[ubuntu/mantic-proposed] cups 2.4.5-0ubuntu2 (Accepted)

[Marc Deslauriers]

cups (2.4.5-0ubuntu2) mantic; urgency=medium

  * SECURITY UPDATE: use-after-free in cupsdAcceptClient()
    - debian/patches/CVE-2023-34241.patch: log result of httpGetHostname
      BEFORE closing the connection in scheduler/client.c.
    - CVE-2023-34241

Date: Thu, 22 Jun 2023 12:06:19 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/+source/cups/2.4.5-0ubuntu2
-------------- next part --------------
Format: 1.8
Date: Thu, 22 Jun 2023 12:06:19 -0400
Source: cups
Built-For-Profiles: noudeb
Architecture: source
Version: 2.4.5-0ubuntu2
Distribution: mantic
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Changes:
 cups (2.4.5-0ubuntu2) mantic; urgency=medium
 .
   * SECURITY UPDATE: use-after-free in cupsdAcceptClient()
     - debian/patches/CVE-2023-34241.patch: log result of httpGetHostname
       BEFORE closing the connection in scheduler/client.c.
     - CVE-2023-34241
Checksums-Sha1:
 44e387cbba9e3a919f0ca0f10bca97d4fa66e123 3116 cups_2.4.5-0ubuntu2.dsc
 55f4a43ec5543b80ef874ed18b0f2a9c8d5e801b 394272 cups_2.4.5-0ubuntu2.debian.tar.xz
 42de66f1956521783bc7fe6cbfd2ee95b1c52a28 17080 cups_2.4.5-0ubuntu2_source.buildinfo
Checksums-Sha256:
 a426b63712260df44d89e5dfe988a816816753072eb0aae17d76e24c689c2899 3116 cups_2.4.5-0ubuntu2.dsc
 d56b058df2f2746f98ec61d9545c656f0c4d9284b26adf50b93d5e69cb99816a 394272 cups_2.4.5-0ubuntu2.debian.tar.xz
 b0050772c6d94d5e710d792aa567d8e6ca339f663b20ecaabc19e24bb033ab5d 17080 cups_2.4.5-0ubuntu2_source.buildinfo
Files:
 32ece16f9ce81250d7f8ff98c7ad782d 3116 net optional cups_2.4.5-0ubuntu2.dsc
 d1c1320a9d37898328388a44b8479c97 394272 net optional cups_2.4.5-0ubuntu2.debian.tar.xz
 4d21bf7ddad4cab6f2b1c43f1bb08b47 17080 net optional cups_2.4.5-0ubuntu2_source.buildinfo
Original-Maintainer: Debian Printing Team <debian-printing at lists.debian.org>