.gz, cupsys_1.3.7-1ubuntu3.8_lpia_translations.tar.gz, cupsys, cupsys_1.3.7-1ubuntu3.8_i386_translations.tar.gz 1.3.7-1ubuntu3.8 (Accepted)

[Ubuntu Installer]

cupsys (1.3.7-1ubuntu3.8) hardy-security; urgency=low

  * SECURITY UPDATE: denial of service via use-after-free
    - debian/patches/CVE-2009-3553.dpatch: check fdptr->use and
      cupsd_inactive_fds in scheduler/select.c.
    - CVE-2009-3553
    - CVE-2010-0302
  * SECURITY UPDATE: privilege escalation via lppasswd tool
    - debian/patches/CVE-2010-0393.dpatch: don't allow environment
      variables to override directories in cups/globals.c and
      systemv/lppasswd.c.
    - CVE-2010-0393

Date: Thu, 25 Feb 2010 11:00:51 -0500
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/hardy/+source/cupsys/1.3.7-1ubuntu3.8
-------------- next part --------------
Format: 1.7
Date: Thu, 25 Feb 2010 11:00:51 -0500
Source: cupsys
Binary: libcupsys2 libcupsimage2 cupsys cupsys-client libcupsys2-dev libcupsimage2-dev cupsys-bsd cupsys-common
Architecture: source
Version: 1.3.7-1ubuntu3.8
Distribution: hardy-security
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 cupsys     - Common UNIX Printing System(tm) - server
 cupsys-bsd - Common UNIX Printing System(tm) - BSD commands
 cupsys-client - Common UNIX Printing System(tm) - client programs (SysV)
 cupsys-common - Common UNIX Printing System(tm) - common files
 libcupsimage2 - Common UNIX Printing System(tm) - image libs
 libcupsimage2-dev - Common UNIX Printing System(tm) - image development files
 libcupsys2 - Common UNIX Printing System(tm) - libs
 libcupsys2-dev - Common UNIX Printing System(tm) - development files
Changes: 
 cupsys (1.3.7-1ubuntu3.8) hardy-security; urgency=low
 .
   * SECURITY UPDATE: denial of service via use-after-free
     - debian/patches/CVE-2009-3553.dpatch: check fdptr->use and
       cupsd_inactive_fds in scheduler/select.c.
     - CVE-2009-3553
     - CVE-2010-0302
   * SECURITY UPDATE: privilege escalation via lppasswd tool
     - debian/patches/CVE-2010-0393.dpatch: don't allow environment
       variables to override directories in cups/globals.c and
       systemv/lppasswd.c.
     - CVE-2010-0393
Files: 
 d42e1f9c2424210f66acfaeb4ecf293a 1442 net optional cupsys_1.3.7-1ubuntu3.8.dsc
 5cb2a7055c83f2535e6704212c06ea0c 141577 net optional cupsys_1.3.7-1ubuntu3.8.diff.gz
Original-Maintainer: Debian CUPS Maintainers <pkg-cups-devel at lists.alioth.debian.org>